Edit tour

Windows Analysis Report
https://ninecasino.com.br/

Overview

General Information

Sample URL:	https://ninecasino.com.br/
Analysis ID:	1525674
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2276,i,4442945516020080189,2003162917772605651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ninecasino.com.br/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://ninecasino.com.br

HTTP Parser: Number of links: 1

Source: https://referencemen.live

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://referencemen.live	HTTP Parser: No favicon
Source: https://referencemen.live	HTTP Parser: No favicon
Source: https://spinado3.com	HTTP Parser: No favicon

Source: https://ninecasino.com.br

HTTP Parser: No <meta name="author".. found

Source: https://ninecasino.com.br

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49752 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: referencemen.live to https://spinado3.com/sign-up?promo=0263nma35xumve5fbabe04c27ab1f2&saff_id={saff_id}&http_referer={http_referer}&utm_source=nine&utm_campaign={utm_campaign}&utm_medium={utm_medium}&utm_content={utm_content}&utm_term={utm_term}&clickid={clickid}&pid={pid}&extra_param={extra_param}

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-main.svg HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/main-img.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bonanza.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bookofdead.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/olympgate.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BonanzaBillion.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/wolfgold.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo-main.svg HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/crazytime.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pragmatic.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/sweetbobanza.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/MonopolyBigBaller.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/olympgate.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/main-img.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/BonanzaBillion.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bonanza.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/wolfgold.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bookofdead.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/crazytime.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/sweetbobanza.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/MonopolyBigBaller.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/pragmatic.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.webp HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /go HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ninecasino.com.brConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ninecasino.com.br/goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ninecasino.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine HTTP/1.1Host: referencemen.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine HTTP/1.1Host: referencemen.liveConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ninecasino.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cd502ac2e7a41ac HTTP/1.1Host: referencemen.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine&__cf_chl_rt_tk=uflYX6g8gTjyfzo4EMyVU_XGMtwifUyk.GWSiscgNLI-1728043214-0.0.1.1-4820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cd502ac2e7a41ac HTTP/1.1Host: referencemen.liveConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: referencemen.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nineAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://referencemen.livesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1295177611:1728041245:yAZDvNt_YG2aJL_IlMtGwBK3qcynseOFvsmnXhlMYbA/8cd502ac2e7a41ac/7cfb2d6dbf89b79 HTTP/1.1Host: referencemen.liveConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cd502beebd38c69&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cd502beebd38c69&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: referencemen.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nineAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/338629858:1728041443:A4An9SkeuNvM_BMiOZjkk6k3tJYQBbtm0ilgp4RtA3w/8cd502beebd38c69/5a2ab26edb78bd2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8cd502beebd38c69/1728043220622/079cd1792d115afd3d533772d5d5f4bf68b1b575b82d7b79b2695614641c2497/nMy5DSegZCihlNo HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cd502beebd38c69/1728043220624/t511dHbTTSA-JE4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8cd502beebd38c69/1728043220624/t511dHbTTSA-JE4 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/338629858:1728041443:A4An9SkeuNvM_BMiOZjkk6k3tJYQBbtm0ilgp4RtA3w/8cd502beebd38c69/5a2ab26edb78bd2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: referencemen.liveConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine&__cf_chl_tk=uflYX6g8gTjyfzo4EMyVU_XGMtwifUyk.GWSiscgNLI-1728043214-0.0.1.1-4820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1295177611:1728041245:yAZDvNt_YG2aJL_IlMtGwBK3qcynseOFvsmnXhlMYbA/8cd502ac2e7a41ac/7cfb2d6dbf89b79 HTTP/1.1Host: referencemen.liveConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /sign-up?promo=0263NmA35xUmVE5fbabe04c27ab1f2&saff_id={saff_id}&http_referer={http_referer}&utm_source=nine&utm_campaign={utm_campaign}&utm_medium={utm_medium}&utm_content={utm_content}&utm_term={utm_term}&clickid={clickid}&pid={pid}&extra_param={extra_param} HTTP/1.1Host: spinado3.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: spinado3.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://spinado3.com/sign-up?promo=0263NmA35xUmVE5fbabe04c27ab1f2&saff_id={saff_id}&http_referer={http_referer}&utm_source=nine&utm_campaign={utm_campaign}&utm_medium={utm_medium}&utm_content={utm_content}&utm_term={utm_term}&clickid={clickid}&pid={pid}&extra_param={extra_param}Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: ninecasino.com.br
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: referencemen.live
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: spinado3.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1295177611:1728041245:yAZDvNt_YG2aJL_IlMtGwBK3qcynseOFvsmnXhlMYbA/8cd502ac2e7a41ac/7cfb2d6dbf89b79 HTTP/1.1Host: referencemen.liveConnection: keep-aliveContent-Length: 2079sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-type: application/x-www-form-urlencodedsec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""CF-Challenge: 7cfb2d6dbf89b79sec-ch-ua-platform: "Windows"Accept: */*Origin: https://referencemen.liveSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nineAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 12:00:14 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9329Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 12:00:14 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9457Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 12:00:16 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9119Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:18 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: c01aE6ltUx207aABnnU04Tmxz4b0aTAHkeg=$7GuGT5yjm1WqotnJServer: cloudflareCF-RAY: 8cd502c40f12434a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 12:00:20 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9140Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:21 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: wVE0H5DMdyk52u+ioI5BM8ouTPYRtdXxYA4=$7m4r208igJ5gjDryServer: cloudflareCF-RAY: 8cd502d6afe97ca6-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:27 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: +5Y6yjfwREdFFPqX0vetFZ42TAzdAxBGvcQ=$c203cSTPcPELqY5rcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8cd502fd9e4c0cbe-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: v/oqlOycK0pXOQMoVAcGG/0Z3OBsoVpS2Sw=$uzauFvMf7/0mRO3gServer: cloudflareCF-RAY: 8cd50301b8720cb8-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 04 Oct 2024 12:00:28 GMTContent-Type: text/html; charset=UTF-8Content-Length: 9226Connection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCF-Cache-Status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QxcE9iTYK8726nHgHn46gTiR9NxSawO0YP3fGWJSblAtAjIp7J7ceetr%2BDewrmc6eA2F2w6hepNOzmy8si8HKV1NuIuvr%2BFvwJzyaxBZxAF8Mccrr%2B8ilgo6KbeN2tg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cd503115895189d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 04 Oct 2024 12:00:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6PH0woqMogXBC34d%2FhlzQl%2BlREa4X3%2Bjve5IhVBXOD9xHz1RjK%2B%2Fbtx%2FkSnbYrVUXWGx7DB4spTZKdgUWoWKkhXCwOvizqVXHRqY5YOIH9HmWnGZ%2BSXRPOzNY7ekjLg%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Speculation-Rules: "/cdn-cgi/speculation"Server: cloudflareCF-RAY: 8cd50317fa595e61-EWR

Source: chromecache_76.2.dr, chromecache_78.2.dr, chromecache_85.2.dr	String found in binary or memory: https://ninecasino.com.br
Source: chromecache_81.2.dr	String found in binary or memory: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49752 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@22/62@20/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2276,i,4442945516020080189,2003162917772605651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ninecasino.com.br/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2276,i,4442945516020080189,2003162917772605651,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
referencemen.live	104.18.43.195	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ninecasino.com.br	184.174.80.10	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
spinado3.com	181.214.1.150	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://ninecasino.com.br	false	unknown
https://ninecasino.com.br/images/bonanza.webp	false	unknown
https://spinado3.com/favicon.ico	false	unknown
https://ninecasino.com.br/images/sweetbobanza.webp	false	unknown
https://ninecasino.com.br/images/logo-main.svg	false	unknown
https://ninecasino.com.br/images/wolfgold.webp	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/	false	unknown
https://ninecasino.com.br/images/favicon.webp	false	unknown
https://ninecasino.com.br/images/olympgate.webp	false	unknown
https://a.nel.cloudflare.com/report/v4?s=QxcE9iTYK8726nHgHn46gTiR9NxSawO0YP3fGWJSblAtAjIp7J7ceetr%2BDewrmc6eA2F2w6hepNOzmy8si8HKV1NuIuvr%2BFvwJzyaxBZxAF8Mccrr%2B8ilgo6KbeN2tg%3D	false	unknown
https://ninecasino.com.br/images/crazytime.webp	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/8cd502beebd38c69/1728043220622/079cd1792d115afd3d533772d5d5f4bf68b1b575b82d7b79b2695614641c2497/nMy5DSegZCihlNo	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8cd502beebd38c69&lang=auto	false	unknown
https://ninecasino.com.br/images/pragmatic.webp	false	unknown
https://ninecasino.com.br/	false	unknown
https://ninecasino.com.br/images/main-img.webp	false	unknown
https://ninecasino.com.br/images/MonopolyBigBaller.webp	false	unknown
https://spinado3.com/sign-up?promo=0263NmA35xUmVE5fbabe04c27ab1f2&saff_id={saff_id}&http_referer={http_referer}&utm_source=nine&utm_campaign={utm_campaign}&utm_medium={utm_medium}&utm_content={utm_content}&utm_term={utm_term}&clickid={clickid}&pid={pid}&extra_param={extra_param}	false	unknown
https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine	false	unknown
https://ninecasino.com.br/go	false	unknown
https://referencemen.live/favicon.ico	false	unknown
https://ninecasino.com.br/favicon.ico	false	unknown
https://ninecasino.com.br/images/bookofdead.webp	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8cd502beebd38c69/1728043220624/t511dHbTTSA-JE4	false	unknown
https://referencemen.live/cdn-cgi/challenge-platform/h/g/flow/ov1/1295177611:1728041245:yAZDvNt_YG2aJL_IlMtGwBK3qcynseOFvsmnXhlMYbA/8cd502ac2e7a41ac/7cfb2d6dbf89b79	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/338629858:1728041443:A4An9SkeuNvM_BMiOZjkk6k3tJYQBbtm0ilgp4RtA3w/8cd502beebd38c69/5a2ab26edb78bd2	false	unknown
https://referencemen.live/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cd502ac2e7a41ac	false	unknown
https://referencemen.live	false	unknown
https://spinado3.com	false	unknown
https://ninecasino.com.br/images/BonanzaBillion.webp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
184.174.80.10	ninecasino.com.br	United States	46261	QUICKPACKETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
104.18.43.195	referencemen.live	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
181.214.1.150	spinado3.com	Chile	61317	ASDETUKhttpwwwheficedcomGB	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525674
Start date and time:	2024-10-04 13:59:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ninecasino.com.br/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@22/62@20/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://ninecasino.com.br/go

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.185.238, 142.251.168.84, 34.104.35.123, 172.202.163.200, 2.16.100.168, 88.221.110.91, 192.229.221.95, 13.85.23.206, 40.69.42.241, 142.250.181.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ninecasino.com.br/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 10:59:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9713316629117
Encrypted:	false
SSDEEP:	48:8Y9dFTNpQHTidAKZdA19ehwiZUklqehNy+3:8ujsqy
MD5:	82C5080098D4F5811530D8E884F4DEF3
SHA1:	FB010B647782DA6D453F475658F23A7F8940CF0C
SHA-256:	59B5C4600F8DB3B0FED4AA23F062FE68C371E0B6B50FC0D96D67F02584561155
SHA-512:	13CB15DB8E60E37AB8FEBB303B53A6AFE668E4D0026F11F81985C4CAD8A000FD7513B0AC8823CCD6E08D0515B75BCCF38A5B523E4E1F5D325089A85A0BBE9A35
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........T...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY\|_....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY\|_....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY\|_....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY\|_..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.`...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.........../.D.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 13:59:58.380898952 CEST	53	63459	1.1.1.1	192.168.2.5
Oct 4, 2024 13:59:58.411807060 CEST	53	60676	1.1.1.1	192.168.2.5
Oct 4, 2024 13:59:59.511641026 CEST	53	59293	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:00.284543991 CEST	60913	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:00.284717083 CEST	60574	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:00.492490053 CEST	53	60913	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:00.530729055 CEST	53	60574	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:01.431638956 CEST	52277	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:01.431808949 CEST	54316	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:01.455893040 CEST	53	54316	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:01.661103964 CEST	53	52277	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:02.554007053 CEST	54379	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:02.554174900 CEST	61798	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:02.562388897 CEST	53	54379	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:02.562408924 CEST	53	61798	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:13.853809118 CEST	59357	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:13.854017973 CEST	52097	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:13.878932953 CEST	53	52097	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:13.959243059 CEST	53	59357	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:15.955862045 CEST	61927	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:15.959968090 CEST	62280	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:15.962614059 CEST	53	61927	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:15.966986895 CEST	53	62280	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:15.999104977 CEST	54837	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:15.999447107 CEST	56950	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:16.011976004 CEST	53	54837	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:16.012826920 CEST	53	56950	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:16.746890068 CEST	53	58032	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:17.189436913 CEST	59297	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:17.190041065 CEST	65435	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:17.196145058 CEST	53	59297	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:17.197324038 CEST	53	65435	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:18.002490044 CEST	52525	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:18.002490044 CEST	64516	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:18.010737896 CEST	53	64516	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:18.010818958 CEST	53	52525	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:29.330339909 CEST	59074	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:29.336452007 CEST	64792	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:29.344320059 CEST	53	59074	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:29.506447077 CEST	53	64792	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:31.158373117 CEST	64963	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:31.158633947 CEST	62466	53	192.168.2.5	1.1.1.1
Oct 4, 2024 14:00:31.165828943 CEST	53	64963	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:31.166039944 CEST	53	62466	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:35.831803083 CEST	53	55682	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:58.051589012 CEST	53	54363	1.1.1.1	192.168.2.5
Oct 4, 2024 14:00:59.099126101 CEST	53	57304	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	660	OUT	GET / HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:01 UTC	743	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FOL%2FfEnsJOFrqjs%2FeMnLf0m5wj2SzwUYQh%2BR%2FQ68YQTsOkAiWrCXDJM42rNDgtIKrKMmxcfCPZRZnKjgbsZTiCzfL%2BYxqwLWNEYyZinFXJKLSf5%2FxnMGQJQVoiXofY0%2BuIhJSg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd50256db887c8a-EWR
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6e 65 43 61 73 69 6e 6f 20 73 69 74 65 20 6f 66 69 63 69 61 6c 20 e2 9a a1 20 4d 65 6c 68 6f 72 20 63 61 73 73 69 6e Data Ascii: 7ffa<!DOCTYPE html><html lang="pt-BR"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="NineCasino site oficial Melhor cassin
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 33 37 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 39 33 37 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 36 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 70 20 2b 20 70 20 7b 0d 0a 20 20 Data Ascii: object-fit: cover; } .content__inner h1 { font-size: 2.4375em; margin-bottom: 16px; } .content__inner h2 { font-size: 1.9375em; margin: 16px 0; } .content__inner p + p {
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2c 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 30 70 78 20 38 70 78 20 31 36 70 78 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 Data Ascii: .menu, .menu-burger__label span { left: 0; } .menu-burger__label { cursor: pointer; } .menu { position: absolute; top: 0px; padding: 80px 8px 16px 8px; box-sh
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 Data Ascii: .menu-burger__label::before, .menu-burger__label span { content: ''; right: 0; transition: transform 0.3s; } .menu-burger__label::after { top: 0; } .menu-burger__label::before {
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 31 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 68 65 61 64 65 72 5f 5f 62 74 6e 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 62 74 6e 5f 5f 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 31 70 78 20 38 70 78 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 Data Ascii: z-index: 11; } .header__btn-box { margin-left: auto; } .btn__link { padding: 6px 11px 8px 11px; font-size: 14px; font-weight: 600; border-radius: 16px; color: #fff;
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 2e 6d 61 69 6e 5f 5f 62 74 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 34 70 78 20 37 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 33 34 62 30 39 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 Data Ascii: .main__btn { padding: 14px 74px; transition: all 0.5s; background-color: #c34b09; color: #fff; font-size: 18px; border-radius: 1000px; border: none; margin-top: 20px; }
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 37 30 32 34 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 65 32 36 35 63 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 33 70 78 20 72 67 62 28 32 32 38 2c 20 38 38 2c 20 39 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 33 70 78 20 72 67 62 61 28 32 32 38 2c 20 38 38 2c 20 39 29 3b 0d 0a 20 20 Data Ascii: 7024; } .spoiler { background: #0e265c; margin: 30px 0; border-radius: 25px; max-width: 70%; box-shadow: 0 0 8px 3px rgb(228, 88, 9); -webkit-box-shadow: 0 0 8px 3px rgba(228, 88, 9);
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 20 6c 69 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a Data Ascii: none; } .spoiler__list { list-style: none; counter-reset: li; padding-left: 30px; } .spoiler__list-item { font-weight: 700; } .spoiler__list-item { margin-top: 10px;
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 36 31 64 33 37 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e Data Ascii: } .questions__label::before { right: 30px; transform: rotate(-45deg); } .questions__content { padding: 20px; background: #161d37; display: block; } .questions__input:checked ~
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 33 25 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 64 35 36 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 20 33 30 70 78 20 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 Data Ascii: position: absolute; bottom: -15px; right: 3%; background-color: #222d56; border: none; color: #fff; padding: 7px 30px 6px; font-size: 18px; border-radius: 5px; transiti

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	599	OUT	GET /images/logo-main.svg HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:01 UTC	716	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:01 GMT Content-Type: image/svg+xml Content-Length: 10450 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6783900f80a711fe6c159ffccc64c5e5" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TLMEnAS6rpFobD3pS%2F8c2RXlvYwUhAGPwt7LCSUQQtbVQC2gImxEVdVEtntHj1%2FYWIZbgH30nXytC8l8v3u2rPzAGbLdUlqB6l%2FyTagCjigArcEXs2l5u60izYNJwhRyIoazRA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025848a9c32b-EWR
2024-10-04 12:00:01 UTC	653	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 33 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 33 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 31 2e 36 37 37 33 20 31 31 2e 36 36 36 37 56 32 34 2e 30 36 34 38 48 39 2e 32 39 35 35 32 4c 33 2e 30 38 36 31 39 20 31 36 2e 35 33 32 31 56 32 34 2e 30 36 34 38 48 30 2e 32 35 39 35 35 32 56 31 31 2e 36 36 36 37 48 32 2e 36 34 31 33 34 4c 38 2e 38 31 33 36 20 31 39 2e 31 39 39 34 56 31 31 2e 36 36 36 37 48 31 31 2e 36 37 37 33 5a 22 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 34 2e 36 31 35 32 20 Data Ascii: <svg width="143" height="29" viewBox="0 0 143 29" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M11.6773 11.6667V24.0648H9.29552L3.08619 16.5321V24.0648H0.259552V11.6667H2.64134L8.8136 19.1994V11.6667H11.6773Z" fill="white"/><path d="M14.6152
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 31 2e 37 30 33 36 43 38 30 2e 30 35 34 31 20 31 31 2e 37 30 33 36 20 38 31 2e 38 36 31 33 20 31 32 2e 34 36 37 20 38 33 2e 30 33 38 33 20 31 33 2e 39 32 30 32 4c 38 31 2e 31 38 34 37 20 31 35 2e 36 31 32 35 43 38 30 2e 33 34 31 34 20 31 34 2e 36 34 36 38 20 37 39 2e 32 39 34 31 20 31 34 2e 31 35 39 33 20 37 38 2e 30 38 30 31 20 31 34 2e 31 35 39 33 43 37 35 2e 37 34 34 36 20 31 34 2e 31 35 39 33 20 37 34 2e 30 38 35 37 20 31 35 2e 37 36 38 38 20 37 34 2e 30 38 35 37 20 31 38 2e 31 34 31 38 43 37 34 2e 30 38 35 37 20 32 30 2e 35 31 34 37 20 37 35 2e 37 33 35 33 20 32 32 2e 31 32 34 32 20 37 38 2e 30 38 30 31 20 32 32 2e 31 32 34 32 43 37 39 2e 33 33 31 32 20 32 32 2e 31 32 34 32 20 38 30 2e 33 37 38 34 20 32 31 2e 36 33 36 37 20 38 31 2e 31 38 34 37 20 32 Data Ascii: 1.7036C80.0541 11.7036 81.8613 12.467 83.0383 13.9202L81.1847 15.6125C80.3414 14.6468 79.2941 14.1593 78.0801 14.1593C75.7446 14.1593 74.0857 15.7688 74.0857 18.1418C74.0857 20.5147 75.7353 22.1242 78.0801 22.1242C79.3312 22.1242 80.3784 21.6367 81.1847 2
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 31 38 2e 31 30 35 43 31 32 38 2e 39 39 37 20 31 34 2e 33 39 38 34 20 31 33 31 2e 38 36 20 31 31 2e 37 30 33 36 20 31 33 35 2e 38 30 38 20 31 31 2e 37 30 33 36 43 31 33 39 2e 37 31 39 20 31 31 2e 37 30 33 36 20 31 34 32 2e 36 32 20 31 34 2e 33 39 38 34 20 31 34 32 2e 36 32 20 31 38 2e 31 30 35 43 31 34 32 2e 36 32 20 32 31 2e 38 31 31 35 20 31 33 39 2e 37 31 39 20 32 34 2e 35 30 36 33 20 31 33 35 2e 38 30 38 20 32 34 2e 35 30 36 33 43 31 33 31 2e 38 36 20 32 34 2e 35 30 36 33 20 31 32 38 2e 39 39 37 20 32 31 2e 37 36 35 35 20 31 32 38 2e 39 39 37 20 31 38 2e 31 30 35 5a 4d 31 33 39 2e 36 34 35 20 31 38 2e 31 30 35 43 31 33 39 2e 36 34 35 20 31 35 2e 37 33 32 20 31 33 37 2e 39 39 35 20 31 34 2e 31 32 32 35 20 31 33 35 2e 37 37 31 20 31 34 2e 31 32 32 35 Data Ascii: 18.105C128.997 14.3984 131.86 11.7036 135.808 11.7036C139.719 11.7036 142.62 14.3984 142.62 18.105C142.62 21.8115 139.719 24.5063 135.808 24.5063C131.86 24.5063 128.997 21.7655 128.997 18.105ZM139.645 18.105C139.645 15.732 137.995 14.1225 135.771 14.1225
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 31 36 38 39 20 31 34 2e 33 34 32 38 20 35 37 2e 30 36 20 31 34 2e 33 33 36 32 20 35 36 2e 39 35 30 39 20 31 34 2e 33 33 35 37 43 35 36 2e 37 37 30 37 20 31 34 2e 33 34 34 37 20 35 36 2e 35 39 30 36 20 31 34 2e 33 36 32 31 20 35 36 2e 34 31 31 34 20 31 34 2e 33 38 35 32 43 35 35 2e 34 37 33 38 20 31 34 2e 35 30 35 34 20 35 34 2e 35 35 37 39 20 31 34 2e 37 35 35 33 20 35 33 2e 36 39 30 35 20 31 35 2e 31 32 37 36 43 35 32 2e 37 37 30 37 20 31 35 2e 35 31 36 39 20 35 31 2e 39 32 32 33 20 31 36 2e 30 35 34 32 20 35 31 2e 31 37 39 37 20 31 36 2e 37 31 37 36 43 35 30 2e 33 39 37 33 20 31 37 2e 34 32 35 31 20 34 39 2e 37 37 35 34 20 31 38 2e 32 34 31 31 20 34 39 2e 33 36 32 32 20 31 39 2e 32 31 30 38 43 34 39 2e 31 34 32 39 20 31 39 2e 37 32 37 33 20 34 39 2e 30 Data Ascii: 1689 14.3428 57.06 14.3362 56.9509 14.3357C56.7707 14.3447 56.5906 14.3621 56.4114 14.3852C55.4738 14.5054 54.5579 14.7553 53.6905 15.1276C52.7707 15.5169 51.9223 16.0542 51.1797 16.7176C50.3973 17.4251 49.7754 18.2411 49.3622 19.2108C49.1429 19.7273 49.0
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 43 35 34 2e 36 36 37 38 20 32 33 2e 39 35 33 34 20 35 34 2e 37 37 32 32 20 32 33 2e 35 36 39 20 35 34 2e 39 35 39 20 32 33 2e 32 31 33 33 43 35 34 2e 39 38 34 39 20 32 33 2e 31 36 39 36 20 35 35 2e 30 31 33 34 20 32 33 2e 31 32 37 33 20 35 35 2e 30 34 34 33 20 32 33 2e 30 38 36 39 43 35 35 2e 30 35 38 31 20 32 33 2e 30 39 39 32 20 35 35 2e 30 36 31 35 20 32 33 2e 31 30 31 31 20 35 35 2e 30 36 31 39 20 32 33 2e 31 30 33 43 35 35 2e 30 36 35 37 20 32 33 2e 31 31 36 36 20 35 35 2e 30 36 39 36 20 32 33 2e 31 33 30 33 20 35 35 2e 30 37 32 34 20 32 33 2e 31 34 34 43 35 35 2e 32 34 32 35 20 32 34 2e 30 31 31 39 20 35 35 2e 35 34 38 39 20 32 34 2e 38 32 36 34 20 35 36 2e 30 35 32 36 20 32 35 2e 35 36 31 33 43 35 36 2e 35 31 33 39 20 32 36 2e 32 33 32 39 20 35 37 Data Ascii: C54.6678 23.9534 54.7722 23.569 54.959 23.2133C54.9849 23.1696 55.0134 23.1273 55.0443 23.0869C55.0581 23.0992 55.0615 23.1011 55.0619 23.103C55.0657 23.1166 55.0696 23.1303 55.0724 23.144C55.2425 24.0119 55.5489 24.8264 56.0526 25.5613C56.5139 26.2329 57
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 20 36 36 2e 35 35 30 39 20 32 32 2e 38 38 32 38 43 36 36 2e 38 35 38 37 20 32 32 2e 35 35 36 39 20 36 36 2e 39 37 39 38 20 32 32 2e 31 36 39 32 20 36 36 2e 39 39 36 20 32 31 2e 37 37 36 33 43 36 36 2e 39 39 33 36 20 32 31 2e 35 30 39 34 20 36 36 2e 39 35 37 34 20 32 31 2e 32 38 38 31 20 36 36 2e 38 35 35 39 20 32 31 2e 30 38 31 36 43 36 36 2e 37 39 31 31 20 32 30 2e 39 34 34 33 20 36 36 2e 37 30 38 31 20 32 30 2e 39 30 36 31 20 36 36 2e 35 35 39 20 32 30 2e 39 33 38 36 5a 22 20 66 69 6c 6c 3d 22 23 45 34 35 38 30 39 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 36 37 2e 36 38 34 31 20 31 37 2e 31 38 39 33 43 36 37 2e 35 37 31 31 20 31 36 2e 38 31 39 35 20 36 37 2e 33 34 31 39 20 31 36 2e 35 33 31 38 20 36 37 2e 30 33 35 35 20 31 36 2e 33 30 34 39 43 36 36 2e Data Ascii: 66.5509 22.8828C66.8587 22.5569 66.9798 22.1692 66.996 21.7763C66.9936 21.5094 66.9574 21.2881 66.8559 21.0816C66.7911 20.9443 66.7081 20.9061 66.559 20.9386Z" fill="#E45809"/><path d="M67.6841 17.1893C67.5711 16.8195 67.3419 16.5318 67.0355 16.3049C66.
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 33 2e 32 34 30 31 20 35 34 2e 35 32 30 31 20 31 32 2e 39 32 31 37 43 35 35 2e 32 30 32 36 20 31 32 2e 36 37 33 37 20 35 35 2e 39 31 38 32 20 31 32 2e 35 32 36 34 20 35 36 2e 36 34 34 20 31 32 2e 34 38 34 35 43 35 37 2e 31 36 33 35 20 31 32 2e 34 36 30 36 20 35 37 2e 36 38 34 31 20 31 32 2e 34 39 30 33 20 35 38 2e 31 39 37 35 20 31 32 2e 35 37 33 31 43 35 38 2e 33 39 37 31 20 31 32 2e 36 30 33 38 20 35 38 2e 35 38 39 36 20 31 32 2e 36 34 31 35 20 35 38 2e 37 39 38 33 20 31 32 2e 35 39 33 34 43 35 39 2e 32 33 20 31 32 2e 34 39 35 20 35 39 2e 36 34 35 33 20 31 32 2e 33 33 36 32 20 36 30 2e 30 33 31 36 20 31 32 2e 31 32 31 38 43 35 39 2e 36 34 34 37 20 31 32 2e 33 37 33 36 20 35 37 2e 36 35 39 20 31 33 2e 38 30 38 39 20 35 38 2e 35 37 32 20 31 36 2e 32 30 31 Data Ascii: 3.2401 54.5201 12.9217C55.2026 12.6737 55.9182 12.5264 56.644 12.4845C57.1635 12.4606 57.6841 12.4903 58.1975 12.5731C58.3971 12.6038 58.5896 12.6415 58.7983 12.5934C59.23 12.495 59.6453 12.3362 60.0316 12.1218C59.6447 12.3736 57.659 13.8089 58.572 16.201
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 35 36 36 20 31 34 2e 38 32 37 37 43 36 33 2e 35 36 36 32 20 31 34 2e 38 32 39 34 20 36 33 2e 35 36 36 32 20 31 34 2e 38 33 31 32 20 36 33 2e 35 36 36 20 31 34 2e 38 33 32 39 43 36 33 2e 36 37 30 33 20 31 34 2e 38 32 36 37 20 36 33 2e 37 37 34 32 20 31 34 2e 38 31 38 37 20 36 33 2e 38 37 38 35 20 31 34 2e 38 31 35 43 36 33 2e 39 31 32 39 20 31 34 2e 38 31 30 36 20 36 33 2e 39 34 37 36 20 31 34 2e 38 31 39 38 20 36 33 2e 39 37 35 33 20 31 34 2e 38 34 30 35 43 36 34 2e 30 30 32 39 20 31 34 2e 38 36 31 33 20 36 34 2e 30 32 31 32 20 31 34 2e 38 39 31 39 20 36 34 2e 30 32 36 33 20 31 34 2e 39 32 35 38 43 36 34 2e 30 37 33 39 20 31 35 2e 31 32 36 37 20 36 34 2e 31 32 31 36 20 31 35 2e 33 32 37 32 20 36 34 2e 31 37 32 31 20 31 35 2e 35 32 38 31 43 36 34 2e 32 30 Data Ascii: 566 14.8277C63.5662 14.8294 63.5662 14.8312 63.566 14.8329C63.6703 14.8267 63.7742 14.8187 63.8785 14.815C63.9129 14.8106 63.9476 14.8198 63.9753 14.8405C64.0029 14.8613 64.0212 14.8919 64.0263 14.9258C64.0739 15.1267 64.1216 15.3272 64.1721 15.5281C64.20
2024-10-04 12:00:01 UTC	214	IN	Data Raw: 39 31 32 35 20 35 31 2e 34 32 33 36 20 33 2e 34 38 36 38 38 20 35 30 2e 38 38 33 39 20 33 2e 31 37 35 32 34 4c 35 32 2e 36 33 33 37 20 37 2e 34 36 36 31 32 43 35 32 2e 36 33 33 37 20 37 2e 34 36 36 31 32 20 35 32 2e 36 34 32 38 20 37 2e 34 38 37 33 34 20 35 32 2e 36 36 30 35 20 37 2e 35 32 30 30 38 4c 35 32 2e 38 32 35 38 20 37 2e 39 32 34 35 4c 35 33 2e 30 35 39 32 20 38 2e 34 39 39 38 39 48 35 33 2e 31 33 39 34 43 35 34 2e 39 33 39 31 20 37 2e 37 38 38 36 38 20 35 37 2e 32 30 31 39 20 37 2e 33 38 39 31 32 20 35 39 2e 39 30 39 37 20 37 2e 38 34 36 32 38 5a 22 20 66 69 6c 6c 3d 22 23 45 34 35 38 30 39 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 9125 51.4236 3.48688 50.8839 3.17524L52.6337 7.46612C52.6337 7.46612 52.6428 7.48734 52.6605 7.52008L52.8258 7.9245L53.0592 8.49989H53.1394C54.9391 7.78868 57.2019 7.38912 59.9097 7.84628Z" fill="#E45809"/></svg>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	599	OUT	GET /images/main-img.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:01 UTC	726	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:01 GMT Content-Type: image/webp Content-Length: 109834 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "93f26c789dd381349c5267281f51b8ee" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zz%2FA0RaOFnIxu%2Fubkqyp15f2HSiN%2B9%2BmIGjxPMWNYRfXdxMB%2F3NnYg9MUBgDQR5%2FyhnRM179et1FwfCgSDiHq0qjAJr4h%2BieOvvGBB9%2BpfuQia9tL%2BwXTsh0ckYvfmwKyTstQA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025b6fe74374-EWR
2024-10-04 12:00:01 UTC	643	IN	Data Raw: 52 49 46 46 02 ad 01 00 57 45 42 50 56 50 38 4c f6 ac 01 00 2f df c4 85 10 ff 07 c9 b6 f6 b4 8d d0 cc 14 98 95 99 bb 8f 6e bc e3 8c ca cc 60 96 22 fd da 06 e4 48 92 14 49 d9 38 b8 c7 cc 0c 3f d4 e1 64 3b 81 4e 12 66 66 1a 9e 59 ea 2a 48 b6 6d 9b 76 de b9 be ff c7 b6 ed 72 6a 49 a3 d3 17 db 7c bc 06 9b d8 b6 a3 9c 38 4a 9f 18 60 5f ad 50 53 33 58 a1 45 05 06 e8 a8 d0 91 40 28 b8 43 13 c5 5b 62 12 df f2 06 31 3b 06 2c 02 dc 62 dc 52 d4 cb b8 a1 98 05 dc 12 cc 22 4c 63 cc 20 dc 10 dc 10 cc 00 3f a2 68 31 e6 ca 2f 88 84 2b fe 8c 48 cc 7a af 98 f7 9e 22 5e a3 ac 9d b0 62 1c c6 34 8d 19 9e cf b8 3e e5 fa 9c 1b 32 53 e7 c8 f7 21 7d f0 04 1e b1 28 83 4d e5 e2 c4 09 d3 31 17 42 72 84 45 69 90 03 21 06 45 55 53 1a 19 02 22 f5 b7 ba 7b 1e c9 8e 3d 49 ad 30 06 d9 72 Data Ascii: RIFFWEBPVP8L/n`"HI8?d;NffY*HmvrjI\|8J`_PS3XE@(C[b1;,bR"Lc ?h1/+Hz"^b4>2S!}(M1BrEi!EUS"{=I0r
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 7f 4f 99 6b fd 75 df b7 fa f5 de 9b 81 f2 4b 1f 79 49 d8 35 c1 4e cf 01 8f 43 27 44 f4 a9 2c 2f 85 cf a2 b1 7d b3 a9 14 84 7b 58 50 1b d9 f5 94 55 4e 4c a8 96 06 dd 6f 9f b9 17 b3 4e cd 80 fa 78 c1 c5 ff 8f f3 de 9e ef 83 96 3c ba d2 e6 d1 dc 36 2e 7f 5a ee c1 1f 31 f0 4e 39 12 23 49 8e 1b 69 06 02 d0 85 41 eb a1 ff e6 02 f7 98 10 11 13 10 11 31 fe b9 8d ff 3a e7 bf fd 6d ac df 5a 11 11 63 8c db 9c c3 42 40 aa 36 b6 33 22 d6 8a 58 ac f0 68 63 8c 39 c7 dc 37 23 89 23 e2 fd 7e bf 43 b0 3f 1e 39 da fc 7e bf 47 21 1b 04 54 91 b7 f0 65 f4 79 8c 31 8c 0e 1f 54 12 b1 d6 5a 11 e8 d2 e7 f7 3b 7b fb 58 ca 03 5b 76 42 bc ce 80 8f 7b 6b bd cf 39 7b 1f 92 6c 03 3e 85 e3 f5 fb fd 7e 11 fa 38 1b ad f7 3e 7b 4b 24 63 90 8d 2d df 5e f1 f0 a9 52 eb a8 f7 de 2c c9 36 e6 02 Data Ascii: OkuKyI5NC'D,/}{XPUNLoNx<6.Z1N9#IiA1:mZcB@63"Xhc97##~C?9~G!Tey1TZ;{X[vB{k9{l>~8>{K$c-^R,6
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 73 1c 02 b4 12 86 d3 48 0e 25 ca b1 9f 40 48 65 86 18 40 d1 7d db ad ba eb a8 bd aa 6d 04 ea 59 a4 de f6 38 18 6f 53 01 7e df cf f7 fb fb 73 4c 84 d7 6f 89 e8 3f 05 da b6 aa 06 ce 85 07 8f c7 47 66 da 52 54 54 20 c4 ac e5 49 db 26 49 92 24 49 8a 4b cc 27 f0 c3 8e 36 b0 eb 23 22 6a 8f a8 59 4c 4b b5 08 bf 85 c7 8d 22 76 c2 08 80 00 df 8f 1a ab 09 00 21 a2 ff de 68 db cd db da b6 2d 4a 22 c0 8e 0f e6 97 8b 33 4d 80 14 ad 8c b5 8a 67 57 db e3 46 d2 b6 6d 94 7d 8b a8 be 89 1a de 81 36 ab 2a 00 d7 9d 8e 6a 37 a1 80 00 ec 92 2c 92 92 06 81 d8 08 47 a1 a2 7c df 40 20 ef ed c8 00 22 71 0f ed 4d b0 73 83 0c cf 62 74 5d 17 29 ca 59 1b 70 35 11 fd 97 05 db 6e dc 36 00 28 52 dc 8c 6e af a0 b8 ca f9 a3 a4 6d 93 22 b9 11 4b b6 98 ee a3 a7 ab 7a a8 aa fa e9 7e 66 2d 66 Data Ascii: sH%@He@}mY8oS~sLo?GfRTT I&I$IK'6#"jYLK"v!h-J"3MgWFm}6*j7,G\|@ "qMsbt])Yp5n6(Rnm"Kz~f-f
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 6f 4c 62 1a 53 e5 b0 3f f9 0a 69 52 4c 38 c9 29 61 c4 01 19 20 57 db 9a a1 e9 cf 53 5b 3f 54 ea 99 a0 1c 18 66 da d3 de 33 ec bb ef fa ec 40 5b 1b 72 0e af 17 8d b0 8d 9d 16 d0 cd 58 cb f4 14 d5 18 09 4d b2 30 f6 47 a0 b1 bd 12 12 a2 2a f9 e5 d4 55 e4 38 45 91 72 5a d6 ad 3b 8a d7 fe 6c 75 fb 04 36 83 82 02 f7 e9 2d 80 01 33 0f 79 df 7d d7 dd e5 c5 5c 65 13 18 c8 5e 0c 9d ce 10 97 f7 29 d5 2c 38 52 83 32 59 4d 56 90 82 5f 11 c0 3a 70 10 a2 22 98 20 4b ce c4 0a 7d fe e7 a5 0f 47 25 b2 4f 85 51 c6 ef 54 4c a3 a1 91 fb 21 42 68 3b 9c aa 00 88 74 7b 70 e6 86 fb 43 cf 0f 40 d9 28 5d a5 2c 6b 4c 4d 4a 66 78 25 1c 42 5c a4 b5 38 11 15 2e 24 f2 13 e4 8e 02 d2 9f 8b 54 a9 e9 07 9b 1f 86 4c a1 20 39 69 4c dc 36 cf 47 58 1e 1d 36 ad 3c 7c dd e1 3f bf 0c 07 00 6d 8d Data Ascii: oLbS?iRL8)a WS[?Tf3@[rXM0G*U8ErZ;lu6-3y}\e^),8R2YMV_:p" K}G%OQTL!Bh;t{pC@(],kLMJfx%B\8.$TL 9iL6GX6<\|?m
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 6b d8 52 51 e3 3e f9 da fc 2a 6b fa 71 a7 a4 10 dc 3b 2e d0 bc b5 0e 2c 08 e0 f1 93 67 4f 1f 7d 3e 1e 3c 7c 40 be 57 f1 14 f0 72 81 e4 cd cc 45 d7 79 b4 d9 1f c6 ba dd dd f0 00 54 72 25 da 23 b3 6e 3b 8c 5d c0 a4 ec 2d ae c9 fc c3 f1 fd fa 73 fb 99 db a2 ef 5a 4a e0 51 d5 ef f7 51 80 eb ae 81 ef 51 d4 10 c3 03 79 3a d5 6d 6c c0 49 13 a6 d4 16 b0 3a f0 69 b4 24 44 dc 90 10 e5 7b 0e 80 49 68 1c 32 a0 81 af a7 46 a8 50 7b 69 74 71 f2 61 9f a8 f9 f6 fd 8a a6 a0 e9 07 c1 e8 da 46 2a 3d 01 6d 3f 66 b9 ab 55 ff 58 2b 41 2e 2b 85 0e dc c9 9b 8b 15 cb 2a 6e 1b ea ba a9 de a8 4f fe 12 a1 9e 65 7f 51 a7 19 f4 8c 88 d4 41 3b 14 62 af 24 75 eb 8f c7 7e 0f 0f e3 b0 8d 82 a5 5b 21 da 4d fa 75 2f 75 a7 a9 03 dd 00 f2 d1 50 5e e5 d1 d4 be ce 4f cf 3e 07 f2 8c 28 38 a7 9f Data Ascii: kRQ>kq;.,gO}><\|@WrEyTr%#n;]-sZJQQQy:mlI:i$D{Ih2FP{itqaF=m?fUX+A.+*nOeQA;b$u~[!Mu/uP^O>(8
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 2b 6b 64 f2 ab f1 63 c8 1f a3 40 c4 4e fa bc af af 88 16 94 8c cb 37 13 f4 7b 34 12 89 76 02 3b da 5f dc 58 1b 15 bc 95 a5 b9 5e a5 7d f6 eb ac 1c 1b 41 39 9f 5f e9 54 e5 7e 2c a0 6a 57 53 38 27 40 ba 95 9b 10 f8 d3 7e 9d 82 e7 57 38 1e 22 f2 f0 ca 74 92 37 e8 2e c2 ca fe 2f 57 f1 8e 43 1b 88 92 38 4d 62 11 da d6 66 c8 68 80 32 50 a4 09 5f 26 af bd 88 e2 df a7 9b 66 1f 64 40 b8 b7 7f 62 38 3e 0b 75 db 67 03 54 4a 4d ec fe e4 62 69 98 4f ee a7 6b a9 ca f8 18 48 01 97 e0 64 46 f8 cd f0 18 da 06 d9 5d 9d 6b 71 c8 cc 86 54 59 d7 4b 23 cc 72 79 bf 8d 22 4a d5 23 35 3f a3 6b c1 9f 0c c0 f9 c9 c3 e9 dc e7 ee 75 2c dd 47 52 3b 63 c3 84 6b 4e f3 0b 2e 5d ce 42 3c 28 c4 ab 37 8a 77 24 3f a6 11 e3 ec c4 34 89 d5 70 24 b1 41 72 95 38 70 c1 09 81 9f 10 02 3e 7f 01 e5 Data Ascii: +kdc@N7{4v;_X^}A9_T~,jWS8'@~W8"t7./WC8Mbfh2P_&fd@b8>ugTJMbiOkHdF]kqTYK#ry"J#5?ku,GR;ckN.]B<(7w$?4p$Ar8p>
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 98 44 b7 90 94 21 62 a0 24 d9 76 c3 1e 13 d6 45 f5 23 31 fe c9 97 c5 4f c1 0e 30 f3 65 e6 94 d8 50 75 15 1a 57 d5 6d 5b 90 1f 90 3d 6d cb dd 5e f6 a6 5c 3d c8 92 a1 c7 c3 2b c1 3c ee e3 dc 80 e6 ee 91 46 7c 0d 91 5d 52 28 18 ce 47 63 b9 c7 66 e5 c0 c9 49 00 c7 a1 40 e1 69 77 10 08 5f d1 b5 a6 80 03 ce cf c4 5c 8c f3 e7 20 82 64 24 2f 64 8d c0 a6 5b bc a6 a4 29 ec a9 13 a9 de a6 05 39 3b 4a 9c de 52 be 54 85 d8 3e a1 ec 65 64 30 5a dd 6d d2 47 7d 73 dd d3 84 dc eb 4b 48 28 30 b6 81 01 69 04 60 73 15 37 17 6e 43 71 82 68 9e dc df 8b 74 00 10 10 ba 33 d3 e3 5b 26 b0 19 74 8e a0 3d bf a6 74 3a 2a 2d 3b 28 f7 f5 76 74 d6 af e9 b2 14 cf 3e 40 57 f9 b0 5f 16 f9 de c7 d9 5e c1 11 7b d4 62 18 4d 54 09 a6 44 5f 41 ba d9 eb b2 f0 27 67 e9 90 77 ee 7e b5 9f e9 25 ca Data Ascii: D!b$vE#1O0ePuWm[=m^\=+<F\|]R(GcfI@iw_\ d$/d[)9;JRT>ed0ZmG}sKH(0i`s7nCqht3[&t=t:*-;(vt>@W_^{bMTD_A'gw~%
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 79 7e 3f 2d 1b 84 70 3f 0d c6 40 b8 8b ec c4 f5 85 f3 25 04 5d e0 98 32 71 20 b4 d7 53 28 ee 58 84 83 16 21 c3 b1 e0 de 5d 28 38 79 e8 19 6a b8 09 30 cf 9f 90 1f 47 d6 b7 cb ab f8 38 02 31 ba 0c 11 ce ee 1e 46 e5 0c 13 ea fa 82 62 38 7e 9e e1 7c 5c 4a d9 b6 b2 2d 70 8a 23 93 f0 22 52 cd fb 31 2a 67 69 51 e0 a4 11 74 5c 38 61 27 2e da e6 47 a5 0b 5c 5b cc 8d 35 15 f2 1e e4 6b 98 d7 92 97 9d d0 c2 c7 34 42 cc 4c 1a c2 a1 90 c6 40 af b4 d0 53 b5 b4 3e a4 b6 2e 18 09 79 e4 8b 7b a9 2c 11 5d 3b 32 29 8a 2a 53 6a 65 bb ed f0 1e e5 b8 b7 e8 08 7b b4 27 30 8f fb 82 b8 43 03 b8 d4 55 64 b2 e4 a3 e5 9e 52 35 51 33 51 dc 1f 1c c4 0f c0 2a 68 fc 77 bd 36 29 9c 5c 19 95 11 fd 71 58 d1 2c 9d 2f e0 ae 30 4d d7 c1 21 5d 57 13 7c eb 45 38 3a 67 81 4f 08 24 3a 56 36 e1 21 Data Ascii: y~?-p?@%]2q S(X!](8yj0G81Fb8~\|\J-p#"R1giQt\8a'.G\[5k4BL@S>.y{,];2)Sje{'0CUdR5Q3Q*hw6)\qX,/0M!]W\|E8:gO$:V6!
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: fd 65 48 42 f9 ee 9f c5 6c 9d 7b d9 00 58 c2 c8 68 69 6d a3 81 a7 e0 0c 88 71 f8 18 01 52 73 32 07 3f 08 1a 3c 99 b5 6e a1 2d 43 8d 2d ef 06 07 f0 00 52 d3 9e ca 7a b0 34 72 75 25 47 9e f5 37 dc 65 64 6a f3 63 82 1c d3 65 1d dd cd 48 07 a8 cc 67 1c a5 47 52 fb c2 af 15 23 95 f3 fd 4f 3d 4b 13 f9 99 73 e8 97 49 61 81 a1 28 e0 f9 3c 34 4f c8 22 2f de 32 59 70 b6 0e 77 15 33 af c7 f3 51 42 81 93 fa 6f ae 1a 33 b1 cb 67 1d 8b 57 ec 51 0c bf 71 cb c8 6b 2c 20 7d 65 12 9e e8 4f f3 c4 fa 59 18 88 56 d5 f2 8d 94 db 16 cf 63 58 7a 2a 20 aa c1 d4 81 5b 32 d8 92 f8 ff d2 d1 52 59 ab 8a c8 4d a0 e4 ce 99 36 25 b6 54 ac d1 ba 3b 56 3a ff a7 b9 78 c5 b9 8c 3d 56 89 23 38 78 36 3c 42 d6 c6 54 ae 50 93 e5 22 21 f0 6a d0 49 1a a9 82 ec c8 cf 83 d7 3d ae 98 05 1e 60 44 94 Data Ascii: eHBl{XhimqRs2?<n-C-Rz4ru%G7edjceHgGR#O=KsIa(<4O"/2Ypw3QBo3gWQqk, }eOYVcXz* [2RYM6%T;V:x=V#8x6<BTP"!jI=`D
2024-10-04 12:00:01 UTC	1369	IN	Data Raw: 81 7f 27 34 60 f7 34 8b b8 f0 f6 b1 32 e8 a9 c1 61 e6 86 24 6e 37 09 24 17 3a 79 7b e9 b1 de e3 78 06 11 46 ff 09 3b 4b 2e 02 f2 04 5a 2d 9f 62 f0 59 fd ba 2a 7e d7 3d b3 f3 bf 7e c7 5e ca 9e 11 bc 78 86 f5 dd 86 c3 c3 77 84 22 5d 60 12 25 fd a0 c2 83 f5 8b 97 9b b0 43 6b c5 02 e5 ef 9b cc 2e b2 40 2d a1 cb 83 5a 35 31 b0 9e 01 1b 56 4f 09 99 90 62 c5 14 24 38 d7 53 0d 79 5d c6 17 ef 74 1a 01 00 92 d0 56 37 6f 62 bd 20 15 e1 ab 7a 9b b7 bf 2f 8f 9b e8 8f 5d 89 6c 2d 28 c3 ac 69 a2 4d c4 c8 5a aa 06 c8 62 18 90 f3 cc c3 c5 fe f1 d6 ce d2 95 8b 9e d1 fb a7 f6 c1 d1 ac 50 2f b2 fd ea 53 80 3e f6 cd 19 fa a2 d0 2b 9c 6d 4c 70 3b 3c d8 1e 74 ab cb c6 dd f5 c5 85 b1 86 c5 ac 5d b1 1e 2b 44 88 68 4c 13 2a 2f db de ce 02 e7 0e 9e f8 8e 67 1b 49 1c 91 3e cb 77 5b Data Ascii: '4`42a$n7$:y{xF;K.Z-bY~=~^xw"]`%Ck.@-Z51VOb$8Sy]tV7ob z/]l-(iMZbP/S>+mLp;<t]+DhL/gI>w[

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	598	OUT	GET /images/bonanza.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:02 GMT Content-Type: image/webp Content-Length: 14920 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "24c854c8ca7abc1d9b0de05b382a9905" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QuprMWkfjOPXBbJr%2BMz5r3O2inld0P7ilrbid1vgi9Sotlu0VQiq4bmkQb7z%2Brsvj236ph2erJogrJxAxy8O2YU9JSOrsrQWL9C1KciLwti16v4PiL7OcaYeYqF5UyE7qhwzCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025c4e197d1e-EWR
2024-10-04 12:00:02 UTC	658	IN	Data Raw: 52 49 46 46 40 3a 00 00 57 45 42 50 56 50 38 20 34 3a 00 00 b0 f4 00 9d 01 2a 2c 01 2c 01 3e 91 3e 98 49 25 a3 22 2c aa d7 7c 59 90 12 09 6c 6d c4 f0 bd fb 80 95 f8 80 52 3c c8 2d 81 e2 48 6b 7c 7f 8b e6 bd c7 3d 7b fb d3 ee 9f b2 3e 31 ff 75 db 67 c3 7f bc f3 30 f6 5f e7 ff f3 7d dd fc ba ff 93 fb 4f ee bf f5 0f fe 9f 70 bf d7 bf d8 6f 71 bf f9 3d 7a 7f 7c ff b5 ea 8f f6 d7 f6 c3 dd f7 fe 7f ed cf be 6f ef de a1 bf d6 3f d5 7f f5 ec 66 fd da f6 1d fd bf f4 e7 fd d4 ff ff f2 f9 fd 6f fe 37 ef 17 b5 c7 ff fe cf 9d 42 d6 53 ea 4f ed 9f c2 fb 66 e1 5f 8e 1f 44 3a c5 f1 0f e7 a7 fb fe a1 7f 97 ff 58 f3 fc 92 e3 88 30 8b c5 0f e0 7d 41 78 5a fd 57 d8 13 ca 13 fd df 33 9f 65 7b 0c 7e c2 f5 dc 42 d3 45 5e 9a d9 c8 af 03 9e 9e dc 95 10 91 53 ed 21 85 6d 69 25 d9 Data Ascii: RIFF@:WEBPVP8 4:*,,>>I%",\|YlmR<-Hk\|={>1ug0_}Opoq=z\|o?fo7BSOf_D:X0}AxZW3e{~BE^S!mi%
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 22 30 99 78 a2 a0 d3 fb 74 8f 94 f7 a2 49 d2 78 3e 05 f4 71 47 9f a0 d7 74 3b 5e 48 31 74 db b7 49 3b b3 d0 e0 44 6d a4 40 6c 20 f0 7f 56 51 fc 4d ab 91 9c 00 d2 8e 17 58 85 f5 22 16 c8 63 ec 46 4c 74 9f 14 e8 89 c6 05 4c 25 86 17 b5 12 3f 50 31 05 21 2d a0 19 77 50 5e e3 5b b4 bb ae 3e d6 06 e0 f8 b9 07 9b 12 17 d2 38 e8 13 63 7d a0 d3 27 75 55 0c 9b 5b 1b 5e a9 66 74 b6 ee 47 4f c2 fb d5 d8 3a 89 fb 00 a7 27 75 24 da 1a 3b c0 6a 7e 55 7e dd c5 a0 02 7a 16 cb af c4 ae 12 e9 51 13 77 cf 9f 03 e6 ae 7c a6 d6 bf 01 b8 07 16 2e 5c eb f3 3f 54 8a 2c 4b 34 7e 29 1c 5d e9 64 40 4f 2b 57 06 58 0f 06 f0 4d a7 a0 17 f6 7d b9 eb 2c 78 e4 09 72 ad ec 6e 69 fb e3 e8 e0 ad 2c f3 d8 9f f5 0d 1a 4a 40 78 51 a0 33 f0 e6 84 1a 2d 25 d8 ba cc 30 4c 1d 73 cb a9 9b b9 f7 6e Data Ascii: "0xtIx>qGt;^H1tI;Dm@l VQMX"cFLtL%?P1!-wP^[>8c}'uU[^ftGO:'u$;j~U~zQw\|.\?T,K4~)]d@O+WXM},xrni,J@xQ3-%0Lsn
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 88 01 73 ae a9 71 c1 dc d8 f5 ef 6d ef e4 78 63 ce 4f 2f 7a 10 8a 42 f7 2b a8 d7 fa 67 fa 69 b7 aa eb da 9f 67 13 b1 55 c6 0b 17 2e 5d 17 21 8c 2c e7 62 b8 9b 36 27 36 41 51 82 e4 a8 de 03 22 6b 9e a8 55 ae 08 c4 74 a0 2d dc f3 ba 08 6f bc 97 f9 bd d5 c6 a7 d9 21 6f 83 fb 92 20 5b 49 90 79 91 0e 0c c0 03 ac bd bc c7 32 f9 94 b2 5d 9b f4 46 03 30 d9 6d ea 1b c1 18 b9 2f 73 e6 bb f1 9a 40 51 53 5a 53 fa 47 b8 0b 94 59 dc ee 40 0e 40 0f 03 61 51 59 24 29 73 f8 3d 03 ba 56 68 36 08 13 6b 66 52 16 5d 85 f6 a3 0f e5 8a 92 d5 e9 79 0a 08 8a ab 5a 88 df 1d 9d c2 45 c7 e4 cb 4a 16 40 17 c0 14 70 91 0d 9d 12 93 7f c9 9e 89 ad 60 90 92 76 ee 55 97 ad 05 97 05 0b 93 9d 89 6e ab 20 1e 63 57 ce a2 f0 d0 ad 61 f3 eb be 6a 45 6a 93 0f a6 db 8d 4f b4 d7 38 b4 ee 76 c3 c2 Data Ascii: sqmxcO/zB+gigU.]!,b6'6AQ"kUt-o!o [Iy2]F0m/s@QSZSGY@@aQY$)s=Vh6kfR]yZEJ@p`vUn cWajEjO8v
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c4 ee 74 0e ef 91 0f 4d 62 1e 7f 8a e4 3c 31 9c f7 cd 19 52 a9 68 1d ec 1b 8b a8 05 ae d9 f0 52 07 a7 08 74 7a b7 c6 5b e3 e7 5e 8a 24 84 0d 75 c6 ae 38 84 12 75 b0 bb c8 72 4f bc 96 32 e2 97 5b b9 ba 57 2b 08 24 7f e5 d8 cf 72 41 05 db 32 76 fb c8 63 f7 17 c9 a3 f6 f6 81 30 02 1f ad 82 dd e5 57 29 26 fd d4 25 cd dd be 90 09 07 eb ec 8b 8d d7 b9 58 ce 67 a3 d0 b5 e2 f1 b0 fb 20 00 0f 16 5e b0 3c 20 35 d7 ac 94 e8 71 af 63 9f 77 6a ce 18 f8 ad ef 3a dd a8 03 e0 78 75 2d 5e bb 79 17 50 a0 60 eb f2 14 44 99 f4 62 22 8b 03 a4 d4 2e 22 f8 df 1b 84 dd 75 34 e2 60 35 48 84 e0 3a b6 bf 89 11 b8 e1 fa 6d 91 c8 0c 3d be 8e 88 8a 60 f7 f8 83 bb cc 87 eb 77 8c 1a 2c ee ec 8a 5e 81 eb 40 0e cc d8 b5 d6 eb 5e 37 f7 78 4b 92 96 4a be d8 e6 1c 82 18 b2 27 36 af 43 97 50 Data Ascii: tMb<1RhRtz[^$u8urO2[W+$rA2vc0W)&%Xg ^< 5qcwj:xu-^yP`Db"."u4`5H:m=`w,^@^7xKJ'6CP
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 73 72 e0 67 da 05 18 e9 56 32 cb 42 cc 67 f0 13 f7 22 75 d9 4d 25 09 e0 be d1 e4 9a f4 83 63 ef cd 63 d2 a7 7b 65 46 44 71 39 65 7d 73 6a 25 93 8f 09 d3 60 e5 1a c1 48 8f ee a8 ac b9 68 d1 f7 8c 92 12 f2 9c 0c 55 a4 8e b7 b2 d4 c0 71 f1 81 8e b8 98 a5 9b 2b a2 db 82 05 da 07 15 21 6c c7 7c fc 35 6e ab c2 5b 58 9b c7 aa 15 fa eb a1 5a 98 60 a3 aa 0e 8c 73 45 0a 19 c9 a0 96 95 0e aa 9b ce 76 e2 3f d0 5f 50 f9 ee 92 c1 ef b5 ee 64 24 c4 47 e2 fc 98 7f 67 f9 4e ef e3 b8 02 58 84 c9 4d a9 b5 f6 35 50 f3 b9 e3 05 fe 05 e5 56 02 15 63 d8 c1 8c 8f 46 2e 9b 6f 0c 51 84 9a 7c 61 e1 19 c5 66 8d b0 e8 50 5a a5 ca ad f0 ec ab a5 e0 c5 73 e8 a2 6b ea 41 39 e3 7b 23 72 04 84 d8 80 22 8d 76 af a9 fc 5b e1 c8 0c b5 b8 b4 fa ba 45 1c 64 d0 78 90 c3 31 95 dd 8c 56 0a 18 69 Data Ascii: srgV2Bg"uM%cc{eFDq9e}sj%`HhUq+!l\|5n[XZ`sEv?_Pd$GgNXM5PVcF.oQ\|afPZskA9{#r"v[Edx1Vi
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 8f 7f 7f 36 56 c2 3d aa 51 48 f1 f9 97 b4 d3 0c e7 8a 5d db 92 20 ae 99 75 e1 96 4a 97 4d eb 5d 29 2f ca 08 fe 41 f4 08 ad 32 36 56 b4 c4 1d 88 b0 d4 03 02 ee 3b c9 18 b6 0b f8 d5 98 48 ab 95 2b a5 c3 da 2f e9 c6 5c 8f a3 65 9b 29 6d 13 17 62 79 14 77 54 a0 34 70 81 7d 62 e7 05 35 4f 40 66 c5 90 3d 17 f6 00 d6 41 ae 6f fd 3a f1 71 dd 6d 45 53 cb e2 62 fb df a0 dc 37 56 f3 29 1a 06 c5 58 5f c8 20 dd 23 96 75 de 8e e6 45 8a 16 85 06 7b dc ab d9 40 e0 75 da 6c 91 cb 4a 82 7f d5 18 cb b8 9e 76 f7 55 9c 62 55 2c be 16 c6 8d 7a 21 4d 8e 65 d0 bf 64 85 44 1c ae d6 e2 fd 16 83 4d d0 70 27 76 f1 02 d8 44 02 bf 99 e0 15 98 44 c3 1d 07 75 78 3d f9 28 b8 9e 38 23 46 83 da 60 cb 28 9b 6c 39 b4 2a d8 61 e3 f9 4b 71 d8 3c 34 28 1d 8e 93 a7 1d e9 0a 12 77 4e f0 2a 09 02 Data Ascii: 6V=QH] uJM])/A26V;H+/\e)mbywT4p}b5O@f=Ao:qmESb7V)X_ #uE{@ulJvUbU,z!MedDMp'vDDux=(8#F`(l9aKq<4(wN
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c0 61 74 b1 40 d6 1d 73 1b c7 3f 85 42 1e 5b 01 4b 9c e1 4e 39 02 98 d6 d5 2c 6f 62 63 2c 27 28 0e d8 fc 05 ca 2b b4 5c ed 82 e4 18 2d 00 1d a6 5e 61 c9 ec ca bc bf ff bf 97 1f 3f cd 9c a9 99 b6 5d 9e 9e 53 a3 c5 16 94 01 a1 73 e6 4a 8d c7 b4 c4 ef e4 ab 40 ba af 8f e9 6f 0a d3 e8 77 98 49 7d 6a 98 cc 0d f3 0c fa 61 39 e0 bd 5e f0 d9 3a 01 59 76 a7 51 78 bd 8a 5c f3 b6 c1 b1 bc b0 9a 61 dc 2a 66 7a 24 0a d5 87 ea 14 13 5b 52 4a a0 6f 63 9e f7 5f a1 0d 83 26 59 9c 8b ec 05 9e 03 50 eb bc 21 a3 d3 ff e0 6d a2 95 39 b1 74 ae fc 78 9b fb ad 5f 29 d5 9e 54 a3 e7 5d 75 3f 30 f4 ba 3a 3e 81 af 01 dd 6d f2 1c 44 75 a0 72 fc 1b c7 39 6b e3 3b 29 6c 35 41 a0 7b 27 30 b5 b7 42 57 78 ab 7d c2 8e 17 43 95 46 b0 a9 32 3a 78 e2 13 e3 ff f4 54 88 ec ef de bc 66 b1 21 ec Data Ascii: at@s?B[KN9,obc,'(+\-^a?]SsJ@owI}ja9^:YvQx\a*fz$[RJoc_&YP!m9tx_)T]u?0:>mDur9k;)l5A{'0BWx}CF2:xTf!
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 3d 69 5c 85 cf 8f 20 48 b3 28 ea 0c 53 9b 5d 63 c3 0d ba a7 a6 4e 26 fb 92 d4 26 50 07 61 1d 5b 5c f9 d6 4c 46 28 7f f4 3c cf 4d 5e 28 35 9e fd 79 de 5c c8 68 59 ec cd 4c 49 9f c9 60 3a 49 fe 36 d8 fc d0 a6 e3 01 ee 5c 68 e5 e4 3d a1 b3 40 ea 40 d6 9a fb 29 33 f7 d4 0c 73 df 1c eb 8c 94 e0 20 df 59 0c 6c 0e db 1f 79 2a 7b 27 bf 0e 23 1e 25 da 28 60 9a 72 f1 38 cf 2e 8d 6c 47 33 64 6c 66 4c 57 4f 7a 35 b1 1e 90 71 b4 ec 55 f5 49 69 07 40 9a ce f7 c1 88 b5 c6 86 8d 78 08 a1 46 cc 3f 63 30 59 7c e0 08 fd e4 6f ad ce b4 73 b4 49 f2 ed a2 49 80 9c 72 f2 ce f7 d1 02 ad 89 ba e2 2f 27 c7 a9 b1 05 b3 60 c8 d0 a8 cc 55 47 ff 72 20 72 a2 93 c5 9e 7d 07 13 ae fc 42 bd 42 2c 8b d0 b3 3c 74 cb 02 f3 47 ce 31 f9 e4 99 e8 15 3a a3 46 a0 1f a2 a6 7a 9d 65 05 5d 67 51 02 Data Ascii: =i\ H(S]cN&&Pa[\LF(<M^(5y\hYLI`:I6\h=@@)3s Yly*{'#%(`r8.lG3dlfLWOz5qUIi@xF?c0Y\|osIIr/'`UGr r}BB,<tG1:Fze]gQ
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 27 45 ab 16 1f e5 fb 73 63 47 8f 2e 6e 98 ea d8 2e 0c 8e 71 07 ad c3 60 c0 de 8b 75 9a dd d7 0a 1b c8 f9 89 28 d4 74 79 a7 c6 77 d9 6c fc 31 f1 43 83 73 31 f0 d5 dc 55 cc d2 5c 86 4f 2d bb 6f 86 f5 ca 83 d7 12 5a e0 4e 4c 46 92 f0 64 3f f5 fd c1 14 d4 74 79 64 89 ee 9c b1 70 60 a8 eb ab 9e 47 0a d1 8d 11 d0 4c bc 5b 0d 20 ad 1d ff 58 51 f0 df f8 c3 96 46 b3 66 83 47 c1 b0 08 63 fc 38 09 c2 fc f0 a6 05 8d 8f ea e6 ce 5d 85 c8 d2 5a 44 bb fe 58 49 ae d3 8d 72 80 06 00 59 0c a1 b3 73 37 c3 ef 1a fc a2 9c ac 02 f1 d6 73 1b f4 e8 c8 b9 51 42 0d 07 53 22 dd a5 f2 26 8a 8f b3 f0 1c 58 62 26 bc 05 97 a3 e1 cb 67 b5 41 f3 8b 8f 25 fa fd cb 4d d0 19 e1 e0 8d 49 53 28 02 e2 21 98 b8 63 1b 3b ed 9d 77 66 a6 f0 b2 3c 4b 4b 78 4c ba 8c bf a6 28 f9 07 ee 91 30 bb 29 4a Data Ascii: 'EscG.n.q`u(tywl1Cs1U\O-oZNLFd?tydp`GL[ XQFfGc8]ZDXIrYs7sQBS"&Xb&gA%MIS(!c;wf<KKxL(0)J
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c8 ad a4 7b 91 f9 19 87 04 e4 c4 58 d9 01 51 2a 8c 8d d9 cb e3 f4 41 1e 89 25 2e 2a 96 cd 62 93 a2 ee ed a6 6b cd 9a 71 06 25 cf 79 cf d5 bf 48 ee 63 ec 17 13 ec 90 e0 f2 90 98 25 37 d1 dc ce bf cb 31 4e 5d 9b b2 9e 08 ff a6 4a 49 71 b5 da 15 05 f4 c2 aa 2e a6 99 26 39 7f a6 4b c8 fd 69 48 fb 48 68 67 77 bf 48 bf 26 4d b4 23 11 d6 ee b1 5f c8 0c 6b 5f 0f 39 2c e5 91 8f 8b 19 d4 23 95 62 31 98 7d 9c 6a 38 b8 39 05 bb fc fb 54 83 a1 77 83 08 95 3d 6d 23 b8 fe 61 bc c9 70 d4 8a 6a 69 25 88 6b 38 28 9a b9 60 b0 e8 df 91 5f ad 3c c6 91 1e 69 dc 73 c2 b1 2f fa 6d ac 4e 93 bc 7c 1d 21 04 2f 9b bd c6 7a 7b 21 6d 43 69 65 58 36 76 58 2c 4f 92 2b 4c 30 d4 91 8a cd 56 e0 ab f2 aa a3 db 6d a9 e8 97 f6 58 86 56 03 97 54 79 b0 b9 ec 8e 77 df 84 60 fa 96 26 8a 66 e1 43 Data Ascii: {XQA%.bkq%yHc%71N]JIq.&9KiHHhgwH&M#_k_9,#b1}j89Tw=m#apji%k8(`_<is/mN\|!/z{!mCieX6vX,O+L0VmXVTyw`&fC

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	601	OUT	GET /images/bookofdead.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	725	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:02 GMT Content-Type: image/webp Content-Length: 12154 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6b43679562cfb9d74314e27d086f39b3" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pBAdITBTz%2BY%2BzvwWTqrf7PWWs0hLKnsDmjr%2BblISvEZKF6mMapuKD3CjICk0iCcM2Ysi%2FxYSsO5I7rEqzZoe6zKH5ZXLIKoOXUiw9tHzH%2B%2Fqy%2FItH0AHQZ3%2BhvclJaoM%2FL6GLw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025c4e7b8c06-EWR
2024-10-04 12:00:02 UTC	644	IN	Data Raw: 52 49 46 46 72 2f 00 00 57 45 42 50 56 50 38 20 66 2f 00 00 b0 97 00 9d 01 2a e1 00 e1 00 3e 91 3e 97 48 a5 a3 2f 21 2c 1a 5b 79 e0 12 09 66 6b f8 8c 59 9e 9b 2c 41 a4 99 b8 2b 23 37 ae f3 9f fa 2f 38 06 30 af 96 75 e5 21 c9 3d e1 46 83 0a ac a3 e6 9d d3 5e 71 ff db fa c8 fe bd ea 09 cf 4f f7 67 d4 4f ee 07 ac 07 fd df 54 1f da 3d 44 3f af 75 23 fe ed 7b 18 79 79 fb 2b ff 80 ff d1 e9 ad ea 01 ff ff 33 41 aa 9a c1 fb af f0 5e 80 19 3b ec 93 53 2e fd ff ab eb 63 fb 9f 07 7e 56 6a 1d 8b bd b6 80 27 ec 07 9b d7 dd f9 d1 f6 57 d8 0b fa 17 9e ff f8 3c 42 7f 13 ff 07 d8 1b fa 27 f9 7f 46 3d 12 7e c9 fe d3 f6 af e0 53 f6 1f d3 bb d9 07 ee 47 ff ff 77 8f db 94 43 a2 7f 71 05 d1 10 35 02 91 57 44 3a de e1 68 f4 e5 6d c1 7d 70 f7 05 cc ee a1 7d 91 78 50 ee 4f 60 44 Data Ascii: RIFFr/WEBPVP8 f/*>>H/!,[yfkY,A+#7/80u!=F^qOgOT=D?u#{yy+3A^;S.c~Vj'W<B'F=~SGwCq5WD:hm}p}xPO`D
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 62 6a bd d8 5f 37 30 f0 8e b4 3e 81 5a 26 63 18 f7 2f fb 47 eb e7 a2 77 e2 bc bf b4 3c c2 f7 27 fa d2 39 fa 4b 0c 26 53 4b ab 31 c5 c2 d3 fc 93 d9 ba 26 65 db f3 ee 52 9f db 1d 7b 92 b6 2b 03 94 c6 72 67 6e 0e 0d c6 3a d8 73 b6 57 7a 92 5b a2 19 af e4 b5 a0 02 70 c6 7d 1b 57 0b 83 40 e3 59 a9 4d 0a 1e 3e 8f e2 77 e6 4e cf 2d d9 f3 48 b9 e5 f7 b9 8e 66 00 24 21 d4 b7 9a 22 b6 26 79 4d 9f 90 8c 18 d0 12 66 cf 1c 4e 84 83 72 ee 9b 49 a4 03 10 26 d1 8b 19 47 3e 1f f9 39 0a 36 43 89 d5 92 a8 a4 47 01 1f 5f da 85 83 20 87 0f bd 08 cc 93 38 25 e2 4e 95 1b 2f 33 d3 d4 21 bd 0b fc 1e ac cd a5 91 dd cc 18 45 09 96 c8 a3 1b 48 8e 22 3f 6e 8d 9f 63 90 7e 18 05 47 7e fb 91 04 5f 3c 12 42 5b 73 2d d7 ef 83 03 d3 9d dd 2c ea c7 52 18 a0 c4 a7 75 71 ba f6 58 83 78 7f ee Data Ascii: bj_70>Z&c/Gw<'9K&SK1&eR{+rgn:sWz[p}W@YM>wN-Hf$!"&yMfNrI&G>96CG_ 8%N/3!EH"?nc~G~_<B[s-,RuqXx
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 98 a6 9a 75 82 8d d6 5c 4a d5 3a ec 8b 8e d7 bf ba c9 8d 71 d6 5a 01 72 bc 60 00 f2 c4 8d 50 75 02 ca a6 cd 5c 51 5a 92 a0 4d 10 a2 d9 e4 e5 f4 29 50 5c 29 20 64 32 f5 dc f6 b8 0c 69 42 e9 23 20 7a 7e 41 0b 56 b0 ac d2 04 60 73 1f 2d 94 87 54 cd 98 39 47 fc ea 10 75 4f 24 9b 7d 5c 57 0c a4 bc c6 e1 d9 cc 4b 4c 22 99 f0 d8 2f c0 25 e2 26 7e 18 42 aa e3 67 82 dc ec e5 16 09 d1 ec 24 7e c9 7e cf 0f f6 ad 3c c9 17 af 61 b3 5a f6 6f 64 1f ec 60 97 15 45 e5 e7 61 6e 97 e1 09 40 95 69 67 70 74 a1 73 08 76 45 87 7e 84 a2 ae ed 1f 50 a1 da ff a9 26 07 38 5c e9 2e 35 57 81 bc b7 1f 41 2f 9c c1 02 da c8 7f 67 0a 7e 94 cf bc f2 77 fd 61 00 4c 24 d2 b3 d3 2d ef 0d 64 89 d5 ca 58 e5 dc f2 07 06 59 65 d6 0b 59 dc 5b b7 a5 e0 a6 8e f3 20 85 dd 66 77 e0 fd 79 f4 33 94 3d Data Ascii: u\J:qZr`Pu\QZM)P\) d2iB# z~AV`s-T9GuO$}\WKL"/%&~Bg$~~<aZod`Ean@igptsvE~P&8\.5WA/g~waL$-dXYeY[ fwy3=
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 19 bf b2 75 45 78 57 49 98 a5 b1 c1 c0 1e c0 be dc f0 a6 b1 a6 ea de 2f ac 01 c7 2e ad 5d 47 c7 17 4c c0 eb f0 9b 14 14 c8 8e de f1 49 2a a9 c6 41 c3 58 d7 c9 2b f1 ae 07 02 14 a3 1e 19 77 7e 47 e0 d0 37 7c 0e 1e f9 d5 7a 0c cc 98 dd 57 d8 b1 1b b7 9a 19 4c bc ed 0a b8 d4 b8 d4 92 85 49 be c1 93 4d 1a ac b0 35 98 3b 94 7d e9 a7 56 a2 d7 c4 9d b5 ff ea 92 8f ce cf 9a 0d 95 eb 08 c6 00 f6 4d 13 4d aa 06 ee 78 42 59 25 c8 13 2e 3c 61 ce 5f 4f e7 3a 28 ba 66 dc df d6 16 86 e1 96 95 81 e2 b0 f4 78 24 39 a1 da 07 01 24 46 bb 60 c2 48 2c b5 32 0a 21 50 40 72 10 d3 85 fc 51 b5 6e 0b a0 c3 fb 59 c1 21 de d1 bb 9d 76 ca 44 1d b7 36 7e 5f 45 d6 c8 b0 c6 d2 9e 23 73 44 64 51 ea 27 55 29 0c 52 21 26 6d 91 76 4d 96 a7 9d 8b 68 f3 4e 30 43 18 da e0 55 21 25 57 8b d1 bf Data Ascii: uExWI/.]GLI*AX+w~G7\|zWLIM5;}VMMxBY%.<a_O:(fx$9$F`H,2!P@rQnY!vD6~_E#sDdQ'U)R!&mvMhN0CU!%W
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 36 b4 ca 5a d1 8a 66 d0 6e 11 66 0c a9 cc 94 5b 4c ba ba 17 fb 31 c0 ee 51 b9 33 d4 37 06 f4 5f 1a 1d 8e 70 31 0c 62 26 3e ef d2 34 ac fa d7 4f d5 52 2e ee 8c 57 f2 c0 31 6b 99 f1 2f 6d de 9d e2 ab 0e b9 dd b5 3f e8 97 5b d8 6f 41 79 66 ae c7 f7 ea fc 06 8d 14 1a 03 84 43 7d f0 36 76 66 85 62 7f 48 e7 e8 15 a4 e7 2b ec 75 73 37 36 cc e5 5c 10 77 b4 88 4c e0 3f b2 76 87 0f a9 79 82 84 7f 34 4a a8 ab f0 31 05 ec 62 dc a0 5c ea 66 c4 86 4e 1b cd 58 11 92 27 4a f7 36 a5 80 d3 4e df e1 00 4d f5 76 dc 3a 56 79 07 9c c0 64 38 db 15 c6 02 a8 d5 b8 52 71 7f d9 b8 8d fe 29 1b 1e a3 6a be 5d 8d 6f e7 fc f4 0e 75 cd ef f1 f5 95 ab c9 cd 39 46 71 8a f4 68 8b e3 bd f3 23 76 0c 1d 11 c8 62 06 40 9f 6d b7 51 0b 0a 94 da 40 ea 8e 01 2b 35 36 5d 71 1c 8f 4d f1 72 f0 94 94 Data Ascii: 6Zfnf[L1Q37_p1b&>4OR.W1k/m?[oAyfC}6vfbH+us76\wL?vy4J1b\fNX'J6NMv:Vyd8Rq)j]ou9Fqh#vb@mQ@+56]qMr
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 45 ae d4 93 a8 0d fa af a0 9d 2f 62 44 a4 d7 4a 6d 06 6d 46 cd fb d0 fa 67 29 d5 52 13 0a 38 92 8a ac 2d 13 dd 45 f6 52 e0 44 ba 8d ac 37 76 e5 46 95 2d 6d ef 73 5e 0b 3a 8e 25 76 b5 00 53 09 a4 bf fa 79 ec c3 b7 94 6e 56 5d 2b ae 11 73 24 55 18 07 19 23 eb 8d 79 b1 30 b0 ac 76 5e 5c cc 70 35 4d 49 04 9b 45 6c b1 79 43 70 38 2e ad 7d 70 e0 43 c1 69 a1 8e 0d 25 3b f9 32 61 22 6e cc 3f b2 b1 93 b1 98 81 23 03 f3 52 ef 42 3e 4d b2 f2 df c8 e0 43 65 08 45 65 69 47 39 7e 63 bb 99 6d 45 8e 98 53 e5 71 65 3a 4f e4 fe fb 0f 6a 49 d7 4e 0d 7c 72 dc 16 fb 53 21 ba 38 39 9a ea 5b f5 e1 9f b3 67 9e 71 9e 83 d7 5e ff 82 af 23 26 15 e6 4f 45 37 4b d7 e1 0a 4e 07 c6 c9 2a 52 d1 fd 1c 59 f6 ee 84 11 4f 40 c5 2b 3c 8d c1 48 b6 45 15 5c b1 56 61 ec 76 28 37 af a8 57 1d 09 Data Ascii: E/bDJmmFg)R8-ERD7vF-ms^:%vSynV]+s$U#y0v^\p5MIElyCp8.}pCi%;2a"n?#RB>MCeEeiG9~cmESqe:OjIN\|rS!89[gq^#&OE7KN*RYO@+<HE\Vav(7W
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 0e 7d 5e 0e 76 74 9b cd eb 38 fd 27 27 2a 38 19 61 ce b5 05 17 a6 24 dd 18 6e bf 07 55 c1 b5 74 d3 85 57 28 4a c0 9a 8d d6 3e b1 ec 3c e6 a4 b8 77 c6 da 92 79 18 81 43 42 06 d1 06 a7 85 74 11 4e 67 06 18 f7 87 c0 a0 ee 48 15 36 6d 12 f7 7d a9 4c b9 d8 ca 9f 12 b4 76 2a cf 33 e5 e9 a2 6b db 22 8c a9 03 7e 81 b0 ed f9 93 a5 74 33 97 46 bf 9d cc 4e 75 16 75 ec 4c cd 27 09 84 23 3a 5e 56 b6 7a 22 35 e8 d6 37 68 38 a3 2b 54 01 c2 46 31 6b 7f 38 27 aa 39 6f eb 21 d8 b9 ff b9 2a 2f f9 aa 6b 11 6a 7a ee 94 c2 af 0d 94 b5 85 49 7c c8 44 03 84 0c 57 c4 e5 bc 98 ca ee 4a 56 c7 0b 80 cb be c1 7a 75 45 12 d6 23 9d 95 ad 05 af 82 f7 3a dc d7 e6 86 25 fc 38 db 14 37 0a e1 70 6d d3 d2 cf d0 be 7d 1b 00 5a e0 88 60 eb ff cf 9c 4c a9 9e f8 87 51 db 9f 53 0e 88 bb c2 9c ae Data Ascii: }^vt8''8a$nUtW(J><wyCBtNgH6m}Lv3k"~t3FNuuL'#:^Vz"57h8+TF1k8'9o!*/kjzI\|DWJVzuE#:%87pm}Z`LQS
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 36 59 9e 87 20 da 97 6a 83 2b 5a d3 8b 37 95 39 51 10 f0 d7 7b 50 c3 50 56 2f 00 99 f2 39 68 c8 a2 70 96 4d bd 0d be e7 1c 9e fc 7a 53 ff 86 81 b4 07 e4 18 ff 6a e9 92 1e 96 fe a1 9b b6 2c 8c da c5 79 d1 76 af 57 03 3a 47 72 2c 71 00 fc 4f 57 1c 47 62 64 64 59 f4 8a 38 30 18 01 0f 66 98 cb ad 87 0a 14 d6 15 f9 98 3a 49 fb ee 82 e9 e1 f7 29 94 63 5b 23 a6 4c 79 f3 64 a6 41 48 25 e7 e2 0f 02 e3 bc 22 05 b6 25 be ac 89 0b 4b fe 23 6b 05 d9 98 19 bb cd c1 51 f0 d7 87 0d 31 50 89 50 fe ed 49 00 b6 85 1c 3b e7 ca 4a 72 2a 27 ee ee f9 bc 9b 73 b4 58 ef a8 af df 61 b6 35 f6 53 f6 f9 26 2f f0 0e 53 58 44 09 4c eb 41 4e 84 8d fe 93 fc dc 18 80 a9 5b fb 3b 5b f8 a0 99 9b 60 f9 a2 c0 91 a9 ae 94 48 70 3d 2d f8 10 ac f3 0f 40 b8 e3 d8 62 33 2a 41 26 71 32 14 1f fa 2f Data Ascii: 6Y j+Z79Q{PPV/9hpMzSj,yvW:Gr,qOWGbddY80f:I)c[#LydAH%"%K#kQ1PPI;Jr'sXa5S&/SXDLAN[;[`Hp=-@b3A&q2/
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 9e a5 5d 8c 2d df c7 49 f9 49 1c 3d 23 0c 3f 1b 65 69 5c 43 f4 e4 71 1c 99 46 c9 7c c1 8d af 25 74 0c bb d5 68 1e ca 41 ce 3f 48 4e df e0 8b 31 81 44 8c 4a f4 bf e3 e9 27 c9 39 5c 98 55 07 8b 75 c2 a0 6e a5 01 c8 4e dc 98 f2 75 10 ae b2 1b 4e f9 ac a2 6d 44 7b 5b 1b dc 32 92 be 2f 9c b7 93 f2 4d 22 b0 54 c9 2e 7d 11 14 3c 04 ee 06 32 9e 97 7a 8c 0a 6a 2a 2f b9 50 33 1e e1 62 b7 dd b5 8e c8 48 5a ad 46 10 62 64 3a 45 59 4f 16 5d 97 60 8b 4a cd cd 69 04 62 30 c2 96 42 bb ec 6f 3f eb ce 2a 69 16 4b 16 d3 8a fb 0e d5 09 2f 9c f2 ca 33 95 81 69 39 c2 9d e4 78 8f c7 a9 81 be 8a f7 4c 92 db dd ae e2 b0 e9 17 d2 af b2 1c 4d 81 fc 0f fa a3 32 bc cc 75 e8 e5 ac 18 0c 21 f8 3f bf c8 74 bb 18 89 4f 99 fa 80 ae a9 d9 6e 8a 46 b0 fc ee 4d a3 8b 11 85 7c 29 3a 5b 81 89 Data Ascii: ]-II=#?ei\CqF\|%thA?HN1DJ'9\UunNuNmD{[2/M"T.}<2zj/P3bHZFbd:EYO]`Jib0Bo?iK/3i9xLM2u!?tOnFM\|):[
2024-10-04 12:00:02 UTC	558	IN	Data Raw: 2e e7 22 60 82 44 50 39 bf 8a 45 63 56 03 19 4e 59 1a 92 9a 84 4c 07 f1 9b dc e7 60 c7 b1 2a 4c d2 96 af b8 40 da 0c fe 97 24 0f b3 a6 10 5d ca 68 19 e8 c4 7a 8d 3e c1 f4 f1 5d f8 3f e5 47 1a fb 33 9b a5 0e 80 26 97 46 4b df 31 73 44 61 fd e1 ab 49 f8 61 a3 a4 04 0f 0a 15 b4 38 12 e5 87 44 e7 ba dc c9 2a 20 53 71 6a cf 5c 0d e5 f4 88 6d 9d 74 41 a7 15 23 f2 34 88 b0 59 1d b7 0d f1 d3 4e b7 42 1d 61 03 51 8c 63 d1 63 28 de e6 06 5f 6a 61 9a 0f 2c 3c 66 61 10 85 44 31 10 c2 06 ac b7 a5 60 b5 74 14 d3 ad 43 22 ee a9 18 22 13 93 f8 cb 78 58 4c 4a da 8a 5d ff 4d 86 0e a2 73 96 e1 8d d6 db c8 28 7f 58 c9 bb a5 01 9c 40 89 b1 3d a3 71 2e 83 05 b7 34 3c ac e2 03 65 98 75 7c 71 4a d3 07 c2 a8 67 d5 9c 60 7e 7e eb 66 ab e6 49 9b a3 fe 64 b6 04 c3 5c 96 42 9c fc 47 Data Ascii: ."`DP9EcVNYL`L@$]hz>]?G3&FK1sDaIa8D Sqj\mtA#4YNBaQcc(_ja,<faD1`tC""xXLJ]Ms(X@=q.4<eu\|qJg`~~fId\BG

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	600	OUT	GET /images/olympgate.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:01 GMT Content-Type: image/webp Content-Length: 15076 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "25ee9ce1f9b68a4281f2c11bae74a560" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VU7n6oGCPphTTp9hj1hBE11aWLVz63xu5%2Fxh4vc6ojU%2FxRJCyqW1DiHlAMWWrOUQ9Xli42OdGnMhUDIxJyEdQCWEqIcM5HcsXdKc8gh9TxQVQmTYFlL5lCgWlB5LRNVw9E6KNQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025c3fa0728a-EWR
2024-10-04 12:00:02 UTC	658	IN	Data Raw: 52 49 46 46 dc 3a 00 00 57 45 42 50 56 50 38 20 d0 3a 00 00 90 ea 00 9d 01 2a 2c 01 2c 01 3e 91 3e 98 49 a5 a3 22 35 a9 75 4c 52 b0 12 09 62 6d 07 a8 b4 c7 cf aa 25 20 3f 4c af 0f 6c 63 c1 18 bc 83 de 87 cf 3f 07 e7 63 be ef 7f ff b9 e7 8d d4 7f 30 1f 2c 7f ee 7a eb f1 64 fd 7c ec 49 fb ab ea ef f6 cb f7 03 dd 13 fe bf ec 07 c1 0f eb fe a2 9f e4 3f e1 f5 d4 7a 28 f9 b6 7f e5 f6 90 fd d2 f4 98 ff ff a9 83 2e 96 b9 6c 1f ef fd 68 3f 4e cc bf 6b ba 9f 77 d7 fd 6f 5a 5f de 7e d0 f9 13 f3 bb 51 df 6d 70 00 dc cf 41 4f 05 79 dd fd e7 9d 1f 6d fd 81 b8 83 3f 29 ff 83 a6 1f fd 7f 36 9f 64 70 5c f4 99 42 d7 4a 1e 21 c2 a2 db 26 35 80 cd 87 ed ba b8 e8 4a 5a c5 49 e4 46 fb 79 c0 7d a6 b1 a4 64 c1 8d c1 56 b9 b7 bc 81 53 1d 6e d2 bb 46 d8 61 e9 02 8f d7 8c 20 0b fc Data Ascii: RIFF:WEBPVP8 :*,,>>I"5uLRbm% ?Llc?c0,zd\|I?z(.lh?NkwoZ_~QmpAOym?)6dp\BJ!&5JZIFy}dVSnFa
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 08 f7 1b 1e e6 ad 95 e5 a3 fe 54 4e 46 e3 5f 17 d1 2a 41 20 73 b7 c2 8d 59 6f 9d 99 ba ec 17 6c d5 96 1d 02 db d0 fd ba e2 21 a0 4e e2 32 e8 e9 a1 8a 83 bf 3a 36 44 45 c5 1f 11 22 3d 9c 56 b2 05 d7 d6 94 97 88 1e 19 d8 79 e5 07 b9 b5 9f 90 fd b4 52 66 e2 a4 e9 62 2f 23 7f ed c7 11 1c 7b 1b 4b cf 64 eb c9 2b b0 26 9e 6e 75 82 ca 40 c0 03 c6 43 23 b4 3a 3e 9d 36 e4 51 7a aa 53 9b 83 54 8e 26 74 b5 60 e4 39 84 a8 97 0a f6 98 3c 37 ed 49 58 90 c1 2b ff 3c 71 97 12 2d e5 2b 21 92 b0 2c 63 9f 08 21 f5 a7 18 ad a5 ce 17 66 e1 ee 79 83 f3 af 45 19 4b 9d 0f e2 51 58 1d 18 d2 e3 f5 5b 81 05 70 5d 38 90 2e 69 3c d4 91 f6 ff 5a 76 79 34 d9 99 69 ba 31 c5 da a2 de aa 25 10 4d f4 0e 28 83 86 5f 43 ea 76 70 62 75 75 1d a6 c3 61 39 e2 ad d4 08 bf 42 f1 fa c9 db ca 3d 1b Data Ascii: TNF_*A sYol!N2:6DE"=VyRfb/#{Kd+&nu@C#:>6QzST&t`9<7IX+<q-+!,c!fyEKQX[p]8.i<Zvy4i1%M(_Cvpbuua9B=
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 12 94 de 63 0f 93 65 39 c3 d4 32 92 30 e9 80 38 ac 7f 1c 47 39 7d 2b 76 cd c5 2b 03 95 80 de 01 5e 00 8f 8b 67 1c 01 75 c6 ec d3 c7 65 81 f7 30 a7 5c c0 58 65 03 af d1 ec ad d9 85 43 3f f7 88 06 c1 a4 f9 be b0 c0 cc cd fc 9c bf e8 44 45 2e e3 ba e1 52 5b 17 d6 cb 9e 4f 54 ee 59 6a d6 3f d3 92 45 5b 90 84 d9 74 5a d4 be 3e 59 5b ed 2a ba 49 51 76 55 18 5b 57 13 41 c6 cb dd 96 cb d4 de 73 d9 ef 99 c3 a1 8e c8 18 53 de ad 16 3d 06 07 73 dd bd 9e 4c 89 b5 8d 37 6d 3f 7e ca 85 81 c3 46 c0 33 66 83 4c 4f d7 29 66 c4 9f 10 cc f1 41 bb 95 35 0b 45 0c 3f c5 2c 2a e0 07 45 d2 99 d7 5a 6e e8 ad e7 31 51 9b 9c 30 8b 05 67 1b 6b a0 12 cd e1 cc 61 0b 2d d9 0c ff 21 18 5c a8 2f 06 2e b3 93 26 19 e8 44 51 81 4d 24 ae 38 4c ba db 77 04 ab 97 66 3b f4 c9 75 cf 7f 94 4f f9 Data Ascii: ce9208G9}+v+^gue0\XeC?DE.R[OTYj?E[tZ>Y[IQvU[WAsS=sL7m?~F3fLO)fA5E?,EZn1Q0gka-!\/.&DQM$8Lwf;uO
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 25 7d 04 c8 6f df 41 b0 3b ec 59 5d 78 0c 51 3e a4 35 02 11 02 e0 c1 88 f0 53 60 d0 75 5d f8 7d 3d 4c 1d 02 10 7c 8b 9f 18 03 1c 73 98 1f cd 70 3d f7 8c 6c 51 ea ef 73 27 3e d6 55 53 8f 55 0f 86 14 50 3f 3b 47 43 a0 9c d4 61 33 93 3e 6f bf 96 d7 cc c7 37 07 b6 39 3d ff 68 e3 e6 3b f5 55 b3 8c 77 68 f8 02 cf 08 27 f5 e7 da b7 fc 0f 9a a4 2f 18 cc 6d 8e 9c 94 a4 e1 cd be bf 39 9e 41 0a cf c5 c9 48 9f ad 7a 15 2a 5f 83 2a 85 c9 40 13 dd 5d 2a 15 2d 5d 55 ee 78 ef ab 04 d6 a8 15 b6 0f 8c e0 25 76 c1 70 da b2 aa be 4f ae ea 38 82 41 a4 60 48 70 3c 35 f4 94 69 6a 71 87 78 50 f4 3d 34 5b c5 a1 0b e9 f9 92 91 98 f0 62 68 e8 ad fb ad ee b6 fe 24 70 19 49 bb 4a 75 3a 55 07 95 aa c6 f5 02 a5 4a 0c 15 c7 7b d5 0d 53 70 68 00 4c fa 68 de 29 19 21 0e fc ff 70 f7 bb ed Data Ascii: %}oA;Y]xQ>5S`u]}=L\|sp=lQs'>USUP?;GCa3>o79=h;Uwh'/m9AHz_@]*-]Ux%vpO8A`Hp<5ijqxP=4[bh$pIJu:UJ{SphLh)!p
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c7 3a d6 00 a5 e8 03 41 72 0f 40 60 70 6c 44 2a 5c 3a f3 87 e4 9c 90 a7 d8 f4 75 66 e4 9d 68 ed 8d cb 63 6f a1 1a 4e e4 d8 47 77 96 e5 31 7e 6e 3c 21 fb bd aa 36 e7 74 81 5a 02 57 e8 30 b5 0a 2a 26 34 64 de e6 f0 14 1e 77 7e b0 fc 7d 0b 56 73 f7 2f 16 e8 7c af 34 2a f1 84 16 85 31 dd 0d bd 65 bd 19 f2 44 77 f5 1f 02 75 e4 d0 34 64 e0 98 20 cc a8 60 1d 97 dc 4a cf 81 01 8d d8 f6 5e 59 a0 97 dc cc f5 52 85 42 8f 9d 64 25 fc d1 ac 6f d4 4f 69 c0 03 db 4c f8 d0 f2 8e 77 fb 79 a3 30 1e 5a 66 7f d2 5e fd 61 36 79 59 27 08 db b1 37 01 54 9b df 37 cf 05 4e 81 12 48 54 a6 5b 92 c3 fd a2 62 66 fd 24 97 ef de d6 9e f8 67 f2 6e 99 03 47 aa 1a 7a 92 08 9c 96 aa 5e 18 ac 49 ca d0 1d 1c e9 b8 21 fc 9b b8 64 27 9d f5 0a 1f 0e 02 4d bd e3 a0 1f 4a 38 a9 39 4b 0f 9d 3e a9 Data Ascii: :Ar@`plD\:ufhcoNGw1~n<!6tZW0&4dw~}Vs/\|4*1eDwu4d `J^YRBd%oOiLwy0Zf^a6yY'7T7NHT[bf$gnGz^I!d'MJ89K>
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: eb 45 73 b1 a5 c1 09 bb 19 7d 02 f8 c4 08 8f 33 bc 55 b1 a2 74 27 5a 87 6d 95 23 e4 e3 a0 b0 4d bf 4a c4 77 81 06 48 88 53 3d 2d 84 54 01 cf 42 d4 01 41 01 4e 63 30 4a 40 66 66 a9 e6 20 b0 bf 5a 67 00 69 cf c4 48 ac 5a 91 93 bd 25 81 8f 10 81 e9 a0 d3 71 7f 38 5c ba 82 21 6d a4 b1 14 a1 92 39 af 35 ff 8b d7 30 7a 6e 4b 67 8b 58 c8 cc 47 bc 1e b7 e8 e5 fe 13 81 b6 72 f8 ee 9b aa b1 d1 1e 4d 3e b0 df 5f 41 1d 37 6c 26 28 42 3f f7 1d 5f 4b 96 53 a4 c7 f5 37 0f fb ff e2 88 ef 77 d7 48 bf 36 85 4b 4c 29 0b e8 25 42 99 5c 2e f5 89 8a ef 9c e8 aa 26 06 38 72 0b 92 8b e9 3c 3f 35 25 0e d6 9d 98 21 95 6a 8c 2d 46 8f 36 54 be f5 90 a6 47 72 21 b0 a0 88 2e 0c f1 48 09 d4 d3 94 ce ad 79 fb b9 27 cb 82 d2 a1 c1 00 ab ce e4 53 1c 39 c5 39 90 75 5a 7a c7 26 37 7c 9d e1 Data Ascii: Es}3Ut'Zm#MJwHS=-TBANc0J@ff ZgiHZ%q8\!m950znKgXGrM>_A7l&(B?_KS7wH6KL)%B\.&8r<?5%!j-F6TGr!.Hy'S99uZz&7\|
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 37 77 e3 d8 e0 ae b4 a6 ba 73 35 8e 6c 06 a1 a9 29 a7 e9 6f a2 ed e1 40 9f 34 5e bd 09 e5 cf 0a 76 ed e0 59 72 2e d6 e5 92 25 8b 35 44 cb 48 29 9d 65 f5 bb c7 84 4f 62 03 c4 d9 74 dd 60 37 05 b3 88 05 d9 96 c8 d0 32 48 d8 d9 d7 f4 41 b7 7c cb d9 69 f9 5d 02 c7 76 4d 31 8d 2b 2a 18 ca 2e 00 02 80 3d 11 7c bd 10 16 c6 09 c9 c0 e4 cc 38 70 dc 0b a5 bc fc 77 8b 49 4f e7 79 84 bb b6 34 0d ed c3 79 66 17 73 c5 51 28 3a 65 1f 38 c3 27 bb 88 b5 87 0f 51 23 a3 64 70 a0 b4 d5 88 de 66 dc 0f 87 ca 6f e6 19 d8 76 4a e6 73 39 c7 39 e9 0e 77 ab 50 d8 19 03 0a 91 79 86 05 d6 12 25 01 bb 0a 2d 48 ba a6 21 de b2 d2 04 95 87 3e 55 be 9e ab fd 0f 79 a6 73 9b 88 17 bf 55 43 ce 17 67 22 8a 70 5d bc f6 a2 91 8d af 4a 69 ad 67 4b 33 d6 fa 73 d5 f0 aa d4 d9 d5 4d a1 7d fb f6 7c Data Ascii: 7ws5l)o@4^vYr.%5DH)eObt`72HA\|i]vM1+*.=\|8pwIOy4yfsQ(:e8'Q#dpfovJs99wPy%-H!>UysUCg"p]JigK3sM}\|
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 65 06 1b 27 73 f4 22 01 c1 ba 9a 54 6a 40 c9 e7 a7 03 b8 36 82 67 2f 3a 69 29 1f b5 19 18 f3 6e 44 89 31 37 2e 19 7a 56 e3 0a ae 23 61 01 03 5e ca cb 46 f8 a1 30 d7 a3 28 97 03 b2 6d 97 96 b0 2b 2e 0f d2 e8 75 0c f4 25 26 2f 66 3f eb 57 ed ac 75 e0 8b e3 1d 66 b4 11 d5 cd 49 93 59 70 f2 c4 01 23 a5 11 e6 20 5d fa 04 6c 11 78 a4 03 25 55 9e 4d ba 1b 09 82 68 05 16 80 ec 73 22 24 6b 1e 25 c1 be 08 e2 c5 90 f4 00 76 42 72 11 69 4f de bf d5 ec 32 51 0c 40 91 b0 92 84 b2 89 b9 19 9c 2d 0f 8e 1b 91 65 f2 a8 f3 87 4a ce 4e 3f 63 ab 29 26 bf 6e 46 4a f7 8e ed df 89 08 b7 7b e9 7d 9e 0e 06 ea dc ec 26 eb 56 2f 58 96 a1 96 f5 5b 51 c1 f0 c6 02 83 be ef f8 ad e2 58 03 b5 50 3f 78 b0 e8 a0 88 5a d5 47 ef 78 b6 22 66 5e b7 d3 9d 7d 98 81 27 bc 90 85 83 21 b9 dd 03 42 Data Ascii: e's"Tj@6g/:i)nD17.zV#a^F0(m+.u%&/f?WufIYp# ]lx%UMhs"$k%vBriO2Q@-eJN?c)&nFJ{}&V/X[QXP?xZGx"f^}'!B
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 15 dc 5e 3f b9 53 4b a9 71 3d 6a d5 d4 6b 13 57 a1 9e 2f 45 ed 21 c5 ab 61 66 5d cb 4e 13 ed d5 2c 6e 4f 6f 9a db 90 fc 28 18 a8 4e c8 bd f8 af af 55 b7 39 12 ff 64 bf e5 9c 7a 6a 1c f7 a1 de d9 f7 f2 4c 7f c0 f3 a1 b1 13 cb 5a 50 4d 81 2f f3 11 66 4d 12 dd a4 90 a7 34 4a 89 e9 49 6e 6f 95 ae 38 a1 e4 df e8 1d e2 9d d1 21 f4 3c 8e c0 2e 0d e9 f9 51 fe e0 1c 5e 9e ae e9 b0 c6 5b 54 59 8b 83 6e 24 46 a7 5f f7 b0 63 67 e8 32 4a 77 6b 12 24 73 b0 c2 0e ce 37 09 ac 07 0f 74 57 97 cb 96 1b 1a 04 e9 d7 c1 ad da 6d de b0 c7 dd e9 f7 81 ab b0 33 d1 f3 38 05 33 c1 a3 84 f4 3d 7a e1 03 e2 5a 0e f7 23 8b 73 52 57 59 f6 46 22 d5 5d 4b 0d 08 27 6b 8a 03 4d fb ef ab 44 d7 97 51 c8 f3 d2 28 a4 4c 63 5c e4 f7 35 a5 fe 37 f1 ed 7b 28 58 e5 37 00 11 d3 9f 84 8f 89 06 77 34 Data Ascii: ^?SKq=jkW/E!af]N,nOo(NU9dzjLZPM/fM4JIno8!<.Q^[TYn$F_cg2Jwk$s7tWm383=zZ#sRWYF"]K'kMDQ(Lc\57{(X7w4
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: a8 17 7f 81 e0 d6 2b 6e 5f 50 84 c7 b6 42 eb c0 01 db c7 1f 7b c8 56 a1 82 dc 54 fa 1b 96 92 e4 e9 98 72 1a 04 4d e0 0a 7a 57 a9 a8 2a 97 b7 d7 a1 a8 ee bc 8e ad 63 27 79 61 8a f7 1f eb 10 2c 15 19 f3 7f 70 a6 5f dd 01 ac 39 7b bd c2 45 10 de 0f 7c 51 62 12 2d 9e 67 7a c6 4d 75 8c 0e 01 82 d3 7b 72 ac 7c 68 bb ce e0 7a 7a 2b 66 b5 ea e5 e3 4d 9a 57 b5 ba 60 8c 9c 62 2e 2d 80 53 0b fd 18 06 e0 1e 8b 53 f8 de bf 6a b3 b0 5e 9e 2b cb 6f a3 f9 61 4d 55 92 de 03 74 d0 e3 a1 a6 17 9f b8 d5 1f 6f 15 b1 45 01 ee a7 4c 6f b3 3c 1b 65 52 de b7 aa 69 19 ba 98 d9 b1 47 47 8c a6 de a1 b7 3f d3 1d 9f 86 c8 b8 be ff 89 16 bf 61 99 0e 24 24 c8 f3 eb 23 15 04 60 bb 2f 20 4f 48 a0 a3 a7 da b7 93 06 c6 4d d3 34 28 3e a3 ae 85 9a b0 3f d4 89 90 7d 1c 93 77 50 62 83 f4 95 43 Data Ascii: +n_PB{VTrMzW*c'ya,p_9{E\|Qb-gzMu{r\|hzz+fMW`b.-SSj^+oaMUtoELo<eRiGG?a$$#`/ OHM4(>?}wPbC

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	605	OUT	GET /images/BonanzaBillion.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	713	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:01 GMT Content-Type: image/webp Content-Length: 12262 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "4add8430946c826a6e716e24303884b2" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8zDD7896dY07ox4TzYghYBM07oQJ1%2BlB56zaoj4ol%2F93obc3IL84Gyr9XfPLqJrQi7cfkyoAEQ5TLzfk99v43OA1bB1EVFsBR8YF%2B5Z3S98AcP7B7krvb5TObsgdtwUExU4qnw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025c4eea7d1a-EWR
2024-10-04 12:00:02 UTC	656	IN	Data Raw: 52 49 46 46 de 2f 00 00 57 45 42 50 56 50 38 20 d2 2f 00 00 f0 d6 00 9d 01 2a 2c 01 2c 01 3e 91 3e 9a 49 25 a3 22 2e aa b5 9b 61 d0 12 09 6c 08 91 4e 2b 23 eb 5a e3 02 1a 41 d5 96 2e bd bf 9c 0d 97 fb cf f7 9f d6 9f df ff 71 be 5b f8 9b d6 fe 64 3d 0f ff 6b fc af e6 37 cb 6f f5 3f f7 7f d2 7b ad fd 43 ff 7b dc 23 f5 4b fe 87 f7 9f f3 7d 94 bf 78 7f 19 be 07 7f 5d ff 59 fb 8f ee ed ff 63 f6 e3 de 57 f6 6f f6 5f 96 3f 20 bf d4 bf d1 ff fa ec 57 fd dc f6 0b fd c2 ff ff eb cf fb af f0 b7 fd 6f fe 37 ed f7 b3 c7 ff ae ce 2d 4a 5d 4f f1 4f d0 b7 cf f4 4b d2 bd ad fd ae 74 67 a7 be 18 fc eb d4 23 dc 1c 15 42 bd fa 76 bf 6b 42 d0 2f c6 7f 4a df 62 fb 09 ad c9 8d c8 2d b2 e7 d6 73 eb 1c 0c 99 3f 28 4f cd 61 7d dc 75 76 c2 09 63 cc 4c 0f e5 de 90 f9 ec d9 e4 27 88 Data Ascii: RIFF/WEBPVP8 /*,,>>I%".alN+#ZA.q[d=k7o?{C{#K}x]YcWo_? Wo7-J]OOKtg#BvkB/Jb-s?(Oa}uvcL'
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: f6 21 3a 19 a6 59 56 34 bc bb 89 27 7e 48 4b ff c0 c0 94 a4 ca f3 05 0a 8b a0 6f 07 30 b6 49 c2 20 ff 05 5c 7b d5 7c a6 30 9b 94 37 af b6 49 65 26 0c f5 a2 37 51 ac ad 1c d8 c8 aa 16 bb 48 12 17 9b d7 7e 03 ae c7 f8 91 84 69 b6 4e 88 33 14 06 98 a6 10 2a 51 d8 a9 ef ea 6a 74 42 b0 01 ab 9c 0e d6 44 64 40 66 f5 1f 9d bd 7a bc 38 94 32 9f eb 7c 79 d1 a8 40 63 3c 35 57 fa e7 7d 39 e6 8c b9 cc 69 48 ec 05 e3 1c aa cb 28 0b 25 89 d1 14 51 84 a2 4f c7 5c 37 0e dc 5a 9e b2 a4 e9 47 04 06 4d fc 12 9d 71 6f 85 d1 bd df ce 38 32 4a 0c 68 df 37 cf f0 10 1c a7 1c 01 6d 33 30 ce fd 67 3a 83 f4 fd 94 44 79 37 46 8b 58 a4 fb 3e e8 42 29 f4 59 e3 b5 bd 40 96 7e 9f c1 29 be 28 96 10 15 85 b9 72 11 44 ba 3d d4 5a 57 6f cc 8f 43 ba 2e 22 20 ed 6e 4f fa d9 b4 dd 34 0f 9d 85 Data Ascii: !:YV4'~HKo0I \{\|07Ie&7QH~iN3*QjtBDd@fz82\|y@c<5W}9iH(%QO\7ZGMqo82Jh7m30g:Dy7FX>B)Y@~)(rD=ZWoC." nO4
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: dd 6c f8 cf 6d c8 e6 c9 8d b4 42 12 5c bf af e8 6b ad 31 aa 3b 18 c2 4f ed c9 74 3e ce 21 82 4c 16 ca 23 65 02 bc ff 19 ee f6 e2 21 87 62 50 4e e2 60 22 82 7e 74 f1 fb 8e b2 77 9a ce 2b 26 f2 33 68 46 00 fa 68 28 2d 0a b6 47 35 46 43 85 6e 3d 9e 32 7e 5b fb eb 7b 85 f4 f7 c2 a5 60 b2 e3 4f 89 4b 41 74 4d ac c1 fb 14 05 6e b2 33 bc 81 4a ab 8c bd 0b 44 da 45 c4 c8 19 92 9d 1a 4a 47 85 d8 a7 95 53 c9 e9 72 e2 f9 a6 ff 40 f6 c8 b3 06 8f fc 99 1c c3 2d f4 47 99 4e c3 d4 93 87 b7 5a a1 51 6e 1b 59 9d b5 9c f4 05 03 a2 0b 06 de aa 83 9c fd 6d be 86 17 ed 05 4e 9c 87 d6 37 9b 44 61 e9 48 ca 47 82 fa 1d ea 3d 44 9d 45 87 ee 94 ec 40 dd 8f 33 e8 ad 24 d8 61 70 23 25 9d ee 51 17 04 51 92 69 37 d8 f1 36 29 1e 39 aa eb 4d d6 98 51 bd 23 05 84 36 45 db ed 37 9d fd c6 Data Ascii: lmB\k1;Ot>!L#e!bPN`"~tw+&3hFh(-G5FCn=2~[{`OKAtMn3JDEJGSr@-GNZQnYmN7DaHG=DE@3$ap#%QQi76)9MQ#6E7
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 3f af b0 1a 10 9a 2f 02 98 85 0e 6d 78 f4 76 3b 07 00 34 50 7b 29 49 a2 04 00 9e 97 95 77 a3 c8 3a 9f 06 e5 01 f9 bb 11 ed 33 fe c8 ab 2e 4b 26 ab 4a 37 61 32 f3 f1 2b d1 ad b4 0b 4f 9c 76 b5 3c 71 d3 ee d1 80 14 af b5 56 b7 2b 39 f8 c8 88 79 7c 66 e9 62 df 41 e9 08 da 48 c9 05 9a 21 5d 9b 6b b4 af 2a e4 8d b7 b8 0b c5 39 ed ef cc 73 39 c3 98 e0 7b 1c af ea cf d1 57 9c bd 9f 86 e9 3d 0c 15 47 04 44 84 02 c4 bd 6b 33 dd d5 50 95 64 a7 af 4d 5e af fe bc 57 fa bb 4d df 84 f2 15 9c 67 fa f7 ff c8 06 54 95 16 92 71 6d 5f cf c7 44 0f 79 7e 42 04 a9 fb 32 bc 50 b6 a6 7c 6c 81 3b cc d4 56 4d ac 99 d3 66 14 9c f2 bf 66 5d 29 56 cf 28 18 6d 1e a6 41 7c 45 8e 12 8d ef 43 e9 97 3a 28 4b 5c af 67 16 75 d3 bf 52 df f4 45 61 83 94 58 f2 2e 8d 65 cf 4c 1b c0 67 8d 48 4d Data Ascii: ?/mxv;4P{)Iw:3.K&J7a2+Ov<qV+9y\|fbAH!]k*9s9{W=GDk3PdM^WMgTqm_Dy~B2P\|l;VMff])V(mA\|EC:(K\guREaX.eLgHM
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: aa 1e 8c b5 64 aa aa d3 e2 cb f4 52 58 e5 fc 07 94 2d 72 82 5a cf 95 65 38 6c 56 55 74 05 c3 4a 56 92 ae ea 68 1c 83 da 1e 7c 38 1d 04 3b eb 43 52 53 2e d7 90 47 a3 44 85 4a 78 98 d6 bc 20 7b 67 97 6b 8b 9e 6b 33 5f bc cd fd b8 7c f4 37 f3 1a 17 2a d9 3b b1 91 e8 37 f9 e7 d2 bc f5 82 66 56 26 b3 57 df 32 ee e9 be 66 5a 37 d1 e7 fc 4e f2 a2 57 63 55 5e 56 ec eb 28 5b 43 2d 76 79 1c 18 3f e2 34 62 4d 2a a7 82 d6 64 a5 18 7f 3b fc a3 ef fa a7 67 f0 2d 59 0d 4e 16 4b b8 2f 29 85 55 c7 e5 78 12 bc 56 e6 ad 29 4d 58 50 ac d9 12 67 56 a2 f0 0d ad 31 49 4a 3c 03 f3 0b f2 54 fe 22 7f ff 27 c8 f2 35 8c 32 62 37 3f c6 89 37 aa 0d 84 c6 c0 21 d3 7c 03 9c b2 e7 a9 b0 cd 4b f1 8e 6c 73 e6 58 b8 86 c2 af 6f 87 f0 62 f6 44 5d 5d 20 a0 02 9b 4e 32 43 ee 1f 9d b8 9f bf 70 Data Ascii: dRX-rZe8lVUtJVh\|8;CRS.GDJx {gkk3_\|7;7fV&W2fZ7NWcU^V([C-vy?4bMd;g-YNK/)UxV)MXPgV1IJ<T"'52b7?7!\|KlsXobD]] N2Cp
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 7b c3 7a 08 55 26 69 c1 4d 35 c7 6a f5 46 0a e6 1a 54 39 91 02 af 7b 13 15 85 24 3a 7e 94 a9 36 e3 48 f4 60 c0 7d fb ba 0d 75 f6 1c 01 f0 4c c0 01 0b c8 71 0d d3 94 d7 d2 c7 98 47 f3 3c 28 44 45 bf 9b 34 d5 03 df f7 af 6b 40 38 b0 9c 74 04 64 a5 34 c6 75 ad d5 90 f6 f2 93 d6 78 86 8a 46 08 30 59 43 4c b5 38 e5 ef 4b 02 fa d2 01 43 d5 73 03 28 3b 86 a8 d6 d0 4a 22 da 23 51 f4 fa 48 86 e6 14 6d 1a a1 2c 7c ec 0e 3a da 01 d6 08 28 14 de 09 70 14 d8 04 40 7f 91 d8 3b 88 3e 93 13 56 25 19 8a 42 55 c4 28 57 32 b1 8d c4 b5 28 a7 d4 7d 9c 7d f6 50 cc 36 ad 0f b5 26 22 f8 89 fb 12 1f 25 36 74 58 0b e6 5a e4 98 3d fb 31 ce 24 a6 ab 73 e2 78 79 9a 1d 38 b1 63 01 39 d9 d6 c3 9d 28 f1 35 47 06 d5 34 f5 a1 59 bf 78 16 96 5a 0c 52 f8 fb 5c cf 76 a7 02 56 7f 81 04 79 1f Data Ascii: {zU&iM5jFT9{$:~6H`}uLqG<(DE4k@8td4uxF0YCL8KCs(;J"#QHm,\|:(p@;>V%BU(W2(}}P6&"%6tXZ=1$sxy8c9(5G4YxZR\vVy
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c1 b9 3e 53 52 b2 6c 90 2a 07 76 7e 18 8a a8 c7 c9 a2 b4 c6 d6 63 e3 ea 51 16 a3 a4 85 3f 48 5d 60 2c 60 23 07 54 4d 21 14 00 21 7e 6c 11 52 fa 24 12 e4 31 53 e7 09 11 bb a4 50 a3 fa f6 37 b4 4d 8c 02 fc bb 43 af 01 19 5d d5 3b 72 51 5d aa a0 11 7b b5 f8 fa ac cd 62 b9 dc c3 b2 c9 52 97 2e ea 67 80 f1 c4 c7 22 f9 11 18 1e 5f 27 88 75 09 75 4e 04 24 f2 ae fc 09 23 1c 5d 8b 6f f9 0a 2a 0b 0f 53 20 9a 0a 17 f6 09 ee 60 15 9b 73 d1 d7 5f 79 a5 5e 07 51 72 6b 87 dd af 04 e7 1d 0c 95 2a ea 7e 3c f7 59 de 60 81 9b 81 cc e8 5e 1d 73 e5 51 db 25 ca d3 76 32 82 db b6 a2 01 21 0b 52 e8 14 ad d7 bc c7 8d cd 03 db 1a f0 04 cc bd 4c ba 9b 9e da 73 ea 18 9b 40 4f 7c 87 94 cf 27 00 84 21 ca ae 60 45 98 19 a0 7c 11 a3 09 a8 8f c0 4b 4d 5b 9c 3b 2b 8f fc c4 7a 3d 47 99 87 Data Ascii: >SRlv~cQ?H]`,`#TM!!~lR$1SP7MC];rQ]{bR.g"_'uuN$#]oS `s_y^Qrk*~<Y`^sQ%v2!RLs@O\|'!`E\|KM[;+z=G
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 35 2a 04 33 6b 1a e3 1d f4 e5 38 f9 79 e5 e4 0f 24 3d ec 25 fc 99 9f a3 83 a4 fe ba 97 b0 68 13 95 6f b6 6b 4d c6 d8 86 51 2a 83 7d 7d 31 66 2d 3e 3e ad 1d b8 70 52 7f 7a 5e e6 87 d8 64 b9 6c 32 68 25 70 b9 bb b9 3c 48 8a 8d a3 41 84 98 ee 12 8c 98 71 2b f5 13 4f b8 0d 54 b3 30 1d 65 7d 7e a9 9c 28 17 64 3f a6 f1 e3 6c af f5 1b 0a 82 e6 fc c2 0b 13 c7 4f 57 4a 20 ce 29 a9 39 ba f7 3e d4 95 1c 4e f8 94 97 b5 b9 22 be e5 7f 52 9b a1 be 7b 8a 3c 47 ce 0d 67 26 e8 90 c3 3e 2b 74 67 86 b9 2e be 18 81 b4 15 b9 aa b0 5c 83 c9 f4 2f 79 3b 0c 30 b5 7b 35 4a d2 c5 0d 4d 2e b3 9a 05 b9 bc 59 57 1b c7 73 dc 1c 29 b3 6b a9 bf a5 4d c1 2e 31 74 62 7b 6d 7c 7c 6f 64 9b ea 17 11 95 81 3f 1e 51 f9 8d 7b 0f 4b 15 fe 29 70 52 05 0e 50 c1 d1 73 ed 28 34 31 ee 92 41 e3 07 ef Data Ascii: 53k8y$=%hokMQ}}1f->>pRz^dl2h%p<HAq+OT0e}~(d?lOWJ )9>N"R{<Gg&>+tg.\/y;0{5JM.YWs)kM.1tb{m\|\|od?Q{K)pRPs(41A
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 63 72 f3 94 2d cb e7 61 8b 54 56 fd ac ff db e4 36 9a 9c d8 a9 9a 3e 7f 6a 1a 34 85 03 cb c3 68 36 b1 cc dc ab a9 54 59 ef 9b f0 f0 8f 68 58 ce f9 09 2d bf af 7c a3 92 30 a8 45 c5 99 70 ad 35 3b 92 7a cb 7e ea 7d f5 39 be 2a c1 dd 42 f2 cb 67 cd dc 0c 26 78 fd 7e fb a6 2f 3f a2 ce 9a 7b 98 0f ff 67 2d e8 5f a2 fc 88 87 17 10 f3 40 42 d0 4a 49 be 0f 39 d3 8d 4b d0 5d 68 7f ac d1 2e 64 1d b7 28 84 ef aa 61 f9 16 bb 52 4b 0f 81 28 64 d8 96 ef ea f7 4e 82 70 73 ea 21 71 ef 1b fb 87 a6 b0 9e 37 24 19 63 53 4b c5 c4 9d 79 68 20 92 12 6a e9 49 f9 4e e7 e9 38 55 72 8a 15 fc 1c f1 e6 e5 31 aa 98 fe 27 00 27 9a 75 e0 4c 13 9e ec ba ee 32 53 7d 1f 4a a8 9e ff 79 11 c2 dd 79 af ce 9d fd 5d c8 32 aa 75 bc 87 63 9b 8f e3 fb ca 34 40 73 19 da 0e 3a 5b 98 8c 02 5f c3 5e Data Ascii: cr-aTV6>j4h6TYhX-\|0Ep5;z~}9*Bg&x~/?{g-_@BJI9K]h.d(aRK(dNps!q7$cSKyh jIN8Ur1''uL2S}Jyy]2uc4@s:[_^
2024-10-04 12:00:02 UTC	654	IN	Data Raw: 75 50 ec 60 56 42 1c d9 a6 82 ea cb 73 85 4d d3 95 36 7e db 96 85 d2 75 e5 8a 14 b7 b6 30 8b cd 0a 78 81 f5 89 21 95 5f 92 89 4c 9c 67 6d 2c 01 e5 0f 81 a9 21 44 82 be f7 4d fa b3 a5 72 30 55 de 96 b5 85 fd c4 70 22 cc 1c 18 e4 f7 cf 18 f6 8d 7d 54 ae 8a 6e 98 84 6c 43 45 88 03 45 48 5a cb 90 36 9c bb 47 f6 1a be 90 0e 78 7a 08 49 f1 e7 17 02 dc 7a 9b 02 af 6a 65 2a 29 1f 1d 2a 12 d1 83 b9 3a 98 54 8d 0a ea fa a0 6d 70 b6 83 ec ca 86 4f 21 bc 54 dc 5b cb af 43 95 89 b4 59 7c c8 69 9e df d0 75 05 d8 b0 c4 0f 1a e9 6b 0d a3 a1 a6 ee 54 a0 e7 09 42 6d 7a 32 5d 79 11 ca 25 55 91 3a 9c e9 76 1b bd 2b 1d fb 9e f3 05 67 e2 99 bd 96 30 30 60 b6 93 9c 6f 70 6a 87 ae b7 12 9a 14 da 3b 0b f8 71 f8 6f 70 f0 c3 48 70 a7 f3 fb 9e 08 47 b6 a1 9e b5 8f a5 93 0e a7 da b1 Data Ascii: uP`VBsM6~u0x!_Lgm,!DMr0Up"}TnlCEEHZ6GxzIzje):TmpO!T[CY\|iukTBmz2]y%U:v+g00`opj;qopHpG

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:01 UTC	599	OUT	GET /images/wolfgold.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:02 GMT Content-Type: image/webp Content-Length: 12994 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "0b45da92be74cc558784becd48377f73" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ONa3s3VyeerINvjywwIfEfMh%2FmGmmy874xDIzZ071ZBWSy4OJh3JUbFF3t1e2xkoLbitG9ODD45mLJXHK0TP%2BeXsCzGxtfcoeRo4FqIe4V6hbwqpsHGwOKlTqc7WbNPG00TSCw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5025c6c6d4211-EWR
2024-10-04 12:00:02 UTC	658	IN	Data Raw: 52 49 46 46 ba 32 00 00 57 45 42 50 56 50 38 20 ae 32 00 00 f0 c9 00 9d 01 2a 2c 01 2c 01 3e 91 3e 99 48 a5 a3 22 aa 2b f5 db c1 40 12 09 68 08 ed e5 ef b1 ef da f6 1c 79 1f 53 f9 9d ec db 65 ff 49 fd f7 f6 67 b3 ae f0 7a f7 cc 73 a7 3f f1 7d c0 7c b8 ff 83 fb 3f ef 07 f5 8f b0 a7 eb f7 4e df 34 1f b8 ff ba 5e f0 7f f8 7d 78 7f 65 f5 1f fe b7 ff 5f ae 17 d1 3b cb b3 f7 1b e1 e7 fb 3f fd 7f dc df 6b 0c 22 0e 69 ff 1f c4 5f 41 1f 39 99 39 c8 fd c2 7e 4f ac 9f f2 7f eb f8 cf c0 47 dc 1c 0b 60 33 ec 4f 9e 2f e5 f9 e1 f6 a7 d8 0b f5 c3 c7 57 c6 c7 d7 bd 80 ff a2 ff 95 f5 8b ff 73 cb 7f d8 fe c3 3f b0 7d 75 7f 76 3d a1 17 35 de a8 e8 dd bf fd 01 78 1d 2a f0 5f 5d 72 81 b0 f9 5a d1 60 c5 c1 5a c5 fd af 8a 32 15 67 df 4a bf 02 0b ce fa 71 6d 35 e7 94 7f be 37 83 Data Ascii: RIFF2WEBPVP8 2,,>>H"+@hySeIgzs?}\|?N4^}xe_;?k"i_A99~OG`3O/Ws?}uv=5x_]rZ`Z2gJqm57
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: dc 35 ea 14 73 f7 ab 9f b2 c5 ac 53 1c e7 71 c2 95 4f dc e9 d4 f7 38 9a a7 dd 1b 4d e3 fd ce 1c ed 8c 39 a4 95 48 2b 75 f6 fb c1 e3 42 b2 51 55 88 8b d0 8a e4 4e f7 2e e8 f3 fd 4d e0 3c a5 c9 74 be 70 e9 23 53 de a3 d6 78 dd fb 8e f5 81 20 21 84 ec 3b 07 ee af d3 30 1c ac c0 7c d2 ac 16 ad 5f e3 ec 3f c2 b5 bb 66 63 96 d2 23 cc b2 a1 b7 81 75 15 9d 01 f0 54 1f 1b 79 de 8a 0b fd da 2b 25 8a 45 ea 7f 27 42 6a 4e 07 af 94 58 58 be e3 6f e7 07 72 01 b4 e8 22 56 62 62 01 a3 91 aa c0 26 70 b8 b3 9e 0b 8f 60 43 76 bf b3 f0 ac 4d f5 42 50 36 7c d9 34 8e 4a a0 32 32 c8 31 08 10 25 a3 77 cb 96 52 e3 9e 13 9a 12 7e 7b c0 96 44 e5 74 0c e7 f4 1f 4e 01 89 a2 66 3a 2d 3d 4b 19 5e 85 3b f5 ce 14 4a 3b 6f 9e d7 6d b0 af e5 76 26 7a ac 46 ac ad 18 92 66 39 dd b0 86 61 50 Data Ascii: 5sSqO8M9H+uBQUN.M<tp#Sx !;0\|_?fc#uTy+%E'BjNXXor"Vbb&p`CvMBP6\|4J221%wR~{DtNf:-=K^;J;omv&zFf9aP
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 16 83 c3 82 02 1b ca 5b c8 ff 6b 58 d6 80 a5 cf 97 37 ba 15 f8 62 01 11 22 9f b8 32 ac 65 21 58 ee 58 8c c6 a8 ab 72 ba 6b e6 48 20 92 e7 30 4f c6 87 56 2d 2f ae d3 eb 34 14 a4 4e 78 43 e3 ea df 2f 33 41 42 3f 49 cc 61 9f 76 4c 73 b1 25 b8 56 7e 4f 77 ca 65 77 ce a3 4c 6b ec 74 e8 bb 8e 76 82 f4 10 62 8c 3c dd 1f c8 38 70 a9 e3 fe c7 b1 7b 69 a3 17 07 c8 47 ad 6a 39 25 28 b1 ca 10 30 f4 76 98 be b5 aa 10 e0 71 09 5d 99 fd 00 7d 89 21 88 5d 9b a7 56 3b 90 c0 ab 1d ff 65 f9 00 9e 0f 1c 20 8e b6 71 cf f4 4d c9 c1 a4 c7 3b 3e 08 5c 33 d9 a0 d7 43 c8 92 be 6e 46 bd a3 ab 18 c8 a7 3c 03 e3 4b a3 53 d3 28 7d 63 ae 4c e4 11 a8 df 23 9c 5f e6 98 c8 d8 80 5a 0c 79 f0 22 d0 5e ce e6 0f 2d 94 c6 4d c1 94 33 64 3d 6a 4c 00 ba 77 c0 e0 32 19 25 55 2a 87 ba 4b 63 c0 b0 Data Ascii: [kX7b"2e!XXrkH 0OV-/4NxC/3AB?IavLs%V~OwewLktvb<8p{iGj9%(0vq]}!]V;e qM;>\3CnF<KS(}cL#_Zy"^-M3d=jLw2%U*Kc
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: ae ac 97 0f 74 c8 62 ba 69 2f 04 48 36 d9 de e4 39 40 9f 2e cd eb 5e cc 32 e2 43 3a 1d 1a f6 43 13 fc 29 bf 18 e5 12 3f 92 87 9c 80 cf cf 0e 97 03 a1 39 9c e6 90 23 ec 8b 7b a8 9e 08 c0 88 e7 0a 4b 66 be 35 46 bf 4e d9 4c 7e 47 b4 10 36 87 cf 99 8f 88 8d 18 76 6f d7 1b 18 e0 c5 b6 09 49 68 e4 20 61 c1 74 83 ab c4 2e a8 1b 74 f4 4e 27 80 b5 4d 15 3b ec 6f 88 c8 e0 78 9a 55 b5 b7 3c a1 c6 f6 59 e5 69 7c 88 16 5e 3c 39 0d 19 0e 1c 16 9a c0 e3 ae 2c 57 da 00 d4 c3 0b d5 23 e4 93 dc a4 66 46 51 38 b1 42 82 82 57 d8 2a da f7 94 af 5b 79 6a c4 df 46 c3 51 10 35 52 0f d2 40 18 75 2a 78 fe 96 94 fd be c1 d2 53 bd 0b e6 ac 6c 13 39 ab 3c ae 26 11 88 51 1c e3 5e a5 6c 37 9a d5 8e ae e5 c4 bb 7b be d7 38 52 bd 3c 04 29 60 99 b4 ad e6 e1 7d 90 51 76 99 8c 61 f7 8b 50 Data Ascii: tbi/H69@.^2C:C)?9#{Kf5FNL~G6voIh at.tN'M;oxU<Yi\|^<9,W#fFQ8BW[yjFQ5R@uxSl9<&Q^l7{8R<)`}QvaP
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: b9 29 e5 70 0d f6 b5 4d d7 f7 53 6b 06 73 91 9c 16 b8 20 43 14 42 75 be 30 f2 32 d7 83 f5 9b 92 68 39 7b a7 c0 ab 0d 4c bf 8f 16 4a cd df e6 d4 21 73 2f 4a b3 8d c4 15 5c ee 16 3b 37 2f a3 21 bc ca 01 be af e7 ff 5c 14 35 24 56 56 ad 39 33 15 0b 27 41 7a 0a 96 e2 14 1d f5 7b fb d9 ff 53 33 98 7c 3b 00 cd 0e 6a f4 5c c3 04 6e 83 98 c8 70 aa d7 9a ca 66 dd c2 b7 6f 9f 2f b7 dd e4 35 c8 00 02 fc 2e 59 42 aa 1f db d7 4a 5e e4 35 76 bf 50 6e b8 5d 9a a2 a4 6d 40 07 ea 12 eb bd 35 6b 67 15 8e 66 43 e9 ae d6 7f ea 95 10 45 f6 11 e0 80 b5 0a 43 8c 5d 91 97 b0 59 a2 40 49 b2 a3 73 45 c4 6e d5 24 cb 5e c9 5e 85 86 76 06 05 95 77 a1 e1 1b da f6 82 a4 5a 4d 1a 64 9e e4 f4 1b 42 89 01 87 ef 62 e3 e0 7e bf 0f 97 13 f0 a7 1b d7 17 5e 4a e0 47 0d 1a 83 c0 0c 27 7b a8 19 Data Ascii: )pMSks CBu02h9{LJ!s/J\;7/!\5$VV93'Az{S3\|;j\npfo/5.YBJ^5vPn]m@5kgfCEC]Y@IsEn$^^vwZMdBb~^JG'{
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 49 ae 95 6c 10 0d 2a 7b e5 47 bc 34 38 3d 06 6d 97 ef 94 1d c3 17 aa e5 6f b3 49 a4 64 b8 3c 1c 79 34 32 28 00 f5 1e c7 ae e1 52 49 0a cb 26 c8 03 cd 1c 07 f2 72 5e a7 da 56 df a3 8a f3 eb 37 65 0d 6b 42 75 4c 2a 8f 0a b5 c6 de e0 29 67 a3 d4 4d d7 31 95 c0 ed 05 fd cd cb e6 e4 3c 7f 1f 99 60 68 51 82 3b 99 62 b0 4f a2 ca db b4 2c dc 83 32 be 58 ec 8a 62 87 22 bf 0e 9d 9d d7 59 88 53 69 f8 7a 5c 5a 3e 02 57 27 de 8b 34 9c 03 f0 be 6d 0c 3d 72 56 87 6f c3 13 62 c4 63 59 5b ab d6 a2 1e 27 99 68 0d d1 38 ee 78 fb 8f db a6 82 fe f6 85 61 8f e9 22 eb 1f 1a 99 79 2f af e0 eb 5e 39 2a 01 9a 5a fe 86 ff d2 b8 ca 20 02 ac 10 d9 1f fd 99 10 86 90 90 76 2c 18 23 03 38 3e 39 87 01 55 c3 1e a7 69 94 f5 be 5b 90 c3 9b 8e 51 05 2a d6 ba b1 11 f9 af 37 39 75 f6 53 c5 e8 Data Ascii: Il{G48=moId<y42(RI&r^V7ekBuL)gM1<`hQ;bO,2Xb"YSiz\Z>W'4m=rVobcY['h8xa"y/^9Z v,#8>9Ui[Q79uS
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 67 69 c7 56 b6 01 92 4b e4 e3 d2 68 02 ad 42 70 0d 6c 68 16 69 c9 e5 87 a0 59 a3 b2 1b f0 b9 eb 86 d9 b1 1b 22 bd c7 0b be a6 43 94 d6 68 c9 9e 10 f5 b9 03 8c d8 b6 24 e4 99 09 61 37 fe c1 26 70 bc 62 b8 23 0a a0 1b 85 a5 8d 97 54 73 b3 75 38 fe 9a 45 a3 99 5c c0 99 8a 50 91 4f be aa 77 69 e7 e5 e4 e7 84 b3 54 e8 da 6e 21 41 1e ee 0f 47 b4 2a 4b fe b1 49 77 e5 cd 98 eb 76 43 21 a7 71 b7 a4 e1 93 20 d7 78 24 bb 06 0b d1 6f 52 18 f9 5d 2d c1 b2 c8 54 d8 24 08 cf 2b 97 d9 9f be 4b cb aa fc 8c dd 44 40 5a d6 64 12 07 9d 0e 9d 69 eb bc 36 eb a9 2b ad d6 0b b7 aa 26 0d 99 7d f2 6d 3c 0b a1 09 85 4b 9a cd 0a 59 d5 14 f6 61 65 e1 fa 5e a7 7c 26 48 51 87 ba 5d 8b 81 7f 09 d9 f5 6f dc 36 40 59 ff c7 25 bc 4e d1 0b 98 73 ba 0b b7 23 f9 11 22 1f c6 9e 49 6f d4 30 86 Data Ascii: giVKhBplhiY"Ch$a7&pb#Tsu8E\POwiTn!AG*KIwvC!q x$oR]-T$+KD@Zdi6+&}m<KYae^\|&HQ]o6@Y%Ns#"Io0
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 4f 4e e1 3f 1e f3 68 79 34 c8 cf ea 06 39 28 a1 2a c1 36 88 e4 ff 23 1f a7 8d 02 37 68 2e 9f f5 c1 5f a9 7a 38 15 a9 35 d0 f1 fe b9 30 ca 4c 26 da 87 00 50 f7 39 87 1c da 92 47 a0 78 00 67 93 f1 35 c5 01 ce 29 60 cc d4 d0 be a3 c6 3e 17 1e 17 d5 ab 63 fd 58 84 97 d9 06 ff ff e8 f3 18 cc 75 61 c4 d7 2e 06 e1 5c 5c c9 7a e6 48 5d 35 26 90 be 97 50 8c ef 7a b9 c2 ea d8 f4 7d 7f 58 3d fc f1 d0 73 2f 4d 5c 97 31 05 86 7c 43 10 2c fc 98 b3 3e 71 4d d6 08 3b 00 39 bd 01 86 bc 02 5b 57 56 b3 67 02 ba 0c 53 17 8b 39 6a 72 3b 52 64 cd 79 ed cb 85 03 f2 85 19 a9 00 c2 d1 28 5b 71 b9 37 b9 18 2a af 3c 76 14 04 4c 9b cd 90 c2 90 4d 7c 78 0d 47 b4 87 de 15 f1 87 dc ea 09 ac c1 5d 41 a9 b7 1b ed 79 a7 ec c3 10 0b b4 f6 4a ab 73 9a ad c1 9a 9f f0 bf bf f7 e3 68 32 e3 92 Data Ascii: ON?hy49(6#7h._z850L&P9Gxg5)`>cXua.\\zH]5&Pz}X=s/M\1\|C,>qM;9[WVgS9jr;Rdy([q7<vLM\|xG]AyJsh2
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: fa df dd 44 1e 1d 5a b5 a9 9a ef df a9 fe 41 e7 83 10 d9 b9 f1 91 32 a8 84 a7 a2 52 aa d5 c9 a0 dd 29 43 91 5b a4 84 e4 31 36 87 18 34 d8 51 1a d2 f8 dc c4 ef b9 f9 62 fb 6f 26 4b 71 13 14 6b 8f 57 c9 5b 81 db ea 13 45 f2 59 74 1d e7 52 0b 7b 68 c0 27 a0 43 0b 0e f1 03 d8 70 f6 cf a3 6d 69 f4 61 0c 07 42 bb 72 61 31 4d ac 9d 0e b8 31 2b 01 10 7d 85 c2 4a 81 49 73 a5 10 72 0e 66 ad 6e f8 a1 ef 33 d2 9b 41 89 81 f0 fd 21 21 19 f8 2a 64 f5 5a 3a 2b b7 d2 50 5a 80 6e 31 ae 2a eb 17 fd a0 e9 f3 a7 95 18 36 d6 9d 67 59 b3 a8 31 a1 39 c3 05 78 ca b4 c4 8d 41 6a 2e 34 a2 6c 42 3d ec 36 6c d6 06 94 8e 1c 4f c1 21 10 8c 9c 06 44 69 2e ca 97 29 db 33 f6 31 b8 d0 26 74 3c 29 19 99 06 f6 fb e4 60 92 84 17 0b 3b 90 9d 74 72 dd e6 f4 9d 6e 0e db fe c0 54 86 78 4f 5e 77 Data Ascii: DZA2R)C[164Qbo&KqkW[EYtR{h'CpmiaBra1M1+}JIsrfn3A!!dZ:+PZn16gY19xAj.4lB=6lO!Di.)31&t<)`;trnTxO^w
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: c4 61 2e d2 18 77 f4 10 29 0f 2b 4b 43 cd f8 0a 98 19 a8 21 28 1b 46 ae 9b 87 17 15 5a 06 1b 0f 36 54 e9 4d 98 b1 f9 47 48 11 49 66 9b 86 dd 22 f7 87 c2 67 e6 cd 51 f5 45 c8 24 2a 64 77 55 82 b4 5d 6f b3 45 2d fb 9d d5 99 26 55 75 d8 9a cc 05 58 d8 d3 2c 44 d1 ab fe b1 a2 f7 f5 af df 60 cf de a0 24 84 f1 77 a8 22 d9 71 99 2c f1 5f 1b f8 eb 6d c6 8d 1b a5 0f 61 48 a4 0e 7c 2b 92 0c 8e e6 d3 a9 c0 58 00 ce c6 20 2c c5 a0 6d 1b 58 a6 2f ea f5 be 34 c3 52 77 1f 46 9c 4e b3 26 4a 3f 8f ec 77 de 56 74 7a cf 22 79 8c 3b 3b f3 53 f2 25 b6 f2 ea 53 f2 48 3b 9c 3c 9b 2c f2 02 23 9f 37 63 d8 fd f5 79 5a 49 07 08 ab e3 2d a2 de 63 88 70 da 3f d4 8e e5 dd 28 50 00 dc 68 9a 9d 17 3f eb b5 e6 4b d1 20 ba a7 1e 68 89 70 8b 05 8e 30 ac 42 69 d8 32 8f b4 ec fe 3d ac 3b bd Data Ascii: a.w)+KC!(FZ6TMGHIf"gQE$*dwU]oE-&UuX,D`$w"q,_maH\|+X ,mX/4RwFN&J?wVtz"y;;S%SH;<,#7cyZI-cp?(Ph?K hp0Bi2=;

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:02 UTC	600	OUT	GET /images/crazytime.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:02 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:02 GMT Content-Type: image/webp Content-Length: 17334 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "5a159b503350aa8a1853f1fa8d1141fc" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BF9B8cWe8A8dM3r6ghIsqwite2pkbMqUg1ogUOAgs%2FHFFAsCerJgA1hVGTSwm9wNZDjbIXyDbcbAMQV0LyYUxSiAmanOBE6SwcXHFqGNPcwiH4VhL8Apx1bWBOx0MF0ddrhqzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd50260f9fe5e86-EWR
2024-10-04 12:00:02 UTC	660	IN	Data Raw: 52 49 46 46 ae 43 00 00 57 45 42 50 56 50 38 20 a2 43 00 00 90 ed 00 9d 01 2a 2c 01 2c 01 3e d1 56 a4 4c 28 24 a3 a2 af 12 4d 21 00 1a 09 68 6c b0 36 cd 16 d7 5c 59 cd 7f 60 cd 0f af ba a1 7e 07 70 2e da fd 93 f4 cc ee 1f 39 7e 8a 7c c1 39 e4 f9 97 f3 6d f4 c3 fd bb d4 2f fa 87 53 ff a1 b7 9b b7 ac 17 ef 77 ee 8f b6 16 9a fc a3 fc d7 af 3f ce ff 73 be 01 b2 ff ef 7a 19 fa 97 3b 5d 9b fd 7b d4 2d e6 7e 97 cc 6b cb 7e 76 d3 86 f3 4e bc 3d 00 fc a1 ff fa f3 2d fb 4f fe d5 e4 35 64 6b 43 4e 2b a8 68 ac e2 f2 1b 50 ef 3e 98 c4 4a ce c4 65 2f 93 52 45 8d c7 20 f9 88 7f b3 27 f3 1f fa 80 d2 9b b7 dc c3 a6 2f af c7 9a a9 03 11 9c 13 f7 bc 96 a7 1a 13 dc af 6c 4a ac 71 19 05 1b 10 10 c2 c6 de c0 4c d6 2e be 07 87 49 7b d2 f2 f5 d4 b2 d0 dc 4b 28 42 af e7 7b a2 1b Data Ascii: RIFFCWEBPVP8 C*,,>VL($M!hl6\Y`~p.9~\|9m/Sw?sz;]{-~k~vN=-O5dkCN+hP>Je/RE '/lJqL.I{K(B{
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: ae 36 57 56 fc 83 57 50 a1 cf 38 d0 0d 28 21 b5 40 34 ce 8e de ac 92 03 df 21 64 13 7a 72 90 ec e5 97 7d d3 5c 1f 86 d7 f0 3e f6 ff 39 8b 70 54 58 0d 35 5d 4e f0 a4 2c fd f0 d0 a8 cb 20 d5 8e 3c 8e 97 b4 56 3b a2 e8 e1 73 11 bc dc 86 b0 b6 b6 a1 e3 2a ab 23 96 2d 26 c4 20 62 f2 66 4b d3 d0 4c 1b 07 a6 64 36 1b 9e 74 c7 2f 46 10 29 00 8f f8 6f 85 2d ae 93 34 04 64 1a e4 5a a0 d5 7f 8f ef 45 32 a0 cb 53 f6 93 3d e1 3b aa ed bb 1c 3a bc c5 ea db 5b a6 ec 45 ec b2 b5 24 d5 69 55 ee ed 5a ff 13 47 07 d8 13 47 0b 49 5b 3b 7e 28 d4 18 aa 44 15 70 55 63 85 00 85 8e c4 35 da 2f cc fc 55 a5 32 c4 5c 4f 6e 87 70 76 47 75 00 f7 ce ab a1 fc 82 ba 98 ea 52 15 1e fc d4 2b bf d3 6a 81 7a fb e0 17 84 ca 2b 4b 14 77 7e 5d 7b f8 75 9f 09 91 73 53 2d 1f f7 83 30 21 d8 e2 ac Data Ascii: 6WVWP8(!@4!dzr}\>9pTX5]N, <V;s*#-& bfKLd6t/F)o-4dZE2S=;:[E$iUZGGI[;~(DpUc5/U2\OnpvGuR+jz+Kw~]{usS-0!
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: e8 e6 f5 48 29 36 dd 25 bc c5 0a 58 ba 30 64 93 6a df 66 11 e5 60 62 d9 71 a9 07 de 5e b7 41 c7 ff 58 2f 62 2f 0a 39 9b 36 f1 30 79 0f a0 49 06 d0 9a dc a1 30 1a 34 97 24 3c a8 4f 22 56 c7 d3 22 b5 d2 9c 32 57 46 77 44 93 be 31 0b aa 9b 60 90 ad de 46 5f 65 9d 67 cc 5f d1 0d 12 30 6e 3f d6 02 65 77 99 20 a0 03 4c 8f f8 71 ed 45 6c fc eb a0 4d 50 cc 79 a8 20 01 e9 67 5c cf 2b 10 90 91 5f 2f 3b ca 44 10 ad 4f 5c 39 a2 14 ea f7 f2 d7 2a c5 ee 2e dd 09 7b 65 2a 11 2f 5b 44 68 be 1c 64 47 5c 14 be 45 40 28 30 fd 45 0f 03 1d f0 f2 59 f4 15 44 ae 17 bf dd 8a 7a 4d 92 95 17 d4 af 74 49 f6 52 e9 f5 92 c1 76 6c 87 87 44 ff 22 a9 5b 52 ed 2d bb 14 43 c3 2b 5b ab d3 b3 89 6b 95 6e 12 d7 61 7d ac 07 d2 5f f7 f3 8e bf 94 ed fb b3 c1 ec 70 dc 03 9c 6d 7c c3 92 73 28 2c Data Ascii: H)6%X0djf`bq^AX/b/960yI04$<O"V"2WFwD1`F_eg_0n?ew LqElMPy g\+_/;DO\9.{e/[DhdG\E@(0EYDzMtIRvlD"[R-C+[kna}_pm\|s(,
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: ad 7a c7 00 c3 ae 09 3d 87 75 00 90 bf 71 c3 6f 4a c0 e3 42 0f 08 bf 79 09 3c c7 e3 b7 6b 81 04 45 3a 12 3a 10 2b 67 56 76 ee f7 1f 10 42 19 aa 80 d3 af 41 2e 99 2d f7 d9 66 5f f9 d6 e6 6f 7a bb 5e 27 4a 4d ec 95 64 a5 92 ce f3 a0 d4 6c 14 05 b4 54 ae a8 a8 10 ec 91 3f 48 70 3f c0 5c c4 f5 0d 79 53 13 ab 17 01 21 6a 26 81 82 fd f8 f0 dd 0b 63 75 f3 0f 34 f8 f0 60 cd f3 86 2f 1a 2e 69 cb bb 93 e3 61 a1 ba 74 f1 c7 87 a4 27 5b 89 b1 a4 66 0e 8e c5 40 b7 c5 55 a0 eb bb ab 11 a7 6b 62 da 96 6b d5 1a 9d 66 b2 54 c7 b1 62 18 d2 51 27 8d 8f d9 3b 29 2f 7b f8 0e 93 cd 16 32 99 de 19 26 94 a3 8d aa e9 dd d8 83 95 9c 78 ab 9d 1a 0f cf 29 3d 55 ee 9d 9a dc d4 00 53 5f 55 04 59 33 20 49 32 d2 2d 97 5a ea 06 a5 33 c9 ef 1f d1 39 5b 25 ab f5 f1 47 12 87 b0 0c f1 83 62 Data Ascii: z=uqoJBy<kE::+gVvBA.-f_oz^'JMdlT?Hp?\yS!j&cu4`/.iat'[f@UkbkfTbQ';)/{2&x)=US_UY3 I2-Z39[%Gb
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 04 7f 28 82 f6 21 98 57 80 43 be 60 cd 54 32 00 6e 00 73 59 78 61 c2 63 d8 6f a7 04 f7 f1 2c 50 a0 b8 4a 79 4e 76 ee 99 77 de a6 e9 22 5f e6 07 59 03 63 a4 19 77 be 3e 60 21 23 a6 34 52 2f 3e c7 d5 7f 31 d1 94 52 82 c9 14 5e 86 14 f9 e1 cc f0 80 87 a0 15 ab 5c 0f 1e cd 0c a8 48 be 98 60 68 e4 21 6d b5 1d 48 09 91 20 ff 9c ca 8e 8b 88 fb 92 f9 a2 60 48 ac e8 1a ff 44 f1 94 62 31 4f d8 ba 2f 98 1b df ed fd 79 c1 1b bf 2d 1f c7 4e 4a 7c f7 76 0e a9 36 86 6a c5 29 80 98 10 42 b0 78 c3 f2 74 f1 2a 6d 69 48 b5 b6 1f 41 77 12 46 a7 b8 a8 72 91 bc 4e 31 f7 90 34 3e bd a7 1a 00 86 ae 31 3f 20 10 67 a8 02 3e d4 3e 43 5d cf 59 5b b9 5e 58 55 c8 06 6b c6 ef 0d d6 25 f3 b7 fe 90 e0 00 3c 26 f1 3b e4 99 b9 10 2b 92 1b ff 63 32 fa 15 f7 20 da 8b c2 80 fe b9 97 2b 9c d1 Data Ascii: (!WC`T2nsYxaco,PJyNvw"_Ycw>`!#4R/>1R^\H`h!mH `HDb1O/y-NJ\|v6j)Bxt*miHAwFrN14>1? g>>C]Y[^XUk%<&;+c2 +
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 65 08 98 d0 77 1c 42 f9 f3 fd 6a 5b 17 9c b0 02 65 6c b7 f5 9f 56 f0 72 98 56 9c 53 d1 55 24 ee d6 aa 16 fe bb d0 77 85 2e ee fc 14 8a 3f bb c9 3a df f8 0f 08 1e c7 5f 78 49 30 21 4e c7 45 f9 cb 47 9a aa 23 77 f6 8d 4f 3b a0 c6 26 af ee 37 07 5d f7 a2 c0 4f 6d 97 79 e3 e8 0d 8b a2 fe 79 29 d5 5e ab f1 15 a4 6b 6e 9b e0 68 93 8c 99 89 6f 39 7f 4c b5 9b c1 07 00 14 ab 63 a8 36 9d 7f bb 36 19 ef 2d 01 2b a3 44 be b1 4a 6f d5 2d 82 6c 34 77 9e 62 ca cc 1a 4f 6c 52 32 b2 1e 7d 13 2c 9a 6a 6d a5 9b ad 58 9c 2c 6a 0c 1d 02 87 b7 e8 c6 02 b6 87 6b bf 8f a8 73 c0 07 23 55 96 b3 ac ef bc c8 fb cc e7 f1 bf fa eb 28 82 e7 91 4b ea 42 14 b3 ff f4 23 cf a6 53 1f 72 c1 81 65 b0 ef f9 71 e6 3b bc e0 bb 2c ec 42 af 6a 20 cc c8 93 95 71 5a cc d0 b4 bd 3c bb 00 0b b9 ef c0 Data Ascii: ewBj[elVrVSU$w.?:_xI0!NEG#wO;&7]Omyy)^knho9Lc66-+DJo-l4wbOlR2},jmX,jks#U(KB#Sreq;,Bj qZ<
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 3e 48 3c d2 0b c1 63 86 2e db c3 ba c2 1d 63 77 75 a9 ed 36 d1 cd 13 d9 ae d4 d4 d3 cd e7 f8 3f 06 b4 e6 7f 2a f7 7f 4f b7 bb 3e db 10 6f 08 2c 60 dc 39 96 be 24 1d e3 d7 6f b8 84 58 a3 7b e3 46 c5 28 3c a8 eb b8 27 d3 fb 22 b8 34 2c 26 fb f9 63 4a 8b 35 6e 67 fe 5d 61 62 f9 55 70 8f 03 55 fe a7 f8 24 e7 3b b9 d0 fb c0 42 b7 79 54 fc 95 42 6d ad 98 b8 59 70 9a cc 71 17 6f a9 a8 67 45 58 90 74 35 01 e4 ed da 29 f1 5f 33 cd 63 e4 73 be aa 73 8e d6 d3 05 33 3a 56 2b 59 51 a6 45 d3 51 a4 53 2f 98 ee b5 1e 31 b0 dd bd 9c fd 5e e7 fd 2d 0c 02 ef 1f c9 ba f6 c5 53 81 48 84 03 63 94 03 a8 ac 86 48 f5 1c d8 bf 29 23 ff 47 9b a9 65 2e b5 0b 70 93 bd ba be 9e 58 ad f3 81 b6 86 df 78 c0 5d d1 57 e6 c9 db 07 7f c2 17 0e 01 57 70 a3 bc c7 70 99 a2 06 5d 15 9a e9 e9 f8 Data Ascii: >H<c.cwu6?*O>o,`9$oX{F(<'"4,&cJ5ng]abUpU$;ByTBmYpqogEXt5)_3css3:V+YQEQS/1^-SHcH)#Ge.pXx]WWpp]
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: 72 1d b3 9c 35 ed ac 77 5f e4 33 ca 27 dc 73 83 ea 41 b5 69 06 a1 7c c1 31 23 c5 2b 5b 39 6c 59 be b2 ef 42 19 79 95 b4 f7 72 e4 6d 7c 77 76 1f 09 9b 05 81 41 f2 a9 0e 08 31 b9 02 ed e3 97 a1 82 5d 42 fc cd 89 b5 9a 13 e2 59 8d d4 8e 46 5f 6b ff 4d 79 ef c6 9c 03 3a be c2 99 69 4b 60 b3 b8 a9 99 29 04 ef e7 a8 38 ba ce 35 b1 93 01 2f ef 6b fd f7 e1 1f 51 4b 72 5d 49 43 36 91 20 56 9c 33 e8 24 e7 65 57 90 30 72 cd 77 d7 c3 72 2c b5 82 3d ec 9b 57 a2 71 12 fd c3 6e ba 82 eb e0 c0 6e 80 e8 54 6e f8 46 78 0c 7e 5a 97 c2 aa ac e4 2a 96 08 0b 1d ef 07 cf a1 b5 ad 89 1b 91 44 7a b3 f1 3d 77 75 7e d0 e1 71 74 df 9b 56 96 18 66 72 fb bc 32 d8 1a 4f 98 5e 0d 24 17 99 95 79 dd 16 3e e9 b0 63 62 d5 09 96 83 8f 13 3c 54 7c 05 64 45 e4 21 b5 2c 07 61 cf a8 d1 0c 26 83 Data Ascii: r5w_3'sAi\|1#+[9lYByrm\|wvA1]BYF_kMy:iK`)85/kQKr]IC6 V3$eW0rwr,=WqnnTnFx~Z*Dz=wu~qtVfr2O^$y>cb<T\|dE!,a&
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: a3 1f 26 13 ca e2 d8 27 c7 0c c7 0e d0 77 e7 29 7f a1 e6 31 f4 e7 94 e7 b0 bf f5 b8 95 69 db 8a 50 1f 53 18 99 73 53 3c 8f f3 14 91 d3 32 31 1d e6 76 1e 7d 74 99 01 9c 4e a7 9c fc 35 86 4b 2c 11 67 b1 ef 14 02 77 b7 78 4d e7 cc ef 96 5c b6 5f 2a 37 ed 02 cc 82 4a 33 fd 62 ba 31 86 e7 6a be cf 56 e3 e6 db 58 85 11 1e c3 eb 08 e6 44 7a 8e 66 d3 9e 92 b1 ed 05 e5 cb 03 1d 35 72 ad 90 a1 0c 31 bc fd dd 7e ef bf 9b 80 77 8c 44 d6 17 ab ee 3d 25 57 ef 6b 21 31 d4 35 02 6b b2 ce 7e 19 cd aa d1 63 22 d5 e0 b3 ab 26 29 ba a6 d7 2d ed 7b 76 58 90 c1 54 f8 a5 b4 8a da ca fa 3e cc 99 7c 57 a1 cb 70 54 2c 10 26 09 de aa bf 3c 9f e3 82 cd 67 5c 9b 62 c2 70 4f e6 2d 8c ff ef b9 69 2b 33 ad 21 c4 44 b3 58 5d 9c 00 fe c1 9a 9e 63 4a 30 f5 cf 00 9e 48 c9 a5 ab 01 f0 f6 25 Data Ascii: &'w)1iPSsS<21v}tN5K,gwxM\_*7J3b1jVXDzf5r1~wD=%Wk!15k~c"&)-{vXT>\|WpT,&<g\bpO-i+3!DX]cJ0H%
2024-10-04 12:00:02 UTC	1369	IN	Data Raw: e4 47 ed 2d eb b9 1d 7a a0 13 9b da 33 c3 10 b7 85 4a 76 eb 8a c6 a9 0a f9 86 e8 76 df d7 42 03 5d fc 01 33 41 3d 5b 4d 2a d4 2d e4 ad 49 dc 22 db 44 02 db 99 2b 17 42 05 79 8e 1b 2a 0f 4d 1e 08 5b a7 ed 1c 18 62 d5 95 65 59 50 16 d5 b0 d5 51 cb 7f b2 3f 11 3e 73 47 c0 d1 9b 32 92 e1 e4 5f 06 fd 2f 87 0f 82 68 e0 95 4b 6a 91 ac e9 62 d4 ff 85 ab 03 ef 8e 93 d9 9b 2f 40 d8 7e 08 83 39 95 6a 6b 00 6f 12 0b 07 3f 3b 90 ec b2 a9 bf af b5 22 48 21 22 f7 ec 63 fa 34 71 fb 05 25 91 d2 04 86 29 0b 37 bb d9 d3 5d cf cb a5 dd eb 83 ce 72 48 60 67 00 20 c6 13 03 f6 fc c8 2e 48 03 19 eb ea 36 45 1e f3 cf 5f 68 7a 6a c1 9e 21 5e c1 c3 aa 9f db 60 9c 9e 30 b9 1c 1d 83 82 f0 b9 95 eb f6 ca b8 36 69 04 a0 e7 0b 08 46 f4 f2 0c d8 ab 9b 30 fd 05 35 dc 99 7d d8 1d 3f a4 1f Data Ascii: G-z3JvvB]3A=[M-I"D+ByM[beYPQ?>sG2_/hKjb/@~9jko?;"H!"c4q%)7]rH`g .H6E_hzj!^`06iF05}?

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:03 UTC	600	OUT	GET /images/pragmatic.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:03 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:03 GMT Content-Type: image/webp Content-Length: 18092 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "9949a7d475de3bfdcafc708fa1796e66" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dfqmHX1vHuhaoz5Dmm47rHjP5sbnGerHAaFQNfdTTm26Hzm7z9H80WX9cq1r7gXua03QYe%2FKEDJIRv7w%2B8w6KFt%2BHUEiUbYQEA%2BHAorWBiZQ4ZLCwhd%2F2fBmCLV7X5I2M6rxFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd50265c8864374-EWR
2024-10-04 12:00:03 UTC	652	IN	Data Raw: 52 49 46 46 a4 46 00 00 57 45 42 50 56 50 38 20 98 46 00 00 f0 07 01 9d 01 2a 2c 01 2c 01 3e 8d 38 96 47 a5 23 a2 21 30 37 3d 40 a0 11 89 6c 6a d1 6d c3 b6 f2 27 91 7d d7 fd 0f 36 3e 33 ec 17 d2 ff 73 fd 7b fe 13 de 17 66 1d 7f e5 df d1 bf f9 7f ca fe 4d fc d4 ff 91 ff 8f fd 17 bb 8f e9 5f e7 ff f7 ff 8f f8 06 fd 75 fd 9a f5 d4 fd c2 f7 97 fb c5 ea 33 f7 17 f7 2f de 1b fe ef ad 4f ee 3e a3 7f d7 3f cd ff f8 ec 72 f4 32 fd cf f4 f2 fd e0 f8 84 fe b7 ff 6f f7 63 da a3 ff ff 67 ff 35 fc 51 79 47 fc 5f ca ff 41 fc da 7c 3f dd 8f 65 4c e1 f6 61 a9 f7 ce bf 26 7f 23 fc 87 ee df c5 7f ef 7c 0d f9 d1 a8 5f b8 3f df 70 35 80 5f d6 7f bf 79 d8 fd ff 9e 1f 6c 3d 81 7f 5d ff ee f2 40 50 27 fa 9f fb 5f 58 8f f8 be a0 3e 0f fe c7 ff 27 d8 53 f6 0d 1a c3 bc 12 b0 3c 43 Data Ascii: RIFFFWEBPVP8 F*,,>8G#!07=@ljm'}6>3s{fM_u3/O>?r2ocg5QyG_A\|?eLa&#\|_?p5_yl=]@P'_X>'S<C
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 74 a9 70 27 bd 7b 91 73 7f b4 0c 58 97 c2 14 b7 fe f1 7e 20 a8 be 39 c3 85 96 a7 1e 7b 7e 97 41 88 97 56 f6 22 a6 9d 3c d7 b1 88 2e 84 3c 77 6d 9c ce 70 b6 79 d5 f4 be 4e f9 54 20 31 28 60 05 46 cf 84 00 ca 17 fa 2e 61 a6 e0 9e 67 43 8a f9 e0 7f 9f d9 da c2 a2 1f 77 c1 58 e4 f0 02 57 03 19 20 c9 a4 d1 90 52 d0 68 ac 22 e8 a4 81 b2 d6 11 6d 4c 78 8e 91 a5 6e c0 1e cd df cf 0f 88 1c 62 b7 4d 58 6a 5e 40 52 c2 34 9b b8 38 69 87 35 27 52 b2 c8 06 ab 1a ff 0c 27 24 dc 15 94 93 7b fa 29 75 20 ef 8e 5f 33 2c 45 ca 2b ff 33 6a fc 44 11 fe df cd 7a 93 1e 0c ee 53 41 21 f6 cb c5 d9 2a 96 9d 33 2b fb 9d 56 08 62 f9 bc 40 bc 67 ac fe 01 25 ad 7d 55 31 89 df 52 43 e0 4a 4d 05 b7 48 9b ff 95 fa dd 84 4a 16 26 c5 49 cf eb ab 58 91 55 74 eb 6a 1e 79 fa fd f5 d5 dc 60 34 Data Ascii: tp'{sX~ 9{~AV"<.<wmpyNT 1(`F.agCwXW Rh"mLxnbMXj^@R48i5'R'${)u _3,E+3jDzSA!*3+Vb@g%}U1RCJMHJ&IXUtjy`4
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: a5 65 d1 0b ed 0a 0a cb 10 81 b2 4d 0d 45 b0 23 0b 81 52 2f b4 08 b3 89 52 6a d4 b8 b3 9d be b2 2b 16 82 6a 33 5e 3f c2 2f f7 7f ca 35 02 a4 0e 15 4e 6a 14 8d 65 40 35 49 ca 38 8c 35 d8 d8 0c ae bd 65 fc 44 ba c6 39 7c 41 17 01 20 19 8e f3 4a 10 cc c2 22 79 76 f7 2a d1 8a a3 d6 bb 2a cb c2 22 8a 6f 30 23 7c 4b 2a b4 25 24 e8 01 be 76 95 89 50 4d f8 f2 80 00 fe fc 9c bc e5 00 1a 87 b1 52 28 bb 33 5f 55 47 ee 0e 72 88 d2 7f 62 87 30 b6 d8 5c 2a 4a 7c b6 e2 03 24 8f 31 0b 50 a0 c0 cf 5a 46 50 99 d9 72 c1 86 5d d8 87 f9 02 10 97 06 9c 5e dd 57 d8 5c b9 cb a4 55 c6 bb 64 e8 98 00 ce 53 23 75 57 e7 d7 0c 58 c9 eb b4 20 0a 22 5c 4d b9 88 90 5a 18 fa 48 4b a9 ed 13 94 fc 0b c7 a7 61 e4 8d c3 56 e4 e3 62 43 63 93 a0 d8 a3 53 44 d9 f0 84 8c 1d 74 26 99 72 f9 95 cb Data Ascii: eME#R/Rj+j3^?/5Nje@5I85eD9\|A J"yv*"o0#\|K%$vPMR(3_UGrb0\*J\|$1PZFPr]^W\UdS#uWX "\MZHKaVbCcSDt&r
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 8e 46 42 a4 96 3d 49 6c a0 3a 62 f1 5c 8f 66 50 aa 3e d7 6c 74 c4 45 50 74 67 0b ea fd 15 82 25 1d bc 7e a0 84 bb 51 a7 17 72 f3 32 48 5a ad 40 37 08 07 3f 30 fc 80 48 e9 46 70 a4 39 6e 28 e9 80 b6 fb 71 26 93 65 33 b6 63 4c d5 9e e6 2e 89 aa db 17 46 c7 e1 39 b0 98 a9 27 ab e8 c2 da f8 7b ab 2a 5c 61 3b 90 3e 1b 95 de 94 e3 b0 be cd 30 6a 8f 06 e6 e4 6f 95 bf ac b7 9b 61 cf d1 a5 51 7e f8 9b f1 14 2d c3 86 42 35 3e d6 c8 15 1a f3 a8 c6 1f 5d 5b d8 9a 5b 1b 49 28 66 b7 fc 66 bc ab f4 c6 0d 7e b9 72 1b 7d 04 e5 b8 7b bb fc b9 43 88 54 7d e4 97 47 70 7c ad 2a 57 c0 da c8 21 f9 3e e1 16 ad d6 4d 0c 15 f7 ae a3 3f 02 c3 20 06 a5 93 e6 36 3c 0d 88 62 fd 5c 9c 4a 29 f4 f1 ff bb 97 58 67 a1 cd e7 b5 41 23 cf e4 6b 2b 40 8d bf 25 d9 8f 83 b3 9c 72 7b a6 92 38 db Data Ascii: FB=Il:b\fP>ltEPtg%~Qr2HZ@7?0HFp9n(q&e3cL.F9'{\a;>0joaQ~-B5>][[I(ff~r}{CT}Gp\|W!>M? 6<b\J)XgA#k+@%r{8
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 9c 62 12 bf ac dc fa 46 e1 30 aa cc 65 eb f4 d7 88 4d 5c 13 5e 67 8b d4 b2 b0 ba d7 8d 28 37 4f 4d dc 02 96 a1 23 57 1c bf f2 4d e2 c3 6a 5c 37 5b 91 2f 1b fd 95 06 10 07 3b ce 80 46 ae f9 c3 e0 3f 49 72 99 5a 9f 28 5a db b2 82 f9 36 0d 05 b2 a2 5f 6e 9c b0 dd 9f e1 76 56 ca b9 00 5b 9c 0c 9a d9 6f 76 f3 f6 c3 2f fc 44 b3 ce c0 2d 46 db 91 cc da 90 83 cd c6 c1 a6 2e e6 d7 8d 17 fb e7 59 72 a8 51 5b e7 87 31 e8 b1 95 dd 9d f9 d7 29 ca ec 8c 14 9b 60 63 7d b4 df 7b 73 9d b2 34 83 4e 55 ed a7 ed c1 a3 cd 82 fb 48 0d 4d 02 cd 4b f5 db ab 81 23 20 05 dc b4 06 6a 2e 04 21 f6 05 34 a5 07 ed 11 c3 5b 5e 1e c7 74 76 a8 d3 cf 4e b2 8d 4c 63 88 da cd cf e5 9b 15 b3 68 63 da 60 80 2d d4 79 51 f9 32 f0 42 42 9a 2b c8 cd 3c bd 24 32 78 f9 50 3a 9d dd 96 85 e5 68 c6 78 Data Ascii: bF0eM\^g(7OM#WMj\7[/;F?IrZ(Z6_nvV[ov/D-F.YrQ[1)`c}{s4NUHMK# j.!4[^tvNLchc`-yQ2BB+<$2xP:hx
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: b5 49 fe c5 cc e5 19 e9 5e a6 5b 34 73 34 79 9a 39 57 bd dc 76 46 ec cd a5 f8 c5 25 78 a0 1d eb 46 80 13 d6 64 7a 72 aa 24 84 2d 04 ae ee 14 9e cf 18 31 70 79 7d 00 33 83 1d 45 ea 38 48 dd 85 8e 7a f1 d2 bd 5d 84 67 ef df 05 28 27 60 4a f3 a8 af 5e 0f 67 cc 95 4a ce b1 b3 6a 60 c7 40 32 ca 2b b6 d9 a5 e3 55 d0 5d d7 ba 91 1f 1e 69 0a 38 6e 31 e7 14 77 c6 77 61 22 d6 b9 61 55 fb ae 49 26 5f e3 bb a5 2b eb 47 ad 77 d5 f1 af 21 9e 91 2a d4 07 5c cf cf 5c 6b a5 2b 19 a0 e2 07 53 23 ae 22 c7 ec b6 51 25 8f f7 1f 03 cc d1 76 8f 97 3b 4c 77 1a 3d e2 48 f0 25 d8 3b 7a 04 12 6d 1d 78 52 40 85 9e 54 8d de 38 60 7f e8 15 89 f4 8d 2a 8d f9 00 81 38 35 44 64 fb 94 13 8a 0e 43 6e be 71 d2 06 92 df 73 d9 ee 65 09 6d ee 03 c0 ef cc fe b9 49 f8 44 f2 50 56 77 d1 b1 c0 b9 Data Ascii: I^[4s4y9WvF%xFdzr$-1py}3E8Hz]g('`J^gJj`@2+U]i8n1wwa"aUI&_+Gw!\\k+S#"Q%v;Lw=H%;zmxR@T8`85DdCnqsemIDPVw
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 3e 82 f6 3d 7d 97 40 f8 0e 19 d5 89 c8 88 e0 9e 06 d6 53 18 e5 d6 54 6b 58 0d b7 2f 57 e3 28 df 02 0d 5b ce 60 56 f5 33 b9 62 e7 4d 1a 02 d3 cb 08 95 a2 92 db ef 22 6a 2f dc 75 83 da 6a 47 8f 9b 39 40 1d 1b d7 b5 34 0a 37 13 bc 3e 1e 12 d3 38 70 31 f2 09 cf 51 64 0d 7b d1 ec 58 fa 25 ad 66 36 f9 15 66 fb d7 0e 3a 66 37 f1 ca fb 6a fd d4 e4 e6 eb b7 58 89 47 9b c4 f3 9e 47 60 d8 1e 26 39 f3 a3 e0 b3 e7 a6 52 00 d5 28 bc 65 aa f9 3c cb 35 31 e2 07 43 04 5a bb e9 77 77 2a e8 14 d9 7a 2a 45 ee ab 24 17 80 a5 95 34 f4 60 83 fc c8 39 76 27 81 a7 4f 09 1a f4 8f 2c 95 3c f6 01 d4 09 e7 a6 2c 95 a3 19 1c 9e 83 aa 6f 34 e4 78 71 51 b6 09 25 cf 0d 8e 0f 5a ce 3b 3c 00 39 b2 4b d1 53 3e 9e 2f ad 09 dd 75 39 79 36 ec d9 be 25 72 4c b6 ec 16 ca 3b b3 89 77 6b 8e 39 80 Data Ascii: >=}@STkX/W([`V3bM"j/ujG9@47>8p1Qd{X%f6f:f7jXGG`&9R(e<51CZwwzE$4`9v'O,<,o4xqQ%Z;<9KS>/u9y6%rL;wk9
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 56 22 d2 b1 e8 df 95 dc 9c c1 98 0d f6 14 02 4a 7f ea 55 3e 23 e0 f3 40 1a ee 8a 4c c9 8a c3 8f fa 9e 0b 09 10 e2 3e e8 e2 e1 3d bc c6 25 35 30 08 a9 33 a7 f6 82 9e 07 ce 35 55 3e db 1b 1f 88 7e 70 67 fc 23 1b 46 c4 d4 0a 7f 24 0d fc e4 4a f7 17 2e b0 24 f3 2f 54 ec 32 c7 2d 72 81 c7 97 e3 31 31 5c d3 a8 fe db d4 68 1e 1d 7c 3e 8b da fb b0 60 51 07 fa 57 0f bb 93 0d 6f 0d 9e 30 7b 0a bf 09 9f c3 27 84 a6 b6 61 23 5a 97 65 03 90 ff 4a 8b 4b c1 30 75 b0 10 0b 4e 0e 4f 00 83 d1 d2 e4 ce 41 26 c5 4e cd b1 87 17 ad c1 61 51 81 54 ee f5 27 54 7e 2d 32 50 2e 3e ba 85 0f a4 f6 7a 5c 5a 23 29 f2 dc 6c 6a fd 04 9b 79 6f 72 1b 51 b6 f4 87 11 b6 c1 64 3e da de 89 c8 62 d2 63 78 be 0d e8 8d b5 e0 d6 7c 98 7f 56 e9 46 b2 a5 02 41 4c 7d 0e 77 94 d6 59 77 07 6c 9d 9f 85 Data Ascii: V"JU>#@L>=%5035U>~pg#F$J.$/T2-r11\h\|>`QWo0{'a#ZeJK0uNOA&NaQT'T~-2P.>z\Z#)ljyorQd>bcx\|VFAL}wYwl
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: d7 13 50 aa 50 c7 67 44 44 11 47 59 6a 23 f7 9a 93 89 a1 de 0e 36 e5 26 2a fe e3 8b 4c 91 23 ac 02 8a 90 36 ae 06 cd c6 d5 a1 b2 29 61 33 be 4e bd 84 1f a4 bd 65 62 c3 54 c6 90 2d 73 99 e7 dd d5 8f ef 3b 44 05 f0 1f 9a c4 0c b6 a4 4a 49 48 3f f0 68 d5 06 79 60 64 9e ff 5a c3 eb 90 d4 07 53 eb f0 4c 0b fc cf 21 e9 3d 0f 7e b8 92 1d aa 66 32 e3 0f ae 7d d1 11 7d b9 17 79 3a ff 76 4a 36 0d ca a6 3c 64 d4 9b e7 65 51 96 89 e5 f0 99 15 79 88 04 76 6f f3 28 24 f1 3e 4d 19 61 3f 4d f0 fd 7d 64 4c cc 12 48 04 cf fa dd 80 cf e1 5b 2c 33 99 0a aa a3 5e 23 c5 a0 a3 79 4b 28 4f 4c 63 ff 29 1a e4 a6 86 3b bb 66 2f 55 0e 33 43 10 d8 b5 fc 6c 3f 02 55 e1 e9 60 dd e9 e5 fe 46 59 6a 31 ec b8 29 ba 6f 2a 56 1c d0 2d e5 ab 28 af bb e6 d1 89 3d b9 c7 fa 36 5d b0 b7 e8 05 79 Data Ascii: PPgDDGYj#6&L#6)a3NebT-s;DJIH?hy`dZSL!=~f2}}y:vJ6<deQyvo($>Ma?M}dLH[,3^#yK(OLc);f/U3Cl?U`FYj1)oV-(=6]y
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 66 68 a7 ad 4b 58 be 16 74 0b 95 7c 16 04 22 4b 29 7d 4d cc 5a 02 4c 89 e3 a8 22 b9 94 dc ba ec 59 50 3d c6 1f 57 f9 ee cb 55 75 35 58 4d 0d e6 02 46 25 62 26 b8 80 2b 04 b4 29 9a 62 b2 e0 98 2a 6d 2c 3a ce 23 71 91 7e bb 85 5e a5 f9 04 9f 2a ab aa 5a 24 96 15 2c d4 da fd a2 d4 d8 ff 4a a0 01 34 7b b4 1e f3 a0 56 e4 04 34 7c 31 c1 b5 78 5a 1f ad 17 34 b5 3d ed ba fc e3 52 a8 c3 46 a3 c8 66 3d 92 22 df 59 b4 22 00 69 67 69 76 e6 e3 d6 83 4f e9 9a 1c 73 6f cd 7a e6 a6 67 de 9a ae ed 2b 73 9b 04 70 0e 31 6b 1b e6 c2 2b 82 03 87 a9 e9 f1 ff ee 90 fd 93 cd f0 94 b5 7f bb 26 0e ad 9e e1 2e 18 55 59 0e 2a cf ec d8 2e dd 83 0f e2 cc e6 c6 86 2a 8b 4a 45 db 77 fc 6c fe 23 3d f7 32 29 72 ed 5c 4c b3 99 27 24 c4 2f 8a c1 f1 87 b6 4a 4a e7 e0 b5 e2 63 79 81 76 20 11 Data Ascii: fhKXt\|"K)}MZL"YP=WUu5XMF%b&+)bm,:#q~^Z$,J4{V4\|1xZ4=RFf="Y"igivOsozg+sp1k+&.UY.JEwl#=2)r\L'$/JJcyv

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:03 UTC	598	OUT	GET /images/favicon.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:03 UTC	718	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:03 GMT Content-Type: image/webp Content-Length: 3390 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "57af5d53bd26f49ad5617b440b7d296e" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BIQyuJdVye%2BhE2GDDzEVyYMsl6jfeQvCk9lIPnggz4dlgKiwUy42P4m7CLy7TZOvVkC3f07PWTvJu2eK%2Fo%2FrTuqd9kxmxZq6SG9%2B6MlMXcH6VqRI4mAmfXxzf%2FTiKT1vWQQp5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd50265afa543b8-EWR
2024-10-04 12:00:03 UTC	651	IN	Data Raw: 52 49 46 46 36 0d 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 7f 00 00 7f 00 00 41 4c 50 48 a8 07 00 00 01 a0 45 6d 9b 21 49 fa aa 1a d5 1c db b6 6d db b6 8d b5 bd 63 ad bd 63 db b6 67 6d 8c 6d 1b 3d dd 53 55 df 45 66 46 44 46 46 dd 47 c4 04 c0 e3 a3 6b 20 b2 e7 b8 fb 4f 74 64 5b 4a be 18 d1 9a 93 7c 90 3f 82 25 9e 26 c9 dd be c8 f5 35 6d 87 45 ac 3a 21 bb fb f9 22 54 e0 30 1d 77 f9 22 d3 64 0a 0e 8e 48 e5 d3 44 ee e7 8d 40 fe 9f 29 bc d6 64 09 aa 46 52 b2 bd a2 c4 82 26 e8 b4 20 9b 92 cc b7 64 2e 24 29 69 7b ae 88 09 62 ae dc 1e 1d ad e0 15 4a 77 52 50 e9 20 7f 82 11 27 90 c7 ba ca c5 fd 24 b3 18 d2 99 be 08 92 2f 98 21 7f 90 e4 9e 4a 32 c8 79 5b ec 58 82 4c f4 8b 77 49 06 73 9a 01 9b 49 32 38 59 06 2f 88 b5 85 64 ba 9f 68 dd 05 43 b6 b5 90 7d Data Ascii: RIFF6WEBPVP8XALPHEm!Imccgmm=SUEfFDFFGk Otd[J\|?%&5mE:!"T0w"dHD@)dFR& d.$)i{bJwRP '$/!J2y[XLwIsI28Y/dhC}
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: e7 99 25 b0 92 da 3f 2d 6d 94 74 7b a8 7d 5a 77 98 34 c7 9f d4 7f 08 4c 9a f3 24 3d 18 de 58 d9 1c 19 fe a6 37 c3 4b 73 1a 22 76 3f 35 0e 85 45 c8 6b cd cc f0 0d f5 7d b2 ea 1c 25 43 03 4c d0 97 ea 43 a7 b6 cc 9b 36 65 ca 94 2f d7 fd 76 95 7c b2 7e 70 fd f3 94 4e ab e2 bd 72 8f 15 a5 6c 7e a3 46 02 44 e3 b3 c4 a0 e4 75 2a 3c e0 b9 0c 27 a9 32 b4 a9 47 32 14 e6 bc 4c a5 25 bc b6 84 0a 6f 8c cf 0f a5 fe 9d 54 fb 9c c7 9a 50 fe c6 1b 89 50 fc 0a 15 cf f6 56 e0 b8 54 ea c4 24 a8 4e be a5 ea 56 92 a7 de a7 ec 8e 62 50 ff 0e 95 cf f1 52 b6 c7 12 29 cf f9 a0 de 7f 45 1d 3f f4 d0 44 8a 1f 2e 03 37 6b d2 cd 91 9e 49 77 57 6c 6d 32 64 13 ea 8e f8 72 fb ff 37 ef d5 b5 bc e8 4a b0 9f 57 de a4 f0 44 1f 84 a3 ea 4d f9 21 8d b6 3f c3 fa ad 2b 0c 0d f5 86 ef bc 48 f8 45 Data Ascii: %?-mt{}Zw4L$=X7Ks"v?5Ek}%CLC6e/v\|~pNrl~FDu*<'2G2L%oTPPVT$NVbPR)E?D.7kIwWlm2dr7JWDM!?+HE
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 4a 25 a3 a2 a1 a7 94 4a 48 b0 12 09 6c 6e 34 46 c9 a0 0f d0 0f c0 04 59 7a 6f f9 2f c8 0e f4 e9 cb d6 fc e2 e9 af d5 ff 19 7a f2 eb 0b 9e 7c d8 bc 7b f4 ef 17 3f e4 bd 8a fe 8a f6 00 fd 78 fd 6a eb 09 fd 17 d0 07 ed 07 ec 07 ba 6f f7 cf da 0f 70 1f b2 1e c0 1f d3 bf d0 7a a9 fa 84 7e ea 7b 00 7e e0 fa b4 7f cd fd d7 f8 1a fe bd ff 5f f7 5b da af ff ff b0 07 a0 07 01 2f e0 05 35 f7 05 97 b0 2e d3 65 c4 b4 2a 42 36 7c c9 3e 2a b7 09 74 5a a6 a0 73 16 0e f7 d1 93 24 3e 97 44 96 d3 53 7f 1e 93 5f 91 ae 54 5b ec f1 0a 1b 49 c2 a1 d5 0f 90 f0 31 b8 76 8a 3e b8 94 8c a7 ce dc b9 fb 18 a6 9f 76 b3 66 e1 f0 14 e4 bc 61 4d d1 40 00 fe fc a8 02 43 27 22 eb 6c 33 dc b7 af dd 65 a2 0c 9f 24 8d 8b 2f ea 8a 07 15 46 0d f4 ab bf 80 fe 59 5b 12 bf ab f7 5e 62 aa 0c c6 74 Data Ascii: J%JHln4FYzo/z\|{?xjopz~{~_[/5.eB6\|>tZs$>DS_T[I1v>vfaM@C'"l3e$/FY[^bt
2024-10-04 12:00:03 UTC	1	IN	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:03 UTC	603	OUT	GET /images/sweetbobanza.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:03 UTC	717	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:03 GMT Content-Type: image/webp Content-Length: 16430 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a1ec071c2e182f96db40b34c7997917d" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uD%2BMiHgObsiNyuQHpAEyJvLzjSBa4LSWNstz%2Fwg11Bg9reeRiZ5ag61kmCsgh3osvHb3NiuaU0MmPZnPx5lwOT%2BLWp5%2BjUXxVB91ubqW%2FyopwlpuiwpuWcDjXfSMtgSUdFnFtg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd50265acf5434a-EWR
2024-10-04 12:00:03 UTC	652	IN	Data Raw: 52 49 46 46 26 40 00 00 57 45 42 50 56 50 38 20 1a 40 00 00 30 f6 00 9d 01 2a 2c 01 2c 01 3e 91 3a 98 48 25 a3 22 a9 ad f5 8c f1 30 12 09 68 6d bd 2f 1b b7 5d f3 00 d6 06 b5 cf e6 1f e4 e5 c6 7d a2 7b c7 ef be 75 7b 8a ec cf 33 0d e5 fb c0 f9 79 ff 2b d6 47 ea 0f 61 bf d7 ff 18 0f 7e df ba de ac 3f 74 bf 67 fd dd 7d 44 7f 70 f5 3c fe 85 fe c7 ae 77 d0 ef cb cb da 2f f7 6f f7 23 da 1b ff fe a7 24 b6 b9 b9 fc ff 0b fc da 7c 9f dd bf 8a 3f d6 b3 27 da be a7 7d f1 ff 53 d6 ef f7 5e 07 fc b8 d4 53 dc 5b fb 20 1f f5 5f f0 7e 77 7f 95 e7 d7 db 7f 60 4f e8 bc 56 3e bb ec 1b fa e7 d2 7f 4c 6f 64 fb 0a b0 f4 7f 78 67 e7 c4 31 01 5f 2f 27 f8 d1 8a 36 8c fc 07 0d f2 fd bb ef a2 89 4b 01 e8 78 a4 f3 1a 9c 97 0f 19 f4 5c 2f 52 91 f4 be 0f 14 2d fb 6e e6 21 bb a6 a7 37 Data Ascii: RIFF&@WEBPVP8 @0*,,>:H%"0hm/]}{u{3y+Ga~?tg}Dp<w/o#$\|?'}S^S[ _~w`OV>Lodxg1_/'6Kx\/R-n!7
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 29 25 d1 2a 7c c7 32 81 32 4b 21 11 3a 56 78 37 30 73 b7 94 c1 c8 98 c0 b2 76 3c 54 08 04 17 9b 7a a8 40 02 22 57 8d 65 fb 71 92 70 7d 28 1d 19 e7 1d 03 1b c8 c7 bc 12 12 77 bd 49 3b 0d 5d 41 03 c7 86 6f 5a f4 6c 08 96 fc a8 64 28 d6 7e 22 ee 25 ca 0d ba 53 a2 34 e6 86 63 f9 e3 9c bf 04 2f f2 70 3c d3 62 ab c9 6b 1b 5f eb 4f 51 0c 20 67 82 d9 a8 54 b0 a0 6f 77 05 53 94 1e a0 47 cb 86 57 f5 c1 cc 30 4d eb 26 57 cd 03 d6 de 97 cc 34 49 45 d8 13 70 50 b6 58 32 3e 17 00 18 79 18 f1 c1 e8 4b e8 e6 e2 08 39 2c 37 53 d2 4d 38 dd 58 9c 40 43 dd 93 83 5a d9 16 bb 40 e9 d4 5d 06 2f 02 af 62 65 d6 03 78 36 dd b3 75 5e d5 dd 26 7b dc e5 c2 38 ea e0 d8 35 65 b5 8c 3b 56 ee b6 10 e0 48 91 7e ce 76 db 02 df d4 4a e1 ad ae 47 8f 8f e2 86 68 84 e2 c9 4b dd 1d 10 46 85 7b Data Ascii: )%*\|22K!:Vx70sv<Tz@"Weqp}(wI;]AoZld(~"%S4c/p<bk_OQ gTowSGW0M&W4IEpPX2>yK9,7SM8X@CZ@]/bex6u^&{85e;VH~vJGhKF{
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: e0 c2 8b 4e 24 f5 da ba 32 b1 19 24 55 ce 57 00 4c 1f a4 bc 9b 4b 9c b0 2f 3d fe 21 69 ef 9f 6d 9a 6c 04 02 dd 4f f9 4a 0b 1b aa 4b 93 95 20 d1 ab b3 3c b5 9a a4 24 f1 5b 96 1f f4 04 7d 7b 06 61 55 d6 50 cd 2c e8 c2 06 eb b0 3e 9a 03 d1 16 15 3a be 22 59 79 f9 10 82 ec 64 6e 48 21 cb 4e 59 ce 80 f4 ee 75 81 07 f3 3a 16 71 32 fd 28 47 a3 53 cc 3c 7f 86 1a b1 15 7f 57 7d b5 f0 ff 5c d1 46 9e 2f f9 3f ac 86 d1 92 d6 dc 51 28 1e 38 8d 1f 5e 1a 32 f4 08 90 e0 2a 89 72 64 7b 24 8c 60 af 33 3c ea f9 fd 18 64 7d 74 79 76 21 3b 35 37 5c 37 3f 09 42 2b fb c2 dc c0 18 e5 e7 8b 4a 7f 70 02 b0 e4 d7 01 0e c4 a4 6f 2f 2a 80 38 2e 83 85 93 82 2c 01 66 73 96 c3 5a 37 d9 2d 82 a6 36 a5 50 88 8b 98 0a 94 d2 76 3c ef 49 7e db 39 dc 4c f3 da 05 9b a7 8d a9 6d 93 57 ad 28 8f Data Ascii: N$2$UWLK/=!imlOJK <$[}{aUP,>:"YydnH!NYu:q2(GS<W}\F/?Q(8^2rd{$`3<d}tyv!;57\7?B+Jpo/8.,fsZ7-6Pv<I~9LmW(
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 68 f1 7a 26 3d be 73 cb b5 92 c4 ef 06 e4 ed 65 62 97 d7 e2 38 a8 2b eb 7a 54 e1 00 8d 73 12 5f 7d 8f 1f f5 41 0e e0 1a cf 67 a0 93 07 cc e7 9d 31 01 0d 48 28 7d 2c 74 dd ed 25 d4 69 d7 83 cc cb b8 a8 bd 86 da 9c 18 f0 61 fe ed fc 2e a6 a8 9c 9d ae 19 b0 88 3f 4e 74 57 35 82 d8 08 d6 56 69 95 41 3f cc 25 5a fc 7f f6 35 0f f4 6f 48 57 3b 8b 91 1e 6a 80 eb 4a af ba 8d b2 a2 0f 4a 96 2b 13 03 c1 ca e2 6e 18 88 b5 b5 1b a7 1e a3 a3 e0 94 9e a0 10 8c ab b5 9d 92 20 b2 c0 38 3a ce 2b cc 43 6c d1 b7 1b d6 5f b7 da f7 09 ee 34 3f 17 c4 55 21 4c 5f 69 bb e7 94 a3 0b b1 d4 79 98 14 1b a1 c3 4b 1c 15 62 b2 e2 a2 d8 c0 78 77 1e ac 59 e4 93 e0 07 8e 37 e4 41 b4 13 af cd 92 04 94 e5 26 57 99 10 bc 67 0a 6b 33 98 62 0a f4 4a b4 bb 03 17 b0 ee a6 bf b6 2d 02 1f 8f fc a7 Data Ascii: hz&=seb8+zTs_}Ag1H(},t%ia.?NtW5ViA?%Z5oHW;jJJ+n 8:+Cl_4?U!L_iyKbxwY7A&Wgk3bJ-
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 80 a6 41 76 50 f4 9c d1 be 92 53 71 49 0d fa 7b 06 a0 b6 3e 94 59 62 2d 60 59 bc ae 24 55 67 f3 23 1b c7 e9 bb e3 7a 35 04 2a fb b3 ef 33 83 76 c7 c4 d7 4e d9 aa 88 a4 54 79 4b 3a 34 3f d5 eb dc 59 23 2f 3d b5 05 f9 38 8b f0 9e 53 c7 a6 b9 b6 e2 5f cf 0e b0 40 ad 3e 59 25 d6 4d c6 24 73 6d e8 ac 64 1a 48 af c5 8f 13 70 28 02 be b9 6a 0e 0d 83 f0 ca df e2 da a8 c5 51 01 b8 65 c0 a1 32 b8 a8 ce 4b 87 2d 9f a1 6e 36 39 4f 6e 0c 2f 24 a0 9f 38 db 46 c4 60 c8 62 ae c7 d7 09 97 78 00 14 00 24 de 93 08 5d 0a d6 94 e4 1b 89 a4 d5 50 93 e2 26 5e 12 e6 8a 51 93 ad c3 e7 de 39 72 ca 5a 36 61 3a c3 e1 d6 21 a0 99 fc e3 10 18 18 bd 98 c6 98 b4 00 51 7b 9e d1 63 11 47 e4 9c ca 23 8e 8a 0a 12 03 8f ad d4 46 aa d6 8b e1 38 da 90 ac 0c fc 29 5d 46 3c 81 76 2e ca 54 53 02 Data Ascii: AvPSqI{>Yb-`Y$Ug#z5*3vNTyK:4?Y#/=8S_@>Y%M$smdHp(jQe2K-n69On/$8F`bx$]P&^Q9rZ6a:!Q{cG#F8)]F<v.TS
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: a1 b0 9c 39 99 fb 46 b7 f3 a7 18 d6 fd de db 4a f2 99 cf 39 fb fd cb d8 dd 7b 41 34 59 88 dd 43 cf 96 ff 14 6a ee b7 ca e2 66 d4 8e bc 9e 7e 54 9f b9 9b 34 05 bf f3 c3 c8 2e 65 44 0a 6e 09 1c ec 3a a9 57 14 1d 93 17 cb fc 64 d4 8c d8 0a 5d 56 d4 ff 69 a9 6a 7d 94 dd 5f a2 6f 59 83 81 0e 5d 78 84 5f a2 bc 57 da 78 16 ca 2a f8 bf 26 a0 a0 2c 8f 05 63 6a 32 fa c6 8c c8 16 d8 11 e5 77 ce 12 b1 b7 d6 47 c2 ff 71 97 64 6a ac 7a 2a 8a c0 db e6 b0 90 0d 2b 57 30 e5 1d f2 0c 45 e1 56 80 59 94 53 19 49 2c f0 15 98 38 81 ef 9b e1 76 ff 10 e2 57 72 a5 77 85 49 c5 47 12 03 96 91 a5 39 00 3f c7 7f 88 3a d0 07 2f f8 76 23 13 d5 88 2e 6d 62 6d e1 63 50 f1 ff 17 6e 4a a4 f9 c1 95 32 6b fc bb d0 39 4c 9c 96 f2 ff 3a a8 34 e0 32 58 65 a5 8d ab c1 1e a4 a3 fe 4e 5e e8 22 65 Data Ascii: 9FJ9{A4YCjf~T4.eDn:Wd]Vij}_oY]x_Wx&,cj2wGqdjz+W0EVYSI,8vWrwIG9?:/v#.mbmcPnJ2k9L:42XeN^"e
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: a3 23 73 61 03 72 b2 be 64 ef cb 3b 96 26 bc 5d 96 c5 ec 70 e1 ed ef 5d 46 d9 13 45 6f e8 48 6f 1e 05 d5 93 91 0f de 79 93 ae 54 03 15 48 60 be 21 74 ae ab e6 63 62 9f bf bc 22 3a aa e4 17 e6 ae 1d af b7 06 8c 71 c2 3c c4 14 b8 17 89 49 88 d7 07 d8 03 3f 17 20 51 ba 3a d8 c6 b9 3d fd 08 5e 4e 13 64 42 38 3a c5 74 98 09 35 c3 31 99 a1 86 df f1 e7 67 84 23 77 d9 26 3c 1e 87 18 3e ae e9 3b 21 ae ae 9b 45 55 fb 50 61 44 38 9d 68 31 6d 50 e7 9a 03 ce 49 8e a8 03 e2 70 39 5d ec 4e db 03 be 80 28 93 94 ff 76 e4 47 d7 d4 74 a9 32 b7 5b e7 7a 6b a6 5f 50 ba cf 80 c8 c9 55 a6 98 8a 7c 58 c1 04 89 60 e0 8c 7c b4 bf eb 03 5e 48 c2 43 ee af 0c 25 d0 2c d9 84 f1 a7 73 a7 22 a7 bc 08 ec 75 b1 11 9b c3 34 5b 78 1d a6 7a 25 4c a8 58 40 23 29 86 7e 21 08 43 50 eb 0f 4e 08 Data Ascii: #sard;&]p]FEoHoyTH`!tcb":q<I? Q:=^NdB8:t51g#w&<>;!EUPaD8h1mPIp9]N(vGt2[zk_PU\|X`\|^HC%,s"u4[xz%LX@#)~!CPN
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 32 86 cb d1 e9 12 0a 47 af 21 cc 78 21 50 1d fe 57 9e 0c 3b a4 aa f4 0e 7c 9b 69 74 e7 3d e0 8f f3 37 3b 38 d4 2d 2b 33 8f ce 60 4b 6a c8 ab 44 80 77 eb 2e bc ba e0 bc e8 80 55 94 c1 53 1f f8 44 47 6c e6 aa 06 fe 43 ff e0 18 21 85 1f a3 37 17 9e c9 7a e2 12 2d 25 fd 03 c3 56 26 86 43 09 f2 24 45 9d a2 50 03 ad 98 b8 65 f5 be ff 0d cd e7 3e 99 a3 0e 55 9d d0 83 78 09 13 39 47 85 15 32 a7 b1 fe 23 51 8e 48 d8 8e 1e e4 ff 5c e6 5f 73 12 44 bc 9b 42 94 bb f8 ae d3 e4 b8 1f 18 ab cf d2 bf 97 92 0f ac c6 5a 82 3e f6 da bf 1a 21 f1 97 7a 70 71 d7 01 27 04 c6 6e 9a 2c 58 7f d9 78 4e c9 58 e5 86 40 5b ea dd 06 6e 75 95 96 f5 ca d3 c4 9a c5 87 23 9b 3c 30 0b d9 04 da cb 47 2a 24 ee 89 0e 39 04 f1 08 97 a4 ea 01 9d bf 9c 38 3b 9f e7 08 cf 7c a6 d0 e8 dd 20 f7 45 90 Data Ascii: 2G!x!PW;\|it=7;8-+3`KjDw.USDGlC!7z-%V&C$EPe>Ux9G2#QH\_sDBZ>!zpq'n,XxNX@[nu#<0G*$98;\| E
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 43 9d 3f 95 42 c7 e6 d6 19 cd 6f fe d1 c7 18 cc 15 99 40 dc d1 b0 34 fb 60 b3 95 a7 51 7b 53 62 52 f2 22 4a 83 fb 7f a2 ec 75 5f a0 1d 90 ec 17 ee d2 54 88 83 b6 39 87 f5 43 00 3f 19 b5 ac 13 72 55 37 52 dd 98 df 72 83 0f 1c eb ca 50 63 68 dd df 14 a0 5f 59 a4 01 3f 31 0b 56 47 0d d3 c0 19 a5 eb b4 65 dc 6e c0 d4 5c 00 28 ac 33 d9 a4 bb 87 67 7b d2 f2 e9 ae 04 72 0a 93 91 ad d8 e9 ae e1 78 b5 05 25 1c 71 fd 93 55 8a b7 17 33 ac 72 b1 fb 8a b2 4f 28 b6 26 e3 1e 80 de 0b 15 26 2c 79 3d b7 67 fd e9 46 f3 b7 84 51 82 be 60 99 65 c6 ab 32 66 28 c5 c7 e2 83 7c 8f 8e 60 be 6b e6 40 5f ce 2d aa 6d b9 b9 61 cf 38 56 4d ec 67 d4 a7 81 a6 0e 04 a1 96 a2 4f 16 54 eb 22 1f b0 31 b0 52 5a ae 6f 54 cd 95 51 7a df 2f 65 91 a4 a9 20 c3 4f b2 da 6e ef 55 54 6c 69 fb 0b 00 Data Ascii: C?Bo@4`Q{SbR"Ju_T9C?rU7RrPch_Y?1VGen\(3g{rx%qU3rO(&&,y=gFQ`e2f(\|`k@_-ma8VMgOT"1RZoTQz/e OnUTli
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 51 9d 94 86 4d 7d 61 ba 1e 2b f8 15 57 dc 65 aa ac e0 cf 35 10 8e b6 e8 8d 25 de 4b ff 7a 5f 2a 01 88 5d 2b b1 54 6e 02 69 c0 b1 0e 16 fa 87 2e cb e3 48 d2 7e 87 4d f6 24 72 82 0f bb 1b 4a fb 91 d9 1f 27 cb 58 7d 22 58 61 70 92 f0 5c 20 b5 26 d4 86 1d 25 77 1d 36 28 70 0b 8a b0 c2 86 6b 49 d3 8d 41 9d 94 db 1a 01 f2 07 2e 4f f2 27 7c 12 0f 15 0d 6e d9 03 f5 12 7b 1e 02 12 b8 a3 ef 2c 0f cf 44 c5 17 a1 c3 f4 bd aa 5f c8 31 57 76 46 b2 56 0c d9 ed 16 1f 43 bb c7 23 f9 2a 0c bc df 05 75 b7 f7 25 b2 c4 ea b2 9e e6 54 fe 15 aa fa 1e 7d ca 9f fd 8e e4 7b 26 3b 3f de f0 03 a6 4b 34 b4 08 8c 1d 9e 7d 0b a6 46 22 73 c3 b1 70 a0 6a 22 f3 ab b9 21 cb 02 49 a2 5c 16 09 33 c6 26 16 32 95 47 52 82 12 94 69 b2 d4 0d c5 44 22 de 07 e6 d6 d5 95 9c b3 47 4e 0f 35 22 fe 60 Data Ascii: QM}a+We5%Kz_]+Tni.H~M$rJ'X}"Xap\ &%w6(pkIA.O'\|n{,D_1WvFVC#u%T}{&;?K4}F"spj"!I\3&2GRiD"GN5"`

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:03 UTC	608	OUT	GET /images/MonopolyBigBaller.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:03 UTC	723	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:03 GMT Content-Type: image/webp Content-Length: 15610 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "bcfa323b8136da978403024b88043df0" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gUtuuGp0hzjlgKgJTvpuNQkYsn7TM60kQEg%2B%2B%2FjHsjXCrytKVSWSmleOF%2BnYlcm%2Ba0T%2BX0QOo7DaKmmLS29DYlmgN1Us2PWmH2ctTkC4k6IyvP8UUeJFJ9Rpz%2Bs6aQdP%2BPDe4g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd50265aec77d1e-EWR
2024-10-04 12:00:03 UTC	646	IN	Data Raw: 52 49 46 46 f2 3c 00 00 57 45 42 50 56 50 38 20 e6 3c 00 00 b0 ef 00 9d 01 2a 2c 01 2c 01 3e 91 3c 98 49 25 a3 22 22 2c 34 6d 28 b0 12 09 66 6a 9f f8 5b cf de bf 8f 85 cc 7f b3 fe 53 30 24 cc a4 50 6f 26 e0 aa db 53 cc f3 fe 8f 0f 99 fe 53 d2 7f 93 fb d0 f9 ff e0 bc e9 77 3d f2 5f f6 bc d2 7d 93 be d7 fc bf 57 df d6 bf dd 7b 07 7f 63 f2 e8 fd a3 f7 c7 fb c5 ea 77 f6 d7 d6 0f fe ff ae 9f ec 3f 68 1f 23 7f d5 ff e5 f5 b7 7f 91 f5 2f f2 ef f6 88 fe df ff a7 f7 03 da f3 af d7 9d 9e 1d 7c cd fe 5f 86 be 70 be 5b fc 37 ee df b3 7e 6e fb 30 d5 13 e8 3f 9d bf a1 eb 1b fb cf fc 7e 2a fc d6 ff 6f fc 97 b0 ef b6 7f de 7a 92 44 a3 b1 d4 11 fa 47 f8 ef d8 ef 51 6f d0 f3 e3 ed 66 c0 d5 03 fc 65 b4 d5 f6 27 b0 c7 4d 64 2a dc 68 2e fa 75 f5 d5 03 be 2f d6 bd 91 17 c4 4c Data Ascii: RIFF<WEBPVP8 <,,><I%"",4m(fj[S0$Po&SSw=_}W{cw?h#/\|_p[7~n0?~ozDGQofe'Md*h.u/L
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 04 9d d1 26 5d 8c 9c 03 de 3e c9 0b 32 f0 66 dd 5b d0 47 92 cc 72 9d 67 cb 40 dd d7 00 84 d8 98 be ea 1c b2 c0 1e f0 90 81 16 ef 46 16 05 9e 59 0d cd 3f e3 d2 19 40 82 01 fb c5 7e ea bc 40 ba b8 8c a8 09 c5 b0 be 8b 37 0a fc 83 20 5c 21 91 1f d7 ea ec e0 a1 02 a9 c2 ab c5 e9 2b d3 94 fd 7f 6a 01 2f 54 0d 58 ca 15 0e 20 62 d7 45 bb be 18 ba 0a ba 1b 45 d8 4f be a3 5f 93 e1 8b 98 9c 57 ae 22 ac ef ef 9f d8 20 ef 38 dc ab e3 c5 32 bb 1b 4a 74 93 54 b6 1b 85 e8 d5 34 d9 a7 53 73 5b 42 08 e7 5b 84 2b f3 e5 0f 1d a6 3b b5 09 73 ee dd 84 72 b3 53 2f c3 d5 84 99 94 68 5c f3 b1 13 45 44 26 d6 29 42 5b e5 ae 03 00 3b 01 2e 5c 47 8a d6 ff 59 0e 31 f2 d0 77 4c 06 c4 6b 75 fa ba 14 35 f4 5c fd 79 1c 1d 08 fc 16 91 9e 62 d7 dd 2a a2 9e ec e3 31 72 bd d9 f1 f1 20 a6 aa Data Ascii: &]>2f[Grg@FY?@~@7 \!+j/TX bEEO_W" 82JtT4Ss[B[+;srS/h\ED&)B[;.\GY1wLku5\yb*1r
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 62 a8 9f 9f 00 e2 7b 06 02 8f 8c d6 c4 3d e0 b4 e9 a5 44 3d b0 5f 6e 3a 7d 77 b1 da f7 7c bd 1b 70 36 a8 77 bd eb 96 b9 27 58 e8 0d 18 07 d0 73 96 5b cd f0 c7 37 d4 4a 41 dd 88 6f 54 3a 87 1e db b5 f3 f4 11 21 a1 7d 3c 13 c1 ae 8e ef aa d8 b7 6c 07 f0 f5 2d 74 7a 71 79 c2 a3 40 d2 2c 7b 78 9a 38 22 40 93 81 2b 8b 75 a4 3f 31 b6 1b 5c 23 64 d5 70 9c 09 cf 90 6b 05 ad 04 93 00 83 70 99 1c e4 e1 30 3b 5e 0a b2 ec e3 8e 8e 1f 67 5d 6f ce 05 60 08 d8 ab 4b aa cf 3e 40 bc 71 25 bc 74 dc 27 3f 15 35 e4 51 6d 0f f2 07 9e 88 70 30 74 11 66 7d 84 b7 ef 4e 82 be 77 c2 94 d0 a9 e6 cb e3 1e 0f ac 85 13 c3 08 f6 53 54 c0 4d 68 80 94 84 37 19 29 27 2d 0b 57 d0 fe 0c bf 8a fd 81 90 7f 4c 54 cb de 9d 42 c3 90 d9 e9 20 9f 81 37 c6 e4 5c a5 3f 94 7d 97 2e 07 ae 2c 98 11 7d Data Ascii: b{=D=_n:}w\|p6w'Xs[7JAoT:!}<l-tzqy@,{x8"@+u?1\#dpkp0;^g]o`K>@q%t'?5Qmp0tf}NwSTMh7)'-WLTB 7\?}.,}
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 35 1e 81 84 bf 72 d6 c5 8d 27 ed 75 cb 16 6f 83 e5 d8 47 e6 e3 ae 69 9d a5 25 6e 03 77 cc 27 0e a0 0c a1 12 50 7e 52 53 54 4a b6 50 ab 41 0a 24 f1 f4 e7 f1 c4 70 fd f6 4c 31 e6 04 1a f2 85 ba a5 13 09 d9 29 e5 8d be a4 b0 27 42 c2 67 f5 f7 90 7b 8e 9c ab 79 a9 01 94 48 c9 ed 8c f1 b2 87 35 e7 85 bc 62 ca c9 50 9d c2 94 87 ae 01 72 80 83 42 90 01 10 c5 5b e7 3d df ee f1 94 c4 2b c1 9f 94 6f 7b b9 f2 16 e4 47 ab e4 10 64 f8 4d ac 01 e8 a5 4f bd ea a3 58 e8 2c 0d ff a7 78 a4 35 d8 22 a7 53 57 47 67 a9 73 17 d6 5e ab df 77 54 18 93 5e 63 7e de 45 09 16 f6 2b b5 0d cf 16 17 5f 38 c5 35 55 67 2f 07 9e 7f bf a2 10 f9 64 7a bb 45 68 6e b4 c8 c6 5e 2c 58 95 af c6 5f 51 16 37 53 be b0 9a 3c 39 3e e3 a9 7d cc b4 1c 43 41 d0 c4 a7 11 2a a9 e5 cf dc 8b 16 35 f9 fd 16 Data Ascii: 5r'uoGi%nw'P~RSTJPA$pL1)'Bg{yH5bPrB[=+o{GdMOX,x5"SWGgs^wT^c~E+_85Ug/dzEhn^,X_Q7S<9>}CA*5
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 50 bb 62 a5 f7 9b 00 38 34 6b 06 b2 bb 7f 5b 21 82 48 c8 00 df 0c 84 b4 99 fc 72 77 35 e7 d1 f2 63 7d 83 4f a4 af d2 be f8 8b 7e 0a 0c b8 f3 5b 80 9e 2a e7 92 87 64 3e f1 d6 17 24 94 65 db 4c fa e4 c8 03 c9 31 aa 9a e5 19 36 95 f3 5f 35 81 a7 47 38 05 b2 92 1d c6 d4 24 4c 6a b4 f7 c3 3c c4 ec e5 e6 ee 22 af d6 03 7d 9a 68 65 d9 09 d0 df 7a bc 98 3d 9b 1c 2b ed e5 4d 48 da e5 27 69 6a df e0 5f 74 60 ff 51 8c f7 c2 3e 55 7d f0 8e 35 fc 03 be 75 2a f1 de 99 cb ec 4a d7 47 7e 1e d7 ec fc c2 e3 d6 eb 10 ed 20 58 66 3c f6 1c 2b 91 d5 e9 3a 3c 7b 56 96 20 ec e4 f9 1e 5c 8d 3d 6c a9 9e 15 9d 8f 96 8f 1a b1 09 8f c7 31 0a 8c 6d fe ee 3a bc 49 33 06 8c 8f 7e 39 df b2 70 be 23 d9 25 3a fe cc 53 63 06 f5 11 33 84 62 70 98 f3 45 93 03 6b ae f0 56 14 15 f1 de 65 16 c5 Data Ascii: Pb84k[!Hrw5c}O~[d>$eL16_5G8$Lj<"}hez=+MH'ij_t`Q>U}5uJG~ Xf<+:<{V \=l1m:I3~9p#%:Sc3bpEkVe
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: a1 da 07 96 a7 04 3b 78 9c d8 10 ae c7 a3 ab da e2 35 fb 49 f8 b0 47 f8 cd 1f 0d 1d 4f a2 a8 ce c0 32 9d 57 89 b2 03 7e e0 15 f7 7f d9 bc 05 08 ad fd b7 93 d3 f0 b4 00 00 ed 6d e5 ac 9e 6d 85 0d 1f 82 68 b4 3b d8 a6 f7 4a 56 72 76 92 f5 6f 24 b1 4f 5a 7d be d9 bb 1a b2 4e cb d7 19 e7 fe fb a8 d6 95 3d b3 c5 b7 a2 cb 17 73 44 df 3b cf 01 68 59 10 2d 3d c9 24 ec 3f f5 08 d4 59 43 6e 8b dc 4e 2e d7 22 52 b8 5c 60 9b bb 48 04 61 bf 4e a4 a3 94 bd d2 0b 25 36 a1 c5 01 55 b2 c6 dd 8c c0 a8 a4 f6 4f 27 a6 0f 65 a3 05 96 47 0f 77 e5 55 ab 62 f4 21 5c 41 76 8b 03 b6 e4 07 e5 64 08 0f 3e b2 b7 71 4e 51 a8 0e 33 94 e5 82 25 f5 5d a0 df f2 03 29 4e 39 10 4f 7c 13 d9 b0 a3 3a 5c 06 24 8d cd e5 76 bb b8 9c 7e 68 49 c3 36 27 fa 15 69 12 5d 3d 54 1d aa 6e 7e e3 0e bb be Data Ascii: ;x5IGO2W~mmh;JVrvo$OZ}N=sD;hY-=$?YCnN."R\`HaN%6UO'eGwUb!\Avd>qNQ3%])N9O\|:\$v~hI6'i]=Tn~
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 0a 3d 42 89 2a 84 ab 85 a2 7f cc d7 6b 87 20 53 1e 7a d4 b1 23 0e b9 36 ef dd 96 76 f9 87 48 64 55 13 55 e6 70 90 5b 5f 45 c5 c8 86 e1 7b 80 c7 ef f2 3e 61 94 1a 43 19 fb 05 65 3a c4 3a 95 ea 8f 6e f5 6a 6f 37 e7 22 7f 6c 4e 81 b0 e3 6b 2c 45 d6 ad fb 99 f5 78 ab f7 30 00 82 44 0d 2e 5d 15 4c e4 61 70 32 e6 8b ac c2 19 66 bb b4 e7 7c ef 17 92 17 20 b7 30 23 7e d1 c4 b4 8e 7e 5f 48 9d 1b 35 6d ac 4b d6 46 29 9e 0f 53 1c 7a 77 46 cb fc 30 fd 3f c0 43 5e de 9b 83 f2 f0 f1 a3 0b b1 da 1d 0c cf 9f fb a2 da bc 0b 76 37 fd 4f c1 9d 79 44 a4 18 9d f3 8b 51 72 8d ca b2 78 3b a4 4b c2 15 9e e8 dc 81 36 db 70 90 91 27 e9 cd d7 69 8a cf c2 d0 54 c8 f4 0f 6e b2 5a 11 75 ef 56 10 86 72 e4 22 09 f2 54 c9 68 95 f0 91 1c fa 68 5f 6f 17 3b c3 11 53 b8 8a 65 17 9a f3 e6 a5 Data Ascii: =B*k Sz#6vHdUUp[_E{>aCe::njo7"lNk,Ex0D.]Lap2f\| 0#~~_H5mKF)SzwF0?C^v7OyDQrx;K6p'iTnZuVr"Thh_o;Se
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 03 f3 93 72 28 94 4d b5 41 bb cf cf 9f 48 11 81 12 74 1f bf 69 26 a6 a4 43 b3 10 02 ae 2a 5b 29 c7 39 db 40 b5 13 cd e0 10 82 51 b7 43 c3 a4 ec 33 26 a9 ec 1e f5 3d 4d bc 01 f8 2c 35 f8 40 16 b9 e4 f7 cb de 23 89 8f cc 66 54 87 4f 2c 9d e8 55 39 f2 6e 66 c5 5b bc 72 c1 e9 17 ec fd 5d bc 9f db 8d 72 ea 4e ff 6b 99 bd 0c 27 fc 50 6b 2d 6a 0a 06 dd ee 0b 85 42 3c 87 95 af 7f ab d2 ed f9 61 9f ca e5 54 77 c3 c4 3f e3 f7 a7 e5 27 0c 70 4f 10 db 06 2f e4 29 c1 02 fe d4 bc 5a 0f 90 77 ef 30 ed e4 0c cc e5 cd 53 50 da 9a 71 d9 1a 76 23 f9 9c 47 b6 22 97 0d 55 f4 db 12 63 38 24 5c c6 7b b5 f3 5f 54 4b db 3d 97 a1 73 4e 59 a2 d3 2b dc be c5 10 7f 73 4c 55 52 04 48 2f c1 a0 0d 06 30 81 38 b5 0c fa 47 5b a9 a7 53 b4 e5 45 79 7c ef 7d a6 2a e1 fe 05 92 dd 29 6d 8e ed Data Ascii: r(MAHti&C[)9@QC3&=M,5@#fTO,U9nf[r]rNk'Pk-jB<aTw?'pO/)Zw0SPqv#G"Uc8$\{_TK=sNY+sLURH/08G[SEy\|})m
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 9b 10 a0 1e 6e e7 f1 ca 81 db ba 81 83 2b c6 89 55 14 0a ea f4 cc a5 af 2c 3d 64 e1 c1 0b a3 f0 4e 45 93 de 05 64 2f a5 ba d5 32 dd f3 96 d0 8a 0e 49 9e f8 3b 37 53 41 f6 3d 34 e0 ab 50 4f c4 9b ac 4f 07 8c 81 84 5f aa ff c7 e0 dd ac e4 65 e8 17 d3 0c cd 23 4e a6 96 21 f8 a8 e6 00 5f 9d c8 33 09 14 b7 9c 69 69 f1 3f 11 22 be c3 fe 25 bf 1b 28 a2 0c f5 f8 fd 5d 5d d8 ac eb 1b 26 12 61 d5 97 07 c9 59 44 c2 bd 49 8d 8c 9c d9 8b d1 b5 9f 12 c4 8a 93 60 a5 14 75 8f 5d 12 ed ff 68 ca 63 67 61 2f 6a 20 75 48 58 90 5b 00 e4 7a 52 9d 81 bb a5 9d 64 17 e1 fa f9 8b 16 5a bb cf 0d bb 60 d6 ce dd b4 c7 e8 4e bb cb ee 57 68 54 9d 47 7c cc d6 37 9e 44 fb a9 70 85 32 d0 6f 3c 30 67 b6 3a c0 54 4c 87 ea f1 b0 37 91 51 a8 50 8e ca 5e da 0e 26 2e 34 5b 65 03 87 7e 78 98 7c Data Ascii: n+U,=dNEd/2I;7SA=4POO_e#N!_3ii?"%(]]&aYDI`u]hcga/j uHX[zRdZ`NWhTG\|7Dp2o<0g:TL7QP^&.4[e~x\|
2024-10-04 12:00:03 UTC	1369	IN	Data Raw: 9e 0b 9b 37 72 4c 0d 26 55 ea 94 a4 37 ae be e9 dc 2c 5f ff 0d fa 85 e0 d3 8e 70 e7 c3 d8 f3 92 3b be ee d7 56 4f 8b e1 62 cd 72 11 c1 fe 44 2d c7 4c ac 63 ed f4 0a fb 0a 45 8f 20 36 2d 57 23 72 0f dc b9 49 a5 6b 57 01 ce 54 43 ae e7 70 2e 06 57 bc 59 ff 7f d5 08 bb fc 3a 55 a3 be 64 02 35 81 dc 51 2a 94 fe c8 1e 45 d8 dd 14 00 28 f1 42 6f c6 c4 05 5b 2c b9 78 d5 f3 cf db 77 c6 19 97 27 2b 9e fb 42 55 21 23 0a c5 25 c3 26 41 6f 75 d1 10 1b c1 bd 18 9e 81 d6 a1 b1 ac 27 0d 73 d8 e1 aa ed 79 da 44 61 c8 f3 e5 1c 05 0e 17 f7 c5 b4 4c 33 b3 75 49 73 7d 69 ce ad f5 f3 14 5e 8a 18 18 6a 23 c7 61 ce 73 05 d6 2f 34 26 22 0e fc 21 ba c7 d7 79 05 c8 d3 bb 8a cc b4 aa 80 fd 3a f4 71 5e c8 f5 a8 a2 cb ba 69 a0 43 5f 8b 93 bf 38 55 8b a3 46 c4 9f d1 ee 2e 8d 80 24 7c Data Ascii: 7rL&U7,_p;VObrD-LcE 6-W#rIkWTCp.WY:Ud5Q*E(Bo[,xw'+BU!#%&Aou'syDaL3uIs}i^j#as/4&"!y:q^iC_8UF.$\|

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:04 UTC	362	OUT	GET /images/olympgate.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:04 UTC	719	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:04 GMT Content-Type: image/webp Content-Length: 15076 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "25ee9ce1f9b68a4281f2c11bae74a560" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wmlQp6qozY8jVpEy1Y%2B%2FB9j22W2t0ynF9BnvCwC0tBCFvU4etFpTNQHFI3%2FeLwdLJCaVrTbuhxny0bAguuQ%2B0pPP0Qy2ScuE%2F8kT2xs2Iln4pTETFKOrkNFlSp0OEtS2F%2B3WbQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd5026ac8ea2395-EWR
2024-10-04 12:00:04 UTC	650	IN	Data Raw: 52 49 46 46 dc 3a 00 00 57 45 42 50 56 50 38 20 d0 3a 00 00 90 ea 00 9d 01 2a 2c 01 2c 01 3e 91 3e 98 49 a5 a3 22 35 a9 75 4c 52 b0 12 09 62 6d 07 a8 b4 c7 cf aa 25 20 3f 4c af 0f 6c 63 c1 18 bc 83 de 87 cf 3f 07 e7 63 be ef 7f ff b9 e7 8d d4 7f 30 1f 2c 7f ee 7a eb f1 64 fd 7c ec 49 fb ab ea ef f6 cb f7 03 dd 13 fe bf ec 07 c1 0f eb fe a2 9f e4 3f e1 f5 d4 7a 28 f9 b6 7f e5 f6 90 fd d2 f4 98 ff ff a9 83 2e 96 b9 6c 1f ef fd 68 3f 4e cc bf 6b ba 9f 77 d7 fd 6f 5a 5f de 7e d0 f9 13 f3 bb 51 df 6d 70 00 dc cf 41 4f 05 79 dd fd e7 9d 1f 6d fd 81 b8 83 3f 29 ff 83 a6 1f fd 7f 36 9f 64 70 5c f4 99 42 d7 4a 1e 21 c2 a2 db 26 35 80 cd 87 ed ba b8 e8 4a 5a c5 49 e4 46 fb 79 c0 7d a6 b1 a4 64 c1 8d c1 56 b9 b7 bc 81 53 1d 6e d2 bb 46 d8 61 e9 02 8f d7 8c 20 0b fc Data Ascii: RIFF:WEBPVP8 :*,,>>I"5uLRbm% ?Llc?c0,zd\|I?z(.lh?NkwoZ_~QmpAOym?)6dp\BJ!&5JZIFy}dVSnFa
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 17 d4 7c 81 77 97 07 22 08 f7 1b 1e e6 ad 95 e5 a3 fe 54 4e 46 e3 5f 17 d1 2a 41 20 73 b7 c2 8d 59 6f 9d 99 ba ec 17 6c d5 96 1d 02 db d0 fd ba e2 21 a0 4e e2 32 e8 e9 a1 8a 83 bf 3a 36 44 45 c5 1f 11 22 3d 9c 56 b2 05 d7 d6 94 97 88 1e 19 d8 79 e5 07 b9 b5 9f 90 fd b4 52 66 e2 a4 e9 62 2f 23 7f ed c7 11 1c 7b 1b 4b cf 64 eb c9 2b b0 26 9e 6e 75 82 ca 40 c0 03 c6 43 23 b4 3a 3e 9d 36 e4 51 7a aa 53 9b 83 54 8e 26 74 b5 60 e4 39 84 a8 97 0a f6 98 3c 37 ed 49 58 90 c1 2b ff 3c 71 97 12 2d e5 2b 21 92 b0 2c 63 9f 08 21 f5 a7 18 ad a5 ce 17 66 e1 ee 79 83 f3 af 45 19 4b 9d 0f e2 51 58 1d 18 d2 e3 f5 5b 81 05 70 5d 38 90 2e 69 3c d4 91 f6 ff 5a 76 79 34 d9 99 69 ba 31 c5 da a2 de aa 25 10 4d f4 0e 28 83 86 5f 43 ea 76 70 62 75 75 1d a6 c3 61 39 e2 ad d4 08 bf Data Ascii: \|w"TNF_*A sYol!N2:6DE"=VyRfb/#{Kd+&nu@C#:>6QzST&t`9<7IX+<q-+!,c!fyEKQX[p]8.i<Zvy4i1%M(_Cvpbuua9
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 1c ff 1e 51 6c 0f 00 46 12 94 de 63 0f 93 65 39 c3 d4 32 92 30 e9 80 38 ac 7f 1c 47 39 7d 2b 76 cd c5 2b 03 95 80 de 01 5e 00 8f 8b 67 1c 01 75 c6 ec d3 c7 65 81 f7 30 a7 5c c0 58 65 03 af d1 ec ad d9 85 43 3f f7 88 06 c1 a4 f9 be b0 c0 cc cd fc 9c bf e8 44 45 2e e3 ba e1 52 5b 17 d6 cb 9e 4f 54 ee 59 6a d6 3f d3 92 45 5b 90 84 d9 74 5a d4 be 3e 59 5b ed 2a ba 49 51 76 55 18 5b 57 13 41 c6 cb dd 96 cb d4 de 73 d9 ef 99 c3 a1 8e c8 18 53 de ad 16 3d 06 07 73 dd bd 9e 4c 89 b5 8d 37 6d 3f 7e ca 85 81 c3 46 c0 33 66 83 4c 4f d7 29 66 c4 9f 10 cc f1 41 bb 95 35 0b 45 0c 3f c5 2c 2a e0 07 45 d2 99 d7 5a 6e e8 ad e7 31 51 9b 9c 30 8b 05 67 1b 6b a0 12 cd e1 cc 61 0b 2d d9 0c ff 21 18 5c a8 2f 06 2e b3 93 26 19 e8 44 51 81 4d 24 ae 38 4c ba db 77 04 ab 97 66 3b Data Ascii: QlFce9208G9}+v+^gue0\XeC?DE.R[OTYj?E[tZ>Y[IQvU[WAsS=sL7m?~F3fLO)fA5E?,EZn1Q0gka-!\/.&DQM$8Lwf;
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 62 c3 d3 97 16 6a ca 48 25 7d 04 c8 6f df 41 b0 3b ec 59 5d 78 0c 51 3e a4 35 02 11 02 e0 c1 88 f0 53 60 d0 75 5d f8 7d 3d 4c 1d 02 10 7c 8b 9f 18 03 1c 73 98 1f cd 70 3d f7 8c 6c 51 ea ef 73 27 3e d6 55 53 8f 55 0f 86 14 50 3f 3b 47 43 a0 9c d4 61 33 93 3e 6f bf 96 d7 cc c7 37 07 b6 39 3d ff 68 e3 e6 3b f5 55 b3 8c 77 68 f8 02 cf 08 27 f5 e7 da b7 fc 0f 9a a4 2f 18 cc 6d 8e 9c 94 a4 e1 cd be bf 39 9e 41 0a cf c5 c9 48 9f ad 7a 15 2a 5f 83 2a 85 c9 40 13 dd 5d 2a 15 2d 5d 55 ee 78 ef ab 04 d6 a8 15 b6 0f 8c e0 25 76 c1 70 da b2 aa be 4f ae ea 38 82 41 a4 60 48 70 3c 35 f4 94 69 6a 71 87 78 50 f4 3d 34 5b c5 a1 0b e9 f9 92 91 98 f0 62 68 e8 ad fb ad ee b6 fe 24 70 19 49 bb 4a 75 3a 55 07 95 aa c6 f5 02 a5 4a 0c 15 c7 7b d5 0d 53 70 68 00 4c fa 68 de 29 19 Data Ascii: bjH%}oA;Y]xQ>5S`u]}=L\|sp=lQs'>USUP?;GCa3>o79=h;Uwh'/m9AHz_@]*-]Ux%vpO8A`Hp<5ijqxP=4[bh$pIJu:UJ{SphLh)
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 0d 82 00 cf c9 74 3f 6e c7 3a d6 00 a5 e8 03 41 72 0f 40 60 70 6c 44 2a 5c 3a f3 87 e4 9c 90 a7 d8 f4 75 66 e4 9d 68 ed 8d cb 63 6f a1 1a 4e e4 d8 47 77 96 e5 31 7e 6e 3c 21 fb bd aa 36 e7 74 81 5a 02 57 e8 30 b5 0a 2a 26 34 64 de e6 f0 14 1e 77 7e b0 fc 7d 0b 56 73 f7 2f 16 e8 7c af 34 2a f1 84 16 85 31 dd 0d bd 65 bd 19 f2 44 77 f5 1f 02 75 e4 d0 34 64 e0 98 20 cc a8 60 1d 97 dc 4a cf 81 01 8d d8 f6 5e 59 a0 97 dc cc f5 52 85 42 8f 9d 64 25 fc d1 ac 6f d4 4f 69 c0 03 db 4c f8 d0 f2 8e 77 fb 79 a3 30 1e 5a 66 7f d2 5e fd 61 36 79 59 27 08 db b1 37 01 54 9b df 37 cf 05 4e 81 12 48 54 a6 5b 92 c3 fd a2 62 66 fd 24 97 ef de d6 9e f8 67 f2 6e 99 03 47 aa 1a 7a 92 08 9c 96 aa 5e 18 ac 49 ca d0 1d 1c e9 b8 21 fc 9b b8 64 27 9d f5 0a 1f 0e 02 4d bd e3 a0 1f 4a Data Ascii: t?n:Ar@`plD\:ufhcoNGw1~n<!6tZW0&4dw~}Vs/\|4*1eDwu4d `J^YRBd%oOiLwy0Zf^a6yY'7T7NHT[bf$gnGz^I!d'MJ
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: f8 4c 4c 32 5b e1 21 0a eb 45 73 b1 a5 c1 09 bb 19 7d 02 f8 c4 08 8f 33 bc 55 b1 a2 74 27 5a 87 6d 95 23 e4 e3 a0 b0 4d bf 4a c4 77 81 06 48 88 53 3d 2d 84 54 01 cf 42 d4 01 41 01 4e 63 30 4a 40 66 66 a9 e6 20 b0 bf 5a 67 00 69 cf c4 48 ac 5a 91 93 bd 25 81 8f 10 81 e9 a0 d3 71 7f 38 5c ba 82 21 6d a4 b1 14 a1 92 39 af 35 ff 8b d7 30 7a 6e 4b 67 8b 58 c8 cc 47 bc 1e b7 e8 e5 fe 13 81 b6 72 f8 ee 9b aa b1 d1 1e 4d 3e b0 df 5f 41 1d 37 6c 26 28 42 3f f7 1d 5f 4b 96 53 a4 c7 f5 37 0f fb ff e2 88 ef 77 d7 48 bf 36 85 4b 4c 29 0b e8 25 42 99 5c 2e f5 89 8a ef 9c e8 aa 26 06 38 72 0b 92 8b e9 3c 3f 35 25 0e d6 9d 98 21 95 6a 8c 2d 46 8f 36 54 be f5 90 a6 47 72 21 b0 a0 88 2e 0c f1 48 09 d4 d3 94 ce ad 79 fb b9 27 cb 82 d2 a1 c1 00 ab ce e4 53 1c 39 c5 39 90 75 Data Ascii: LL2[!Es}3Ut'Zm#MJwHS=-TBANc0J@ff ZgiHZ%q8\!m950znKgXGrM>_A7l&(B?_KS7wH6KL)%B\.&8r<?5%!j-F6TGr!.Hy'S99u
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: ea 13 b1 4b ae 19 ec ed 37 77 e3 d8 e0 ae b4 a6 ba 73 35 8e 6c 06 a1 a9 29 a7 e9 6f a2 ed e1 40 9f 34 5e bd 09 e5 cf 0a 76 ed e0 59 72 2e d6 e5 92 25 8b 35 44 cb 48 29 9d 65 f5 bb c7 84 4f 62 03 c4 d9 74 dd 60 37 05 b3 88 05 d9 96 c8 d0 32 48 d8 d9 d7 f4 41 b7 7c cb d9 69 f9 5d 02 c7 76 4d 31 8d 2b 2a 18 ca 2e 00 02 80 3d 11 7c bd 10 16 c6 09 c9 c0 e4 cc 38 70 dc 0b a5 bc fc 77 8b 49 4f e7 79 84 bb b6 34 0d ed c3 79 66 17 73 c5 51 28 3a 65 1f 38 c3 27 bb 88 b5 87 0f 51 23 a3 64 70 a0 b4 d5 88 de 66 dc 0f 87 ca 6f e6 19 d8 76 4a e6 73 39 c7 39 e9 0e 77 ab 50 d8 19 03 0a 91 79 86 05 d6 12 25 01 bb 0a 2d 48 ba a6 21 de b2 d2 04 95 87 3e 55 be 9e ab fd 0f 79 a6 73 9b 88 17 bf 55 43 ce 17 67 22 8a 70 5d bc f6 a2 91 8d af 4a 69 ad 67 4b 33 d6 fa 73 d5 f0 aa d4 Data Ascii: K7ws5l)o@4^vYr.%5DH)eObt`72HA\|i]vM1+*.=\|8pwIOy4yfsQ(:e8'Q#dpfovJs99wPy%-H!>UysUCg"p]JigK3s
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 1f 41 ee 09 56 7f d8 44 65 06 1b 27 73 f4 22 01 c1 ba 9a 54 6a 40 c9 e7 a7 03 b8 36 82 67 2f 3a 69 29 1f b5 19 18 f3 6e 44 89 31 37 2e 19 7a 56 e3 0a ae 23 61 01 03 5e ca cb 46 f8 a1 30 d7 a3 28 97 03 b2 6d 97 96 b0 2b 2e 0f d2 e8 75 0c f4 25 26 2f 66 3f eb 57 ed ac 75 e0 8b e3 1d 66 b4 11 d5 cd 49 93 59 70 f2 c4 01 23 a5 11 e6 20 5d fa 04 6c 11 78 a4 03 25 55 9e 4d ba 1b 09 82 68 05 16 80 ec 73 22 24 6b 1e 25 c1 be 08 e2 c5 90 f4 00 76 42 72 11 69 4f de bf d5 ec 32 51 0c 40 91 b0 92 84 b2 89 b9 19 9c 2d 0f 8e 1b 91 65 f2 a8 f3 87 4a ce 4e 3f 63 ab 29 26 bf 6e 46 4a f7 8e ed df 89 08 b7 7b e9 7d 9e 0e 06 ea dc ec 26 eb 56 2f 58 96 a1 96 f5 5b 51 c1 f0 c6 02 83 be ef f8 ad e2 58 03 b5 50 3f 78 b0 e8 a0 88 5a d5 47 ef 78 b6 22 66 5e b7 d3 9d 7d 98 81 27 bc Data Ascii: AVDe's"Tj@6g/:i)nD17.zV#a^F0(m+.u%&/f?WufIYp# ]lx%UMhs"$k%vBriO2Q@-eJN?c)&nFJ{}&V/X[QXP?xZGx"f^}'
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 13 b8 73 40 bd 87 3b 04 15 dc 5e 3f b9 53 4b a9 71 3d 6a d5 d4 6b 13 57 a1 9e 2f 45 ed 21 c5 ab 61 66 5d cb 4e 13 ed d5 2c 6e 4f 6f 9a db 90 fc 28 18 a8 4e c8 bd f8 af af 55 b7 39 12 ff 64 bf e5 9c 7a 6a 1c f7 a1 de d9 f7 f2 4c 7f c0 f3 a1 b1 13 cb 5a 50 4d 81 2f f3 11 66 4d 12 dd a4 90 a7 34 4a 89 e9 49 6e 6f 95 ae 38 a1 e4 df e8 1d e2 9d d1 21 f4 3c 8e c0 2e 0d e9 f9 51 fe e0 1c 5e 9e ae e9 b0 c6 5b 54 59 8b 83 6e 24 46 a7 5f f7 b0 63 67 e8 32 4a 77 6b 12 24 73 b0 c2 0e ce 37 09 ac 07 0f 74 57 97 cb 96 1b 1a 04 e9 d7 c1 ad da 6d de b0 c7 dd e9 f7 81 ab b0 33 d1 f3 38 05 33 c1 a3 84 f4 3d 7a e1 03 e2 5a 0e f7 23 8b 73 52 57 59 f6 46 22 d5 5d 4b 0d 08 27 6b 8a 03 4d fb ef ab 44 d7 97 51 c8 f3 d2 28 a4 4c 63 5c e4 f7 35 a5 fe 37 f1 ed 7b 28 58 e5 37 00 11 Data Ascii: s@;^?SKq=jkW/E!af]N,nOo(NU9dzjLZPM/fM4JIno8!<.Q^[TYn$F_cg2Jwk$s7tWm383=zZ#sRWYF"]K'kMDQ(Lc\57{(X7
2024-10-04 12:00:04 UTC	1369	IN	Data Raw: 1b 24 8e 0c 41 fc ed f0 a8 17 7f 81 e0 d6 2b 6e 5f 50 84 c7 b6 42 eb c0 01 db c7 1f 7b c8 56 a1 82 dc 54 fa 1b 96 92 e4 e9 98 72 1a 04 4d e0 0a 7a 57 a9 a8 2a 97 b7 d7 a1 a8 ee bc 8e ad 63 27 79 61 8a f7 1f eb 10 2c 15 19 f3 7f 70 a6 5f dd 01 ac 39 7b bd c2 45 10 de 0f 7c 51 62 12 2d 9e 67 7a c6 4d 75 8c 0e 01 82 d3 7b 72 ac 7c 68 bb ce e0 7a 7a 2b 66 b5 ea e5 e3 4d 9a 57 b5 ba 60 8c 9c 62 2e 2d 80 53 0b fd 18 06 e0 1e 8b 53 f8 de bf 6a b3 b0 5e 9e 2b cb 6f a3 f9 61 4d 55 92 de 03 74 d0 e3 a1 a6 17 9f b8 d5 1f 6f 15 b1 45 01 ee a7 4c 6f b3 3c 1b 65 52 de b7 aa 69 19 ba 98 d9 b1 47 47 8c a6 de a1 b7 3f d3 1d 9f 86 c8 b8 be ff 89 16 bf 61 99 0e 24 24 c8 f3 eb 23 15 04 60 bb 2f 20 4f 48 a0 a3 a7 da b7 93 06 c6 4d d3 34 28 3e a3 ae 85 9a b0 3f d4 89 90 7d 1c Data Ascii: $A+n_PB{VTrMzW*c'ya,p_9{E\|Qb-gzMu{r\|hzz+fMW`b.-SSj^+oaMUtoELo<eRiGG?a$$#`/ OHM4(>?}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:04 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 12:00:04 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=189909 Date: Fri, 04 Oct 2024 12:00:04 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:05 UTC	361	OUT	GET /images/main-img.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:05 UTC	722	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:05 GMT Content-Type: image/webp Content-Length: 109834 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "93f26c789dd381349c5267281f51b8ee" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fan56F2A7QLcNMg%2BzkGWeQFiBITvYT%2BEostzrjpb%2BPkgIDQuN7ay%2ByFm1Up%2B6s1%2Fb8gDNcfvGqUqxM3T9WqJTF9dydmPsOKSk%2BX7oVd8IzxFMcOkILFhpNNIA5Pagh3lMS3W5A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd502706fea1879-EWR
2024-10-04 12:00:05 UTC	647	IN	Data Raw: 52 49 46 46 02 ad 01 00 57 45 42 50 56 50 38 4c f6 ac 01 00 2f df c4 85 10 ff 07 c9 b6 f6 b4 8d d0 cc 14 98 95 99 bb 8f 6e bc e3 8c ca cc 60 96 22 fd da 06 e4 48 92 14 49 d9 38 b8 c7 cc 0c 3f d4 e1 64 3b 81 4e 12 66 66 1a 9e 59 ea 2a 48 b6 6d 9b 76 de b9 be ff c7 b6 ed 72 6a 49 a3 d3 17 db 7c bc 06 9b d8 b6 a3 9c 38 4a 9f 18 60 5f ad 50 53 33 58 a1 45 05 06 e8 a8 d0 91 40 28 b8 43 13 c5 5b 62 12 df f2 06 31 3b 06 2c 02 dc 62 dc 52 d4 cb b8 a1 98 05 dc 12 cc 22 4c 63 cc 20 dc 10 dc 10 cc 00 3f a2 68 31 e6 ca 2f 88 84 2b fe 8c 48 cc 7a af 98 f7 9e 22 5e a3 ac 9d b0 62 1c c6 34 8d 19 9e cf b8 3e e5 fa 9c 1b 32 53 e7 c8 f7 21 7d f0 04 1e b1 28 83 4d e5 e2 c4 09 d3 31 17 42 72 84 45 69 90 03 21 06 45 55 53 1a 19 02 22 f5 b7 ba 7b 1e c9 8e 3d 49 ad 30 06 d9 72 Data Ascii: RIFFWEBPVP8L/n`"HI8?d;NffY*HmvrjI\|8J`_PS3XE@(C[b1;,bR"Lc ?h1/+Hz"^b4>2S!}(M1BrEi!EUS"{=I0r
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: fd 75 df b7 fa f5 de 9b 81 f2 4b 1f 79 49 d8 35 c1 4e cf 01 8f 43 27 44 f4 a9 2c 2f 85 cf a2 b1 7d b3 a9 14 84 7b 58 50 1b d9 f5 94 55 4e 4c a8 96 06 dd 6f 9f b9 17 b3 4e cd 80 fa 78 c1 c5 ff 8f f3 de 9e ef 83 96 3c ba d2 e6 d1 dc 36 2e 7f 5a ee c1 1f 31 f0 4e 39 12 23 49 8e 1b 69 06 02 d0 85 41 eb a1 ff e6 02 f7 98 10 11 13 10 11 31 fe b9 8d ff 3a e7 bf fd 6d ac df 5a 11 11 63 8c db 9c c3 42 40 aa 36 b6 33 22 d6 8a 58 ac f0 68 63 8c 39 c7 dc 37 23 89 23 e2 fd 7e bf 43 b0 3f 1e 39 da fc 7e bf 47 21 1b 04 54 91 b7 f0 65 f4 79 8c 31 8c 0e 1f 54 12 b1 d6 5a 11 e8 d2 e7 f7 3b 7b fb 58 ca 03 5b 76 42 bc ce 80 8f 7b 6b bd cf 39 7b 1f 92 6c 03 3e 85 e3 f5 fb fd 7e 11 fa 38 1b ad f7 3e 7b 4b 24 63 90 8d 2d df 5e f1 f0 a9 52 eb a8 f7 de 2c c9 36 e6 02 c4 eb 8c 27 Data Ascii: uKyI5NC'D,/}{XPUNLoNx<6.Z1N9#IiA1:mZcB@63"Xhc97##~C?9~G!Tey1TZ;{X[vB{k9{l>~8>{K$c-^R,6'
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: 12 86 d3 48 0e 25 ca b1 9f 40 48 65 86 18 40 d1 7d db ad ba eb a8 bd aa 6d 04 ea 59 a4 de f6 38 18 6f 53 01 7e df cf f7 fb fb 73 4c 84 d7 6f 89 e8 3f 05 da b6 aa 06 ce 85 07 8f c7 47 66 da 52 54 54 20 c4 ac e5 49 db 26 49 92 24 49 8a 4b cc 27 f0 c3 8e 36 b0 eb 23 22 6a 8f a8 59 4c 4b b5 08 bf 85 c7 8d 22 76 c2 08 80 00 df 8f 1a ab 09 00 21 a2 ff de 68 db cd db da b6 2d 4a 22 c0 8e 0f e6 97 8b 33 4d 80 14 ad 8c b5 8a 67 57 db e3 46 d2 b6 6d 94 7d 8b a8 be 89 1a de 81 36 ab 2a 00 d7 9d 8e 6a 37 a1 80 00 ec 92 2c 92 92 06 81 d8 08 47 a1 a2 7c df 40 20 ef ed c8 00 22 71 0f ed 4d b0 73 83 0c cf 62 74 5d 17 29 ca 59 1b 70 35 11 fd 97 05 db 6e dc 36 00 28 52 dc 8c 6e af a0 b8 ca f9 a3 a4 6d 93 22 b9 11 4b b6 98 ee a3 a7 ab 7a a8 aa fa e9 7e 66 2d 66 69 6f 66 da Data Ascii: H%@He@}mY8oS~sLo?GfRTT I&I$IK'6#"jYLK"v!h-J"3MgWFm}6*j7,G\|@ "qMsbt])Yp5n6(Rnm"Kz~f-fiof
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: 53 e5 b0 3f f9 0a 69 52 4c 38 c9 29 61 c4 01 19 20 57 db 9a a1 e9 cf 53 5b 3f 54 ea 99 a0 1c 18 66 da d3 de 33 ec bb ef fa ec 40 5b 1b 72 0e af 17 8d b0 8d 9d 16 d0 cd 58 cb f4 14 d5 18 09 4d b2 30 f6 47 a0 b1 bd 12 12 a2 2a f9 e5 d4 55 e4 38 45 91 72 5a d6 ad 3b 8a d7 fe 6c 75 fb 04 36 83 82 02 f7 e9 2d 80 01 33 0f 79 df 7d d7 dd e5 c5 5c 65 13 18 c8 5e 0c 9d ce 10 97 f7 29 d5 2c 38 52 83 32 59 4d 56 90 82 5f 11 c0 3a 70 10 a2 22 98 20 4b ce c4 0a 7d fe e7 a5 0f 47 25 b2 4f 85 51 c6 ef 54 4c a3 a1 91 fb 21 42 68 3b 9c aa 00 88 74 7b 70 e6 86 fb 43 cf 0f 40 d9 28 5d a5 2c 6b 4c 4d 4a 66 78 25 1c 42 5c a4 b5 38 11 15 2e 24 f2 13 e4 8e 02 d2 9f 8b 54 a9 e9 07 9b 1f 86 4c a1 20 39 69 4c dc 36 cf 47 58 1e 1d 36 ad 3c 7c dd e1 3f bf 0c 07 00 6d 8d c7 d3 19 da Data Ascii: S?iRL8)a WS[?Tf3@[rXM0G*U8ErZ;lu6-3y}\e^),8R2YMV_:p" K}G%OQTL!Bh;t{pC@(],kLMJfx%B\8.$TL 9iL6GX6<\|?m
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: e3 3e f9 da fc 2a 6b fa 71 a7 a4 10 dc 3b 2e d0 bc b5 0e 2c 08 e0 f1 93 67 4f 1f 7d 3e 1e 3c 7c 40 be 57 f1 14 f0 72 81 e4 cd cc 45 d7 79 b4 d9 1f c6 ba dd dd f0 00 54 72 25 da 23 b3 6e 3b 8c 5d c0 a4 ec 2d ae c9 fc c3 f1 fd fa 73 fb 99 db a2 ef 5a 4a e0 51 d5 ef f7 51 80 eb ae 81 ef 51 d4 10 c3 03 79 3a d5 6d 6c c0 49 13 a6 d4 16 b0 3a f0 69 b4 24 44 dc 90 10 e5 7b 0e 80 49 68 1c 32 a0 81 af a7 46 a8 50 7b 69 74 71 f2 61 9f a8 f9 f6 fd 8a a6 a0 e9 07 c1 e8 da 46 2a 3d 01 6d 3f 66 b9 ab 55 ff 58 2b 41 2e 2b 85 0e dc c9 9b 8b 15 cb 2a 6e 1b ea ba a9 de a8 4f fe 12 a1 9e 65 7f 51 a7 19 f4 8c 88 d4 41 3b 14 62 af 24 75 eb 8f c7 7e 0f 0f e3 b0 8d 82 a5 5b 21 da 4d fa 75 2f 75 a7 a9 03 dd 00 f2 d1 50 5e e5 d1 d4 be ce 4f cf 3e 07 f2 8c 28 38 a7 9f 03 25 b4 f4 Data Ascii: >kq;.,gO}><\|@WrEyTr%#n;]-sZJQQQy:mlI:i$D{Ih2FP{itqaF=m?fUX+A.+*nOeQA;b$u~[!Mu/uP^O>(8%
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: ab f1 63 c8 1f a3 40 c4 4e fa bc af af 88 16 94 8c cb 37 13 f4 7b 34 12 89 76 02 3b da 5f dc 58 1b 15 bc 95 a5 b9 5e a5 7d f6 eb ac 1c 1b 41 39 9f 5f e9 54 e5 7e 2c a0 6a 57 53 38 27 40 ba 95 9b 10 f8 d3 7e 9d 82 e7 57 38 1e 22 f2 f0 ca 74 92 37 e8 2e c2 ca fe 2f 57 f1 8e 43 1b 88 92 38 4d 62 11 da d6 66 c8 68 80 32 50 a4 09 5f 26 af bd 88 e2 df a7 9b 66 1f 64 40 b8 b7 7f 62 38 3e 0b 75 db 67 03 54 4a 4d ec fe e4 62 69 98 4f ee a7 6b a9 ca f8 18 48 01 97 e0 64 46 f8 cd f0 18 da 06 d9 5d 9d 6b 71 c8 cc 86 54 59 d7 4b 23 cc 72 79 bf 8d 22 4a d5 23 35 3f a3 6b c1 9f 0c c0 f9 c9 c3 e9 dc e7 ee 75 2c dd 47 52 3b 63 c3 84 6b 4e f3 0b 2e 5d ce 42 3c 28 c4 ab 37 8a 77 24 3f a6 11 e3 ec c4 34 89 d5 70 24 b1 41 72 95 38 70 c1 09 81 9f 10 02 3e 7f 01 e5 6f 36 5c 1e Data Ascii: c@N7{4v;_X^}A9_T~,jWS8'@~W8"t7./WC8Mbfh2P_&fd@b8>ugTJMbiOkHdF]kqTYK#ry"J#5?ku,GR;ckN.]B<(7w$?4p$Ar8p>o6\
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: 94 21 62 a0 24 d9 76 c3 1e 13 d6 45 f5 23 31 fe c9 97 c5 4f c1 0e 30 f3 65 e6 94 d8 50 75 15 1a 57 d5 6d 5b 90 1f 90 3d 6d cb dd 5e f6 a6 5c 3d c8 92 a1 c7 c3 2b c1 3c ee e3 dc 80 e6 ee 91 46 7c 0d 91 5d 52 28 18 ce 47 63 b9 c7 66 e5 c0 c9 49 00 c7 a1 40 e1 69 77 10 08 5f d1 b5 a6 80 03 ce cf c4 5c 8c f3 e7 20 82 64 24 2f 64 8d c0 a6 5b bc a6 a4 29 ec a9 13 a9 de a6 05 39 3b 4a 9c de 52 be 54 85 d8 3e a1 ec 65 64 30 5a dd 6d d2 47 7d 73 dd d3 84 dc eb 4b 48 28 30 b6 81 01 69 04 60 73 15 37 17 6e 43 71 82 68 9e dc df 8b 74 00 10 10 ba 33 d3 e3 5b 26 b0 19 74 8e a0 3d bf a6 74 3a 2a 2d 3b 28 f7 f5 76 74 d6 af e9 b2 14 cf 3e 40 57 f9 b0 5f 16 f9 de c7 d9 5e c1 11 7b d4 62 18 4d 54 09 a6 44 5f 41 ba d9 eb b2 f0 27 67 e9 90 77 ee 7e b5 9f e9 25 ca 30 da 4d 97 Data Ascii: !b$vE#1O0ePuWm[=m^\=+<F\|]R(GcfI@iw_\ d$/d[)9;JRT>ed0ZmG}sKH(0i`s7nCqht3[&t=t:*-;(vt>@W_^{bMTD_A'gw~%0M
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: 1b 84 70 3f 0d c6 40 b8 8b ec c4 f5 85 f3 25 04 5d e0 98 32 71 20 b4 d7 53 28 ee 58 84 83 16 21 c3 b1 e0 de 5d 28 38 79 e8 19 6a b8 09 30 cf 9f 90 1f 47 d6 b7 cb ab f8 38 02 31 ba 0c 11 ce ee 1e 46 e5 0c 13 ea fa 82 62 38 7e 9e e1 7c 5c 4a d9 b6 b2 2d 70 8a 23 93 f0 22 52 cd fb 31 2a 67 69 51 e0 a4 11 74 5c 38 61 27 2e da e6 47 a5 0b 5c 5b cc 8d 35 15 f2 1e e4 6b 98 d7 92 97 9d d0 c2 c7 34 42 cc 4c 1a c2 a1 90 c6 40 af b4 d0 53 b5 b4 3e a4 b6 2e 18 09 79 e4 8b 7b a9 2c 11 5d 3b 32 29 8a 2a 53 6a 65 bb ed f0 1e e5 b8 b7 e8 08 7b b4 27 30 8f fb 82 b8 43 03 b8 d4 55 64 b2 e4 a3 e5 9e 52 35 51 33 51 dc 1f 1c c4 0f c0 2a 68 fc 77 bd 36 29 9c 5c 19 95 11 fd 71 58 d1 2c 9d 2f e0 ae 30 4d d7 c1 21 5d 57 13 7c eb 45 38 3a 67 81 4f 08 24 3a 56 36 e1 21 e0 03 ce 1f Data Ascii: p?@%]2q S(X!](8yj0G81Fb8~\|\J-p#"R1giQt\8a'.G\[5k4BL@S>.y{,];2)Sje{'0CUdR5Q3Q*hw6)\qX,/0M!]W\|E8:gO$:V6!
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: f9 ee 9f c5 6c 9d 7b d9 00 58 c2 c8 68 69 6d a3 81 a7 e0 0c 88 71 f8 18 01 52 73 32 07 3f 08 1a 3c 99 b5 6e a1 2d 43 8d 2d ef 06 07 f0 00 52 d3 9e ca 7a b0 34 72 75 25 47 9e f5 37 dc 65 64 6a f3 63 82 1c d3 65 1d dd cd 48 07 a8 cc 67 1c a5 47 52 fb c2 af 15 23 95 f3 fd 4f 3d 4b 13 f9 99 73 e8 97 49 61 81 a1 28 e0 f9 3c 34 4f c8 22 2f de 32 59 70 b6 0e 77 15 33 af c7 f3 51 42 81 93 fa 6f ae 1a 33 b1 cb 67 1d 8b 57 ec 51 0c bf 71 cb c8 6b 2c 20 7d 65 12 9e e8 4f f3 c4 fa 59 18 88 56 d5 f2 8d 94 db 16 cf 63 58 7a 2a 20 aa c1 d4 81 5b 32 d8 92 f8 ff d2 d1 52 59 ab 8a c8 4d a0 e4 ce 99 36 25 b6 54 ac d1 ba 3b 56 3a ff a7 b9 78 c5 b9 8c 3d 56 89 23 38 78 36 3c 42 d6 c6 54 ae 50 93 e5 22 21 f0 6a d0 49 1a a9 82 ec c8 cf 83 d7 3d ae 98 05 1e 60 44 94 03 d5 c2 f9 Data Ascii: l{XhimqRs2?<n-C-Rz4ru%G7edjceHgGR#O=KsIa(<4O"/2Ypw3QBo3gWQqk, }eOYVcXz* [2RYM6%T;V:x=V#8x6<BTP"!jI=`D
2024-10-04 12:00:05 UTC	1369	IN	Data Raw: 60 f7 34 8b b8 f0 f6 b1 32 e8 a9 c1 61 e6 86 24 6e 37 09 24 17 3a 79 7b e9 b1 de e3 78 06 11 46 ff 09 3b 4b 2e 02 f2 04 5a 2d 9f 62 f0 59 fd ba 2a 7e d7 3d b3 f3 bf 7e c7 5e ca 9e 11 bc 78 86 f5 dd 86 c3 c3 77 84 22 5d 60 12 25 fd a0 c2 83 f5 8b 97 9b b0 43 6b c5 02 e5 ef 9b cc 2e b2 40 2d a1 cb 83 5a 35 31 b0 9e 01 1b 56 4f 09 99 90 62 c5 14 24 38 d7 53 0d 79 5d c6 17 ef 74 1a 01 00 92 d0 56 37 6f 62 bd 20 15 e1 ab 7a 9b b7 bf 2f 8f 9b e8 8f 5d 89 6c 2d 28 c3 ac 69 a2 4d c4 c8 5a aa 06 c8 62 18 90 f3 cc c3 c5 fe f1 d6 ce d2 95 8b 9e d1 fb a7 f6 c1 d1 ac 50 2f b2 fd ea 53 80 3e f6 cd 19 fa a2 d0 2b 9c 6d 4c 70 3b 3c d8 1e 74 ab cb c6 dd f5 c5 85 b1 86 c5 ac 5d b1 1e 2b 44 88 68 4c 13 2a 2f db de ce 02 e7 0e 9e f8 8e 67 1b 49 1c 91 3e cb 77 5b 15 3d 6e c1 Data Ascii: `42a$n7$:y{xF;K.Z-bY~=~^xw"]`%Ck.@-Z51VOb$8Sy]tV7ob z/]l-(iMZbP/S>+mLp;<t]+DhL/gI>w[=n

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:06 UTC	365	OUT	GET /images/sweetbobanza.webp HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:06 UTC	709	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:06 GMT Content-Type: image/webp Content-Length: 16430 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "a1ec071c2e182f96db40b34c7997917d" referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QyuxYkeJ1cf2t741gWKVmOrbQnzcKlKKX5laXUH%2ByVDVaJU66PAGdVbMN1SVFy8Q2twhFeDkAV6U2LY3sXiXfiMJUXRv9ZMv2RCELo4lpv0O6GNkBc1M0yxSiDoxTTCMsBKZxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cd502793f85c439-EWR
2024-10-04 12:00:06 UTC	660	IN	Data Raw: 52 49 46 46 26 40 00 00 57 45 42 50 56 50 38 20 1a 40 00 00 30 f6 00 9d 01 2a 2c 01 2c 01 3e 91 3a 98 48 25 a3 22 a9 ad f5 8c f1 30 12 09 68 6d bd 2f 1b b7 5d f3 00 d6 06 b5 cf e6 1f e4 e5 c6 7d a2 7b c7 ef be 75 7b 8a ec cf 33 0d e5 fb c0 f9 79 ff 2b d6 47 ea 0f 61 bf d7 ff 18 0f 7e df ba de ac 3f 74 bf 67 fd dd 7d 44 7f 70 f5 3c fe 85 fe c7 ae 77 d0 ef cb cb da 2f f7 6f f7 23 da 1b ff fe a7 24 b6 b9 b9 fc ff 0b fc da 7c 9f dd bf 8a 3f d6 b3 27 da be a7 7d f1 ff 53 d6 ef f7 5e 07 fc b8 d4 53 dc 5b fb 20 1f f5 5f f0 7e 77 7f 95 e7 d7 db 7f 60 4f e8 bc 56 3e bb ec 1b fa e7 d2 7f 4c 6f 64 fb 0a b0 f4 7f 78 67 e7 c4 31 01 5f 2f 27 f8 d1 8a 36 8c fc 07 0d f2 fd bb ef a2 89 4b 01 e8 78 a4 f3 1a 9c 97 0f 19 f4 5c 2f 52 91 f4 be 0f 14 2d fb 6e e6 21 bb a6 a7 37 Data Ascii: RIFF&@WEBPVP8 @0*,,>:H%"0hm/]}{u{3y+Ga~?tg}Dp<w/o#$\|?'}S^S[ _~w`OV>Lodxg1_/'6Kx\/R-n!7
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: 32 4b 21 11 3a 56 78 37 30 73 b7 94 c1 c8 98 c0 b2 76 3c 54 08 04 17 9b 7a a8 40 02 22 57 8d 65 fb 71 92 70 7d 28 1d 19 e7 1d 03 1b c8 c7 bc 12 12 77 bd 49 3b 0d 5d 41 03 c7 86 6f 5a f4 6c 08 96 fc a8 64 28 d6 7e 22 ee 25 ca 0d ba 53 a2 34 e6 86 63 f9 e3 9c bf 04 2f f2 70 3c d3 62 ab c9 6b 1b 5f eb 4f 51 0c 20 67 82 d9 a8 54 b0 a0 6f 77 05 53 94 1e a0 47 cb 86 57 f5 c1 cc 30 4d eb 26 57 cd 03 d6 de 97 cc 34 49 45 d8 13 70 50 b6 58 32 3e 17 00 18 79 18 f1 c1 e8 4b e8 e6 e2 08 39 2c 37 53 d2 4d 38 dd 58 9c 40 43 dd 93 83 5a d9 16 bb 40 e9 d4 5d 06 2f 02 af 62 65 d6 03 78 36 dd b3 75 5e d5 dd 26 7b dc e5 c2 38 ea e0 d8 35 65 b5 8c 3b 56 ee b6 10 e0 48 91 7e ce 76 db 02 df d4 4a e1 ad ae 47 8f 8f e2 86 68 84 e2 c9 4b dd 1d 10 46 85 7b 53 e1 f3 f6 e6 73 92 35 Data Ascii: 2K!:Vx70sv<Tz@"Weqp}(wI;]AoZld(~"%S4c/p<bk_OQ gTowSGW0M&W4IEpPX2>yK9,7SM8X@CZ@]/bex6u^&{85e;VH~vJGhKF{Ss5
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: 32 b1 19 24 55 ce 57 00 4c 1f a4 bc 9b 4b 9c b0 2f 3d fe 21 69 ef 9f 6d 9a 6c 04 02 dd 4f f9 4a 0b 1b aa 4b 93 95 20 d1 ab b3 3c b5 9a a4 24 f1 5b 96 1f f4 04 7d 7b 06 61 55 d6 50 cd 2c e8 c2 06 eb b0 3e 9a 03 d1 16 15 3a be 22 59 79 f9 10 82 ec 64 6e 48 21 cb 4e 59 ce 80 f4 ee 75 81 07 f3 3a 16 71 32 fd 28 47 a3 53 cc 3c 7f 86 1a b1 15 7f 57 7d b5 f0 ff 5c d1 46 9e 2f f9 3f ac 86 d1 92 d6 dc 51 28 1e 38 8d 1f 5e 1a 32 f4 08 90 e0 2a 89 72 64 7b 24 8c 60 af 33 3c ea f9 fd 18 64 7d 74 79 76 21 3b 35 37 5c 37 3f 09 42 2b fb c2 dc c0 18 e5 e7 8b 4a 7f 70 02 b0 e4 d7 01 0e c4 a4 6f 2f 2a 80 38 2e 83 85 93 82 2c 01 66 73 96 c3 5a 37 d9 2d 82 a6 36 a5 50 88 8b 98 0a 94 d2 76 3c ef 49 7e db 39 dc 4c f3 da 05 9b a7 8d a9 6d 93 57 ad 28 8f 53 0c f4 29 84 55 81 1c Data Ascii: 2$UWLK/=!imlOJK <$[}{aUP,>:"YydnH!NYu:q2(GS<W}\F/?Q(8^2rd{$`3<d}tyv!;57\7?B+Jpo/8.,fsZ7-6Pv<I~9LmW(S)U
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: b5 92 c4 ef 06 e4 ed 65 62 97 d7 e2 38 a8 2b eb 7a 54 e1 00 8d 73 12 5f 7d 8f 1f f5 41 0e e0 1a cf 67 a0 93 07 cc e7 9d 31 01 0d 48 28 7d 2c 74 dd ed 25 d4 69 d7 83 cc cb b8 a8 bd 86 da 9c 18 f0 61 fe ed fc 2e a6 a8 9c 9d ae 19 b0 88 3f 4e 74 57 35 82 d8 08 d6 56 69 95 41 3f cc 25 5a fc 7f f6 35 0f f4 6f 48 57 3b 8b 91 1e 6a 80 eb 4a af ba 8d b2 a2 0f 4a 96 2b 13 03 c1 ca e2 6e 18 88 b5 b5 1b a7 1e a3 a3 e0 94 9e a0 10 8c ab b5 9d 92 20 b2 c0 38 3a ce 2b cc 43 6c d1 b7 1b d6 5f b7 da f7 09 ee 34 3f 17 c4 55 21 4c 5f 69 bb e7 94 a3 0b b1 d4 79 98 14 1b a1 c3 4b 1c 15 62 b2 e2 a2 d8 c0 78 77 1e ac 59 e4 93 e0 07 8e 37 e4 41 b4 13 af cd 92 04 94 e5 26 57 99 10 bc 67 0a 6b 33 98 62 0a f4 4a b4 bb 03 17 b0 ee a6 bf b6 2d 02 1f 8f fc a7 fc a4 d1 67 bb 0d db cc Data Ascii: eb8+zTs_}Ag1H(},t%ia.?NtW5ViA?%Z5oHW;jJJ+n 8:+Cl_4?U!L_iyKbxwY7A&Wgk3bJ-g
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: be 92 53 71 49 0d fa 7b 06 a0 b6 3e 94 59 62 2d 60 59 bc ae 24 55 67 f3 23 1b c7 e9 bb e3 7a 35 04 2a fb b3 ef 33 83 76 c7 c4 d7 4e d9 aa 88 a4 54 79 4b 3a 34 3f d5 eb dc 59 23 2f 3d b5 05 f9 38 8b f0 9e 53 c7 a6 b9 b6 e2 5f cf 0e b0 40 ad 3e 59 25 d6 4d c6 24 73 6d e8 ac 64 1a 48 af c5 8f 13 70 28 02 be b9 6a 0e 0d 83 f0 ca df e2 da a8 c5 51 01 b8 65 c0 a1 32 b8 a8 ce 4b 87 2d 9f a1 6e 36 39 4f 6e 0c 2f 24 a0 9f 38 db 46 c4 60 c8 62 ae c7 d7 09 97 78 00 14 00 24 de 93 08 5d 0a d6 94 e4 1b 89 a4 d5 50 93 e2 26 5e 12 e6 8a 51 93 ad c3 e7 de 39 72 ca 5a 36 61 3a c3 e1 d6 21 a0 99 fc e3 10 18 18 bd 98 c6 98 b4 00 51 7b 9e d1 63 11 47 e4 9c ca 23 8e 8a 0a 12 03 8f ad d4 46 aa d6 8b e1 38 da 90 ac 0c fc 29 5d 46 3c 81 76 2e ca 54 53 02 95 df 5b 52 3f b3 44 c2 Data Ascii: SqI{>Yb-`Y$Ug#z5*3vNTyK:4?Y#/=8S_@>Y%M$smdHp(jQe2K-n69On/$8F`bx$]P&^Q9rZ6a:!Q{cG#F8)]F<v.TS[R?D
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: f3 a7 18 d6 fd de db 4a f2 99 cf 39 fb fd cb d8 dd 7b 41 34 59 88 dd 43 cf 96 ff 14 6a ee b7 ca e2 66 d4 8e bc 9e 7e 54 9f b9 9b 34 05 bf f3 c3 c8 2e 65 44 0a 6e 09 1c ec 3a a9 57 14 1d 93 17 cb fc 64 d4 8c d8 0a 5d 56 d4 ff 69 a9 6a 7d 94 dd 5f a2 6f 59 83 81 0e 5d 78 84 5f a2 bc 57 da 78 16 ca 2a f8 bf 26 a0 a0 2c 8f 05 63 6a 32 fa c6 8c c8 16 d8 11 e5 77 ce 12 b1 b7 d6 47 c2 ff 71 97 64 6a ac 7a 2a 8a c0 db e6 b0 90 0d 2b 57 30 e5 1d f2 0c 45 e1 56 80 59 94 53 19 49 2c f0 15 98 38 81 ef 9b e1 76 ff 10 e2 57 72 a5 77 85 49 c5 47 12 03 96 91 a5 39 00 3f c7 7f 88 3a d0 07 2f f8 76 23 13 d5 88 2e 6d 62 6d e1 63 50 f1 ff 17 6e 4a a4 f9 c1 95 32 6b fc bb d0 39 4c 9c 96 f2 ff 3a a8 34 e0 32 58 65 a5 8d ab c1 1e a4 a3 fe 4e 5e e8 22 65 9f d0 da 05 c3 36 4b ad Data Ascii: J9{A4YCjf~T4.eDn:Wd]Vij}_oY]x_Wx&,cj2wGqdjz+W0EVYSI,8vWrwIG9?:/v#.mbmcPnJ2k9L:42XeN^"e6K
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: 64 ef cb 3b 96 26 bc 5d 96 c5 ec 70 e1 ed ef 5d 46 d9 13 45 6f e8 48 6f 1e 05 d5 93 91 0f de 79 93 ae 54 03 15 48 60 be 21 74 ae ab e6 63 62 9f bf bc 22 3a aa e4 17 e6 ae 1d af b7 06 8c 71 c2 3c c4 14 b8 17 89 49 88 d7 07 d8 03 3f 17 20 51 ba 3a d8 c6 b9 3d fd 08 5e 4e 13 64 42 38 3a c5 74 98 09 35 c3 31 99 a1 86 df f1 e7 67 84 23 77 d9 26 3c 1e 87 18 3e ae e9 3b 21 ae ae 9b 45 55 fb 50 61 44 38 9d 68 31 6d 50 e7 9a 03 ce 49 8e a8 03 e2 70 39 5d ec 4e db 03 be 80 28 93 94 ff 76 e4 47 d7 d4 74 a9 32 b7 5b e7 7a 6b a6 5f 50 ba cf 80 c8 c9 55 a6 98 8a 7c 58 c1 04 89 60 e0 8c 7c b4 bf eb 03 5e 48 c2 43 ee af 0c 25 d0 2c d9 84 f1 a7 73 a7 22 a7 bc 08 ec 75 b1 11 9b c3 34 5b 78 1d a6 7a 25 4c a8 58 40 23 29 86 7e 21 08 43 50 eb 0f 4e 08 2e 5a d2 43 1c 57 86 91 Data Ascii: d;&]p]FEoHoyTH`!tcb":q<I? Q:=^NdB8:t51g#w&<>;!EUPaD8h1mPIp9]N(vGt2[zk_PU\|X`\|^HC%,s"u4[xz%LX@#)~!CPN.ZCW
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: af 21 cc 78 21 50 1d fe 57 9e 0c 3b a4 aa f4 0e 7c 9b 69 74 e7 3d e0 8f f3 37 3b 38 d4 2d 2b 33 8f ce 60 4b 6a c8 ab 44 80 77 eb 2e bc ba e0 bc e8 80 55 94 c1 53 1f f8 44 47 6c e6 aa 06 fe 43 ff e0 18 21 85 1f a3 37 17 9e c9 7a e2 12 2d 25 fd 03 c3 56 26 86 43 09 f2 24 45 9d a2 50 03 ad 98 b8 65 f5 be ff 0d cd e7 3e 99 a3 0e 55 9d d0 83 78 09 13 39 47 85 15 32 a7 b1 fe 23 51 8e 48 d8 8e 1e e4 ff 5c e6 5f 73 12 44 bc 9b 42 94 bb f8 ae d3 e4 b8 1f 18 ab cf d2 bf 97 92 0f ac c6 5a 82 3e f6 da bf 1a 21 f1 97 7a 70 71 d7 01 27 04 c6 6e 9a 2c 58 7f d9 78 4e c9 58 e5 86 40 5b ea dd 06 6e 75 95 96 f5 ca d3 c4 9a c5 87 23 9b 3c 30 0b d9 04 da cb 47 2a 24 ee 89 0e 39 04 f1 08 97 a4 ea 01 9d bf 9c 38 3b 9f e7 08 cf 7c a6 d0 e8 dd 20 f7 45 90 cc e2 47 f4 49 15 b0 27 Data Ascii: !x!PW;\|it=7;8-+3`KjDw.USDGlC!7z-%V&C$EPe>Ux9G2#QH\_sDBZ>!zpq'n,XxNX@[nu#<0G*$98;\| EGI'
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: 19 cd 6f fe d1 c7 18 cc 15 99 40 dc d1 b0 34 fb 60 b3 95 a7 51 7b 53 62 52 f2 22 4a 83 fb 7f a2 ec 75 5f a0 1d 90 ec 17 ee d2 54 88 83 b6 39 87 f5 43 00 3f 19 b5 ac 13 72 55 37 52 dd 98 df 72 83 0f 1c eb ca 50 63 68 dd df 14 a0 5f 59 a4 01 3f 31 0b 56 47 0d d3 c0 19 a5 eb b4 65 dc 6e c0 d4 5c 00 28 ac 33 d9 a4 bb 87 67 7b d2 f2 e9 ae 04 72 0a 93 91 ad d8 e9 ae e1 78 b5 05 25 1c 71 fd 93 55 8a b7 17 33 ac 72 b1 fb 8a b2 4f 28 b6 26 e3 1e 80 de 0b 15 26 2c 79 3d b7 67 fd e9 46 f3 b7 84 51 82 be 60 99 65 c6 ab 32 66 28 c5 c7 e2 83 7c 8f 8e 60 be 6b e6 40 5f ce 2d aa 6d b9 b9 61 cf 38 56 4d ec 67 d4 a7 81 a6 0e 04 a1 96 a2 4f 16 54 eb 22 1f b0 31 b0 52 5a ae 6f 54 cd 95 51 7a df 2f 65 91 a4 a9 20 c3 4f b2 da 6e ef 55 54 6c 69 fb 0b 00 f3 f2 7a 48 fa 55 b7 65 Data Ascii: o@4`Q{SbR"Ju_T9C?rU7RrPch_Y?1VGen\(3g{rx%qU3rO(&&,y=gFQ`e2f(\|`k@_-ma8VMgOT"1RZoTQz/e OnUTlizHUe
2024-10-04 12:00:06 UTC	1369	IN	Data Raw: 1e 2b f8 15 57 dc 65 aa ac e0 cf 35 10 8e b6 e8 8d 25 de 4b ff 7a 5f 2a 01 88 5d 2b b1 54 6e 02 69 c0 b1 0e 16 fa 87 2e cb e3 48 d2 7e 87 4d f6 24 72 82 0f bb 1b 4a fb 91 d9 1f 27 cb 58 7d 22 58 61 70 92 f0 5c 20 b5 26 d4 86 1d 25 77 1d 36 28 70 0b 8a b0 c2 86 6b 49 d3 8d 41 9d 94 db 1a 01 f2 07 2e 4f f2 27 7c 12 0f 15 0d 6e d9 03 f5 12 7b 1e 02 12 b8 a3 ef 2c 0f cf 44 c5 17 a1 c3 f4 bd aa 5f c8 31 57 76 46 b2 56 0c d9 ed 16 1f 43 bb c7 23 f9 2a 0c bc df 05 75 b7 f7 25 b2 c4 ea b2 9e e6 54 fe 15 aa fa 1e 7d ca 9f fd 8e e4 7b 26 3b 3f de f0 03 a6 4b 34 b4 08 8c 1d 9e 7d 0b a6 46 22 73 c3 b1 70 a0 6a 22 f3 ab b9 21 cb 02 49 a2 5c 16 09 33 c6 26 16 32 95 47 52 82 12 94 69 b2 d4 0d c5 44 22 de 07 e6 d6 d5 95 9c b3 47 4e 0f 35 22 fe 60 16 a9 3f c5 0e 31 63 bc Data Ascii: +We5%Kz_]+Tni.H~M$rJ'X}"Xap\ &%w6(pkIA.O'\|n{,D_1WvFVC#u%T}{&;?K4}F"spj"!I\3&2GRiD"GN5"`?1c

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:06 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 12:00:07 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=189981 Date: Fri, 04 Oct 2024 12:00:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 12:00:07 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:13 UTC	642	OUT	GET /go HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:13 UTC	739	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u1J8TaHWKTh%2BapU%2BVSGt5wsN4nr%2FEPS6hNDIAIGNymHFEkKElKoqvuzYDq7FL6f18wwy9ITljM1uybbqYqeCJMHquZ9%2B4FU62hvPAuAeKkdBzTYdOUQJY6JHsS0Q%2B%2BLoOewuKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd502a37be24374-EWR
2024-10-04 12:00:13 UTC	166	IN	Data Raw: 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 2e 32 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 72 65 66 65 72 65 6e 63 65 6d 65 6e 2e 6c 69 76 65 2f 6b 74 56 6d 44 56 3f 63 3d 30 32 36 33 4e 6d 41 33 35 78 55 6d 56 45 35 66 62 61 62 65 30 34 63 32 37 61 62 31 66 32 26 75 74 6d 5f 73 6f 75 72 63 65 3d 6e 69 6e 65 22 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 0d 0a Data Ascii: a0<!DOCTYPE html><head><meta http-equiv="refresh" content="0.2;url=https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine"/></head>
2024-10-04 12:00:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ninecasino.com.br/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Windows Analysis Report
https://ninecasino.com.br/

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:13 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ninecasino.com.br/go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:13 UTC	727	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MGEmU70iWhEia4cPjtN70l9Dh6HTutYL8MBCUCd2BBHAbMai41EquDAev6Qw8FUCeudUH1MajDU3LipVEAJJGzEry56Eh2nolYnaYpeeHlvWa4e0qEPSd15Sw3gMvEvf6bWXBw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd502a57a610fa0-EWR
2024-10-04 12:00:13 UTC	642	IN	Data Raw: 34 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6e 65 43 61 73 69 6e 6f 20 73 69 74 65 20 6f 66 69 63 69 61 6c 20 e2 9a a1 20 4d 65 6c 68 6f 72 20 63 61 73 73 69 6e Data Ascii: 4000<!DOCTYPE html><html lang="pt-BR"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="NineCasino site oficial Melhor cassin
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 6f 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 36 30 65 32 61 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 79 73 74 65 6d 2d 75 69 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 52 6f 62 6f 74 6f 2c 20 4f 78 79 67 65 6e 2c 20 55 62 75 6e 74 75 2c 20 43 61 6e 74 61 72 65 6c 6c 2c 20 27 4f 70 65 6e 20 53 61 6e 73 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 27 48 65 6c 76 65 74 69 63 61 20 4e Data Ascii: ox; } body { padding: 0; margin: 0; background-color: #060e2a; font-family: system-ui, -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, 'Open Sans', 'Helvetica N
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 30 65 32 61 3b 0d 0a 20 20 20 20 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 33 32 29 2c 20 30 20 34 70 78 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 34 29 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 68 65 61 64 65 72 5f 5f 69 6e 6e 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 31 35 70 78 20 32 30 70 78 20 39 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 Data Ascii: 0e2a; z-index: 10; box-shadow: 0 0 1px rgba(0, 0, 0, 0.32), 0 4px 8px rgba(0, 0, 0, 0.24); } .header__inner { display: flex; align-items: center; padding: 20px 15px 20px 90px; position: r
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 61 32 61 35 61 66 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 Data Ascii: background-color: #a2a5af; position: absolute; } .menu-burger__label span { width: 100%; } .menu-burger__label::before { width: 16px; } .menu-burger__label::after { width: 1
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 64 30 64 32 64 37 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 35 33 62 35 32 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 Data Ascii: display: flex; align-items: center; padding-left: 10px; color: #d0d2d7; background-color: #353b52; font-weight: 400; padding: 8px; border-radius: 8px; margin-bottom: 8px; }
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 70 78 20 23 63 33 34 62 30 39 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 72 65 67 69 73 74 72 61 74 69 6f 6e 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 36 37 30 32 34 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 61 69 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 36 31 70 78 20 30 20 31 30 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 69 6d 61 67 65 73 2f 6d 61 69 6e 2d 69 6d 67 2e 77 65 62 70 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a Data Ascii: px #c34b09; } .registration:hover { background-color: #f67024; box-shadow: none; } .main { padding: 161px 0 102px; background-image: url('images/main-img.webp'); background-position:
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 3b 0d 0a 20 20 20 20 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 70 75 6c 61 72 5f 5f 69 6d 67 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 70 75 6c 61 72 5f 5f 69 6d 67 3a 68 6f 76 65 72 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 70 75 6c 61 72 5f 5f 69 74 65 6d 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 70 6f 70 75 6c Data Ascii: ; overflow: hidden; } .popular__img img { transition: all 0.5s; } .popular__img:hover img { transform: scale(1.1); } .popular__item span { display: block; } .popul
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0d 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 32 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 Data Ascii: .spoiler__label::before { content: ''; position: absolute; background-color: #fff; top: 50%; transform: translateY(-50%); height: 8px; width: 2px; transition: all 0.3s; }
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 69 6e 70 75 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 20 31 35 70 78 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 Data Ascii: margin-top: 15px; } .questions__input { position: absolute; top: 0; left: 0; opacity: 0; } .questions__label { display: block; padding: 15px 30px 15px 20px; positi
2024-10-04 12:00:13 UTC	1369	IN	Data Raw: 20 23 31 36 31 64 33 37 3b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6d 6d 65 6e 74 73 5f 5f 69 74 65 6d 20 2b 20 2e 63 6f 6d 6d 65 6e 74 73 5f 5f 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6d 6d 65 6e 74 73 5f 5f 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: #161d37; position: relative; } .comments__item + .comments__item { margin-top: 40px; } .comments__info { display: flex; align-items: center; justify-content: space-between;

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:14 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: ninecasino.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:14 UTC	763	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:14 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FIvFD%2FT5I7YlGGltO9ADAqNwuZUOwmc3SoDRmnS4FnM4QuCKJO9nfgFcEeVbh9gEVdkdvjIbzNykKzkzJoIFsk00NiTxlFPtZdhUjk0VaTAmvELoqh1S%2Fe%2BVSDlcsUYLUUAg0A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cd502aaac7c4246-EWR alt-svc: h3=":443"; ma=86400
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 0d 0a 20 20 20 20 20 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 0d 0a 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 4e 69 6e 65 43 61 73 69 6e 6f 20 73 69 74 65 20 6f 66 69 63 69 61 6c 20 e2 9a a1 20 4d 65 6c 68 6f 72 20 63 61 73 73 69 6e Data Ascii: 7ffa<!DOCTYPE html><html lang="pt-BR"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="NineCasino site oficial Melhor cassin
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 20 20 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 68 31 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 33 37 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 68 32 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 39 33 37 35 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 36 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 5f 5f 69 6e 6e 65 72 20 70 20 2b 20 70 20 7b 0d 0a 20 20 Data Ascii: object-fit: cover; } .content__inner h1 { font-size: 2.4375em; margin-bottom: 16px; } .content__inner h2 { font-size: 1.9375em; margin: 16px 0; } .content__inner p + p {
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2c 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 38 30 70 78 20 38 70 78 20 31 36 70 78 20 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 Data Ascii: .menu, .menu-burger__label span { left: 0; } .menu-burger__label { cursor: pointer; } .menu { position: absolute; top: 0px; padding: 80px 8px 16px 8px; box-sh
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 20 73 70 61 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 6d 65 6e 75 2d 62 75 72 67 65 72 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 Data Ascii: .menu-burger__label::before, .menu-burger__label span { content: ''; right: 0; transition: transform 0.3s; } .menu-burger__label::after { top: 0; } .menu-burger__label::before {
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 31 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 68 65 61 64 65 72 5f 5f 62 74 6e 2d 62 6f 78 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 62 74 6e 5f 5f 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 31 70 78 20 38 70 78 20 31 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 Data Ascii: z-index: 11; } .header__btn-box { margin-left: auto; } .btn__link { padding: 6px 11px 8px 11px; font-size: 14px; font-weight: 600; border-radius: 16px; color: #fff;
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 20 2e 6d 61 69 6e 5f 5f 62 74 6e 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 34 70 78 20 37 34 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 35 73 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 33 34 62 30 39 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 Data Ascii: .main__btn { padding: 14px 74px; transition: all 0.5s; background-color: #c34b09; color: #fff; font-size: 18px; border-radius: 1000px; border: none; margin-top: 20px; }
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 37 30 32 34 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 65 32 36 35 63 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 33 70 78 20 72 67 62 28 32 32 38 2c 20 38 38 2c 20 39 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 33 70 78 20 72 67 62 61 28 32 32 38 2c 20 38 38 2c 20 39 29 3b 0d 0a 20 20 Data Ascii: 7024; } .spoiler { background: #0e265c; margin: 30px 0; border-radius: 25px; max-width: 70%; box-shadow: 0 0 8px 3px rgb(228, 88, 9); -webkit-box-shadow: 0 0 8px 3px rgba(228, 88, 9);
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 75 6e 74 65 72 2d 72 65 73 65 74 3a 20 6c 69 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 73 70 6f 69 6c 65 72 5f 5f 6c 69 73 74 2d 69 74 65 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0d 0a Data Ascii: none; } .spoiler__list { list-style: none; counter-reset: li; padding-left: 30px; } .spoiler__list-item { font-weight: 700; } .spoiler__list-item { margin-top: 10px;
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 63 6f 6e 74 65 6e 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 36 31 64 33 37 3b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 2e 71 75 65 73 74 69 6f 6e 73 5f 5f 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e Data Ascii: } .questions__label::before { right: 30px; transform: rotate(-45deg); } .questions__content { padding: 20px; background: #161d37; display: block; } .questions__input:checked ~
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 74 74 6f 6d 3a 20 2d 31 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 33 25 3b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 64 35 36 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 20 33 30 70 78 20 36 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 Data Ascii: position: absolute; bottom: -15px; right: 3%; background-color: #222d56; border: none; color: #fff; padding: 7px 30px 6px; font-size: 18px; border-radius: 5px; transiti

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:14 UTC	738	OUT	GET /ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine HTTP/1.1 Host: referencemen.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:14 UTC	1279	IN	HTTP/1.1 403 Forbidden Date: Fri, 04 Oct 2024 12:00:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 9329 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-04 12:00:14 UTC	382	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 46 30 59 55 73 52 49 55 42 63 76 2b 43 44 67 32 6f 45 55 39 32 62 2b 37 4b 56 2b 79 2f 6f 71 5a 58 47 73 53 62 64 74 70 50 70 4e 56 30 71 30 6a 70 32 4d 77 35 77 74 6c 6e 30 51 4d 41 56 4f 46 53 74 56 59 37 70 33 70 66 52 4b 73 61 78 5a 37 4c 41 41 51 77 64 69 73 4b 65 74 37 70 4f 2f 4c 58 4c 62 65 45 36 5a 45 77 71 62 4d 6d 74 65 4a 70 33 42 55 65 51 36 5a 7a 43 50 74 50 4e 31 61 36 51 6a 6e 42 70 61 6b 77 71 64 63 54 50 74 4a 49 31 67 46 56 51 3d 3d 24 4b 7a 66 64 44 57 69 39 52 73 37 47 75 75 61 55 42 56 50 4f 41 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: F0YUsRIUBcv+CDg2oEU92b+7KV+y/oqZXGsSbdtpPpNV0q0jp2Mw5wtln0QMAVOFStVY7p3pfRKsaxZ7LAAQwdisKet7pO/LXLbeE6ZEwqbMmteJp3BUeQ6ZzCPtPN1a6QjnBpakwqdcTPtJI1gFVQ==$KzfdDWi9Rs7GuuaUBVPOAA==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2024-10-04 12:00:14 UTC	1077	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 6d 39 75 5a 53 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 30 49 79 4d 45 59 77 4d 79 49 67 5a 44 30 69 54 54 45 32 49 44 4e 68 4d 54 4d 67 4d 54 4d 67 4d 43 41 78 49 44 41 67 4d 54 4d 67 4d 54 4e 42 4d 54 4d 75 4d 44 45 31 49 44 45 7a 4c 6a 41 78 4e 53 41 77 49 44 41 67 4d 43 41 78 4e 69 41 7a 62 54 41 67 4d 6a 52 68 4d 54 45 67 4d 54 45 67 4d 43 41 78 49 44 45 67 4d 54 45 74 4d 54 45 67 4d 54 45 75 4d 44 45 67 4d 54 45 75 4d 44 45 67 4d 43 41 77 49 44 45 74 4d 54 45 67 4d 54 45 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 51 6a 49 77 52 6a 41 7a 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4d 44 4d 34 49 44 45 34 4c 6a 59 78 4e 55 67 78 4e 43 34 34 4e 30 77 78 4e 43 34 31 4e 6a 4d 67 4f 53 34 31 61 44 49 75 4e 7a 67 7a 65 6d 30 74 Data Ascii: m9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0t
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 5f 71 4c 36 42 76 6a 50 56 2e 65 74 44 6b 4f 4b 77 65 5f 49 2e 43 71 53 61 37 35 5f 69 44 7a 6b 46 70 63 2d 31 37 32 38 30 34 33 32 31 34 2d 30 2e 30 2e 31 2e 31 2d 34 36 39 32 22 2c 6d 64 3a 20 22 52 68 5f 42 76 50 73 6b 73 58 32 48 50 79 65 69 61 57 42 5f 76 44 48 56 38 61 38 78 6a 37 73 35 66 55 43 31 73 4f 44 32 54 66 30 2d 31 37 32 38 30 34 33 32 31 34 2d 31 2e 31 2e 31 2e 31 2d 30 4c 57 4d 54 38 71 72 39 35 6c 4f 4e 43 65 59 37 56 73 6d 58 32 36 45 49 31 52 2e 72 67 54 31 33 59 65 75 42 63 67 54 6f 71 73 53 50 34 38 35 6b 44 57 42 73 70 53 55 76 49 67 7a 66 75 69 36 67 68 46 66 53 7a 73 66 51 51 73 34 51 59 4a 4a 71 63 30 70 33 58 53 79 56 73 63 4a 79 6d 48 37 30 31 73 76 34 65 37 45 34 31 37 57 61 69 2e 70 6e 4a 51 68 4f 4f 6e 46 48 37 42 66 38 58 Data Ascii: _qL6BvjPV.etDkOKwe_I.CqSa75_iDzkFpc-1728043214-0.0.1.1-4692",md: "Rh_BvPsksX2HPyeiaWB_vDHV8a8xj7s5fUC1sOD2Tf0-1728043214-1.1.1.1-0LWMT8qr95lONCeY7VsmX26EI1R.rgT13YeuBcgToqsSP485kDWBspSUvIgzfui6ghFfSzsfQQs4QYJJqc0p3XSyVscJymH701sv4e7E417Wai.pnJQhOOnFH7Bf8X
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 72 39 30 4d 77 56 68 4f 5f 68 4e 5f 30 4a 43 47 66 78 41 56 42 58 30 31 69 35 62 4f 63 4e 43 42 35 75 66 4e 35 54 5a 41 51 35 59 4a 68 44 36 44 79 73 65 75 5f 74 6d 6a 35 35 36 45 72 69 7a 33 32 52 32 58 6d 47 57 77 59 38 37 63 41 54 34 65 44 52 35 76 58 65 6e 70 31 7a 37 6f 4f 74 58 74 65 32 62 4b 53 65 75 52 45 36 4f 68 38 41 79 49 4a 53 4e 6b 77 35 73 30 48 4c 33 68 4e 65 76 78 33 61 78 49 73 49 51 6c 67 42 69 43 4f 72 58 43 70 4b 72 41 6e 57 6a 5f 6a 58 5f 4f 47 31 4b 46 51 76 68 31 74 31 79 39 53 6d 48 55 4d 30 6a 75 37 52 5a 56 4f 32 61 34 66 32 58 4b 63 45 6d 37 6e 33 41 2e 67 77 57 66 69 47 78 30 41 67 56 4f 42 54 31 4b 31 35 31 44 42 6a 58 63 41 70 70 6d 33 7a 34 36 51 63 50 64 6a 65 42 54 37 73 74 43 6d 79 5f 79 69 75 77 57 4c 6f 57 61 69 72 64 Data Ascii: r90MwVhO_hN_0JCGfxAVBX01i5bOcNCB5ufN5TZAQ5YJhD6Dyseu_tmj556Eriz32R2XmGWwY87cAT4eDR5vXenp1z7oOtXte2bKSeuRE6Oh8AyIJSNkw5s0HL3hNevx3axIsIQlgBiCOrXCpKrAnWj_jX_OG1KFQvh1t1y9SmHUM0ju7RZVO2a4f2XKcEm7n3A.gwWfiGx0AgVOBT1K151DBjXcAppm3z46QcPdjeBT7stCmy_yiuwWLoWaird
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 72 36 4a 55 37 68 70 75 36 72 58 55 34 5f 69 51 33 39 44 38 59 6b 50 79 4e 4d 43 4b 4f 52 69 55 54 61 66 34 79 50 68 62 4b 64 4e 57 73 73 6d 78 6d 65 35 75 65 31 64 32 6e 4f 64 47 57 35 62 6e 72 4f 6b 53 48 51 39 45 41 5a 5a 46 45 30 6f 77 6c 66 43 55 35 68 38 52 58 55 4b 7a 61 74 4b 53 53 6f 6d 4f 6d 75 4c 76 48 79 4c 35 4e 55 62 55 50 6d 69 35 67 63 34 6f 2e 50 74 4d 4f 7a 63 34 45 71 6f 57 4d 49 35 64 5a 35 67 57 45 51 57 42 6d 4f 47 36 47 7a 48 52 78 57 35 32 31 37 35 61 61 39 64 56 7a 36 61 6d 6e 6c 74 7a 71 4e 70 46 72 6f 59 67 2e 32 6a 5a 71 2e 65 43 50 76 59 4b 4e 5a 74 6e 4d 33 61 56 59 46 6b 43 44 46 58 30 7a 78 53 66 6a 7a 71 72 72 55 54 57 59 35 59 30 57 70 44 2e 66 73 35 43 65 41 6d 4c 4f 38 4a 44 6a 33 56 71 71 75 67 57 47 43 6f 6e 39 48 2e Data Ascii: r6JU7hpu6rXU4_iQ39D8YkPyNMCKORiUTaf4yPhbKdNWssmxme5ue1d2nOdGW5bnrOkSHQ9EAZZFE0owlfCU5h8RXUKzatKSSomOmuLvHyL5NUbUPmi5gc4o.PtMOzc4EqoWMI5dZ5gWEQWBmOG6GzHRxW52175aa9dVz6amnltzqNpFroYg.2jZq.eCPvYKNZtnM3aVYFkCDFX0zxSfjzqrrUTWY5Y0WpD.fs5CeAmLO8JDj3VqqugWGCon9H.
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 7a 46 45 46 51 48 48 48 39 4c 75 79 37 44 53 76 50 77 50 69 33 69 68 61 64 67 6f 34 4d 2e 34 57 36 4a 74 43 6a 67 62 61 55 72 6b 46 31 50 6a 4c 69 66 4b 68 68 73 30 47 4c 44 76 6a 76 76 32 37 6a 51 33 4d 39 4d 41 69 6c 63 51 79 56 48 76 4d 6e 6c 50 2e 42 72 68 52 55 4f 63 51 33 32 56 31 66 63 47 33 69 70 46 4a 43 6e 79 6c 65 4b 30 7a 56 34 58 32 4f 35 52 54 32 5f 74 58 46 49 4d 62 41 4b 6c 46 72 4f 66 59 65 47 4c 70 37 50 58 65 56 7a 6c 76 5a 49 4b 54 72 4a 43 5f 76 75 70 48 6d 63 4f 53 4f 64 68 64 34 37 50 59 45 57 5f 73 56 71 76 61 35 7a 32 4a 63 66 50 68 48 72 38 4f 58 63 66 57 5f 64 41 33 76 6d 59 68 38 52 5a 45 42 58 4d 62 63 44 56 73 70 6c 50 6c 6f 38 75 77 65 38 43 71 43 64 71 75 72 58 48 5f 68 4f 66 54 32 67 4b 49 6b 56 61 68 77 53 65 73 64 50 4d Data Ascii: zFEFQHHH9Luy7DSvPwPi3ihadgo4M.4W6JtCjgbaUrkF1PjLifKhhs0GLDvjvv27jQ3M9MAilcQyVHvMnlP.BrhRUOcQ32V1fcG3ipFJCnyleK0zV4X2O5RT2_tXFIMbAKlFrOfYeGLp7PXeVzlvZIKTrJC_vupHmcOSOdhd47PYEW_sVqva5z2JcfPhHr8OXcfW_dA3vmYh8RZEBXMbcDVsplPlo8uwe8CqCdqurXH_hOfT2gKIkVahwSesdPM
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 4b 53 73 32 54 6f 6b 6b 72 4a 33 56 52 6d 61 6c 56 5a 52 33 35 45 50 46 71 66 51 43 58 37 44 6d 61 6c 59 63 4b 52 66 4f 54 50 6a 5a 47 36 37 54 36 61 37 4d 51 73 64 68 4f 70 37 2f 50 45 4e 6a 65 46 58 70 35 74 48 68 68 56 62 79 48 41 2b 38 4c 73 6f 6f 73 2b 50 33 70 56 6f 47 79 64 61 6a 4d 42 43 6f 4f 6a 31 56 62 79 6f 35 57 69 6d 4a 52 70 36 32 4c 6d 72 36 47 6c 4a 46 32 31 56 2f 62 52 52 46 36 33 65 30 72 5a 39 4a 55 70 47 37 2b 63 31 73 67 27 2c 74 3a 20 27 4d 54 63 79 4f 44 41 30 4d 7a 49 78 4e 43 34 77 4d 44 41 77 4d 44 41 3d 27 2c 63 54 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 20 2f 20 31 30 30 30 29 2c 6d 3a 20 27 7a 6c 45 38 43 68 66 50 42 49 57 6b 30 5a 77 50 41 4f 62 62 34 69 35 38 66 73 35 65 71 6a 74 47 4c 75 50 44 Data Ascii: KSs2TokkrJ3VRmalVZR35EPFqfQCX7DmalYcKRfOTPjZG67T6a7MQsdhOp7/PENjeFXp5tHhhVbyHA+8Lsoos+P3pVoGydajMBCoOj1Vbyo5WimJRp62Lmr6GlJF21V/bRRF63e0rZ9JUpG7+c1sg',t: 'MTcyODA0MzIxNC4wMDAwMDA=',cT: Math.floor(Date.now() / 1000),m: 'zlE8ChfPBIWk0ZwPAObb4i58fs5eqjtGLuPD
2024-10-04 12:00:14 UTC	38	IN	Data Raw: 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: hild(cpo);}());</script></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:14 UTC	1010	OUT	GET /ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine HTTP/1.1 Host: referencemen.live Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ninecasino.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:14 UTC	1279	IN	HTTP/1.1 403 Forbidden Date: Fri, 04 Oct 2024 12:00:14 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 9457 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-04 12:00:14 UTC	382	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 2f 38 44 43 77 2f 73 2b 32 7a 77 76 4b 51 65 51 56 6c 59 6b 78 31 76 32 31 5a 30 66 48 62 37 6b 6e 58 61 39 33 39 2f 46 5a 37 42 50 6f 61 56 47 58 38 50 4d 33 68 71 63 6a 59 71 54 2f 68 69 41 58 32 4b 30 44 51 51 69 54 7a 65 4a 55 59 56 6c 77 39 6c 74 48 68 78 2b 54 41 43 48 47 6f 57 73 66 64 56 55 75 70 66 72 46 70 37 7a 64 43 77 33 38 45 41 76 41 48 75 62 50 42 49 41 49 59 52 4b 56 77 6e 49 44 52 32 67 47 34 30 46 50 4f 53 61 63 6d 61 58 57 77 3d 3d 24 4e 6b 62 6f 5a 42 77 59 69 67 31 4f 33 66 44 73 46 4b 30 59 49 51 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: /8DCw/s+2zwvKQeQVlYkx1v21Z0fHb7knXa939/FZ7BPoaVGX8PM3hqcjYqT/hiAX2K0DQQiTzeJUYVlw9ltHhx+TACHGoWsfdVUupfrFp7zdCw38EAvAHubPBIAIYRKVwnIDR2gG40FPOSacmaXWw==$NkboZBwYig1O3fDsFK0YIQ==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2024-10-04 12:00:14 UTC	1077	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 6d 39 75 5a 53 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 30 49 79 4d 45 59 77 4d 79 49 67 5a 44 30 69 54 54 45 32 49 44 4e 68 4d 54 4d 67 4d 54 4d 67 4d 43 41 78 49 44 41 67 4d 54 4d 67 4d 54 4e 42 4d 54 4d 75 4d 44 45 31 49 44 45 7a 4c 6a 41 78 4e 53 41 77 49 44 41 67 4d 43 41 78 4e 69 41 7a 62 54 41 67 4d 6a 52 68 4d 54 45 67 4d 54 45 67 4d 43 41 78 49 44 45 67 4d 54 45 74 4d 54 45 67 4d 54 45 75 4d 44 45 67 4d 54 45 75 4d 44 45 67 4d 43 41 77 49 44 45 74 4d 54 45 67 4d 54 45 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 51 6a 49 77 52 6a 41 7a 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4d 44 4d 34 49 44 45 34 4c 6a 59 78 4e 55 67 78 4e 43 34 34 4e 30 77 78 4e 43 34 31 4e 6a 4d 67 4f 53 34 31 61 44 49 75 4e 7a 67 7a 65 6d 30 74 Data Ascii: m9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0t
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 67 54 6a 79 66 7a 6f 34 45 4d 79 56 55 5f 58 47 4d 74 77 69 66 55 79 6b 2e 47 57 53 69 73 63 67 4e 4c 49 2d 31 37 32 38 30 34 33 32 31 34 2d 30 2e 30 2e 31 2e 31 2d 34 38 32 30 22 2c 6d 64 3a 20 22 48 57 59 6d 4c 52 57 55 62 74 78 56 45 54 68 32 44 73 65 72 36 39 47 4c 53 45 57 6c 30 5a 62 51 2e 41 4a 54 61 44 5f 6b 4f 32 6b 2d 31 37 32 38 30 34 33 32 31 34 2d 31 2e 31 2e 31 2e 31 2d 41 42 54 6e 6c 4d 57 67 30 71 65 59 6c 4a 53 65 42 61 41 45 50 37 64 61 73 6b 4b 49 48 70 75 47 50 53 51 7a 43 4e 65 33 69 65 77 6a 62 7a 59 42 64 35 71 6d 4e 61 50 50 54 65 79 76 4d 61 55 76 6f 49 4f 58 72 51 47 6a 39 79 63 44 38 68 65 46 46 75 57 77 69 4a 71 72 5f 44 77 73 41 79 72 54 34 70 45 71 4e 34 56 45 37 55 39 45 68 56 32 71 4f 73 46 6c 65 6d 5f 47 62 33 45 32 49 34 Data Ascii: gTjyfzo4EMyVU_XGMtwifUyk.GWSiscgNLI-1728043214-0.0.1.1-4820",md: "HWYmLRWUbtxVETh2Dser69GLSEWl0ZbQ.AJTaD_kO2k-1728043214-1.1.1.1-ABTnlMWg0qeYlJSeBaAEP7daskKIHpuGPSQzCNe3iewjbzYBd5qmNaPPTeyvMaUvoIOXrQGj9ycD8heFFuWwiJqr_DwsAyrT4pEqN4VE7U9EhV2qOsFlem_Gb3E2I4
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 30 61 52 4f 56 74 58 47 62 44 66 67 49 33 36 78 77 71 32 72 74 5f 4a 76 31 4d 47 53 53 72 75 76 7a 70 6a 4f 48 69 4c 4e 53 43 4b 30 4b 31 59 4a 2e 30 67 2e 52 73 65 46 4c 6e 38 53 73 46 63 6e 77 46 6d 71 4e 4f 69 5a 57 4c 49 48 69 7a 54 6e 4d 4c 54 4f 4e 45 43 78 4d 61 66 44 78 49 70 4d 32 36 49 7a 4e 35 74 47 78 59 55 41 48 68 50 53 52 6c 69 64 46 79 4e 6e 5a 6a 79 31 66 6e 49 32 73 61 72 4d 77 5f 69 78 76 66 33 6c 65 62 37 46 39 30 50 74 77 6b 41 52 78 68 49 53 50 66 58 51 39 5a 41 33 4f 62 54 4f 39 54 4f 68 4e 73 46 6e 61 46 49 6a 50 6c 50 2e 38 39 35 33 78 61 51 42 5f 5a 35 32 4c 57 77 43 57 78 64 6a 38 32 49 62 4f 6f 58 4b 78 36 37 6e 34 37 51 42 2e 39 2e 63 45 77 4e 38 67 50 62 68 4d 2e 51 62 42 5a 4e 72 62 6d 32 35 64 78 4c 53 58 69 36 64 33 38 36 Data Ascii: 0aROVtXGbDfgI36xwq2rt_Jv1MGSSruvzpjOHiLNSCK0K1YJ.0g.RseFLn8SsFcnwFmqNOiZWLIHizTnMLTONECxMafDxIpM26IzN5tGxYUAHhPSRlidFyNnZjy1fnI2sarMw_ixvf3leb7F90PtwkARxhISPfXQ9ZA3ObTO9TOhNsFnaFIjPlP.8953xaQB_Z52LWwCWxdj82IbOoXKx67n47QB.9.cEwN8gPbhM.QbBZNrbm25dxLSXi6d386
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 74 4f 70 6b 37 34 6e 47 6b 75 4b 47 51 71 71 59 79 33 46 37 57 33 58 50 43 57 51 67 76 41 70 65 35 53 36 7a 61 68 6b 6d 6e 54 6c 59 35 4f 4c 5a 38 48 54 52 6a 4b 6e 77 43 76 74 36 50 42 77 43 50 4d 71 53 79 68 34 63 54 63 58 73 76 74 33 46 39 2e 53 76 75 53 78 63 63 6f 48 74 5f 76 37 6d 7a 42 52 58 48 33 76 69 74 45 72 6c 78 49 69 6b 6c 68 4d 62 54 33 79 74 50 6c 4f 59 55 76 37 62 53 4d 46 34 54 6c 4d 72 6e 78 65 4a 30 65 31 78 46 50 5a 6b 65 59 5a 69 6e 59 48 6e 49 59 79 74 44 7a 63 6c 61 68 37 6c 32 35 30 6f 39 45 45 6a 65 61 33 6e 6f 54 54 53 68 52 6b 43 4c 54 73 38 38 64 53 31 31 31 7a 6a 69 6b 77 71 4c 50 57 61 74 5f 5a 34 65 65 39 7a 46 33 7a 71 30 56 59 4c 54 52 5a 57 6c 6f 5a 2e 37 59 36 65 44 4f 74 67 62 35 75 4d 59 46 6d 46 75 34 49 37 4f 35 68 Data Ascii: tOpk74nGkuKGQqqYy3F7W3XPCWQgvApe5S6zahkmnTlY5OLZ8HTRjKnwCvt6PBwCPMqSyh4cTcXsvt3F9.SvuSxccoHt_v7mzBRXH3vitErlxIiklhMbT3ytPlOYUv7bSMF4TlMrnxeJ0e1xFPZkeYZinYHnIYytDzclah7l250o9EEjea3noTTShRkCLTs88dS111zjikwqLPWat_Z4ee9zF3zq0VYLTRZWloZ.7Y6eDOtgb5uMYFmFu4I7O5h
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 2e 46 31 59 37 30 78 2e 64 57 78 75 49 38 54 6c 62 76 50 68 6c 34 4a 76 38 32 7a 6b 6b 43 54 67 56 66 76 39 43 59 37 69 47 50 2e 59 72 6b 69 78 54 31 37 68 45 6f 4c 44 53 7a 5f 49 4a 2e 58 38 68 48 45 6d 78 55 7a 5a 38 6b 2e 41 47 34 69 50 44 62 70 68 71 4f 31 72 51 54 69 74 55 50 67 56 4a 50 56 6b 71 4c 67 72 76 4f 43 4f 54 63 71 73 51 65 63 66 42 6b 56 37 73 50 63 76 41 48 4b 4e 5f 57 56 47 46 75 6f 71 62 5a 76 4b 36 72 62 72 4a 5f 72 70 79 37 38 37 2e 53 48 46 36 2e 78 70 36 53 39 4d 79 70 67 70 4f 34 34 38 36 51 36 43 4e 67 41 68 46 75 5a 6f 6f 69 71 43 77 43 6f 50 48 59 53 70 55 6b 30 44 47 45 2e 71 57 70 71 4c 73 66 31 56 34 4a 65 47 54 65 54 41 6f 4d 43 6d 6b 45 31 74 5a 46 43 6b 2e 55 44 6e 42 46 57 73 54 69 55 54 62 53 43 36 54 5f 6d 46 4b 31 55 Data Ascii: .F1Y70x.dWxuI8TlbvPhl4Jv82zkkCTgVfv9CY7iGP.YrkixT17hEoLDSz_IJ.X8hHEmxUzZ8k.AG4iPDbphqO1rQTitUPgVJPVkqLgrvOCOTcqsQecfBkV7sPcvAHKN_WVGFuoqbZvK6rbrJ_rpy787.SHF6.xp6S9MypgpO4486Q6CNgAhFuZooiqCwCoPHYSpUk0DGE.qWpqLsf1V4JeGTeTAoMCmkE1tZFCk.UDnBFWsTiUTbSC6T_mFK1U
2024-10-04 12:00:14 UTC	1369	IN	Data Raw: 42 6a 69 31 57 35 58 6b 49 68 59 53 31 69 6f 37 51 6c 6c 2f 63 4f 58 37 6c 48 6f 31 4c 4c 62 59 62 33 6b 56 33 6c 70 54 48 54 4b 63 37 49 6c 7a 2b 30 4d 75 48 66 66 4d 37 57 79 45 75 5a 44 4e 43 45 5a 5a 62 59 41 75 6d 32 63 63 4e 35 59 6c 39 76 52 68 36 57 32 6b 4c 36 53 66 65 6e 6e 57 73 71 46 54 59 46 54 63 62 42 48 6c 33 37 35 65 63 33 42 49 61 43 4a 41 32 59 51 35 41 5a 4d 44 39 65 64 7a 4e 53 70 67 73 31 61 45 35 6d 53 4f 54 54 53 2b 38 30 4e 67 74 63 58 67 65 62 2f 69 70 67 66 62 39 65 2b 66 6d 57 76 62 77 52 54 41 61 6f 48 41 66 78 6d 4c 54 61 57 6b 67 48 61 62 67 68 34 6d 58 4e 79 2b 73 52 52 41 34 6f 64 7a 68 45 57 50 6d 54 44 6f 6d 4b 50 63 46 47 48 37 77 35 7a 57 72 6e 79 56 5a 59 73 58 42 4a 31 76 6d 57 6a 4f 6d 49 48 49 54 4a 4c 4f 38 2f 31 Data Ascii: Bji1W5XkIhYS1io7Qll/cOX7lHo1LLbYb3kV3lpTHTKc7Ilz+0MuHffM7WyEuZDNCEZZbYAum2ccN5Yl9vRh6W2kL6SfennWsqFTYFTcbBHl375ec3BIaCJA2YQ5AZMD9edzNSpgs1aE5mSOTTS+80NgtcXgeb/ipgfb9e+fmWvbwRTAaoHAfxmLTaWkgHabgh4mXNy+sRRA4odzhEWPmTDomKPcFGH7w5zWrnyVZYsXBJ1vmWjOmIHITJLO8/1
2024-10-04 12:00:14 UTC	166	IN	Data Raw: 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: _opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName('head')[0].appendChild(cpo);}());</script></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:15 UTC	1004	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=8cd502ac2e7a41ac HTTP/1.1 Host: referencemen.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine&__cf_chl_rt_tk=uflYX6g8gTjyfzo4EMyVU_XGMtwifUyk.GWSiscgNLI-1728043214-0.0.1.1-4820 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:15 UTC	301	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 159081 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8cd502b07d68159b-EWR
2024-10-04 12:00:15 UTC	1068	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 71 5a 4a 79 54 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.uaSR=true;window._cf_chl_opt.qZJyT2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"}
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 61 25 33 45 25 32 30 74 6f 25 32 30 74 72 79 25 32 30 61 67 61 69 6e 2e 25 32 30 49 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 25 32 30 61 74 74 65 6d 70 74 25 32 30 61 25 32 30 64 69 66 66 65 72 65 6e 74 25 32 30 6c 69 6e 6b 25 32 30 74 6f 25 32 30 67 65 74 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 64 65 73 69 72 65 64 25 32 30 70 61 67 65 2e 25 32 30 41 6c 74 65 72 6e 61 74 69 76 65 6c 79 25 32 43 25 32 30 74 72 79 25 32 30 67 6f 69 6e 67 25 32 30 74 6f 25 32 30 74 68 65 25 32 30 72 6f 6f 74 25 32 30 6f 66 25 32 30 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 2e 22 2c 22 62 72 6f 77 73 65 72 5f 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 5f 61 75 78 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f Data Ascii: a%3E%20to%20try%20again.%20If%20the%20issue%20persists%20attempt%20a%20different%20link%20to%20get%20to%20the%20desired%20page.%20Alternatively%2C%20try%20going%20to%20the%20root%20of%20%25%7Bplaceholder.com%7D.","browser_not_supported_aux":"%25%7Bplaceho
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 25 32 30 62 65 65 6e 25 32 30 66 6c 61 67 67 65 64 25 32 30 61 73 25 32 30 61 25 32 30 62 6f 74 2e 25 32 30 54 72 79 25 32 30 72 65 73 65 74 74 69 6e 67 25 32 30 79 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 6f 72 25 32 30 69 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 25 32 38 65 2e 67 2e 25 32 30 72 6f 75 74 65 72 25 32 39 2e 25 32 30 46 6f 72 25 32 30 61 64 64 69 74 69 6f 6e 61 6c 25 32 30 61 73 73 69 73 74 61 6e 63 65 25 32 43 25 32 30 63 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 6f 77 6e 65 72 73 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 72 65 70 6f 72 74 20 68 61 73 20 62 65 65 6e 20 73 Data Ascii: %20been%20flagged%20as%20a%20bot.%20Try%20resetting%20your%20device%20or%20internet%20connection%20%28e.g.%20router%29.%20For%20additional%20assistance%2C%20contact%20the%20site%20owners.","feedback_report_output_subtitle":"Your feedback report has been s
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 Data Ascii: 3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 2d 73 7d 2c 67 5b 67 44 28 34 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 26 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 65 4d 5b 67 44 28 31 30 35 36 29 5d 5b 67 44 28 31 30 39 36 29 5d 2b 27 5f 27 2b 30 2c 6c 3d 6c 5b 67 44 28 31 33 34 35 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 67 45 29 7b 67 45 3d 67 44 2c 6a 5e 3d 6c 5b 67 45 28 31 30 31 33 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 67 44 28 33 31 34 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 67 44 28 31 30 31 33 29 5d 28 2b 2b 69 29 29 3b 6b 5b 67 44 28 32 35 35 29 5d 28 53 74 72 69 6e 67 5b 67 44 28 33 35 32 29 5d 28 68 5b 67 44 28 33 37 34 29 5d 28 68 5b 67 44 28 31 31 35 39 29 5d 28 68 Data Ascii: urn n-s},g[gD(404)]=function(n,s){return n&s},h=g,m,j=32,l=eM[gD(1056)][gD(1096)]+'_'+0,l=l[gD(1345)](/./g,function(n,s,gE){gE=gD,j^=l[gE(1013)](s)}),f=eM[gD(314)](f),k=[],i=-1;!isNaN(m=f[gD(1013)](++i));k[gD(255)](String[gD(352)](h[gD(374)](h[gD(1159)](h
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 6f 5b 68 67 28 31 31 31 30 29 5d 28 73 2c 6f 5b 68 67 28 31 31 34 33 29 5d 28 69 2c 44 29 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 66 29 7b 68 66 3d 62 2c 4f 62 6a 65 63 74 5b 68 66 28 31 30 34 37 29 5d 5b 68 66 28 31 33 30 38 29 5d 5b 68 66 28 33 32 38 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 66 28 32 35 35 29 5d 28 47 29 7d 7d 2c 66 6e 3d 67 43 28 31 30 32 33 29 5b 67 43 28 31 33 30 39 29 5d 28 27 3b 27 29 2c 66 6f 3d 66 6e 5b 67 43 28 37 33 34 29 5d 5b 67 43 28 36 36 37 29 5d 28 66 6e 29 2c 65 4d 5b 67 43 28 31 32 36 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 68 69 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 Data Ascii: (i,D),h[D])):o[hg(1110)](s,o[hg(1143)](i,D),E),C++);return j;function s(G,H,hf){hf=b,Object[hf(1047)][hf(1308)][hf(328)](j,H)\|\|(j[H]=[]),j[H][hf(255)](G)}},fn=gC(1023)[gC(1309)](';'),fo=fn[gC(734)][gC(667)](fn),eM[gC(1265)]=function(g,h,hi,i,j,k,l,m){for(
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 68 7d 2c 27 64 67 6f 74 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 56 41 66 72 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 50 49 53 63 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 76 76 75 50 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 49 65 42 69 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 48 4b 54 4b 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 5a 79 68 67 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 4d 76 79 68 4f 27 3a 66 75 6e Data Ascii: h},'dgotA':function(h,i){return h-i},'VAfrf':function(h,i){return i==h},'PISca':function(h,i){return h-i},'vvuPb':function(h,i){return h-i},'IeBic':function(h,i){return i*h},'HKTKT':function(h,i){return h!=i},'ZyhgF':function(h,i){return i!=h},'MvyhO':fun
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 2b 50 7d 2c 27 6c 70 7a 59 71 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 2c 68 6e 29 7b 72 65 74 75 72 6e 20 68 6e 3d 62 2c 64 5b 68 6e 28 33 33 34 29 5d 28 4f 2c 50 2c 51 29 7d 2c 27 4b 4f 49 73 65 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 3e 3e 3e 50 7d 2c 27 42 50 59 41 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 68 6f 29 7b 72 65 74 75 72 6e 20 68 6f 3d 62 2c 64 5b 68 6f 28 38 39 33 29 5d 28 4f 2c 50 29 7d 2c 27 4d 56 6d 71 54 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 68 70 29 7b 72 65 74 75 72 6e 20 68 70 3d 62 2c 64 5b 68 70 28 36 38 39 29 5d 28 4f 2c 50 29 7d 2c 27 6d 42 58 77 74 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 Data Ascii: :function(O,P){return O+P},'lpzYq':function(O,P,Q,hn){return hn=b,d[hn(334)](O,P,Q)},'KOIse':function(O,P){return O>>>P},'BPYAl':function(O,P,ho){return ho=b,d[ho(893)](O,P)},'MVmqT':function(O,P,hp){return hp=b,d[hp(689)](O,P)},'mBXwt':function(O,P,Q){re
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 68 74 28 34 37 36 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 68 74 28 31 33 37 32 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 4e 26 31 7c 49 3c 3c 31 2e 39 34 2c 4a 3d 3d 64 5b 68 74 28 38 39 33 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 68 74 28 32 35 35 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 64 5b 68 74 28 35 33 38 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 68 74 28 31 33 37 32 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 Data Ascii: 5)](o(I)),I=0):J++,N>>=1,x++);}E--,d[ht(476)](0,E)&&(E=Math[ht(1372)](2,G),G++),delete C[D]}}else for(N=B[D],x=0;x<G;I=N&1\|I<<1.94,J==d[ht(893)](j,1)?(J=0,H[ht(255)](o(I)),I=0):J++,N>>=1,x++);D=(E--,d[ht(538)](0,E)&&(E=Math[ht(1372)](2,G),G++),B[M]=F++,St
2024-10-04 12:00:15 UTC	1369	IN	Data Raw: 3a 52 5b 30 5d 3d 62 63 28 62 64 2c 52 5b 30 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 5a 3d 52 5b 36 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 52 5b 35 5d 3d 62 69 28 61 30 2c 52 5b 35 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 52 5b 31 5d 3d 62 65 28 61 34 2c 52 5b 31 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 61 30 3d 52 5b 35 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 66 6f 72 28 55 3d 30 3b 36 34 3e 55 3b 55 2b 2b 29 7b 28 61 31 3d 55 2c 73 5b 68 74 28 33 32 36 29 5d 28 31 36 2c 55 29 29 3f 61 32 3d 62 6c 5b 73 5b 68 74 28 31 32 39 37 29 5d 28 55 2c 54 29 5d 3a 61 32 3d 28 61 32 3d 53 5b 55 2d 32 5d 2c 61 32 3d 73 5b 68 74 28 38 30 35 29 5d 28 62 4c 2c 61 32 2c 31 37 Data Ascii: :R[0]=bc(bd,R[0]);continue;case'6':Z=R[6];continue;case'7':R[5]=bi(a0,R[5]);continue;case'8':R[1]=be(a4,R[1]);continue;case'9':a0=R[5];continue;case'10':for(U=0;64>U;U++){(a1=U,s[ht(326)](16,U))?a2=bl[s[ht(1297)](U,T)]:a2=(a2=S[U-2],a2=s[ht(805)](bL,a2,17

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:16 UTC	1118	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1295177611:1728041245:yAZDvNt_YG2aJL_IlMtGwBK3qcynseOFvsmnXhlMYbA/8cd502ac2e7a41ac/7cfb2d6dbf89b79 HTTP/1.1 Host: referencemen.live Connection: keep-alive Content-Length: 2079 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" CF-Challenge: 7cfb2d6dbf89b79 sec-ch-ua-platform: "Windows" Accept: / Origin: https://referencemen.live Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:16 UTC	2079	OUT	Data Raw: 76 5f 38 63 64 35 30 32 61 63 32 65 37 61 34 31 61 63 3d 66 62 70 4b 38 4b 63 4b 62 4b 6c 4b 24 25 32 62 78 58 2b 78 39 4b 73 79 34 54 4b 74 71 6f 2b 62 34 6d 65 78 4e 4b 67 36 24 71 6d 77 7a 70 78 66 2b 78 78 62 2b 2b 78 69 4b 2b 70 2d 65 78 72 7a 6c 78 7a 47 6d 48 4d 38 47 2b 64 39 7a 48 72 47 6d 31 78 76 70 78 4a 58 37 4c 6f 78 66 78 78 55 7a 78 31 4b 78 62 45 78 6d 38 6e 6e 68 78 39 41 42 6e 39 6c 32 69 2b 71 78 41 78 67 6e 4a 50 6c 78 34 7a 62 78 39 2b 42 62 37 39 4c 38 6b 51 62 78 54 36 72 56 51 78 48 30 64 2b 78 78 79 78 50 45 73 31 6a 6b 58 32 41 41 78 56 79 57 68 56 4f 52 5a 4d 37 30 51 78 7a 41 33 78 48 7a 65 6d 2b 39 51 78 78 45 78 2b 47 6d 72 32 70 78 57 67 68 31 34 34 4b 6d 58 58 44 74 69 30 30 41 69 68 6e 6c 56 78 6d 45 47 36 72 78 78 4d 34 Data Ascii: v_8cd502ac2e7a41ac=fbpK8KcKbKlK$%2bxX+x9Ksy4TKtqo+b4mexNKg6$qmwzpxf+xxb++xiK+p-exrzlxzGmHM8G+d9zHrGm1xvpxJX7LoxfxxUzx1KxbExm8nnhx9ABn9l2i+qxAxgnJPlx4zbx9+Bb79L8kQbxT6rVQxH0d+xxyxPEs1jkX2AAxVyWhVORZM70QxzA3xHzem+9QxxEx+Gmr2pxWgh144KmXXDti00AihnlVxmEG6rxxM4
2024-10-04 12:00:16 UTC	296	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:16 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 16304 Connection: close cf-chl-gen: +KNa/cX6GgpaAlwNkcS8kweYLWdHiCNniQo1nbAi/D1xzHpir+ZrgHP7HHMU6jgzFsnhSp5LlQ==$5qDqM3TBA8AawURN Server: cloudflare CF-RAY: 8cd502b90e3a41bb-EWR
2024-10-04 12:00:16 UTC	1073	IN	Data Raw: 6b 70 61 5a 66 5a 6d 61 69 70 47 4e 77 35 4b 58 6c 4a 7a 41 69 4a 7a 41 79 4b 79 67 71 6f 32 77 70 4b 2f 45 79 61 57 7a 74 74 6d 76 72 72 50 4a 79 37 75 65 34 63 48 42 70 72 57 35 30 37 50 62 32 4c 65 75 75 63 72 6d 35 61 37 45 37 71 33 34 78 37 4c 6f 34 38 37 38 79 75 72 6f 76 65 50 35 37 66 62 50 38 76 48 43 30 39 50 32 78 2f 6b 4e 2f 4f 37 53 41 68 54 56 45 4f 67 4d 42 42 50 52 47 63 38 51 2f 68 2f 34 2b 65 73 69 2b 51 48 5a 34 50 34 43 48 69 6f 59 4a 2b 48 6f 42 65 77 50 4e 41 73 73 42 44 66 79 50 43 37 38 45 44 77 63 2b 43 38 61 47 7a 76 38 46 41 41 70 53 55 70 48 4a 67 59 73 52 79 63 6e 4a 6b 63 48 54 7a 5a 50 46 54 42 55 57 52 74 62 50 6c 30 68 58 53 4a 64 59 55 4e 65 53 57 49 2f 50 44 31 62 61 32 56 6c 51 54 45 7a 52 30 51 74 62 6a 52 6a 61 6e 70 Data Ascii: kpaZfZmaipGNw5KXlJzAiJzAyKygqo2wpK/EyaWzttmvrrPJy7ue4cHBprW507Pb2Leuucrm5a7E7q34x7Lo4878yuroveP57fbP8vHC09P2x/kN/O7SAhTVEOgMBBPRGc8Q/h/4+esi+QHZ4P4CHioYJ+HoBewPNAssBDfyPC78EDwc+C8aGzv8FAApSUpHJgYsRycnJkcHTzZPFTBUWRtbPl0hXSJdYUNeSWI/PD1ba2VlQTEzR0QtbjRjanp
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 36 2b 31 30 75 54 68 36 64 76 45 78 75 6d 32 34 4e 76 6a 33 64 44 52 79 39 37 4c 34 4e 53 31 75 63 2f 59 32 76 76 41 37 75 4c 4f 7a 39 2f 50 77 67 62 44 2f 73 58 4a 41 77 7a 4a 44 65 51 52 7a 2b 72 73 7a 41 54 69 41 68 48 30 47 51 73 4c 46 2f 51 58 44 39 38 67 32 78 4c 6d 41 4f 63 70 42 43 30 4e 2f 53 2f 76 4a 67 63 7a 4c 78 45 53 38 54 51 69 2b 76 76 38 4d 76 44 33 41 42 30 6b 2b 67 55 52 4d 6b 67 63 53 78 63 46 51 55 39 4f 45 43 4d 51 52 51 5a 43 4e 55 67 57 44 79 49 33 4a 68 51 39 4c 68 30 63 4f 46 73 38 52 6c 49 79 57 32 42 61 56 45 6b 6f 4a 7a 74 66 54 56 74 76 56 55 31 31 64 44 45 76 53 44 63 31 4c 32 39 73 50 6b 78 63 62 58 4e 79 64 55 4f 49 67 6f 5a 57 51 33 68 33 5a 49 36 41 6a 32 65 43 6b 70 65 41 6b 4a 6c 7a 5a 35 79 4b 69 61 42 64 6e 48 32 59 Data Ascii: 6+10uTh6dvExum24Nvj3dDRy97L4NS1uc/Y2vvA7uLOz9/PwgbD/sXJAwzJDeQRz+rszATiAhH0GQsLF/QXD98g2xLmAOcpBC0N/S/vJgczLxES8TQi+vv8MvD3AB0k+gURMkgcSxcFQU9OECMQRQZCNUgWDyI3JhQ9Lh0cOFs8RlIyW2BaVEkoJztfTVtvVU11dDEvSDc1L29sPkxcbXNydUOIgoZWQ3h3ZI6Aj2eCkpeAkJlzZ5yKiaBdnH2Y
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 50 6e 70 63 50 4b 72 39 37 69 38 72 48 54 7a 50 47 74 39 76 50 44 31 4d 62 37 2f 63 2b 79 7a 75 71 2f 31 4c 33 38 31 67 6e 53 2b 64 2f 56 78 41 6e 66 45 66 76 39 32 78 58 64 44 65 62 78 32 42 66 6d 39 65 58 73 48 75 7a 39 36 78 67 65 45 79 51 6b 4b 43 73 73 36 77 72 34 4a 53 7a 74 4d 43 37 70 44 66 55 58 42 51 49 6e 2b 41 34 59 50 7a 77 5a 43 69 50 34 47 77 45 47 48 78 77 36 4a 50 78 4b 4a 54 5a 47 49 67 30 77 4b 41 78 4d 54 6a 52 47 51 54 45 6c 52 54 77 6d 46 6c 6f 5a 50 57 49 65 4e 68 78 6e 49 31 56 72 59 69 68 5a 58 31 6f 76 62 54 38 70 59 57 35 44 58 32 6c 42 4d 56 4a 34 55 56 59 32 58 48 4b 41 55 46 30 38 64 56 42 6a 56 59 6c 61 5a 32 53 42 57 6e 39 48 5a 34 46 4f 5a 57 46 55 56 55 74 73 68 46 70 7a 66 57 74 63 6a 56 79 4d 59 35 39 31 6c 47 65 55 70 Data Ascii: PnpcPKr97i8rHTzPGt9vPD1Mb7/c+yzuq/1L381gnS+d/VxAnfEfv92xXdDebx2Bfm9eXsHuz96xgeEyQkKCss6wr4JSztMC7pDfUXBQIn+A4YPzwZCiP4GwEGHxw6JPxKJTZGIg0wKAxMTjRGQTElRTwmFloZPWIeNhxnI1VrYihZX1ovbT8pYW5DX2lBMVJ4UVY2XHKAUF08dVBjVYlaZ2SBWn9HZ4FOZWFUVUtshFpzfWtcjVyMY591lGeUp
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 79 77 72 48 56 78 63 6e 52 35 4d 6a 78 34 39 72 7a 31 73 66 4e 75 76 76 41 7a 37 7a 58 39 2f 67 4a 33 63 48 74 2f 50 6e 70 41 74 44 69 36 76 45 42 44 51 41 58 46 76 6e 76 46 76 76 63 43 39 38 4d 44 39 73 45 48 79 67 61 42 2b 48 71 35 66 63 42 2f 69 37 39 37 42 49 4b 44 67 55 47 49 51 67 35 42 78 33 38 43 69 63 56 4e 52 51 35 4d 79 38 64 2b 42 4d 68 53 45 52 45 50 7a 59 33 52 6a 49 53 54 53 67 66 44 69 4a 5a 4d 6b 30 61 57 7a 4e 4b 4c 53 77 37 58 47 52 4e 55 6d 41 38 50 47 68 43 52 45 30 39 50 31 78 6c 62 45 51 70 53 6e 5a 4f 58 30 46 56 53 55 68 51 4f 48 39 39 55 48 49 36 55 34 42 44 59 6c 42 43 59 58 6d 46 65 6f 4a 39 6a 59 52 68 57 35 4f 4b 68 4a 56 55 61 59 68 59 64 33 64 59 62 70 6d 4d 6a 56 78 68 58 32 43 56 68 48 32 57 63 32 52 69 70 71 46 38 70 6e Data Ascii: ywrHVxcnR5Mjx49rz1sfNuvvAz7zX9/gJ3cHt/PnpAtDi6vEBDQAXFvnvFvvcC98MD9sEHygaB+Hq5fcB/i797BIKDgUGIQg5Bx38CicVNRQ5My8d+BMhSEREPzY3RjISTSgfDiJZMk0aWzNKLSw7XGRNUmA8PGhCRE09P1xlbEQpSnZOX0FVSUhQOH99UHI6U4BDYlBCYXmFeoJ9jYRhW5OKhJVUaYhYd3dYbpmMjVxhX2CVhH2Wc2RipqF8pn
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 7a 63 37 43 35 37 75 76 79 74 6e 4a 31 63 71 38 38 64 62 44 35 65 48 47 38 39 62 4c 41 66 37 4d 44 50 45 4f 30 38 73 51 36 2b 76 6b 45 2b 72 6d 39 4f 62 77 36 65 67 55 33 2b 37 61 35 66 73 6a 42 76 49 4b 39 65 7a 6a 47 41 2f 6d 4c 65 73 78 38 2f 49 53 4e 67 34 52 47 6a 33 38 4d 76 51 2b 44 79 4d 56 52 43 31 47 4e 44 34 6f 52 77 51 33 46 68 30 66 4c 31 41 4a 4c 51 59 76 56 30 31 52 4e 7a 55 79 57 44 77 6e 4e 55 78 5a 53 6c 46 44 51 43 42 47 58 6b 63 6c 61 32 30 71 59 57 52 6b 4d 54 31 67 51 30 52 41 4c 53 6f 78 51 32 68 34 65 6b 59 31 64 46 78 35 56 47 77 33 58 46 52 2f 68 46 64 6a 52 49 71 4f 67 49 71 47 53 6f 65 4b 58 58 46 72 56 33 6d 45 62 4a 71 58 6d 6e 78 58 59 59 75 57 6f 58 6d 6d 63 5a 43 67 6f 6f 56 6b 6e 61 65 72 6d 70 39 71 70 4a 4b 42 6c 57 6d Data Ascii: zc7C57uvytnJ1cq88dbD5eHG89bLAf7MDPEO08sQ6+vkE+rm9Obw6egU3+7a5fsjBvIK9ezjGA/mLesx8/ISNg4RGj38MvQ+DyMVRC1GND4oRwQ3Fh0fL1AJLQYvV01RNzUyWDwnNUxZSlFDQCBGXkcla20qYWRkMT1gQ0RALSoxQ2h4ekY1dFx5VGw3XFR/hFdjRIqOgIqGSoeKXXFrV3mEbJqXmnxXYYuWoXmmcZCgooVknaermp9qpJKBlWm
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 4d 6a 79 7a 4e 44 59 37 39 54 6c 2b 4d 6a 36 41 4d 51 48 33 63 67 52 34 51 76 51 7a 64 51 52 7a 73 33 6e 41 2f 63 64 45 39 50 7a 31 2f 55 54 44 53 54 6b 39 50 33 6d 2f 43 66 79 4c 43 33 70 2f 75 37 72 48 65 77 64 37 69 67 30 45 2f 49 78 42 68 6b 4b 42 6a 63 30 49 42 4c 35 4f 69 41 41 4d 6a 4c 2b 42 54 70 41 4a 79 63 76 44 6a 30 36 51 79 55 56 4c 30 6f 33 49 79 38 55 4e 6c 45 65 56 54 4d 34 47 43 4d 30 49 79 45 37 61 44 46 5a 58 6d 59 74 58 32 4e 51 53 6d 5a 64 58 7a 41 30 62 6c 68 77 5a 6c 42 59 61 30 68 59 66 33 4e 77 57 46 31 68 55 45 5a 43 58 47 56 6b 69 56 31 5a 57 59 39 50 6a 32 79 55 66 32 56 6e 54 34 69 61 68 47 68 37 69 6e 52 53 6e 56 53 68 58 36 42 6b 6f 32 4a 62 6f 33 4e 71 71 6f 32 72 62 34 5a 73 61 6d 35 73 6e 36 70 79 73 5a 53 6d 75 47 2b 33 Data Ascii: MjyzNDY79Tl+Mj6AMQH3cgR4QvQzdQRzs3nA/cdE9Pz1/UTDSTk9P3m/CfyLC3p/u7rHewd7ig0E/IxBhkKBjc0IBL5OiAAMjL+BTpAJycvDj06QyUVL0o3Iy8UNlEeVTM4GCM0IyE7aDFZXmYtX2NQSmZdXzA0blhwZlBYa0hYf3NwWF1hUEZCXGVkiV1ZWY9Pj2yUf2VnT4iahGh7inRSnVShX6Bko2Jbo3Nqqo2rb4Zsam5sn6pysZSmuG+3
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 76 69 38 38 6a 55 43 63 63 4a 34 50 7a 4a 77 76 72 2b 79 2b 6a 6b 41 74 66 4f 37 41 54 55 47 4e 50 39 33 65 41 4c 2b 78 45 46 44 78 41 70 49 77 48 6b 4b 52 63 76 4c 65 63 65 4b 79 44 78 35 67 76 32 38 69 51 76 4f 50 6a 38 38 7a 4c 34 41 42 45 5a 4d 52 77 64 4e 66 34 7a 49 54 77 46 4f 52 30 33 54 7a 34 64 4c 41 34 54 45 46 56 5a 4b 42 68 59 53 56 6b 78 54 52 68 4f 50 54 30 6a 55 44 4d 64 47 6d 4e 42 54 43 56 70 50 79 39 66 62 6b 46 66 59 43 63 32 4c 53 39 31 52 56 67 32 50 44 78 6e 50 30 45 38 50 6b 42 79 58 58 49 36 59 47 6c 6b 52 58 71 48 6a 55 70 52 61 58 31 4c 56 58 46 69 6d 57 69 57 5a 49 6d 49 57 6c 46 61 56 34 2b 51 6b 46 75 54 68 32 4f 55 59 49 78 73 6d 71 46 68 5a 35 70 6f 68 6d 32 72 6e 33 46 79 6a 72 4f 6e 75 70 4f 50 63 58 31 7a 77 36 31 39 75 Data Ascii: vi88jUCccJ4PzJwvr+y+jkAtfO7ATUGNP93eAL+xEFDxApIwHkKRcvLeceKyDx5gv28iQvOPj88zL4ABEZMRwdNf4zITwFOR03Tz4dLA4TEFVZKBhYSVkxTRhOPT0jUDMdGmNBTCVpPy9fbkFfYCc2LS91RVg2PDxnP0E8PkByXXI6YGlkRXqHjUpRaX1LVXFimWiWZImIWlFaV4+QkFuTh2OUYIxsmqFhZ5pohm2rn3FyjrOnupOPcX1zw619u
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 74 31 65 72 4c 42 2f 6f 49 36 51 6a 39 36 63 33 31 7a 2f 67 4c 2b 64 7a 35 45 75 34 56 32 75 44 7a 49 67 63 56 46 67 59 66 2f 66 67 4e 44 79 63 75 4c 69 30 77 46 51 63 53 46 44 45 77 47 51 59 57 45 44 63 4c 47 44 6b 51 4a 52 6b 62 41 78 45 32 4a 69 55 5a 42 52 70 51 47 43 74 51 4a 68 30 4d 52 6b 4d 55 44 30 4a 58 58 56 63 39 4f 42 64 51 53 7a 70 43 5a 45 56 55 55 46 30 32 59 45 56 68 4f 32 5a 50 50 30 4e 73 59 6c 4a 7a 51 33 42 46 61 6b 64 71 55 6c 73 39 62 57 45 2f 64 48 52 41 59 49 64 36 57 57 42 6c 65 57 35 59 5a 59 52 35 62 46 79 44 64 45 39 75 55 55 2b 50 61 58 42 50 69 35 5a 63 6b 35 46 63 6b 36 5a 64 57 59 56 62 6c 36 4b 72 70 5a 69 70 67 71 4b 4c 72 6f 69 31 63 62 65 69 6c 4b 79 6e 6b 48 57 72 69 33 6d 2f 71 36 42 38 76 35 47 6b 73 70 47 34 76 4b Data Ascii: t1erLB/oI6Qj96c31z/gL+dz5Eu4V2uDzIgcVFgYf/fgNDycuLi0wFQcSFDEwGQYWEDcLGDkQJRkbAxE2JiUZBRpQGCtQJh0MRkMUD0JXXVc9OBdQSzpCZEVUUF02YEVhO2ZPP0NsYlJzQ3BFakdqUls9bWE/dHRAYId6WWBleW5YZYR5bFyDdE9uUU+PaXBPi5Zck5Fck6ZdWYVbl6KrpZipgqKLroi1cbeilKynkHWri3m/q6B8v5GkspG4vK
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 35 4f 76 52 39 76 44 7a 31 68 77 51 48 50 76 7a 2b 42 30 42 44 78 72 6b 38 2b 62 68 46 50 77 5a 36 52 58 6b 42 67 41 4a 48 51 67 4d 41 42 54 31 37 77 51 55 4a 78 49 46 4c 42 67 4f 4e 7a 63 39 52 52 6b 6a 42 68 51 6d 53 78 34 68 46 79 64 42 49 30 73 78 44 43 49 51 4c 6b 30 6b 43 31 67 58 47 54 52 50 54 6c 67 73 50 78 39 59 49 46 63 68 4e 69 68 53 4e 54 63 72 52 45 55 70 59 31 34 77 52 6c 46 4d 56 46 64 4a 65 46 56 73 4f 46 34 31 64 6e 6c 30 65 33 70 2f 68 33 70 57 56 59 70 4c 66 6e 31 4e 54 59 65 49 54 49 65 47 5a 34 4a 78 6b 6b 39 75 65 4a 47 63 6d 58 64 76 64 70 2b 56 6d 61 4b 54 67 6c 71 55 70 35 57 6e 65 6e 32 72 62 32 2b 46 6e 32 61 78 6a 6e 57 54 70 49 69 79 63 37 71 4e 66 4c 71 58 6f 59 2b 44 65 35 47 55 77 4b 57 63 6f 35 65 62 6c 71 4b 51 7a 59 75 Data Ascii: 5OvR9vDz1hwQHPvz+B0BDxrk8+bhFPwZ6RXkBgAJHQgMABT17wQUJxIFLBgONzc9RRkjBhQmSx4hFydBI0sxDCIQLk0kC1gXGTRPTlgsPx9YIFchNihSNTcrREUpY14wRlFMVFdJeFVsOF41dnl0e3p/h3pWVYpLfn1NTYeITIeGZ4Jxkk9ueJGcmXdvdp+VmaKTglqUp5Wnen2rb2+Fn2axjnWTpIiyc7qNfLqXoY+De5GUwKWco5eblqKQzYu

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:16 UTC	917	OUT	GET /favicon.ico HTTP/1.1 Host: referencemen.live Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://referencemen.live/ktVmDV?c=0263NmA35xUmVE5fbabe04c27ab1f2&utm_source=nine Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:16 UTC	1279	IN	HTTP/1.1 403 Forbidden Date: Fri, 04 Oct 2024 12:00:16 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 9119 Connection: close Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Critical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cross-Origin-Embedder-Policy: require-corp Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() Referrer-Policy: same-origin X-Content-Options: nosniff X-Frame-Options: SAMEORIGIN cf-mitigated: challenge
2024-10-04 12:00:16 UTC	382	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 34 69 68 4f 30 35 59 7a 6e 52 51 6e 5a 78 48 6d 68 38 59 5a 72 56 69 45 61 6a 76 71 49 4d 6f 32 68 31 55 56 4b 64 76 7a 67 63 55 2b 50 42 4e 32 64 6a 50 55 37 37 62 52 71 41 35 55 57 31 6a 4d 37 45 53 6d 53 39 79 56 70 55 39 58 49 78 41 51 36 4e 35 39 2f 51 5a 59 53 73 70 54 63 6d 43 4b 4b 34 36 6e 74 4f 6d 33 50 6e 59 54 57 68 48 6c 31 78 6a 6a 4f 65 35 42 53 51 59 61 4e 55 50 6d 75 4a 71 76 65 74 69 47 69 46 68 4b 32 44 54 38 34 74 73 36 7a 41 3d 3d 24 6d 41 4c 70 41 43 65 37 72 42 6b 44 5a 4b 61 38 63 65 32 47 65 67 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: 4ihO05YznRQnZxHmh8YZrViEajvqIMo2h1UVKdvzgcU+PBN2djPU77bRqA5UW1jM7ESmS9yVpU9XIxAQ6N59/QZYSspTcmCKK46ntOm3PnYTWhHl1xjjOe5BSQYaNUPmuJqvetiGiFhK2DT84ts6zA==$mALpACe7rBkDZKa8ce2Geg==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2024-10-04 12:00:16 UTC	1077	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 6d 39 75 5a 53 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 30 49 79 4d 45 59 77 4d 79 49 67 5a 44 30 69 54 54 45 32 49 44 4e 68 4d 54 4d 67 4d 54 4d 67 4d 43 41 78 49 44 41 67 4d 54 4d 67 4d 54 4e 42 4d 54 4d 75 4d 44 45 31 49 44 45 7a 4c 6a 41 78 4e 53 41 77 49 44 41 67 4d 43 41 78 4e 69 41 7a 62 54 41 67 4d 6a 52 68 4d 54 45 67 4d 54 45 67 4d 43 41 78 49 44 45 67 4d 54 45 74 4d 54 45 67 4d 54 45 75 4d 44 45 67 4d 54 45 75 4d 44 45 67 4d 43 41 77 49 44 45 74 4d 54 45 67 4d 54 45 69 4c 7a 34 38 63 47 46 30 61 43 42 6d 61 57 78 73 50 53 49 6a 51 6a 49 77 52 6a 41 7a 49 69 42 6b 50 53 4a 4e 4d 54 63 75 4d 44 4d 34 49 44 45 34 4c 6a 59 78 4e 55 67 78 4e 43 34 34 4e 30 77 78 4e 43 34 31 4e 6a 4d 67 4f 53 34 31 61 44 49 75 4e 7a 67 7a 65 6d 30 74 Data Ascii: m9uZSI+PHBhdGggZmlsbD0iI0IyMEYwMyIgZD0iTTE2IDNhMTMgMTMgMCAxIDAgMTMgMTNBMTMuMDE1IDEzLjAxNSAwIDAgMCAxNiAzbTAgMjRhMTEgMTEgMCAxIDEgMTEtMTEgMTEuMDEgMTEuMDEgMCAwIDEtMTEgMTEiLz48cGF0aCBmaWxsPSIjQjIwRjAzIiBkPSJNMTcuMDM4IDE4LjYxNUgxNC44N0wxNC41NjMgOS41aDIuNzgzem0t
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 36 4e 66 53 70 56 67 36 6f 65 68 38 52 39 32 71 6c 41 4a 30 6b 2d 31 37 32 38 30 34 33 32 31 36 2d 31 2e 31 2e 31 2e 31 2d 4f 6b 5a 4e 50 7a 73 66 37 69 49 69 70 53 30 54 43 73 35 66 42 50 39 4d 6b 6d 36 37 30 52 68 4e 47 4d 55 32 6b 6e 36 53 44 50 68 71 66 6d 69 38 44 4e 67 71 57 53 4d 4b 78 4b 76 42 45 46 61 55 6d 31 33 51 34 65 46 36 63 6b 30 79 4d 54 6c 57 39 75 7a 77 43 43 51 54 5f 33 46 69 52 72 71 4a 41 33 63 63 51 41 75 6f 41 51 57 6e 74 50 4f 56 69 42 50 63 49 41 58 6e 64 4a 55 61 31 6b 47 68 52 6c 41 78 67 68 6c 36 2e 65 4a 68 76 51 4e 54 58 6c 35 55 72 4a 68 54 4d 6c 44 42 39 45 6d 77 77 2e 6e 6f 63 49 59 58 64 6f 41 37 50 78 4d 6d 41 52 6a 32 55 4e 61 63 63 7a 35 36 73 38 43 71 4f 72 54 52 33 57 73 70 66 4b 6c 36 59 67 62 6b 65 61 6a 53 4c 56 Data Ascii: 6NfSpVg6oeh8R92qlAJ0k-1728043216-1.1.1.1-OkZNPzsf7iIipS0TCs5fBP9Mkm670RhNGMU2kn6SDPhqfmi8DNgqWSMKxKvBEFaUm13Q4eF6ck0yMTlW9uzwCCQT_3FiRrqJA3ccQAuoAQWntPOViBPcIAXndJUa1kGhRlAxghl6.eJhvQNTXl5UrJhTMlDB9Emww.nocIYXdoA7PxMmARj2UNaccz56s8CqOrTR3WspfKl6YgbkeajSLV
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 77 45 4e 72 36 35 77 34 6d 77 69 62 4d 4e 45 36 6a 30 54 6c 59 57 44 56 43 77 67 7a 48 68 42 68 57 71 55 76 43 2e 4b 42 50 6a 58 62 4b 46 46 6c 4e 4c 33 58 54 47 74 77 61 32 71 41 4d 77 74 45 31 36 76 77 42 50 57 52 6c 6c 39 33 48 51 69 45 71 2e 4c 6a 79 46 33 4f 6e 2e 42 50 4e 39 67 48 5f 64 41 73 7a 65 37 48 70 5a 44 54 4e 51 4a 6b 6c 78 39 73 7a 68 32 47 50 7a 66 67 6a 4f 57 30 5a 35 64 71 5f 39 4e 31 67 59 4d 51 42 5f 32 5f 33 4e 76 73 43 44 31 51 55 34 42 4e 2e 63 67 79 37 38 42 5a 79 61 47 74 79 64 59 53 63 50 4a 68 6a 67 74 4d 76 71 78 58 46 79 57 6e 72 65 64 5a 2e 38 39 52 36 42 56 35 39 43 6b 39 63 43 74 46 76 51 5f 45 55 5a 63 57 75 75 49 56 63 59 6f 36 35 74 38 45 31 57 58 67 79 64 50 2e 49 41 34 74 36 53 2e 38 66 56 74 57 31 53 5f 54 58 63 71 Data Ascii: wENr65w4mwibMNE6j0TlYWDVCwgzHhBhWqUvC.KBPjXbKFFlNL3XTGtwa2qAMwtE16vwBPWRll93HQiEq.LjyF3On.BPN9gH_dAsze7HpZDTNQJklx9szh2GPzfgjOW0Z5dq_9N1gYMQB_2_3NvsCD1QU4BN.cgy78BZyaGtydYScPJhjgtMvqxXFyWnredZ.89R6BV59Ck9cCtFvQ_EUZcWuuIVcYo65t8E1WXgydP.IA4t6S.8fVtW1S_TXcq
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 47 37 38 71 47 68 65 71 34 38 69 6d 58 57 78 71 49 38 37 58 2e 6b 65 78 5a 4f 54 42 44 33 64 74 49 38 5a 2e 53 34 6f 68 43 50 43 4e 6a 41 6d 5f 54 39 67 77 73 36 4f 4d 62 76 45 70 5a 5a 6d 45 45 46 44 4c 4f 6d 71 46 74 6c 6a 63 30 64 73 78 78 76 72 6a 42 66 75 43 6f 41 71 71 6e 38 4b 6a 36 6c 2e 34 34 65 63 6c 4e 70 57 5a 64 65 58 4a 50 76 37 6a 37 56 6a 6e 42 76 53 65 4e 31 6e 65 35 57 4e 6d 63 75 6c 57 64 66 52 63 4b 46 54 38 6d 42 74 65 4d 5f 57 44 45 4c 4c 56 63 39 33 75 38 47 31 79 73 6e 30 47 41 39 78 69 77 49 4e 4b 61 76 32 65 73 51 43 47 64 50 47 44 63 68 75 32 52 45 77 4b 67 4e 42 5f 69 63 56 49 33 44 39 77 75 78 71 48 4b 61 65 63 51 30 57 4f 49 4d 56 53 2e 30 47 63 71 75 42 7a 54 61 68 77 70 58 4e 55 5f 36 6c 32 4b 4b 66 71 55 56 5a 6a 35 6a 43 Data Ascii: G78qGheq48imXWxqI87X.kexZOTBD3dtI8Z.S4ohCPCNjAm_T9gws6OMbvEpZZmEEFDLOmqFtljc0dsxxvrjBfuCoAqqn8Kj6l.44eclNpWZdeXJPv7j7VjnBvSeN1ne5WNmculWdfRcKFT8mBteM_WDELLVc93u8G1ysn0GA9xiwINKav2esQCGdPGDchu2REwKgNB_icVI3D9wuxqHKaecQ0WOIMVS.0GcquBzTahwpXNU_6l2KKfqUVZj5jC
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 54 4d 31 6e 57 55 63 51 37 52 30 6e 59 73 57 54 70 5a 4b 54 37 33 6a 45 31 50 50 75 6b 55 71 5a 72 5a 61 44 35 72 63 62 45 59 58 5f 52 76 45 56 6b 4a 55 70 79 30 61 44 54 42 76 58 4b 59 74 38 34 6e 63 74 41 77 6a 68 67 6e 78 68 32 36 64 4d 6a 2e 36 78 4e 61 7a 69 62 49 45 30 36 46 6f 4f 39 6a 2e 42 46 62 78 44 66 72 64 66 4e 55 67 65 32 73 52 44 33 67 4c 74 39 36 74 71 41 62 2e 74 57 5f 47 4e 5a 56 77 33 6b 35 66 7a 46 79 43 75 30 47 75 56 79 34 37 41 66 58 69 4a 4f 63 6b 30 66 33 41 2e 55 47 4c 56 4c 71 72 54 55 67 51 61 55 35 77 33 35 4a 79 4a 6e 52 4d 6f 34 57 54 4f 63 2e 42 66 4b 55 31 44 5f 46 77 4c 6a 77 47 4a 43 37 74 55 4e 63 71 7a 79 57 4a 79 58 39 4b 49 73 49 63 72 5f 4c 2e 39 68 50 33 53 4b 52 47 49 46 7a 6a 41 36 33 32 62 57 69 32 37 6c 50 38 Data Ascii: TM1nWUcQ7R0nYsWTpZKT73jE1PPukUqZrZaD5rcbEYX_RvEVkJUpy0aDTBvXKYt84nctAwjhgnxh26dMj.6xNazibIE06FoO9j.BFbxDfrdfNUge2sRD3gLt96tqAb.tW_GNZVw3k5fzFyCu0GuVy47AfXiJOck0f3A.UGLVLqrTUgQaU5w35JyJnRMo4WTOc.BfKU1D_FwLjwGJC7tUNcqzyWJyX9KIsIcr_L.9hP3SKRGIFzjA632bWi27lP8
2024-10-04 12:00:16 UTC	1197	IN	Data Raw: 78 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 2c 63 54 3a 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 20 2f 20 31 30 30 30 29 2c 6d 3a 20 27 50 50 42 39 70 74 4f 44 57 47 4f 56 37 38 35 44 49 69 49 69 75 48 44 58 53 6d 48 57 55 43 5a 30 78 4b 4f 58 4f 46 4a 45 47 78 55 3d 27 2c 69 31 3a 20 27 4b 41 2b 53 73 72 73 46 33 39 34 67 62 4d 31 34 6d 36 61 4e 72 67 3d 3d 27 2c 69 32 3a 20 27 4c 50 68 5a 79 61 69 43 54 46 30 33 51 7a 35 30 48 58 4a 65 49 51 3d 3d 27 2c 7a 68 3a 20 27 78 53 6c 43 51 33 35 50 36 35 4b 58 66 44 4a 53 75 49 73 6e 37 45 42 2b 4a 56 44 51 42 57 49 76 34 58 65 75 35 48 4f 39 39 74 6f 3d 27 2c 75 68 3a 20 27 77 68 30 45 30 53 58 59 6e 78 36 70 54 42 64 4a 57 2f 6c 39 32 36 49 2b 50 52 55 70 6c 52 64 74 51 7a 33 4b 39 6c Data Ascii: xNi4wMDAwMDA=',cT: Math.floor(Date.now() / 1000),m: 'PPB9ptODWGOV785DIiIiuHDXSmHWUCZ0xKOXOFJEGxU=',i1: 'KA+SsrsF394gbM14m6aNrg==',i2: 'LPhZyaiCTF03Qz50HXJeIQ==',zh: 'xSlCQ35P65KXfDJSuIsn7EB+JVDQBWIv4Xeu5HO99to=',uh: 'wh0E0SXYnx6pTBdJW/l926I+PRUplRdtQz3K9l

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:16 UTC	585	OUT	GET /turnstile/v0/g/ec4b873d446c/api.js?onload=Jeuhg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://referencemen.live sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:16 UTC	441	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47262 Connection: close accept-ranges: bytes last-modified: Tue, 17 Sep 2024 16:06:37 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8cd502b90c2a0f6d-EWR
2024-10-04 12:00:16 UTC	928	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 56 74 28 65 2c 72 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 66 3d 65 5b 6c 5d 28 67 29 2c 70 3d 66 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 73 29 7b 61 28 73 29 3b 72 65 74 75 72 6e 7d 66 2e 64 6f 6e 65 3f 72 28 70 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 70 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 57 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Vt(e,r,a,o,c,l,g){try{var f=e[l](g),p=f.value}catch(s){a(s);return}f.done?r(p):Promise.resolve(p).then(o,c)}function Wt(e){return function(){var r=this,a=arguments;return new Promise(function(o,c){var l=e.apply(r,a);funct
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 6c 6c 3f 72 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 Data Ascii: ct.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function tt(e,r){return r=r!=null?r:{},Object.getOwnPropertyD
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 48 74 28 65 29 7c 7c 42 74 28 65 2c 72 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 6a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 50 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 44 65 28 65 2c 72 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 5d 26 31 29 74 68 72 6f 77 20 6c 5b 31 5d 3b 72 65 74 75 72 6e 20 6c 5b 31 5d 7d 2c 74 72 Data Ascii: function Ae(e,r){return Ht(e)\|\|Bt(e,r)\|\|qt(e,r)\|\|jt()}function P(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function De(e,r){var a={label:0,sent:function(){if(l[0]&1)throw l[1];return l[1]},tr
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 47 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c Data Ascii: oaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Gt=300020;var Pe=300030;var Ue=300031;var q;(function(e){e.MANAGED="managed",
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 45 4e 44 45 52 3d 22 72 65 6e 64 65 72 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 28 70 65 7c 7c 28 70 65 3d 7b 7d 29 29 3b 76 61 72 20 6f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 7d 29 Data Ascii: al",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(function(e){e.RENDER="render",e.EXECUTE="execute"})(pe\|\|(pe={}));var oe;(function(e){e.EXECUTE="execute"})
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 72 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e Data Ascii: archParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&r.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&r.set("clearance_level",e.params.
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4c 28 43 72 2c 28 6c 3d 28 72 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 66 2c 70 3d 4c 28 4e 72 2c 28 66 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 66 21 3d 3d 76 6f 69 64 20 30 3f 66 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 Data Ascii: ===Se.FAILURE_HAVING_TROUBLES,l,g=L(Cr,(l=(r=e.displayLanguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),f,p=L(Nr,(f=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null&&f!==void 0?f:"nonexistent")
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 66 3d 5b 6e 75 6c 6c 5d 3b 66 2e 70 75 73 68 2e 61 70 70 6c 79 28 66 2c 6c 29 3b 76 61 72 20 70 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 66 29 2c 73 3d 6e 65 77 20 70 3b 72 65 74 75 72 6e 20 67 26 26 4a 28 73 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 73 7d 2c 49 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 72 65 74 75 72 6e 20 63 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 Data Ascii: uct:Ie=function(c,l,g){var f=[null];f.push.apply(f,l);var p=Function.bind.apply(c,f),s=new p;return g&&J(s,g.prototype),s},Ie.apply(null,arguments)}function ce(e){return ce=Object.setPrototypeOf?Object.getPrototypeOf:function(a){return a.__proto__\|\|Object
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 57 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 57 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 57 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 55 28 72 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 72 Data Ascii: flare Turnstile] ".concat(e))}function qe(e){return e.startsWith(We)?e.substring(We.length):null}function K(e){return"".concat(We).concat(e)}function Tt(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,r=document.currentScript;if(U(r,HTMLScriptElement)&&e.test(r
2024-10-04 12:00:16 UTC	1369	IN	Data Raw: 66 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 73 2e 69 64 3d Data Ascii: f.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var s=document.createElement("div");s.className="cf-turnstile-feedback",s.id=

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:16 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 12:00:16 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:16 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T120016Z-15767c5fc55w69c2zvnrz0gmgw0000000ctg000000003s5s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 12:00:16 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 12:00:16 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 12:00:16 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 12:00:17 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:00:17 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/hvdth/0x4AAAAAAADnOjc0PNeA8qVm/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:00:17 UTC	1369	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:00:17 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 164859 Connection: close permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() document-policy: js-profiling cross-origin-embedder-policy: require-corp content-security-policy: frame-src https://challenges.cloudflare.com/ blob:; base-uri 'self' cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin origin-agent-cluster: ?1 cross-origin-resource-policy: cross-origin referrer-policy: same-origin critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2024-10-04 12:00:17 UTC	52	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 63 64 35 30 32 62 65 65 62 64 33 38 63 36 39 2d 45 57 52 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8cd502beebd38c69-EWR
2024-10-04 12:00:17 UTC	1317	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 25 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 Data Ascii: %;margin:0;overflow:hidden;padding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-web
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 73 75 63 63 65 73 73 2d 70 72 65 2d 69 20 6c 69 6e 65 7b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 Data Ascii: ght:30px;width:30px}#success-pre-i line{stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;st
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e Data Ascii: allenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challen
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 Data Ascii: dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 7d 23 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 70 78 7d 2e 66 61 69 6c 75 72 65 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 Data Ascii: ,#challenge-overlay a:link,#challenge-overlay a:visited{color:#232323}#challenge-overlay a:active,#challenge-overlay a:focus,#challenge-overlay a:hover{color:#166379}#logo{height:25px;margin-bottom:1px}.failure-circle{stroke-dasharray:166;stroke-dashoffse
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 6e 3a 61 6c 6c 20 2e 31 73 20 65 61 73 65 2d 69 6e 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 38 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 63 62 2d 6c 62 20 2e 63 62 2d 6c 62 2d 74 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 32 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 6f 6e 74 65 6e 74 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c Data Ascii: n:all .1s ease-in;width:24px;z-index:9998}.cb-lb .cb-i:after{border-radius:5px;content:"";position:absolute}.cb-lb .cb-lb-t{grid-column:2;margin-left:8px}.size-compact{font-size:14px}.size-compact #content{align-items:flex-start;display:flex;flex-flow:col
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 72 74 6c 7d 2e 72 74 6c 20 2e 63 62 2d 6c 62 2d 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 2c 2e 72 74 6c 20 23 66 61 69 6c 2d 69 2c 2e 72 74 6c 20 23 6f 76 65 72 72 75 6e 2d 69 2c 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 2c 2e 72 74 6c 20 23 73 75 63 63 65 73 73 2d 69 2c 2e 72 74 6c 20 23 74 69 6d 65 6f 75 74 2d 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 Data Ascii: rtl}.rtl .cb-lb-t{margin-left:0;margin-right:8px;padding:0}.rtl #expired-i,.rtl #fail-i,.rtl #overrun-i,.rtl #spinner-i,.rtl #success-i,.rtl #timeout-i{left:255px}.rtl #fr-helper{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px
2024-10-04 12:00:17 UTC	1369	IN	Data Raw: 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 66 6f 63 75 73 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c Data Ascii: challenge-error-title a{color:#232323}#challenge-error-title a:active,#challenge-error-title a:focus,#challenge-error-title a:hover{color:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#chall