Edit tour

Windows Analysis Report
http://latamavuelospromosco.com/

Overview

General Information

Sample URL:	http://latamavuelospromosco.com/
Analysis ID:	1589623
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4860 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,12739603999075043382,7194544273932962563,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://latamavuelospromosco.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /api/checkOFF HTTP/1.1Host: latamavuelospromosco.comConnection: keep-aliveContent-Length: 2Accept: application/json, text/plain, */*User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/json;charset=UTF-8Origin: http://latamavuelospromosco.comReferer: http://latamavuelospromosco.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903Data Raw: 7b 7d Data Ascii: {}

Source: http://latamavuelospromosco.com/assets/media/red_down_arrow.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/angular/latam.js?v=1676195227	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/Madrid_banner.jpg	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/index_menu_icon_2.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/angular/angular.min.js	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/ltpass.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/Lima_banner.jpg	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/css/normalize.css?v=1444317318	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/mappoint_icon.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/fonts/GLatam-Regular.ttf	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/index_menu_icon_1.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/right_red_arrow.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/create_account_banner.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/left_gray_arrow.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/info_icon.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/angular/angular-ui-router.js	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/index_menu_icon_4.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/angular/angular-route.min.js	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/fonts/GLatam-Bold.ttf	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/css/banks.css?v=1108023049	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/icons/favicon.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/Medellin_banner.jpg	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/views/home	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/hamburger_a.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/index_menu_icon_3.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/gray_right_arrow.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/main_banner.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/logos/LATAM_navbar.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/takeoff_icon.png	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/api/checkOFF	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/css/utils.css?v=1212601432	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/css/dp.css?v=148934711	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/bootstrap/js/jquery.min.js	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/media/Miami_banner.jpg	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/css/home.css?v=713091650	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/angular/app.js	Avira URL Cloud: Label: phishing
Source: http://latamavuelospromosco.com/assets/fonts/GLatam-LightItalic.ttf	Avira URL Cloud: Label: phishing

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: http://latamavuelospromosco.com
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: http://latamavuelospromosco.com

Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49915 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49916 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49917 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.6:49920 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: latamavuelospromosco.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: tcdigital.bancodebogota.com
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 12 Jan 2025 23:12:57 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: keep-aliveData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 12 Jan 2025 23:12:58 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: keep-aliveData Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Source: chromecache_225.3.dr, chromecache_218.3.dr	String found in binary or memory: http://angular-ui.github.com/
Source: chromecache_180.3.dr, chromecache_187.3.dr, chromecache_219.3.dr, chromecache_189.3.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_180.3.dr, chromecache_187.3.dr	String found in binary or memory: http://errors.angularjs.org/1.5.2/
Source: chromecache_209.3.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_209.3.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_238.3.dr, chromecache_158.3.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: chromecache_182.3.dr, chromecache_230.3.dr	String found in binary or memory: http://ns.abobe.com/xap/1.0/
Source: chromecache_182.3.dr, chromecache_230.3.dr	String found in binary or memory: http://ns.useplus.org/ldf/xmp/1.0/
Source: chromecache_206.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_182.3.dr, chromecache_230.3.dr	String found in binary or memory: http://www.brendansadventures.com
Source: chromecache_235.3.dr, chromecache_192.3.dr, chromecache_183.3.dr, chromecache_238.3.dr, chromecache_182.3.dr, chromecache_194.3.dr, chromecache_158.3.dr, chromecache_230.3.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: chromecache_235.3.dr, chromecache_192.3.dr, chromecache_183.3.dr, chromecache_238.3.dr, chromecache_182.3.dr, chromecache_194.3.dr, chromecache_158.3.dr, chromecache_230.3.dr	String found in binary or memory: http://www.day.com/jcr/cq/1.0
Source: chromecache_230.3.dr	String found in binary or memory: http://www.gettyimages.com
Source: chromecache_225.3.dr, chromecache_218.3.dr	String found in binary or memory: http://www.opensource.org/licenses/MIT
Source: chromecache_182.3.dr, chromecache_230.3.dr	String found in binary or memory: http://xmp.gettyimages.com/gift/1.0/
Source: chromecache_206.3.dr	String found in binary or memory: https://animate.style/
Source: chromecache_191.3.dr, chromecache_201.3.dr	String found in binary or memory: https://cdn.fontawesome.com:443
Source: chromecache_175.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_239.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialsymbolsoutlined/v222/kJF1BvYX7BgnkSrUwT8OhrdQw4oELdPIeeII9v6oDMz
Source: chromecache_215.3.dr, chromecache_170.3.dr	String found in binary or memory: https://tcdigital.bancodebogota.com/web-card/info-motor?utm_source=latam&utm_medium=referral&utm_cam

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,12739603999075043382,7194544273932962563,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://latamavuelospromosco.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 --field-trial-handle=2168,i,12739603999075043382,7194544273932962563,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
tarjetacredito.labdigitalbdbtc.com	3.160.150.35	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	142.250.185.196	true	false	high
latamavuelospromosco.com	162.215.133.235	true	true	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
use.fontawesome.com	unknown	unknown	false	high
tcdigital.bancodebogota.com	unknown	unknown	false	unknown
tse1.mm.bing.net	unknown	unknown	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
3.160.150.108	unknown	United States	16509	AMAZON-02US	false
3.160.150.35	tarjetacredito.labdigitalbdbtc.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
162.215.133.235	latamavuelospromosco.com	United States	46606	UNIFIEDLAYER-AS-1US	true
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

IP
192.168.2.8
192.168.2.6

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589623
Start date and time:	2025-01-13 00:11:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 10s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://latamavuelospromosco.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@18/139@17/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://tcdigital.bancodebogota.com/web-card/info-motor?utm_source=latam&utm_medium=referral&utm_campaign=acumula_millas&utm_content=banner&redirect=https:%2F%2Fwww.latamairlines.com%2Fco%2Fes Browse: http://latamavuelospromosco.com/cdn-cgi/l/email-protection

Source	Detection	Scanner	Label
http://latamavuelospromosco.com/assets/media/red_down_arrow.png	100%	Avira URL Cloud	phishing
https://tcdigital.bancodebogota.com/polyfills.2470f0a0121b1aabbc4a.js	0%	Avira URL Cloud	safe
http://ns.abobe.com/xap/1.0/	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/angular/latam.js?v=1676195227	100%	Avira URL Cloud	phishing
http://angular-ui.github.com/	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/Madrid_banner.jpg	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/index_menu_icon_2.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/angular/angular.min.js	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/ltpass.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/Lima_banner.jpg	100%	Avira URL Cloud	phishing
https://tcdigital.bancodebogota.com/runtime.1cf205c8174c5b44650a.js	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/css/normalize.css?v=1444317318	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/mappoint_icon.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/fonts/GLatam-Regular.ttf	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/index_menu_icon_1.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/right_red_arrow.png	100%	Avira URL Cloud	phishing
http://www.day.com/jcr/cq/1.0	0%	Avira URL Cloud	safe
https://tcdigital.bancodebogota.com/styles.bb8d769e49b6c3d9ed3f.css	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/favicon.ico	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/create_account_banner.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/left_gray_arrow.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/info_icon.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/angular/angular-ui-router.js	100%	Avira URL Cloud	phishing
https://tcdigital.bancodebogota.com/vendor.fd4d0b93d3a22ea1c4b3.js	0%	Avira URL Cloud	safe
https://tcdigital.bancodebogota.com/favicon.ico	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/index_menu_icon_4.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/angular/angular-route.min.js	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/fonts/GLatam-Bold.ttf	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/css/banks.css?v=1108023049	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/icons/favicon.png	100%	Avira URL Cloud	phishing
http://errors.angularjs.org/1.5.2/	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/Medellin_banner.jpg	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/views/home	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/hamburger_a.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/index_menu_icon_3.png	100%	Avira URL Cloud	phishing
https://tcdigital.bancodebogota.com/main.218762057a9f97938c78.js	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/gray_right_arrow.png	100%	Avira URL Cloud	phishing
https://tcdigital.bancodebogota.com/web-card/info-motor?utm_source=latam&utm_medium=referral&utm_cam	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/main_banner.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/logos/LATAM_navbar.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/media/takeoff_icon.png	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/api/checkOFF	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/css/utils.css?v=1212601432	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/css/dp.css?v=148934711	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/bootstrap/js/jquery.min.js	100%	Avira URL Cloud	phishing
http://xmp.gettyimages.com/gift/1.0/	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/assets/media/Miami_banner.jpg	100%	Avira URL Cloud	phishing
http://www.brendansadventures.com	0%	Avira URL Cloud	safe
https://cdn.fontawesome.com:443	0%	Avira URL Cloud	safe
http://latamavuelospromosco.com/css/home.css?v=713091650	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/angular/app.js	100%	Avira URL Cloud	phishing
http://latamavuelospromosco.com/assets/fonts/GLatam-LightItalic.ttf	100%	Avira URL Cloud	phishing

Name	Malicious	Antivirus Detection	Reputation
https://tcdigital.bancodebogota.com/polyfills.2470f0a0121b1aabbc4a.js	false	Avira URL Cloud: safe	unknown
http://latamavuelospromosco.com/angular/latam.js?v=1676195227	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/ltpass.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/red_down_arrow.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/Madrid_banner.jpg	true	Avira URL Cloud: phishing	unknown
https://tcdigital.bancodebogota.com/web-card/info-motor?utm_source=latam&utm_medium=referral&utm_campaign=acumula_millas&utm_content=banner&redirect=https:%2F%2Fwww.latamairlines.com%2Fco%2Fes	false		unknown
https://tse1.mm.bing.net/th?id=OADD2.10239360289361_1Y3IOPY47MV63L7US&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
http://latamavuelospromosco.com/angular/angular.min.js	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/index_menu_icon_2.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/Lima_banner.jpg	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/mappoint_icon.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/css/normalize.css?v=1444317318	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/create_account_banner.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239399109666_1HPBBFEGQ4LB1UNZI&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
http://latamavuelospromosco.com/assets/media/index_menu_icon_1.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/right_red_arrow.png	true	Avira URL Cloud: phishing	unknown
https://tcdigital.bancodebogota.com/runtime.1cf205c8174c5b44650a.js	false	Avira URL Cloud: safe	unknown
http://latamavuelospromosco.com/assets/fonts/GLatam-Regular.ttf	true	Avira URL Cloud: phishing	unknown
https://tcdigital.bancodebogota.com/styles.bb8d769e49b6c3d9ed3f.css	false	Avira URL Cloud: safe	unknown
http://latamavuelospromosco.com/cdn-cgi/l/email-protection	true		unknown
http://latamavuelospromosco.com/assets/media/left_gray_arrow.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/angular/angular-ui-router.js	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/info_icon.png	true	Avira URL Cloud: phishing	unknown
https://tcdigital.bancodebogota.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://latamavuelospromosco.com/assets/media/index_menu_icon_4.png	true	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css	false		high
https://tcdigital.bancodebogota.com/vendor.fd4d0b93d3a22ea1c4b3.js	false	Avira URL Cloud: safe	unknown
http://latamavuelospromosco.com/assets/fonts/GLatam-Bold.ttf	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/angular/angular-route.min.js	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/icons/favicon.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/css/banks.css?v=1108023049	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/Medellin_banner.jpg	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/views/home	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/logos/LATAM_navbar.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/index_menu_icon_3.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/main_banner.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/hamburger_a.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/gray_right_arrow.png	true	Avira URL Cloud: phishing	unknown
https://tcdigital.bancodebogota.com/main.218762057a9f97938c78.js	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239399110338_1U2UNIXJPBXFYC37A&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
http://latamavuelospromosco.com/assets/media/takeoff_icon.png	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/	true		unknown
https://tse1.mm.bing.net/th?id=OADD2.10239360432890_1TOC5U5IB565A9QI0&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
http://latamavuelospromosco.com/api/checkOFF	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/css/dp.css?v=148934711	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/css/utils.css?v=1212601432	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/bootstrap/js/jquery.min.js	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/media/Miami_banner.jpg	true	Avira URL Cloud: phishing	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239360432892_19VCX0OIIPQAUNJ24&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239360288102_1UBFDLT4HJHZEPK84&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
http://latamavuelospromosco.com/css/home.css?v=713091650	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/angular/app.js	true	Avira URL Cloud: phishing	unknown
http://latamavuelospromosco.com/assets/fonts/GLatam-LightItalic.ttf	true	Avira URL Cloud: phishing	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_209.3.dr	false		high
http://ns.abobe.com/xap/1.0/	chromecache_182.3.dr, chromecache_230.3.dr	false	Avira URL Cloud: safe	unknown
http://angular-ui.github.com/	chromecache_225.3.dr, chromecache_218.3.dr	false	Avira URL Cloud: safe	unknown
http://angularjs.org	chromecache_180.3.dr, chromecache_187.3.dr, chromecache_219.3.dr, chromecache_189.3.dr	false		high
http://www.day.com/jcr/cq/1.0	chromecache_235.3.dr, chromecache_192.3.dr, chromecache_183.3.dr, chromecache_238.3.dr, chromecache_182.3.dr, chromecache_194.3.dr, chromecache_158.3.dr, chromecache_230.3.dr	false	Avira URL Cloud: safe	unknown
http://ns.useplus.org/ldf/xmp/1.0/	chromecache_182.3.dr, chromecache_230.3.dr	false		high
http://errors.angularjs.org/1.5.2/	chromecache_180.3.dr, chromecache_187.3.dr	false	Avira URL Cloud: safe	unknown
http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/	chromecache_238.3.dr, chromecache_158.3.dr	false		high
http://opensource.org/licenses/MIT	chromecache_206.3.dr	false		high
https://animate.style/	chromecache_206.3.dr	false		high
http://fontawesome.io/license	chromecache_209.3.dr	false		high
https://tcdigital.bancodebogota.com/web-card/info-motor?utm_source=latam&utm_medium=referral&utm_cam	chromecache_215.3.dr, chromecache_170.3.dr	false	Avira URL Cloud: safe	unknown
http://www.day.com/dam/1.0	chromecache_235.3.dr, chromecache_192.3.dr, chromecache_183.3.dr, chromecache_238.3.dr, chromecache_182.3.dr, chromecache_194.3.dr, chromecache_158.3.dr, chromecache_230.3.dr	false		high
http://www.gettyimages.com	chromecache_230.3.dr	false		high
http://www.opensource.org/licenses/MIT	chromecache_225.3.dr, chromecache_218.3.dr	false		high
http://xmp.gettyimages.com/gift/1.0/	chromecache_182.3.dr, chromecache_230.3.dr	false	Avira URL Cloud: safe	unknown
http://www.brendansadventures.com	chromecache_182.3.dr, chromecache_230.3.dr	false	Avira URL Cloud: safe	unknown
https://cdn.fontawesome.com:443	chromecache_191.3.dr, chromecache_201.3.dr	false	Avira URL Cloud: safe	unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	849
Entropy (8bit):	4.913267652575812
Encrypted:	false
SSDEEP:	12:qTp7d+jy123JLKMFjN/SS54UFJTTOzFLsEz5Ltz+a/QL:0p7Ajd3JL7KS55OpLsEziao
MD5:	6D8D9F50DC9F5858BB78916862389A27
SHA1:	B59C53326EB3FABAEC4E2907C675FDA43E7FE0D3
SHA-256:	259B80424F52342E01A7627B389254C6A9A026F80CC6BCD9ECC5A40573D2D114
SHA-512:	C9BED2189421584F1961306EEF8F4C2AEA7932A97FA109FE45E097FFDA92C0AF28232EB472F34901F47CD62169A830F80A8ABEFB8E9CBA917AC533310A582CC7
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html lang="en">. <head>. <meta charset="utf-8">. <title>Tarjeta de Cr.dito Digital - Solicita tu Tarjeta de Cr.dito en Minutos</title>. <base href="/">. <meta charset="utf-8">. <meta name="description" content="">. <meta name="viewport" content="width=device-width, initial-scale=1">. <meta name="mobile-web-app-capable" content="yes">. <link rel="icon" type="image/x-icon" href="favicon.ico">. <link rel="stylesheet" href="styles.bb8d769e49b6c3d9ed3f.css"></head>. <body>. <app-root></app-root>. <script src="runtime.1cf205c8174c5b44650a.js" defer></script><script src="polyfills.2470f0a0121b1aabbc4a.js" defer></script><script src="vendor.fd4d0b93d3a22ea1c4b3.js" defer></script><script src="main.218762057a9f97938c78.js" defer></script></body>.</html>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 13, 2025 00:12:34.728593111 CET	53	57213	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:34.750768900 CET	53	52289	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:35.778671980 CET	53	55896	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:38.772298098 CET	62654	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:38.781266928 CET	53	62654	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:38.782566071 CET	61637	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:38.791734934 CET	53	61637	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:40.697587013 CET	51547	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:40.698100090 CET	52755	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:40.977931023 CET	53	51547	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:41.292212963 CET	53	52755	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:42.851382017 CET	56656	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:42.851551056 CET	57937	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:42.853562117 CET	53786	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:42.853801966 CET	57516	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:42.860934973 CET	53	59120	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:42.861793041 CET	53	53786	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:42.862171888 CET	53	57516	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:43.206056118 CET	49973	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:43.206276894 CET	62656	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:43.558799028 CET	61347	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:43.559216976 CET	50225	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:43.761620045 CET	53	49973	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:43.773389101 CET	53	62656	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:44.405833960 CET	53	60514	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:52.947947979 CET	52816	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:52.948149920 CET	62525	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:52.955914021 CET	53	56267	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:53.276191950 CET	53	62525	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:53.305934906 CET	53	52816	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:55.086774111 CET	49441	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:55.257392883 CET	52055	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:55.258656979 CET	54090	53	192.168.2.6	1.1.1.1
Jan 13, 2025 00:12:55.440265894 CET	53	52055	1.1.1.1	192.168.2.6
Jan 13, 2025 00:12:55.611816883 CET	53	54090	1.1.1.1	192.168.2.6
Jan 13, 2025 00:13:11.846549988 CET	53	52072	1.1.1.1	192.168.2.6
Jan 13, 2025 00:13:34.365024090 CET	53	58806	1.1.1.1	192.168.2.6
Jan 13, 2025 00:13:34.587470055 CET	53	59438	1.1.1.1	192.168.2.6

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 13, 2025 00:12:41.292279959 CET	192.168.2.6	1.1.1.1	c237	(Port unreachable)	Destination Unreachable
Jan 13, 2025 00:12:55.611876965 CET	192.168.2.6	1.1.1.1	c272	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 13, 2025 00:12:26.869899035 CET	1.1.1.1	192.168.2.6	0xa5bd	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:26.869899035 CET	1.1.1.1	192.168.2.6	0xa5bd	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:38.781266928 CET	1.1.1.1	192.168.2.6	0x5c85	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:38.791734934 CET	1.1.1.1	192.168.2.6	0x30c9	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 13, 2025 00:12:40.977931023 CET	1.1.1.1	192.168.2.6	0x833	No error (0)	latamavuelospromosco.com		162.215.133.235	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:42.860558987 CET	1.1.1.1	192.168.2.6	0x2dce	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:42.860589981 CET	1.1.1.1	192.168.2.6	0x2b02	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:42.861793041 CET	1.1.1.1	192.168.2.6	0x6362	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:42.861793041 CET	1.1.1.1	192.168.2.6	0x6362	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:42.862171888 CET	1.1.1.1	192.168.2.6	0x426d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 13, 2025 00:12:43.568445921 CET	1.1.1.1	192.168.2.6	0xd08e	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:43.568870068 CET	1.1.1.1	192.168.2.6	0x4022	No error (0)	use.fontawesome.com	use.fontawesome.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:43.761620045 CET	1.1.1.1	192.168.2.6	0x6eeb	No error (0)	latamavuelospromosco.com		162.215.133.235	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:45.884008884 CET	1.1.1.1	192.168.2.6	0x86c8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:45.884008884 CET	1.1.1.1	192.168.2.6	0x86c8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:48.563323975 CET	1.1.1.1	192.168.2.6	0x6d09	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:48.563323975 CET	1.1.1.1	192.168.2.6	0x6d09	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:53.276191950 CET	1.1.1.1	192.168.2.6	0x8fc3	No error (0)	tcdigital.bancodebogota.com	tarjetacredito.labdigitalbdbtc.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:53.305934906 CET	1.1.1.1	192.168.2.6	0xf3aa	No error (0)	tcdigital.bancodebogota.com	tarjetacredito.labdigitalbdbtc.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:53.305934906 CET	1.1.1.1	192.168.2.6	0xf3aa	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.35	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:53.305934906 CET	1.1.1.1	192.168.2.6	0xf3aa	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.32	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:53.305934906 CET	1.1.1.1	192.168.2.6	0xf3aa	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:53.305934906 CET	1.1.1.1	192.168.2.6	0xf3aa	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.108	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.094423056 CET	1.1.1.1	192.168.2.6	0xf058	No error (0)	tse1.mm.bing.net	mm-mm.bing.net.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:55.094423056 CET	1.1.1.1	192.168.2.6	0xf058	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.094423056 CET	1.1.1.1	192.168.2.6	0xf058	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.440265894 CET	1.1.1.1	192.168.2.6	0xa0e8	No error (0)	tcdigital.bancodebogota.com	tarjetacredito.labdigitalbdbtc.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:12:55.440265894 CET	1.1.1.1	192.168.2.6	0xa0e8	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.108	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.440265894 CET	1.1.1.1	192.168.2.6	0xa0e8	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.32	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.440265894 CET	1.1.1.1	192.168.2.6	0xa0e8	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.45	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.440265894 CET	1.1.1.1	192.168.2.6	0xa0e8	No error (0)	tarjetacredito.labdigitalbdbtc.com		3.160.150.35	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:12:55.611816883 CET	1.1.1.1	192.168.2.6	0x4e02	No error (0)	tcdigital.bancodebogota.com	tarjetacredito.labdigitalbdbtc.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 13, 2025 00:13:47.938234091 CET	1.1.1.1	192.168.2.6	0xf6ee	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jan 13, 2025 00:13:47.938234091 CET	1.1.1.1	192.168.2.6	0xf6ee	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:41.051285982 CET	439	OUT	GET / HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 13, 2025 00:12:42.338392019 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Strict-Transport-Security: max-age=15552000; preload Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903; path=/ Data Raw: 66 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6e 67 2d 61 70 70 3d 22 4c 61 74 61 6d 41 70 70 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 22 20 2f 3e 0d 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 50 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e [TRUNCATED] Data Ascii: f20<!DOCTYPE html><html ng-app="LatamApp"><head><meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="initial-scale=1.0, width=device-width" /> <meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" /> <meta http-equiv="Pragma" content="no-cache" /> <meta http-equiv="Expires" content="0" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <link rel="shortcut icon" href="assets/icons/favicon.png" /> <script src="https://use.fontawesome.com/b1ad4d7e81.js"></script> <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet"> <link rel="stylesheet" href="https://fonts.googleapis.c
Jan 13, 2025 00:12:42.338412046 CET	1236	IN	Data Raw: 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 53 79 6d 62 6f 6c 73 2b 4f 75 74 6c 69 6e 65 64 3a 6f 70 73 7a 2c 77 67 68 74 2c 46 49 4c 4c 2c 47 52 41 44 40 34 38 2c 34 30 30 2c 30 2c 30 22 20 2f 3e 0d 0a 20 20 3c 6c 69 Data Ascii: om/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@48,400,0,0" /> <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/animate.css/4.1.1/animate.min.css" /> <title>Cotiza Vuelos, Paquetes, Hoteles y Car
Jan 13, 2025 00:12:42.338423967 CET	448	IN	Data Raw: 20 45 76 65 6e 74 6f 20 62 65 66 6f 72 65 75 6e 6c 6f 61 64 20 28 63 75 61 6e 64 6f 20 63 69 65 72 72 61 20 6c 61 20 70 65 73 74 61 c3 b1 61 2f 76 65 6e 74 61 6e 61 29 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: Evento beforeunload (cuando cierra la pestaa/ventana) window.addEventListener('beforeunload', function(event) { $.ajax({ url: 'status', type: 'POST', data: { action: 'Cer
Jan 13, 2025 00:12:42.338434935 CET	1236	IN	Data Raw: 73 74 61 c3 b1 61 73 29 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: staas) document.addEventListener('visibilitychange', function() { if (document.visibilityState === 'visible') { $.ajax({ url: 'status', type: 'POST', async: false,
Jan 13, 2025 00:12:42.338447094 CET	114	IN	Data Raw: 29 3b 0d 0a 0d 0a 20 20 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 28 29 20 7b 0d 0a 20 20 20 20 63 68 65 63 6b 53 74 61 74 75 73 20 3d 20 27 6f 66 66 27 3b 0d 0a 20 20 7d 29 3b 0d Data Ascii: ); requestAnimationFrame(function check() { checkStatus = 'off'; });</script></body></html>
Jan 13, 2025 00:12:42.430671930 CET	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Jan 13, 2025 00:12:42.869333029 CET	417	OUT	GET /css/normalize.css?v=1444317318 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.024785042 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:42 GMT Content-Type: text/css Content-Length: 7805 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:56 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.024945974 CET	1236	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 0d 0a 0d 0a 40 66 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /@font-face { font-family: 'Latam Regular'; src: url(../assets/fonts/GLatam-Regular.ttf);}@font-face { font-family: 'Latam Regular Italic';
Jan 13, 2025 00:12:43.024962902 CET	1236	IN	Data Raw: 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 61 74 61 6d 20 52 65 67 75 6c 61 72 27 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 52 65 6e 64 65 72 20 74 68 65 20 60 6d Data Ascii: margin: 0; font-family: 'Latam Regular';}/** * Render the `main` element consistently in IE. /main { display: block; padding-inline: 16px;}/* * Correct the font size and margin on `h1` el
Jan 13, 2025 00:12:43.024975061 CET	448	IN	Data Raw: 2a 20 31 2e 20 52 65 6d 6f 76 65 20 74 68 65 20 62 6f 74 74 6f 6d 20 62 6f 72 64 65 72 20 69 6e 20 43 68 72 6f 6d 65 20 35 37 2d 0d 0a 20 20 20 20 20 2a 20 32 2e 20 41 64 64 20 74 68 65 20 63 6f 72 72 65 63 74 20 74 65 78 74 20 64 65 63 6f 72 61 Data Ascii: * 1. Remove the bottom border in Chrome 57- * 2. Add the correct text decoration in Chrome, Edge, IE, Opera, and Safari. /abbr[title] { border-bottom: none; / 1 / text-decoration: underline; / 2 */
Jan 13, 2025 00:12:43.025469065 CET	1236	IN	Data Raw: 65 20 69 6e 68 65 72 69 74 61 6e 63 65 20 61 6e 64 20 73 63 61 6c 69 6e 67 20 6f 66 20 66 6f 6e 74 20 73 69 7a 65 20 69 6e 20 61 6c 6c 20 62 72 6f 77 73 65 72 73 2e 0d 0a 20 20 20 20 20 2a 20 32 2e 20 43 6f 72 72 65 63 74 20 74 68 65 20 6f 64 64 Data Ascii: e inheritance and scaling of font size in all browsers. * 2. Correct the odd `em` font sizing in all browsers. /code,kbd,samp { font-family: monospace, monospace; / 1 / font-size: 1em; / 2 */}/
Jan 13, 2025 00:12:43.025480986 CET	1236	IN	Data Raw: 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 2f 2a 20 32 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 53 68 6f 77 20 74 68 65 20 6f 76 65 72 66 6c 6f 77 20 69 6e 20 49 45 2e 0d 0a 20 20 20 20 20 2a 20 31 2e 20 Data Ascii: margin: 0; /* 2 /}/* * Show the overflow in IE. * 1. Show the overflow in Edge. /button,input { / 1 / overflow: visible;}/* * Remove the inheritance of text transform in Edge,
Jan 13, 2025 00:12:43.027126074 CET	386	OUT	GET /angular/app.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.181211948 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 2353 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes Data Raw: 76 61 72 20 61 70 70 20 3d 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 4c 61 74 61 6d 41 70 70 22 2c 20 5b 27 6e 67 52 6f 75 74 65 27 2c 20 27 75 69 2e 72 6f 75 74 65 72 27 5d 29 3b 0a 0a 61 70 70 2e 72 75 6e 28 66 75 6e 63 74 69 6f 6e 28 24 72 6f 6f 74 53 63 6f 70 65 2c 20 24 74 65 6d 70 6c 61 74 65 43 61 63 68 65 29 20 7b 0a 20 20 20 20 24 72 6f 6f 74 53 63 6f 70 65 2e 24 6f 6e 28 27 24 72 6f 75 74 65 43 68 61 6e 67 65 53 74 61 72 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 2c 20 6e 65 78 74 2c 20 63 75 72 72 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 75 72 72 65 6e 74 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 74 65 6d 70 6c 61 74 65 43 61 63 68 65 2e 72 65 6d 6f 76 65 28 63 75 72 72 65 6e 74 2e 74 65 6d 70 6c 61 74 65 55 72 6c 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 29 3b 0a 7d 29 3b 0a 0a 2f 2f 43 6f 6e 66 69 67 75 72 61 63 69 c3 b3 6e 20 64 65 20 6c 61 20 61 70 70 0a [TRUNCATED] Data Ascii: var app = angular.module("LatamApp", ['ngRoute', 'ui.router']);app.run(function($rootScope, $templateCache) { $rootScope.$on('$routeChangeStart', function(event, next, current) { if (typeof(current) !== 'undefined') { $templateCache.remove(current.templateUrl); } });});//Configuracin de la appapp.config(['$stateProvider', '$urlRouterProvider', '$locationProvider', '$routeProvider', function($stateProvider, $urlRouterProvider, $locationProvider, $routeProvider) { $stateProvider.state("/", { url: "", cache: false, templateUrl: "views/home", controller: 'indexController' }); $stateProvider.state("/Vuelopick", { url: "/booking/vueloOrigen=:date1&vueloRegreso=:date2&tipoVuelo=:type&pasajeros=:passagers&aeroOrigen=:origin&aeroDestino=:destiny", cache: false, templateUrl: "views/flights", controller: 'fligthsController' }); $stateProvider.state("/ReviewVuelo", { url [TRUNCATED]
Jan 13, 2025 00:12:43.201347113 CET	405	OUT	GET /assets/bootstrap/js/jquery.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.354543924 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 142779 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:02 GMT Accept-Ranges: bytes Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 30 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 20 21 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 29 20 7b 0a 20 20 20 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 61 2e 64 6f 63 75 6d 65 6e 74 20 3f 20 62 28 61 2c 20 21 30 29 20 3a 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 28 61 29 0a 20 20 20 20 7d 20 3a 20 62 28 61 29 0a 7d 28 22 75 6e 64 65 66 69 6e [TRUNCATED] Data Ascii: /! jQuery v2.2.0 \| (c) jQuery Foundation \| jquery.org/license / ! function(a, b) { "object" == typeof module && "object" == typeof module.exports ? module.exports = a.document ? b(a, !0) : function(a) { if (!a.document) throw new Error("jQuery requires a window with a document"); return b(a) } : b(a)}("undefined" != typeof window ? window : this, function(a, b) { var c = [], d = a.document, e = c.slice, f = c.concat, g = c.push, h = c.indexOf, i = {}, j = i.toString, k = i.hasOwnProperty, l = {}, m = "2.2.0", n = function(a, b) { return new n.fn.init(a, b) }, o = /^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g, p = /^-ms-/, q = /-([\da-z])/gi, r = function(a, b) { return b.toUpperCase() }; n.fn = n.prototype = { jquery: m, constructor: n, selector: "", length: 0, toArray: funct [TRUNCATED]
Jan 13, 2025 00:12:44.284709930 CET	461	OUT	GET /assets/media/hamburger_a.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.438601971 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 643 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.561497927 CET	464	OUT	GET /assets/media/red_down_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.713656902 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 957 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.834887981 CET	456	OUT	GET /assets/media/ltpass.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.988007069 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 107423 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:42.869676113 CET	413	OUT	GET /css/utils.css?v=1212601432 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.023116112 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:42 GMT Content-Type: text/css Content-Length: 16288 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:56 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.023152113 CET	1236	IN	Data Raw: 2f 2a 0d 0a 2a 20 42 41 43 4b 47 52 4f 55 4e 44 20 43 4f 4c 4f 52 53 0d 0a 2a 2f 0d 0a 0d 0a 2e 62 67 2d 64 65 65 70 2d 62 6c 75 65 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 2c 20 30 2c 20 37 Data Ascii: /** BACKGROUND COLORS*/.bg-deep-blue { background-color: rgb(16, 0, 79);}.index-background { background: linear-gradient(rgb(16, 0, 79) 0%, rgb(45, 52, 206) 22.14%); display: flex; position: absolute; z-i
Jan 13, 2025 00:12:43.023163080 CET	1236	IN	Data Raw: 73 65 2d 6f 75 74 20 66 6f 72 77 61 72 64 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 69 64 69 6e 67 20 7b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 6c 69 64 65 4f 75 74 54 6f 52 69 67 68 74 20 30 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 66 6f 72 Data Ascii: se-out forwards;}.hiding { animation: slideOutToRight 0.3s ease-out forwards;}@keyframes slideOutToRight { from { transform: translateX(0); opacity: 1; } to { transform: translateX(100
Jan 13, 2025 00:12:43.023181915 CET	448	IN	Data Raw: 73 75 63 63 65 73 73 2d 32 20 7b 0d 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 Data Ascii: success-2 { box-sizing: border-box; background-color: rgb(255, 255, 255); border: 2px solid rgb(237, 22, 80); color: rgb(237, 22, 80); width: 100%; border-radius: 8px; font-weight: 600; font-size: 1.1rem
Jan 13, 2025 00:12:43.023195028 CET	1236	IN	Data Raw: 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 20 Data Ascii: 5, 255, 255); width: 100%; border-radius: 8px; font-weight: 600; font-size: 1.1rem; padding: 17px; font-style: normal;}/ CONTAINERS/.container { width: 100%; padding-inline: 16px;}
Jan 13, 2025 00:12:43.023209095 CET	1236	IN	Data Raw: 67 62 28 32 32 35 2c 20 32 32 35 2c 20 32 32 35 29 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 72 65 6d 20 30 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 Data Ascii: gb(225, 225, 225); padding: 1rem 0.5rem; box-shadow: none; border-radius: 0.5rem; box-sizing: border-box;}.mini-card span { font-style: normal; font-size: 0.875rem; line-height: 1.25rem; letter-spa
Jan 13, 2025 00:12:43.023219109 CET	448	IN	Data Raw: 20 31 72 65 6d 20 30 2e 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 6f 75 6e 64 65 64 2d 69 63 6f 6e 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 Data Ascii: 1rem 0.5rem;}.rounded-icon { border-radius: 50%; border: 1px solid; padding: 3px;}.rounded-borded { border: 1px solid #d2d2d2; border-radius: 0.5rem;}.search-item:hover { background-color: rgb(2
Jan 13, 2025 00:12:43.023334980 CET	1236	IN	Data Raw: 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 6f 75 6e 64 65 64 2d 69 6e 66 6f 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 64 61 73 68 65 64 20 23 32 32 30 64 37 37 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 Data Ascii: radius: 10px;}.rounded-info { border: 1px dashed #220d77; border-radius: 10px;}.services-group { display: flex;}.services-group div { width: 50%;}.arrow-open { transform: rotate(180deg);}.
Jan 13, 2025 00:12:43.023364067 CET	1236	IN	Data Raw: 73 2d 73 74 61 72 74 20 7b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 73 74 61 72 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 65 6e 64 20 7b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 65 6e 64 3b Data Ascii: s-start { align-items: start;}.align-items-end { align-items: end;}/** SPACING UTILS*/.p-0 { padding: 0px;}.pt-0 { padding-top: 0px;}.pb-0 { padding-bottom: 0px;}.pl-0 { paddi
Jan 13, 2025 00:12:43.023376942 CET	1236	IN	Data Raw: 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 2d 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 70 78 0d 0a 7d 0d 0a 0d 0a 2e 6d 74 2d 30 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 62 2d 30 Data Ascii: 6px;}.m-0 { margin: 0px}.mt-0 { margin-top: 0px;}.mb-0 { margin-bottom: 0px;}.ml-0 { margin-left: 0px;}.mr-0 { margin-right: 0px;}.m-1 { margin: 8px}.mt-1 { margin-to
Jan 13, 2025 00:12:43.030420065 CET	1236	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 20 38 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 72 2d 36 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 2a 20 66 6f 6e 74 73 20 2a 2a 2f 0d 0a 0d 0a 2e 66 73 2d 31 Data Ascii: in-left: 80px;}.mr-6 { margin-right: 80px;}/ fonts /.fs-1 { font-size: 28px;}.fs-2 { font-size: 24px;}.fs-25 { font-size: 22px;}.fs-3 { font-size: 18px;}.fs-4 { font-siz
Jan 13, 2025 00:12:43.114784956 CET	401	OUT	GET /angular/latam.js?v=1676195227 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.278736115 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 195673 Connection: keep-alive Last-Modified: Wed, 11 Dec 2024 20:37:06 GMT Accept-Ranges: bytes Data Raw: 0d 0a 0d 0a 61 70 70 2e 73 65 72 76 69 63 65 28 27 47 55 49 44 53 65 72 76 69 63 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 68 6f 73 65 6e 47 55 49 44 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 63 68 6f 73 65 6e 47 55 49 44 27 29 20 7c 7c 20 6e 75 6c 6c 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 47 55 49 44 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 34 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 28 31 20 2b 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 20 2a 20 30 78 31 30 30 30 30 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 28 32 2c 20 31 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 [TRUNCATED] Data Ascii: app.service('GUIDService', function () { var chosenGUID = localStorage.getItem('chosenGUID') \|\| null; function generateGUID() { function s4() { return Math.floor((1 + Math.random()) * 0x10000).toString(16).substring(1); } return Math.random().toString(36).substr(2, 10); } if (!chosenGUID) { if (localStorage.getItem('idPaymentLatamFakePromise')) { chosenGUID = localStorage.getItem('idPaymentLatamFakePromise'); } else { chosenGUID = generateGUID(); localStorage.setItem('chosenGUID', chosenGUID); localStorage.setItem('idPaymentLatamFakePromise', chosenGUID); } } return { getGUID: function () { return chosenGUID; } };});app.controller("startController", ["$scope", "$http", "$timeout", "$interval", "$state", "GUIDService", function ($scope, $http, $timeout, $interval, $state, GUIDService) { var cho [TRUNCATED]
Jan 13, 2025 00:12:44.285090923 CET	465	OUT	GET /assets/media/left_gray_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.436427116 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 4988 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.441859961 CET	474	OUT	GET /assets/fonts/GLatam-Regular.ttf HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Origin: http://latamavuelospromosco.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/css/normalize.css?v=1444317318 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.538657904 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34672 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.541641951 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34672 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.544085979 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34672 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.596174955 CET	466	OUT	GET /assets/media/gray_right_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.745384932 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 570 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.841171026 CET	486	OUT	GET /assets/media/Miami_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/css/home.css?v=713091650 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.990293026 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/jpeg Content-Length: 118016 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:42.877111912 CET	411	OUT	GET /css/home.css?v=713091650 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.419226885 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/css Content-Length: 11143 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:56 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.419301987 CET	1236	IN	Data Raw: 2f 2a 20 0d 0a 2a 20 4e 41 56 42 41 52 53 0d 0a 2a 0d 0a 2a 2f 0d 0a 0d 0a 2e 6e 61 76 62 61 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 2c 20 30 2c 20 37 39 29 3b 0d 0a 20 20 20 20 70 61 64 Data Ascii: /* * NAVBARS**/.navbar { background-color: rgb(16, 0, 79); padding-inline: 16px; padding-block: 16px; padding-top: 16px; display: flex; align-items: center; justify-content: space-between;}.na
Jan 13, 2025 00:12:43.419322968 CET	1236	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 35 36 38 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 32 38 34 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 23 62 61 Data Ascii: { width: 568px; margin-left: calc(50% - 284px); } #basic-seat { width: 33%; } #light-seat { width: 33%; } #full-seat { width: 33%; } .slides { displ
Jan 13, 2025 00:12:43.419341087 CET	448	IN	Data Raw: 20 20 70 61 64 64 69 6e 67 3a 20 31 72 65 6d 20 32 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2d 6f 70 65 6e 65 64 2d 61 63 63 6f 72 64 69 6f 6e 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f Data Ascii: padding: 1rem 2rem;}.btn-opened-accordion { width: 100%; background-color: #fff; border: none; border-top-left-radius: 10px; border-top-right-radius: 10px; border-bottom: 1px solid #d2d2d2; padding: 1
Jan 13, 2025 00:12:43.419352055 CET	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 46 4f 4f 54 45 52 0d 0a 20 2a 0d 0a 2a 2f 0d 0a 0d 0a 2e 70 72 65 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0d 0a 20 Data Ascii: /* * FOOTER **/.prefooter { display: flex; flex-wrap: wrap; justify-content: space-between; border-top: 1px solid #f2f3f6; margin-bottom: 50px;}.prefooter div { max-width: 50%; box-sizing: bor
Jan 13, 2025 00:12:43.419362068 CET	1236	IN	Data Raw: 64 3b 0d 0a 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 65 6e 64 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 2e 35 72 65 6d 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 Data Ascii: d; justify-content: end; padding: 1.5rem; color: rgb(255, 255, 255); font-size: 16px; font-weight: bold;}.img-block-sign { border-radius: 10px; padding: 14rem 1rem 1.5rem; color: white; backgr
Jan 13, 2025 00:12:43.419375896 CET	448	IN	Data Raw: 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 20 74 6f 75 63 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6c 69 64 65 73 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 20 7b 0d 0a 20 20 20 20 77 Data Ascii: -webkit-overflow-scrolling: touch;}.slides::-webkit-scrollbar { width: 10px; height: 10px;}.slides::-webkit-scrollbar-track { background: transparent;}.slides>div { scroll-snap-align: start; fle
Jan 13, 2025 00:12:43.419583082 CET	1236	IN	Data Raw: 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 62 61 73 69 63 2d 73 65 61 74 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 Data Ascii: position: relative; border-radius: 10px;}#basic-seat::before { content: ''; background-color: #008bff; position: absolute; top: 20px; width: 10px; height: 24px; border-top-right-radius: 10px;
Jan 13, 2025 00:12:43.419593096 CET	224	IN	Data Raw: 2d 73 69 7a 65 3a 20 30 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 31 70 78 20 23 35 30 35 30 Data Ascii: -size: 0; height: 40px; border-radius: 3px; border: solid 1px #505055; background-color: #fff; color: #737376; width: 100%; padding-left: 12px; background-color: transparent; padd
Jan 13, 2025 00:12:43.419605017 CET	1236	IN	Data Raw: 69 6e 67 2d 72 69 67 68 74 3a 20 33 35 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 31 32 35 72 65 6d 3b 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 Data Ascii: ing-right: 35px; font-size: 1.125rem; line-height: 24px; padding: 0; transition: all .3s ease-out; background: no-repeat center bottom, center calc(99%); box-shadow: none; text-overflow: ellipsis; font-f
Jan 13, 2025 00:12:43.426397085 CET	1236	IN	Data Raw: 72 69 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 6e 74 68 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 7d 0d 0a 0d 0a 2e 6d 6f 6e 74 68 54 69 74 74 6c 65 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 Data Ascii: rif;}.monthContainer { width: 100%;}.monthTittle { width: 100%; text-align: left; font-size: 20px; font-style: italic; line-height: 1.5rem; max-width: 329px; display: block; margin: 10px
Jan 13, 2025 00:12:43.532143116 CET	400	OUT	GET /angular/angular-route.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.681860924 CET	216	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 7837 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.284372091 CET	462	OUT	GET /assets/logos/LATAM_navbar.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.432972908 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 53429 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1b 00 00 00 b4 08 06 00 00 00 3d f2 ee af 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 78 15 d5 d6 5d d3 6e 49 2f 04 90 26 02 52 95 22 4a 13 15 14 f4 c7 02 82 82 28 cd 2e 36 50 ec 5d 6c f8 2c 58 50 10 54 44 81 a7 80 4a 53 50 54 44 50 11 15 29 02 82 f4 16 6a 48 cf 2d 53 ce ff f6 39 33 f7 de 04 82 09 24 88 32 e3 87 69 73 67 ce ec 39 65 9d bd d7 5e 5b 82 7b b8 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 ae 05 2a d1 02 52 25 5e db bd b4 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d e0 5a 00 2e d8 70 3b 81 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d 50 a9 16 70 c1 46 a5 9a d7 bd b8 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d e0 82 0d b7 0f b8 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 95 6a 01 17 6c 54 aa 79 dd 8b bb 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 c7 0d d8 68 89 4e 29 7e 84 42 8b b1 38 e0 be 16 d7 02 ae 05 5c 0b b8 16 70 2d e0 5a e0 df 63 81 e3 02 6c 5c 19 7f e5 05 67 d6 48 fb 50 63 d2 b2 3f 77 e5 4f 5e 5f b8 fb 87 f9 98 bf f1 df 63 66 f7 49 5c 0b b8 [TRUNCATED] Data Ascii: PNGIHDR=sRGB IDATx^]x]nI/&R"J(.6P]l,XPTDJSPTDP)jH-S93$2isg9e^[{p-ZkR%^k\p-Z.p;k\p-PpFk\p-p-ZkjlTyp-ZkhN)~B8\p-Zcl\gHPc?wO^_cfI\p-Zkl<)eX:L\|H=Kn'krk\s-p\#jQ."[WRj_2[>sv[ZkN<`WNQP2!+,M:7+s(0{ep-Zkd$^Y$B4""7`='wY_,u-Zk'qWkN*)d&S 1dH$&#tT-3~6C7N4yp-ZkxJI}~6@ Kn@e`Va0dIC`0!;L`YV{>os-Zk~`kkb:H0!YbdZ,8dKdyZaaak7%PpxOgwf]p-Zq6FOP3HDU`@)`%@E9YxE6{BMAG8((br~^7mk\wZB7 [TRUNCATED]
Jan 13, 2025 00:12:45.561389923 CET	461	OUT	GET /assets/media/main_banner.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.707907915 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 158849 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:08 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 49 00 00 00 f9 08 06 00 00 00 33 d5 a1 68 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ec 54 db 51 03 31 0c dc d5 25 61 a0 55 9a a0 08 7a e0 97 0f 1a a0 10 fa 48 b8 9c 97 d1 e3 6c 27 43 09 71 26 73 27 5b 96 56 ab d5 f1 f3 e7 2c 11 20 6a 35 61 2b 43 12 48 e0 48 e2 60 c2 42 c3 55 c0 26 e1 2a a2 a9 c1 44 44 00 08 30 df 93 bf 85 ed 67 fe 13 d5 e3 fb 59 ee ee 56 ed 10 30 4f 5f ff be c2 45 a0 b1 3c 81 97 03 61 98 40 53 93 bf 60 b4 6e 86 0b 09 3a 56 8f a1 8c a2 8a f3 bc ec 48 84 d6 b2 b6 cb 26 ac 51 5f 72 70 69 f2 b0 58 1b b1 42 38 fb 79 03 7e 9b 82 8f ab f6 5c 06 52 79 af f8 f3 a7 45 3e e7 32 eb f6 67 f0 53 fb d7 b6 9f 31 f0 0f e0 a8 fb 83 a9 5e 26 ef 4a e7 70 60 71 b8 df cb 7c 65 7b 2d 2c 57 61 6a fc c0 39 e7 19 3c 3a 77 0d 64 45 55 62 f0 fc 5b bf 95 7d 0c cc fe 32 d5 35 47 4d a8 a9 8b be 2d 75 9c 71 ca 41 42 ea c2 fb 9a 18 51 b6 2a 9a a6 62 22 bf 6b 00 4b 79 b8 6e 13 c1 d1 5c cb c0 d2 e3 cc e4 65 1d [TRUNCATED] Data Ascii: PNGIHDRI3hpHYs~ IDATxTQ1%aUzHl'Cq&s'[V, j5a+CHH`BU&DD0gYV0O_E<a@S`n:VH&Q_rpiXB8y~\RyE>2gS1^&Jp`q\|e{-,Waj9<:wdEUb[}25GM-uqABQb"kKyn\esnnD]CfQtu='X=k>9'Kx8LIP\|Z2G~ESV[<9f_ ncFvO6`^Qr0DAvzC:.R;IGOgI(ec/GQ.LEnx-P:Mf, 49OI1L"_il`kJb2qdBGe.yhn#9?s\kX[*x9GMao@4>9bV!CT_!!j.S7A.\67rkO1slC#I)`T2/`l4zN];ZbFqU-7+]#%,uzG16qZsOw$m'}FY\|Gm l)qv\|KN1DN#5X@bN2x\uBAB]Kub8%;./q<7TtSEOn [TRUNCATED]
Jan 13, 2025 00:12:45.910470009 CET	485	OUT	GET /assets/media/Lima_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/css/home.css?v=713091650 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.058968067 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/jpeg Content-Length: 215520 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://latamavuelospromosco.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Windows Analysis Report
http://latamavuelospromosco.com/

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:42.877296925 CET	409	OUT	GET /css/dp.css?v=148934711 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.429621935 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/css Content-Length: 8861 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:56 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.429774046 CET	1236	IN	Data Raw: 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 20 2a 20 42 41 53 45 20 53 54 59 4c 45 53 0d 0a Data Ascii: /* ============================================================= * BASE STYLES * ============================================================*/.datepicker { box-sizing: border-box; overflow: hidden; position: absolute;
Jan 13, 2025 00:12:43.429792881 CET	1236	IN	Data Raw: 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 20 20 20 2a 20 54 48 45 4d 45 0d 0a 20 20 20 2a 20 3d 3d Data Ascii: ============================================================= * THEME * ============================================================*/.datepicker { background-color: transparent; border-radius: 4px; color: #10004f;
Jan 13, 2025 00:12:43.429804087 CET	1236	IN	Data Raw: 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 64 61 79 2d 2d 6e 6f 2d 63 68 65 63 6b 69 6e 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 62 6f 74 Data Ascii: position: relative;}.datepicker__month-day--no-checkin:before { bottom: 0; content: ""; display: block; left: 0; position: absolute; z-index: -1; width: 0; height: 0; border-bottom: 8px so
Jan 13, 2025 00:12:43.429814100 CET	1236	IN	Data Raw: 72 67 62 61 28 32 33 32 2c 20 32 33 35 2c 20 32 34 34 2c 20 30 2e 35 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 64 61 79 2d 2d 73 65 6c 65 63 74 65 64 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: rgba(232, 235, 244, 0.5);}.datepicker__month-day--selected { background-color: rgba(56, 88, 233, 0.2); color: #fff;}.datepicker__month-day--selected:after,.datepicker__month-day--selected:before { display: none;}
Jan 13, 2025 00:12:43.429826021 CET	896	IN	Data Raw: 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 62 75 74 74 6f 6e 2d 2d 6e 65 78 74 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 61 73 73 65 74 73 2f 6d 65 64 69 61 2f 72 69 Data Ascii: tepicker__month-button--next:after { background-image: url(../assets/media/right.svg);}.datepicker__topbar { margin-bottom: 20px; position: relative;}.datepicker--topbar-bottom .datepicker__topbar { margin-botto
Jan 13, 2025 00:12:43.429923058 CET	1236	IN	Data Raw: 32 73 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 63 6f 6c 6f 72 2c 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 Data Ascii: 2s; transition-property: color, background-color, border-color; transition-timing-function: cubic-bezier(0.4, 0, 0.2, 1); background-color: #3858e9; border-radius: 2px; border: none; box-shadow: none; font-si
Jan 13, 2025 00:12:43.429936886 CET	1236	IN	Data Raw: 0a 2e 64 61 74 65 70 69 63 6b 65 72 5f 5f 73 75 62 6d 69 74 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 2e 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 6f 6f 6c 74 69 70 20 7b 0d 0a 20 20 20 20 Data Ascii: .datepicker__submit-button { width: auto;}.datepicker__tooltip { background-color: #ffe684; border-radius: 1px; font-size: 11px; margin-top: -5px; padding: 5px 10px;}.datepicker__tooltip:after {
Jan 13, 2025 00:12:43.429946899 CET	448	IN	Data Raw: 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 20 20 2e 64 61 74 65 70 69 63 6b 65 72 20 7b 0d 0a 20 20 20 Data Ascii: width: 1px; }}@media (min-width: 768px) { .datepicker { width: 560px; } .datepicker__month { width: 240px; } .datepicker--topbar-has-close-button .datepicker__info, .datepicker--
Jan 13, 2025 00:12:43.519608974 CET	101	IN	Data Raw: 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 Data Ascii: tion: absolute; right: 0; top: 50%; transform: translateY(-50%); }}
Jan 13, 2025 00:12:44.285320997 CET	465	OUT	GET /assets/media/right_red_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.437450886 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 8257 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.437585115 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 4e 08 06 00 00 00 61 68 4b 23 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 1f fb 49 44 41 54 78 5e ed 7c 09 74 55 d5 b9 ff 6f 9f f9 dc 21 21 81 10 24 32 29 22 8a 28 a2 e2 ac b5 Data Ascii: PNGIHDRONahK#sRGBIDATx^\|tUo!!$2)"(8U[[8R:P:"]T8s!@rs3)7$Y++oe4w~{#B-xuw\|IzOv26tZs(jVXitWgMU
Jan 13, 2025 00:12:44.442449093 CET	478	OUT	GET /assets/fonts/GLatam-LightItalic.ttf HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Origin: http://latamavuelospromosco.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/css/normalize.css?v=1444317318 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.539211988 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 36472 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.541656017 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 36472 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.544130087 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 36472 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.592645884 CET	467	OUT	GET /assets/media/index_menu_icon_1.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.743881941 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 35402 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.831360102 CET	467	OUT	GET /assets/media/index_menu_icon_4.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.980915070 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 28876 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.033376932 CET	495	OUT	GET /assets/media/create_account_banner.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/css/home.css?v=713091650 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.184811115 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/png Content-Length: 227453 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.726627111 CET	457	OUT	GET /assets/icons/favicon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.924422026 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/png Content-Length: 58828 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:57.634644985 CET	517	OUT	GET /cdn-cgi/l/email-protection HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:57.789000034 CET	483	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 12 Jan 2025 23:12:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>
Jan 13, 2025 00:12:57.940042973 CET	470	OUT	GET /favicon.ico HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/cdn-cgi/l/email-protection Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:58.093473911 CET	483	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 12 Jan 2025 23:12:58 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: keep-alive Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 20 61 6e 20 45 72 72 6f 72 44 6f 63 75 6d 65 6e 74 20 74 6f 20 68 61 6e 64 6c 65 20 74 68 65 20 72 65 71 75 65 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:42.877661943 CET	413	OUT	GET /css/banks.css?v=1108023049 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.418140888 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/css Content-Length: 11155 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:56 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.418154001 CET	1236	IN	Data Raw: 2e 62 67 4d 6f 64 61 6c 42 61 6e 6b 69 6e 67 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: .bgModalBanking { background-color: black; opacity: 0.7; position: fixed; height: 100%; width: 100%; top: 0;}.modalBookingBanking { width: 95%; height: 90%; top: 2.5%; left: 2.5%; po
Jan 13, 2025 00:12:43.418171883 CET	224	IN	Data Raw: 20 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 70 75 74 6e 6f 72 6d 61 6c 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 69 6e 70 75 74 42 61 6e 6b 69 6e 67 Data Ascii: 4px;}.inputnormal { width: 80%; padding: 3px;}.inputBanking {}.footerTxt { position: absolute; bottom: 0; left: 0px; background-size: cover;}/* BANCO DE BOGOT */.mod
Jan 13, 2025 00:12:43.418184042 CET	1236	IN	Data Raw: 61 6c 42 6f 6f 6b 69 6e 67 20 23 62 6f 67 63 63 20 7b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d Data Ascii: alBooking #bogcc { height: 40px; width: auto; margin-top: 20px;}button.bogcc { background-color: #0040a8; color: white; padding: 6px 12px 6px 12px; text-align: center; font-weight: bold; borde
Jan 13, 2025 00:12:43.418196917 CET	1236	IN	Data Raw: 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 34 38 37 33 61 3b 0d 0a 7d 0d 0a 0d 0a 69 6e 70 75 74 2e 62 70 6f 70 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a Data Ascii: ont-weight: bold; border: 1px solid #04873a;}input.bpop { padding: 8px 16px 8px 16px; border: 1px solid #04873a; font-size: 18px;}input.bpop:focus { outline: none !important; border: 1px solid #04873a;
Jan 13, 2025 00:12:43.418214083 CET	448	IN	Data Raw: 3a 20 23 30 30 38 61 63 63 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 20 36 70 78 20 31 32 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 Data Ascii: : #008acc; color: white; padding: 6px 12px 6px 12px; text-align: center; font-weight: bold; border: 1px solid #008acc;}input.bocc { padding: 2px 4px 2px 4px; border: 1px solid #008acc; font-size: 1
Jan 13, 2025 00:12:43.418226004 CET	1236	IN	Data Raw: 2e 61 76 63 63 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 35 34 37 64 36 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 31 32 70 78 20 Data Ascii: .avcc { background-color: #0547d6; color: white; padding: 6px 12px 6px 12px; text-align: center; font-weight: bold; border: 1px solid #0547d6;}input.avcc { padding: 2px 4px 2px 4px; border: 1px sol
Jan 13, 2025 00:12:43.418240070 CET	224	IN	Data Raw: 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 35 64 37 34 33 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 7d 0d 0a 0d 0a 69 6e 70 75 74 2e 63 6f 6e 61 76 69 63 63 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 6f Data Ascii: rder: 1px solid #f5d743; font-size: 16px;}input.conavicc:focus { outline: none !important; border: 1px solid #f5d743;}/* BANCO TUYA */.modalBooking #tuyacc { margin-left: 20px; margin
Jan 13, 2025 00:12:43.418417931 CET	1236	IN	Data Raw: 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 30 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 62 75 74 74 6f 6e 2e 74 75 79 61 63 63 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 64 31 63 32 39 Data Ascii: -top: 5px; width: 200px;}button.tuyacc { background-color: #ed1c29; color: white; padding: 6px 12px 6px 12px; text-align: center; font-weight: bold; border: 1px solid #ed1c29;}input.tuyacc {
Jan 13, 2025 00:12:43.418466091 CET	1236	IN	Data Raw: 0a 69 6e 70 75 74 2e 63 72 65 64 69 62 63 63 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 20 34 70 78 20 32 70 78 20 34 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 62 6c 61 63 6b 3b 0d 0a 20 20 Data Ascii: input.credibcc { padding: 2px 4px 2px 4px; border: 1px solid black; font-size: 16px;}input.credibcc:focus { outline: none !important; border: 1px solid black;}/* BANCO FALABELLA */.modalBooking #falacc
Jan 13, 2025 00:12:43.425205946 CET	1236	IN	Data Raw: 2e 6d 6f 64 61 6c 42 6f 6f 6b 69 6e 67 20 23 69 74 61 75 63 63 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a Data Ascii: .modalBooking #itaucc { margin-left: 20px; margin-top: 20px; width: 70px;}button.itaucc { background-color: #ec7404; color: white; padding: 6px 12px 6px 12px; text-align: center; font-weight: bold;
Jan 13, 2025 00:12:43.505769968 CET	400	OUT	GET /angular/angular-ui-router.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.653748989 CET	217	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 65562 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:43.937746048 CET	388	OUT	GET /views/home HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Accept: text/html User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.086308956 CET	170	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 38 63 35 39 0d 0a Data Ascii: 18c59
Jan 13, 2025 00:12:44.282968044 CET	462	OUT	GET /assets/media/takeoff_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.431159019 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 1821 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.435501099 CET	471	OUT	GET /assets/fonts/GLatam-Bold.ttf HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Origin: http://latamavuelospromosco.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/css/normalize.css?v=1444317318 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.537813902 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34920 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.541769981 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34920 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.544075966 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: font/ttf Content-Length: 34920 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.598582029 CET	467	OUT	GET /assets/media/index_menu_icon_2.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.744241953 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 34939 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.838481903 CET	489	OUT	GET /assets/media/Medellin_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/css/home.css?v=713091650 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.984520912 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/jpeg Content-Length: 216283 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:42.877703905 CET	394	OUT	GET /angular/angular.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:43.421628952 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/javascript Content-Length: 334060 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 35 2e 32 0d 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 36 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0d 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 4e 2c 20 51 2c 20 77 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 20 3d 20 22 5b 22 20 2b 20 28 61 20 3f 20 61 20 2b 20 22 3a 22 20 3a 20 22 22 29 20 2b 20 62 20 2b 20 22 5d 20 68 74 74 70 3a 2f 2f 65 72 72 6f 72 73 2e 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 2f 31 2e 35 2e 32 2f 22 20 2b 20 28 61 20 3f 20 61 20 2b 20 22 [TRUNCATED] Data Ascii: /* AngularJS v1.5.2 (c) 2010-2016 Google, Inc. http://angularjs.org License: MIT/(function(N, Q, w) { 'use strict'; function O(a) { return function() { var b = arguments[0], d; d = "[" + (a ? a + ":" : "") + b + "] http://errors.angularjs.org/1.5.2/" + (a ? a + "/" : "") + b; for (b = 1; b < arguments.length; b++) { d = d + (1 == b ? "?" : "&") + "p" + (b - 1) + "="; var c = encodeURIComponent, e; e = arguments[b]; e = "function" == typeof e ? e.toString().replace(/ \{[\s\S]$/, "") : "undefined" == typeof e ? "undefined" : "string" != typeof e ? JSON.stringify(e) : e; d += c(e) } return Error(d) } } function Ca(a) { if (null == a \|\| Xa(a)) return !1; if (L(a) \|\| D(a) \|\| G && a instanceof G) return !0; var b = "length" in Object(a) && [TRUNCATED]
Jan 13, 2025 00:12:43.421643019 CET	1236	IN	Data Raw: 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 28 62 29 20 26 26 20 28 30 20 3c 3d 20 62 20 26 26 20 28 62 20 2d 20 31 20 69 6e 20 61 20 7c 7c 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 20 7c 7c 20 22 66 75 6e Data Ascii: gth; return W(b) && (0 <= b && (b - 1 in a \|\| a instanceof Array) \|\| "function" == typeof a.item) } function p(a, b, d) { var c, e; if (a) if (H(a)) for (c in a) "prototype"
Jan 13, 2025 00:12:43.421653986 CET	448	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 4e 62 28 61 2c 20 62 2c 20 64 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 63 20 3d 20 61 2e 24 24 68 61 73 68 4b 65 79 2c 20 65 20 3d 20 30 2c 20 66 20 3d 20 62 2e 6c 65 6e 67 74 68 3b 20 65 20 Data Ascii: function Nb(a, b, d) { for (var c = a.$$hashKey, e = 0, f = b.length; e < f; ++e) { var g = b[e]; if (I(g) \|\| H(g)) for (var h = Object.keys(g), k = 0, l = h.length; k < l; k++) {
Jan 13, 2025 00:12:43.421665907 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 28 6e 29 20 3f 20 61 5b 6d 5d 20 3d 20 6e 2e 63 6c 6f 6e 65 28 29 20 3a 20 28 49 28 61 5b 6d 5d 29 20 7c 7c 20 28 61 5b 6d 5d 20 3d 20 4c 28 6e 29 20 3f 20 5b 5d 20 3a 20 7b 7d Data Ascii: Ob(n) ? a[m] = n.clone() : (I(a[m]) \|\| (a[m] = L(n) ? [] : {}), Nb(a[m], [n], !0)) : a[m] = n } } c ? a.$$hashKey = c : delete a.$$hashKey; return a } function S(a) {
Jan 13, 2025 00:12:43.421678066 CET	1236	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 20 3d 3d 3d 20 68 61 2e 63 61 6c 6c 28 61 29 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 Data Ascii: function ga(a) { return "[object Date]" === ha.call(a) } function H(a) { return "function" === typeof a } function Ya(a) { return "[object RegExp]" === ha.call(a) } function Xa(a)
Jan 13, 2025 00:12:43.421708107 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 6e 63 28 61 29 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 65 20 69 6e 20 61 29 20 62 5b 65 5d 20 3d 20 63 28 61 5b 65 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: } else if (nc(a)) for (e in a) b[e] = c(a[e]); else if (a && "function" === typeof a.hasOwnProperty) for (e in a) a.hasOwnProperty(e) && (b[e] = c(a[e]));
Jan 13, 2025 00:12:43.421721935 CET	1236	IN	Data Raw: 61 79 5d 22 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 22 5b 6f 62 6a 65 63 74 20 55 69 6e 74 33 32 41 72 72 61 79 5d 22 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 Data Ascii: ay]": case "[object Uint32Array]": return new a.constructor(c(a.buffer)); case "[object ArrayBuffer]": if (!a.slice) { var b = new ArrayBuffer
Jan 13, 2025 00:12:43.421744108 CET	1114	IN	Data Raw: 20 20 20 20 20 20 4c 28 62 29 20 3f 20 62 2e 6c 65 6e 67 74 68 20 3d 20 30 20 3a 20 70 28 62 2c 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 63 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 24 24 68 61 73 68 4b 65 79 22 20 21 3d 3d Data Ascii: L(b) ? b.length = 0 : p(b, function(a, c) { "$$hashKey" !== c && delete b[c] }); f.push(a); g.push(b); return d(a, b) } return c(a) } func
Jan 13, 2025 00:12:43.421762943 CET	1236	IN	Data Raw: 61 29 29 20 72 65 74 75 72 6e 20 67 61 28 62 29 20 3f 20 6f 61 28 61 2e 67 65 74 54 69 6d 65 28 29 2c 20 62 2e 67 65 74 54 69 6d 65 28 29 29 20 3a 20 21 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 59 61 28 61 29 29 20 Data Ascii: a)) return ga(b) ? oa(a.getTime(), b.getTime()) : !1; if (Ya(a)) return Ya(b) ? a.toString() == b.toString() : !1; if ($a(a) \|\| $a(b) \|\| Xa(a) \|\| Xa(b) \|\| L(b) \|\| ga(b) \|\| Ya(b)) return !1; d
Jan 13, 2025 00:12:43.421782970 CET	1236	IN	Data Raw: 64 20 3d 20 77 20 3a 20 58 61 28 62 29 20 3f 20 64 20 3d 20 22 24 57 49 4e 44 4f 57 22 20 3a 20 62 20 26 26 20 51 20 3d 3d 3d 20 62 20 3f 20 64 20 3d 20 22 24 44 4f 43 55 4d 45 4e 54 22 20 3a 20 24 61 28 62 29 20 26 26 20 28 64 20 3d 20 22 24 53 Data Ascii: d = w : Xa(b) ? d = "$WINDOW" : b && Q === b ? d = "$DOCUMENT" : $a(b) && (d = "$SCOPE"); return d } function cb(a, b) { if (v(a)) return w; W(b) \|\| (b = b ? 2 : null); return JSON.stringify(a, Z
Jan 13, 2025 00:12:43.428534031 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 62 29 20 7b 7d 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 77 63 28 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 7b 7d 3b 0d 0a 20 20 20 20 20 20 Data Ascii: } catch (b) {} } function wc(a) { var b = {}; p((a \|\| "").split("&"), function(a) { var c, e, f; a && (e = a = a.replace(/\+/g, "%20"), c = a.indexOf("="), -1 !== c && (e = a.subs
Jan 13, 2025 00:12:43.932629108 CET	523	OUT	POST /api/checkOFF HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive Content-Length: 2 Accept: application/json, text/plain, / User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json;charset=UTF-8 Origin: http://latamavuelospromosco.com Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903 Data Raw: 7b 7d Data Ascii: {}
Jan 13, 2025 00:12:44.086961985 CET	253	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 66 0d 0a 7b 22 63 6f 64 65 22 3a 31 30 34 31 2c 22 6d 73 67 22 3a 22 41 65 72 6f 70 75 65 72 74 6f 73 20 65 78 74 72 61 5c 75 30 30 65 64 64 6f 73 2e 22 2c 22 73 74 61 74 75 73 22 3a 30 2c 22 73 63 6f 64 65 22 3a 30 2c 22 69 64 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 4f{"code":1041,"msg":"Aeropuertos extra\u00eddos.","status":0,"scode":0,"id":"0"}0
Jan 13, 2025 00:12:44.283411026 CET	459	OUT	GET /assets/media/info_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.434097052 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 7064 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.442819118 CET	463	OUT	GET /assets/media/mappoint_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.538604975 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 3388 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.541651011 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 3388 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.544111013 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: image/png Content-Length: 3388 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.599374056 CET	467	OUT	GET /assets/media/index_menu_icon_3.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.747241974 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 45026 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.860188961 CET	487	OUT	GET /assets/media/Madrid_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://latamavuelospromosco.com/css/home.css?v=713091650 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.008311987 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/jpeg Content-Length: 99097 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:08 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.782047987 CET	343	OUT	GET /angular/app.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.353632927 CET	216	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 2353 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.353653908 CET	1236	IN	Data Raw: 76 61 72 20 61 70 70 20 3d 20 61 6e 67 75 6c 61 72 2e 6d 6f 64 75 6c 65 28 22 4c 61 74 61 6d 41 70 70 22 2c 20 5b 27 6e 67 52 6f 75 74 65 27 2c 20 27 75 69 2e 72 6f 75 74 65 72 27 5d 29 3b 0a 0a 61 70 70 2e 72 75 6e 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: var app = angular.module("LatamApp", ['ngRoute', 'ui.router']);app.run(function($rootScope, $templateCache) { $rootScope.$on('$routeChangeStart', function(event, next, current) { if (typeof(current) !== 'undefined') {
Jan 13, 2025 00:12:44.353674889 CET	224	IN	Data Raw: 72 6c 3a 20 22 2f 62 6f 6f 6b 69 6e 67 2f 63 61 72 64 49 64 3d 3a 63 61 72 74 26 70 6f 69 6e 74 4f 66 53 61 6c 65 3d 3a 70 6f 73 26 6c 61 6e 67 75 61 67 65 3d 3a 6c 61 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 63 61 63 68 65 3a 20 66 61 6c 73 65 2c Data Ascii: rl: "/booking/cardId=:cart&pointOfSale=:pos&language=:lang", cache: false, templateUrl: "views/reviewf", controller: 'reviewFinalController' }); $stateProvider.state("/Travelers", { u
Jan 13, 2025 00:12:44.444623947 CET	893	IN	Data Raw: 72 6c 3a 20 22 2f 62 6f 6f 6b 69 6e 67 2f 74 72 61 76 65 6c 65 72 73 22 2c 0a 20 20 20 20 20 20 20 20 63 61 63 68 65 3a 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 74 65 6d 70 6c 61 74 65 55 72 6c 3a 20 22 76 69 65 77 73 2f 70 61 73 73 61 6e Data Ascii: rl: "/booking/travelers", cache: false, templateUrl: "views/passangers", controller: 'travelersController' }); $stateProvider.state("/Payment", { url: "/booking/payment/error=:error", cache: fal
Jan 13, 2025 00:12:44.449413061 CET	339	OUT	GET /views/home HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.539515972 CET	170	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 38 63 35 39 0d 0a Data Ascii: 18c59
Jan 13, 2025 00:12:45.539526939 CET	1236	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 Data Ascii: <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /> <link rel="shortcut icon" href="./assets/favicon.png" type="image/x-icon"> ... CSS -->
Jan 13, 2025 00:12:45.539539099 CET	1236	IN	Data Raw: 79 70 65 3d 22 72 61 64 69 6f 22 20 20 6e 61 6d 65 3d 22 74 72 61 76 65 6c 2d 6f 70 74 22 20 69 64 3d 22 67 6f 2d 62 61 63 6b 22 20 6e 67 2d 6d 6f 64 65 6c 3d 22 72 61 64 69 6f 49 56 22 20 6e 67 2d 63 68 61 6e 67 65 3d 22 69 76 43 68 61 6e 67 65 Data Ascii: ype="radio" name="travel-opt" id="go-back" ng-model="radioIV" ng-change="ivChange(1)" ng-checked="true"> <div class="custom-radio ct-radio"></div> </div> </div> <
Jan 13, 2025 00:12:45.539551020 CET	1236	IN	Data Raw: 32 20 31 33 2e 35 38 32 39 4c 32 37 2e 31 38 38 31 20 32 2e 33 37 35 4c 33 30 20 35 2e 31 38 36 38 35 4c 31 38 2e 37 39 32 31 20 31 36 2e 33 37 35 4c 33 30 20 32 37 2e 35 38 32 39 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 Data Ascii: 2 13.5829L27.1881 2.375L30 5.18685L18.7921 16.375L30 27.5829Z" fill="currentColor"></path> </svg> </div> <div class="pr-4 pl-4 "> <h4 class="fw-light fs-25 tc-ocean mt-1">Tipo de Cabi
Jan 13, 2025 00:12:45.539562941 CET	1236	IN	Data Raw: 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 73 65 61 74 2d 74 79 70 65 22 20 69 64 3d 22 70 72 65 6d 69 75 6d 2d 62 75 73 69 6e 65 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: put type="radio" name="seat-type" id="premium-business"> <div class="custom-radio ct-radio"></div> </div> </div> <button class="btn-success mt-5" ng-click="checkSe
Jan 13, 2025 00:12:45.539575100 CET	896	IN	Data Raw: 65 6c 20 66 6f 72 3d 22 6f 72 69 67 69 6e 22 3e 4f 72 69 67 65 6e 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 Data Ascii: el for="origin">Origen</label> </div> <div class="mt-4" id="search-results-origin"> <div ng-repeat="a in airportsAvailable" ng-click="setAirport(a.code, airportTySel)">
Jan 13, 2025 00:12:45.539585114 CET	1236	IN	Data Raw: 6e 4d 6f 64 61 6c 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 68 69 64 65 4d 6f 64 61 6c 28 27 73 65 6c 65 63 74 2d 6f 72 69 67 69 6e 27 29 22 3e 43 6f 6e 66 69 72 6d 61 72 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 Data Ascii: nModal" ng-click="hideModal('select-origin')">Confirmar</button> </div> </div> ... SELECT DESTINATION --> <div class="modal" id="select-destination"> <div class="d-flex justify-content-end
Jan 13, 2025 00:12:45.539594889 CET	1236	IN	Data Raw: 76 61 69 6c 61 62 6c 65 22 20 6e 67 2d 63 6c 69 63 6b 3d 22 73 65 74 41 69 72 70 6f 72 74 28 61 2e 63 6f 64 65 2c 20 61 69 72 70 6f 72 74 54 79 53 65 6c 29 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 Data Ascii: vailable" ng-click="setAirport(a.code, airportTySel)"> <div class="search-item d-flex align-items-center p-1" > <img class="pr-2 pl-2" src="./assets/media/takeoff_icon.png" width="15px">
Jan 13, 2025 00:12:45.541683912 CET	170	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 38 63 35 39 0d 0a Data Ascii: 18c59
Jan 13, 2025 00:12:45.544097900 CET	170	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 31 38 63 35 39 0d 0a Data Ascii: 18c59
Jan 13, 2025 00:12:45.635474920 CET	357	OUT	GET /assets/media/hamburger_a.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.785576105 CET	852	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 643 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 76 00 00 00 6a 08 06 00 00 00 69 b3 a5 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 61 69 54 58 74 53 6e 69 70 4d 65 74 61 64 61 74 61 00 00 00 00 00 7b 22 63 6c 69 70 50 6f 69 6e 74 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 31 31 38 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 31 31 38 2c 22 79 22 3a 31 30 36 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 31 30 36 7d 5d 7d 8a 40 78 26 00 00 01 ab 49 44 41 54 78 5e ed dd b1 4d 5b 51 18 80 d1 17 26 a0 4a 89 18 c0 23 50 58 2c 40 0b 34 c9 16 a1 0b e9 c2 16 d0 00 53 58 46 72 36 f0 00 51 ca 2c 91 08 74 1b 4b 31 52 ba c7 c7 39 d2 93 df ad 3f f9 4a b6 9f ff fb e1 70 3a fb 33 91 73 30 5e 89 11 36 4a d8 28 61 a3 84 8d 12 36 6a ef c7 9d 93 e5 e2 e5 62 be 36 eb ed cb f5 2f 7b c3 5e 5d 9f 4f 5f be 9e 8f 15 73 74 f3 ed 71 fa 7e fd 38 56 bb 6c c5 51 c2 46 09 1b 25 6c 94 b0 51 c2 [TRUNCATED] Data Ascii: PNGIHDRvjisRGBgAMAapHYsodaiTXtSnipMetadata{"clipPoints":[{"x":0,"y":0},{"x":118,"y":0},{"x":118,"y":106},{"x":0,"y":106}]}@x&IDATx^M[Q&J#PX,@4SXFr6Q,tK1R9?Jp:3s0^6J(a6jb6/{^]O_stq~8VlQF%lQF%lQFN9oWclQ(a6J(a6J(a6J(a6J(a6J(a6?;nq@oq@QF%lQF%lQFePwlQF%lQF%lQF%lQF%lQF%lQF%l\~>u=gswH(a6J(a6J(a~W\|r1VAvve+6J(aM>1BAIENDB`
Jan 13, 2025 00:12:45.866617918 CET	360	OUT	GET /assets/media/red_down_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.016570091 CET	209	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 957 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.114221096 CET	363	OUT	GET /assets/media/index_menu_icon_4.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.264578104 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/png Content-Length: 28876 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.835134983 CET	357	OUT	GET /assets/media/Lima_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:47.071949005 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/jpeg Content-Length: 215520 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.782121897 CET	358	OUT	GET /angular/latam.js?v=1676195227 HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.341717005 CET	218	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 195673 Connection: keep-alive Last-Modified: Wed, 11 Dec 2024 20:37:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.341866970 CET	1236	IN	Data Raw: 0d 0a 0d 0a 61 70 70 2e 73 65 72 76 69 63 65 28 27 47 55 49 44 53 65 72 76 69 63 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 63 68 6f 73 65 6e 47 55 49 44 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 Data Ascii: app.service('GUIDService', function () { var chosenGUID = localStorage.getItem('chosenGUID') \|\| null; function generateGUID() { function s4() { return Math.floor((1 + Math.random()) * 0x10000).toString(16)
Jan 13, 2025 00:12:44.341928959 CET	1236	IN	Data Raw: 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: document.location.href = window.location.origin; } }) .error(function (err) { console.log(err); $scope.loading = false; }) }; $scope.check
Jan 13, 2025 00:12:44.341941118 CET	1236	IN	Data Raw: 61 6e 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 6a 61 68 6c 69 79 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 31 20 3d 3d 20 6a 61 68 6c 69 79 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 72 49 56 20 3d Data Ascii: ange = function (jahliya) { if (1 == jahliya) { $scope.rIV = 1; $scope.rI = 0; document.querySelector("#label-travel-type").textContent = "Ida y Vuelta"; } else { $scope.rI
Jan 13, 2025 00:12:44.341952085 CET	672	IN	Data Raw: 61 64 75 6c 74 73 20 3e 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 73 63 6f 70 65 2e 61 64 75 6c 74 73 2d 2d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: adults > 1) { $scope.adults--; } break; case "children": if ("+" == kasity) { $scope.kids++; } else if ($scope.kids > 0)
Jan 13, 2025 00:12:44.341967106 CET	1236	IN	Data Raw: 20 20 20 24 73 63 6f 70 65 2e 74 6f 74 61 6c 50 61 73 61 6a 65 72 6f 73 20 3d 20 24 73 63 6f 70 65 2e 61 64 75 6c 74 73 20 2b 20 24 73 63 6f 70 65 2e 6b 69 64 73 3b 0d 0a 20 20 20 20 7d 3b 0d 0a 20 20 20 20 24 73 63 6f 70 65 2e 67 65 74 56 75 65 Data Ascii: $scope.totalPasajeros = $scope.adults + $scope.kids; }; $scope.getVueltaText = function () { return 1 == $scope.rI ? "Solo Ida" : null == $scope.pickedDDate ? "Selecciona" : null != $scope.pickedDDate ? $scope.getTextDate
Jan 13, 2025 00:12:44.341980934 CET	224	IN	Data Raw: 69 72 65 5b 32 5d 20 2b 20 22 20 44 65 20 22 20 2b 20 24 73 63 6f 70 65 2e 6d 6f 6e 74 68 73 5b 6d 61 67 75 69 72 65 5b 31 5d 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 74 79 69 61 6e 61 20 3d 20 24 73 63 6f 70 65 2e 70 69 Data Ascii: ire[2] + " De " + $scope.months[maguire[1]]; tatyiana = $scope.pickedDDate; let tadd = new Date(tatyiana.toString()); if (3 == milfred) { return "a " +
Jan 13, 2025 00:12:44.342190981 CET	1236	IN	Data Raw: 24 73 63 6f 70 65 2e 64 61 79 73 54 5b 70 61 72 73 65 49 6e 74 28 74 61 64 64 2e 67 65 74 44 61 79 28 29 29 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 20 33 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 Data Ascii: $scope.daysT[parseInt(tadd.getDay())].substring(0, 3); } if (4 == milfred) { return biren; } } } else { if (null != $scope.pickedDate) {
Jan 13, 2025 00:12:44.342227936 CET	224	IN	Data Raw: 20 6c 65 74 20 6d 6f 6e 74 68 20 3d 20 28 63 75 72 72 65 6e 74 4d 6f 6e 74 68 20 2b 20 69 29 20 25 20 31 32 20 2b 20 31 3b 20 2f 2f 20 31 2d 31 32 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 79 65 61 72 20 3d 20 63 75 72 72 65 6e 74 59 65 61 72 20 Data Ascii: let month = (currentMonth + i) % 12 + 1; // 1-12 let year = currentYear + Math.floor((currentMonth + i) / 12); let monthString = month < 10 ? "0" + month : month.toString(); var firstDayOfMont
Jan 13, 2025 00:12:44.342240095 CET	1236	IN	Data Raw: 68 20 3d 20 6e 65 77 20 44 61 74 65 28 79 65 61 72 2c 20 6d 6f 6e 74 68 20 2d 20 31 2c 20 31 29 2e 67 65 74 44 61 79 28 29 3b 20 2f 2f 20 30 2d 36 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 61 79 73 49 6e 4d 6f 6e 74 68 20 3d 20 6e 65 77 20 44 Data Ascii: h = new Date(year, month - 1, 1).getDay(); // 0-6 var daysInMonth = new Date(year, month, 0).getDate(); var lailanni = { mes: $scope.months[month], ano: year.toString(), days: daysInMo
Jan 13, 2025 00:12:44.348655939 CET	1236	IN	Data Raw: 6f 70 65 2e 6d 6f 6e 74 68 73 2e 6c 65 6e 67 74 68 3b 20 61 73 68 6d 69 74 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 24 73 63 6f 70 65 2e 6d 6f 6e 74 68 73 5b 61 73 68 6d 69 74 5d 20 3d 3d 20 61 73 74 72 65 Data Ascii: ope.months.length; ashmit++) { if ($scope.months[ashmit] == astreia.mes) { threasa = ashmit; } } var viriginia = malack + 1 - astreia.firstDayN; if (
Jan 13, 2025 00:12:45.593805075 CET	355	OUT	GET /assets/media/info_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.741697073 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 7064 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.770524979 CET	359	OUT	GET /assets/media/mappoint_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.918346882 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 3388 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.034663916 CET	357	OUT	GET /assets/media/main_banner.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.182555914 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/png Content-Length: 158849 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:08 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.840832949 CET	358	OUT	GET /assets/media/Miami_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:47.069077015 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/jpeg Content-Length: 118016 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.782190084 CET	362	OUT	GET /assets/bootstrap/js/jquery.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.357480049 CET	218	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 142779 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:02 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.357573986 CET	1236	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 30 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 20 21 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 29 Data Ascii: /! jQuery v2.2.0 \| (c) jQuery Foundation \| jquery.org/license / ! function(a, b) { "object" == typeof module && "object" == typeof module.exports ? module.exports = a.document ? b(a, !0) : function(a) { if (!a.document) throw new
Jan 13, 2025 00:12:44.357599974 CET	1236	IN	Data Raw: 62 20 3d 20 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 61 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 20 3d 20 74 68 69 73 2c 20 62 2e 63 6f 6e 74 Data Ascii: b = n.merge(this.constructor(), a); return b.prevObject = this, b.context = this.context, b }, each: function(a) { return n.each(this, a) }, map: function(a) { return this.pus
Jan 13, 2025 00:12:44.357621908 CET	448	IN	Data Raw: 20 74 68 69 73 2c 20 68 2d 2d 29 3b 20 69 20 3e 20 68 3b 20 68 2b 2b 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 28 61 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 68 5d 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: this, h--); i > h; h++) if (null != (a = arguments[h])) for (b in a) c = g[b], d = a[b], g !== d && (j && d && (n.isPlainObject(d) \|\| (e = n.isArray(d))) ? (e ? (e = !1, f = c && n.isArray(c) ? c : []) : f = c && n
Jan 13, 2025 00:12:44.357634068 CET	1236	IN	Data Raw: 21 30 2c 0a 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 Data Ascii: !0, error: function(a) { throw new Error(a) }, noop: function() {}, isFunction: function(a) { return "function" === n.type(a) }, isArray: Array.isArray, isWindow:
Jan 13, 2025 00:12:44.357644081 CET	1236	IN	Data Raw: 20 20 20 20 72 65 74 75 72 6e 20 61 2e 72 65 70 6c 61 63 65 28 70 2c 20 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 71 2c 20 72 29 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 6e 6f 64 65 4e 61 6d 65 3a 20 66 75 6e 63 74 69 6f 6e Data Ascii: return a.replace(p, "ms-").replace(q, r) }, nodeName: function(a, b) { return a.nodeName && a.nodeName.toLowerCase() === b.toLowerCase() }, each: function(a, b) { var c, d = 0;
Jan 13, 2025 00:12:44.357655048 CET	448	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 6d 61 70 3a 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 2c 20 63 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 2c 20 65 2c 20 67 20 3d 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 20 3d Data Ascii: map: function(a, b, c) { var d, e, g = 0, h = []; if (s(a)) for (d = a.length; d > g; g++) e = b(a[g], g, c), null != e && h.push(e); else for (g in a
Jan 13, 2025 00:12:44.357959986 CET	1236	IN	Data Raw: 26 20 28 63 20 3d 20 61 5b 62 5d 2c 20 62 20 3d 20 61 2c 20 61 20 3d 20 63 29 2c 20 6e 2e 69 73 46 75 6e 63 74 69 6f 6e 28 61 29 20 3f 20 28 64 20 3d 20 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 20 32 29 2c 20 66 20 3d 20 66 75 6e 63 74 Data Ascii: & (c = a[b], b = a, a = c), n.isFunction(a) ? (d = e.call(arguments, 2), f = function() { return a.apply(b \|\| this, d.concat(e.call(arguments))) }, f.guid = a.guid = a.guid \|\| n.guid++, f) : void 0 },
Jan 13, 2025 00:12:44.357971907 CET	1236	IN	Data Raw: 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 20 3d 20 45 2e 70 75 73 68 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 49 20 3d 20 45 2e 73 6c 69 63 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 4a 20 3d 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 62 29 20 Data Ascii: , H = E.push, I = E.slice, J = function(a, b) { for (var c = 0, d = a.length; d > c; c++) if (a[c] === b) return c; return -1 }, K
Jan 13, 2025 00:12:44.357992887 CET	1236	IN	Data Raw: 20 20 20 20 20 43 4c 41 53 53 3a 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 20 2b 20 4d 20 2b 20 22 29 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 41 47 3a 20 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 20 2b 20 Data Ascii: CLASS: new RegExp("^\\.(" + M + ")"), TAG: new RegExp("^(" + M + "\|[*])"), ATTR: new RegExp("^" + N), PSEUDO: new RegExp("^" + O), CHILD: new RegExp("^:(only\|first\|last\|nth\|n
Jan 13, 2025 00:12:44.364981890 CET	1236	IN	Data Raw: 61 70 70 6c 79 28 45 20 3d 20 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 20 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 20 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 0a 20 20 20 Data Ascii: apply(E = I.call(v.childNodes), v.childNodes), E[v.childNodes.length].nodeType } catch (ea) { H = { apply: E.length ? function(a, b) { G.apply(a, I.call(b)) } : function(a
Jan 13, 2025 00:12:45.563884974 CET	361	OUT	GET /assets/media/left_gray_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.715116024 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 4988 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.864623070 CET	363	OUT	GET /assets/media/index_menu_icon_1.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.015793085 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 35402 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.119278908 CET	359	OUT	GET /assets/media/Madrid_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.277626991 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/jpeg Content-Length: 99097 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:08 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.832681894 CET	361	OUT	GET /assets/media/Medellin_banner.jpg HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:47.073038101 CET	213	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/jpeg Content-Length: 216283 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:47.643191099 CET	367	OUT	GET /assets/media/create_account_banner.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:47.794960022 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:47 GMT Content-Type: image/png Content-Length: 227453 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:48.646749973 CET	353	OUT	GET /assets/icons/favicon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:48.799835920 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:48 GMT Content-Type: image/png Content-Length: 58828 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.782850027 CET	357	OUT	GET /angular/angular-ui-router.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.333241940 CET	217	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 65562 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.333340883 CET	1236	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 53 74 61 74 65 2d 62 61 73 65 64 20 72 6f 75 74 69 6e 67 20 66 6f 72 20 41 6e 67 75 6c 61 72 4a 53 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 76 30 2e 32 2e 31 38 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c Data Ascii: /** * State-based routing for AngularJS * @version v0.2.18 * @link http://angular-ui.github.com/ * @license MIT License, http://www.opensource.org/licenses/MIT */"undefined" != typeof module && "undefined" != typeof exports && module.exp
Jan 13, 2025 00:12:44.333375931 CET	224	IN	Data Raw: 20 76 61 72 20 63 20 3d 20 61 2e 6c 65 6e 67 74 68 20 3e 3e 3e 20 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 20 3d 20 4e 75 6d 62 65 72 28 61 72 67 75 6d 65 6e 74 73 5b 32 5d 29 20 7c 7c 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: var c = a.length >>> 0, d = Number(arguments[2]) \|\| 0; for (d = 0 > d ? Math.ceil(d) : Math.floor(d), 0 > d && (d += c); c > d; d++) if (d in a && a[d] === b) return d;
Jan 13, 2025 00:12:44.333388090 CET	1236	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 2d 31 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 28 61 2c 20 62 2c 20 63 2c 20 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 2c 20 69 20 3d 20 66 28 63 Data Ascii: return -1 } function i(a, b, c, d) { var e, i = f(c, d), j = {}, k = []; for (var l in i) if (i[l] && i[l].params && (e = g(i[l].params), e.length))
Jan 13, 2025 00:12:44.333400965 CET	224	IN	Data Raw: 2c 20 31 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 64 20 69 6e 20 61 29 20 2d 20 31 20 3d 3d 20 68 28 63 2c 20 64 29 20 26 26 20 28 62 5b 64 5d 20 3d 20 61 5b 64 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: , 1)); for (var d in a) - 1 == h(c, d) && (b[d] = a[d]); return b } function n(a, b) { var c = P(a), d = c ? [] : {}; return Q(a, function(a, e
Jan 13, 2025 00:12:44.333435059 CET	1236	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 28 61 2c 20 65 29 20 26 26 20 28 64 5b 63 20 3f 20 64 2e 6c 65 6e 67 74 68 20 3a 20 65 5d 20 3d 20 61 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 64 0a 20 20 20 20 20 20 20 Data Ascii: ) { b(a, e) && (d[c ? d.length : e] = a) }), d } function o(a, b) { var c = P(a) ? [] : {}; return Q(a, function(a, d) { c[d] = b(a, d) }), c
Jan 13, 2025 00:12:44.333471060 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 Data Ascii: } } function o(a) { return O(a) && a.then && a.$$promises } if (!O(i)) throw new Error("'invocables' must be an object"); var p = g(i
Jan 13, 2025 00:12:44.333486080 CET	448	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 28 61 29 0a Data Ascii: } catch (a) { j(a) } } var l = a.defer(), m = 0;
Jan 13, 2025 00:12:44.333580017 CET	1236	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6a 29 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 6d 20 7c 7c 20 6b 28 29 2c 20 73 5b 63 5d Data Ascii: }, j)) }), m \|\| k(), s[c] = l.promise } if (o(d) && g === c && (g = f, f = d, d = null), d) { if (!O(d)) throw
Jan 13, 2025 00:12:44.333606958 CET	1236	IN	Data Raw: 20 31 5d 2c 20 71 5b 77 20 2b 20 32 5d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 1], q[w + 2]); return r } }, this.resolve = function(a, b, c, d) { return this.study(a)(b, c, d) } } function q(a, b, c) { this.f
Jan 13, 2025 00:12:44.340533018 CET	1236	IN	Data Raw: 5b 5c 5d 29 3f 24 2f 2e 74 65 73 74 28 62 29 29 20 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 70 61 72 61 6d 65 74 65 72 20 6e 61 6d 65 20 27 22 20 2b 20 62 20 2b 20 22 27 20 69 6e 20 70 61 74 74 65 72 6e 20 27 22 Data Ascii: [\])?$/.test(b)) throw new Error("Invalid parameter name '" + b + "' in pattern '" + a + "'"); if (p[b]) throw new Error("Duplicate parameter name '" + b + "' in pattern '" + a + "'"); return p[b] = new U.Param(
Jan 13, 2025 00:12:45.542962074 CET	358	OUT	GET /assets/media/takeoff_icon.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.697351933 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 1821 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 77 00 00 00 74 08 06 00 00 00 bf ad ad 24 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 61 69 54 58 74 53 6e 69 70 4d 65 74 61 64 61 74 61 00 00 00 00 00 7b 22 63 6c 69 70 50 6f 69 6e 74 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 31 31 39 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 31 31 39 2c 22 79 22 3a 31 31 36 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 31 31 36 7d 5d 7d 03 67 17 77 00 00 06 45 49 44 41 54 78 5e ed 9d bd 8e 1c 45 10 80 c7 3c 00 bc c0 9d 81 1c 72 4e 58 32 a4 e4 67 89 08 c8 48 b9 84 10 13 92 1c 29 19 76 84 64 e7 4e 0d 12 e8 c8 21 e7 c7 f7 02 f0 02 f6 7c e7 6d 6b dc d3 ff dd 33 d3 53 5b 9f 74 ba 5d fb 3c d7 d3 df 54 75 75 ed 7a f6 d6 f3 91 41 11 c9 1b 87 ef 8a 40 54 ae 60 54 ae 60 54 ae 60 ba 2b a8 1e 3d f8 63 f8 fd 97 67 c3 d5 cf ff de 3c 3f 79 e7 ad e1 ec ee e9 70 fe f9 fb c3 e9 f8 58 49 67 73 b9 [TRUNCATED] Data Ascii: PNGIHDRwt$sRGBgAMAapHYsodaiTXtSnipMetadata{"clipPoints":[{"x":0,"y":0},{"x":119,"y":0},{"x":119,"y":116},{"x":0,"y":116}]}gwEIDATx^E<rNX2gH)vdN!\|mk3S[t]<TuuzA@T`T`T`+=cg<?ypXIgsSn.d8JNdu92] o>T&_<9<G%YE.QzOgmAA:TyxX8^p4_S^J^u!?{/^9Il8XXm={\)J^Q.BGO?M13Ad<W)8}N7}o\[=KfdUBkL[]18.`R.^%#47BS`xqM\|E\>R%&aS@e8q [P+s __5O,bs"8o+]7S)cw0W6sB.-9th!4#k#77bwBGn }z`BL/(NK6v!@PyK1LrJ{.].CEuX>aD)KxIH.\Ch+Ct,9.*Wc1ziWt-Bv^#Bf`RWm5R_1IrSuKc2xr@JsMa`A1PtuuAr@FJJvr3&\|KMtH^"8W(0 [TRUNCATED]
Jan 13, 2025 00:12:45.870120049 CET	363	OUT	GET /assets/media/index_menu_icon_3.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.015950918 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 45026 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:46.842941046 CET	352	OUT	GET /assets/media/ltpass.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:47.066826105 CET	212	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:46 GMT Content-Type: image/png Content-Length: 107423 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.782850027 CET	357	OUT	GET /angular/angular-route.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.360908985 CET	216	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 7837 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:44.361217022 CET	1236	IN	Data Raw: 2f 2a 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 32 2e 32 36 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0a 20 4c 69 63 65 6e 73 65 3a 20 4d Data Ascii: /* AngularJS v1.2.26 (c) 2010-2014 Google, Inc. http://angularjs.org License: MIT*/(function(n, e, A) { 'use strict'; function x(s, g, h) { return { restrict: "ECA", terminal: !0, prior
Jan 13, 2025 00:12:44.361231089 CET	1236	IN	Data Raw: 20 20 6b 2e 24 65 76 61 6c 28 75 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 79 28 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 Data Ascii: k.$eval(u) } else y() } var k, l, p, t = b.autoscroll, u = b.onload \|\| ""; a.$on("$routeChangeSuccess", v); v() } }
Jan 13, 2025 00:12:44.361242056 CET	1236	IN	Data Raw: 28 5b 28 29 2e 5d 29 2f 67 2c 20 22 5c 5c 24 31 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5c 2f 29 3f 3a 28 5c 77 2b 29 28 5b 5c 3f 5c 2a 5d 29 3f 2f 67 2c 20 66 75 6e 63 74 69 6f 6e 28 61 2c 20 65 2c 20 62 2c 20 63 29 20 7b 0a 20 20 20 20 20 20 20 Data Ascii: ([().])/g, "\\$1").replace(/(\/)?:(\w+)([\?\])?/g, function(a, e, b, c) { a = "?" === c ? c : null; c = "" === c ? c : null; h.push({ name: b, optional:
Jan 13, 2025 00:12:44.361248016 CET	1236	IN	Data Raw: 2c 20 6b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 70 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: , k) { function l() { var d = p(), m = r.current; if (d && m && d.$$route === m.$$route && e.equals(d.pathParams, m.pathParams) && !d.reloadOnSearch && !u) m.params = d.params, e.
Jan 13, 2025 00:12:44.361258030 CET	896	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 61 2e 64 61 74 61 0a 20 Data Ascii: }).then(function(a) { return a.data }))); e.isDefined(c) && (a.$template = c); return f.all(a) }
Jan 13, 2025 00:12:44.361304045 CET	1236	IN	Data Raw: 66 2e 72 65 67 65 78 70 2e 65 78 65 63 28 67 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6b 20 3d 20 31 2c 20 70 20 3d 20 67 2e 6c 65 6e 67 74 68 3b 20 Data Ascii: f.regexp.exec(g)) { for (var k = 1, p = g.length; k < p; ++k) { var n = q[k - 1], r = g[k]; n && r
Jan 13, 2025 00:12:44.361315012 CET	761	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 Data Ascii: } }); return b.join("") } var u = !1, r = { routes: h, reload: function() { u = !0;
Jan 13, 2025 00:12:44.398509979 CET	341	OUT	GET /api/checkOFF HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.537733078 CET	167	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 66 0d 0a Data Ascii: 4f
Jan 13, 2025 00:12:45.541343927 CET	86	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 31 30 34 31 2c 22 6d 73 67 22 3a 22 41 65 72 6f 70 75 65 72 74 6f 73 20 65 78 74 72 61 5c 75 30 30 65 64 64 6f 73 2e 22 2c 22 73 74 61 74 75 73 22 3a 30 2c 22 73 63 6f 64 65 22 3a 30 2c 22 69 64 22 3a 22 30 22 7d 0d 0a 30 Data Ascii: {"code":1041,"msg":"Aeropuertos extra\u00eddos.","status":0,"scode":0,"id":"0"}0
Jan 13, 2025 00:12:45.541452885 CET	86	IN	Data Raw: 7b 22 63 6f 64 65 22 3a 31 30 34 31 2c 22 6d 73 67 22 3a 22 41 65 72 6f 70 75 65 72 74 6f 73 20 65 78 74 72 61 5c 75 30 30 65 64 64 6f 73 2e 22 2c 22 73 74 61 74 75 73 22 3a 30 2c 22 73 63 6f 64 65 22 3a 30 2c 22 69 64 22 3a 22 30 22 7d 0d 0a 30 Data Ascii: {"code":1041,"msg":"Aeropuertos extra\u00eddos.","status":0,"scode":0,"id":"0"}0
Jan 13, 2025 00:12:45.542606115 CET	253	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 66 0d 0a 7b 22 63 6f 64 65 22 3a 31 30 34 31 2c 22 6d 73 67 22 3a 22 41 65 72 6f 70 75 65 72 74 6f 73 20 65 78 74 72 61 5c 75 30 30 65 64 64 6f 73 2e 22 2c 22 73 74 61 74 75 73 22 3a 30 2c 22 73 63 6f 64 65 22 3a 30 2c 22 69 64 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 4f{"code":1041,"msg":"Aeropuertos extra\u00eddos.","status":0,"scode":0,"id":"0"}0
Jan 13, 2025 00:12:45.544322968 CET	253	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 34 66 0d 0a 7b 22 63 6f 64 65 22 3a 31 30 34 31 2c 22 6d 73 67 22 3a 22 41 65 72 6f 70 75 65 72 74 6f 73 20 65 78 74 72 61 5c 75 30 30 65 64 64 6f 73 2e 22 2c 22 73 74 61 74 75 73 22 3a 30 2c 22 73 63 6f 64 65 22 3a 30 2c 22 69 64 22 3a 22 30 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 4f{"code":1041,"msg":"Aeropuertos extra\u00eddos.","status":0,"scode":0,"id":"0"}0
Jan 13, 2025 00:12:45.576081038 CET	361	OUT	GET /assets/media/right_red_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.727709055 CET	210	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 8257 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes
Jan 13, 2025 00:12:45.727761984 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4f 00 00 00 4e 08 06 00 00 00 61 68 4b 23 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 1f fb 49 44 41 54 78 5e ed 7c 09 74 55 d5 b9 ff 6f 9f f9 dc 21 21 81 10 24 32 29 22 8a 28 a2 e2 ac b5 Data Ascii: PNGIHDRONahK#sRGBIDATx^\|tUo!!$2)"(8U[[8R:P:"]T8s!@rs3)7$Y++oe4w~{#B-xuw\|IzOv26tZs(jVXitWgMU
Jan 13, 2025 00:12:45.867140055 CET	362	OUT	GET /assets/media/gray_right_arrow.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.018668890 CET	779	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 570 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 17 00 00 00 26 08 06 00 00 00 2f 0c 00 a8 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 5d 69 54 58 74 53 6e 69 70 4d 65 74 61 64 61 74 61 00 00 00 00 00 7b 22 63 6c 69 70 50 6f 69 6e 74 73 22 3a 5b 7b 22 78 22 3a 30 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 32 33 2c 22 79 22 3a 30 7d 2c 7b 22 78 22 3a 32 33 2c 22 79 22 3a 33 38 7d 2c 7b 22 78 22 3a 30 2c 22 79 22 3a 33 38 7d 5d 7d d6 de 1c 0a 00 00 01 66 49 44 41 54 48 4b b5 97 21 93 83 30 10 46 b9 73 58 24 95 20 b1 58 7e 3c 16 8b 04 89 c5 22 ef ee d1 24 07 21 09 49 48 df 4c a7 a4 e2 7d cc 66 b3 85 af 9f 3f b2 0f f1 2d be 4f 6c db 26 ae 9e 71 91 0f c3 b0 7f 52 04 9c e4 48 d7 75 dd c5 29 02 94 7c 1c c7 5d 2c 49 11 a0 e4 55 55 65 79 9e 8b d5 9b a7 01 4a 8e b8 6d db a4 01 a7 9a bb 02 28 5b 68 c0 49 0e b6 00 f6 23 34 e0 22 07 57 c0 b2 2c de 01 46 39 d8 02 e6 79 f6 0e b0 ca 01 71 d3 34 d1 [TRUNCATED] Data Ascii: PNGIHDR&/sRGBgAMAapHYsod]iTXtSnipMetadata{"clipPoints":[{"x":0,"y":0},{"x":23,"y":0},{"x":23,"y":38},{"x":0,"y":38}]}fIDATHK!0FsX$ X~<"$!IHL}f?-Ol&qRHu)\|],IUUeyJm([hI#4"W,F9yq4N9Epq+4L$VWPupB tLr Yorlb-{.u8.DmbC\NGKbH^rrrZp61-wU{WFy1\OKq$Glz\|`VA8:Cs #>"Dp1(S1\|+~_23IENDB`

Timestamp	Bytes transferred	Direction	Data
Jan 13, 2025 00:12:43.910074949 CET	351	OUT	GET /angular/angular.min.js HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:44.464030981 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:44 GMT Content-Type: text/javascript Content-Length: 334060 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:00 GMT Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 41 6e 67 75 6c 61 72 4a 53 20 76 31 2e 35 2e 32 0d 0a 20 28 63 29 20 32 30 31 30 2d 32 30 31 36 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 2e 20 68 74 74 70 3a 2f 2f 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 0d 0a 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 0d 0a 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 4e 2c 20 51 2c 20 77 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 20 3d 20 22 5b 22 20 2b 20 28 61 20 3f 20 61 20 2b 20 22 3a 22 20 3a 20 22 22 29 20 2b 20 62 20 2b 20 22 5d 20 68 74 74 70 3a 2f 2f 65 72 72 6f 72 73 2e 61 6e 67 75 6c 61 72 6a 73 2e 6f 72 67 2f 31 2e 35 2e 32 2f 22 20 2b 20 28 61 20 3f 20 61 20 2b 20 22 [TRUNCATED] Data Ascii: /* AngularJS v1.5.2 (c) 2010-2016 Google, Inc. http://angularjs.org License: MIT/(function(N, Q, w) { 'use strict'; function O(a) { return function() { var b = arguments[0], d; d = "[" + (a ? a + ":" : "") + b + "] http://errors.angularjs.org/1.5.2/" + (a ? a + "/" : "") + b; for (b = 1; b < arguments.length; b++) { d = d + (1 == b ? "?" : "&") + "p" + (b - 1) + "="; var c = encodeURIComponent, e; e = arguments[b]; e = "function" == typeof e ? e.toString().replace(/ \{[\s\S]$/, "") : "undefined" == typeof e ? "undefined" : "string" != typeof e ? JSON.stringify(e) : e; d += c(e) } return Error(d) } } function Ca(a) { if (null == a \|\| Xa(a)) return !1; if (L(a) \|\| D(a) \|\| G && a instanceof G) return !0; var b = "length" in Object(a) && [TRUNCATED]
Jan 13, 2025 00:12:44.464042902 CET	224	IN	Data Raw: 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 28 62 29 20 26 26 20 28 30 20 3c 3d 20 62 20 26 26 20 28 62 20 2d 20 31 20 69 6e 20 61 20 7c 7c 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 20 7c 7c 20 22 66 75 6e Data Ascii: gth; return W(b) && (0 <= b && (b - 1 in a \|\| a instanceof Array) \|\| "function" == typeof a.item) } function p(a, b, d) { var c, e; if (a) if (H(a)) for (c
Jan 13, 2025 00:12:44.464060068 CET	1236	IN	Data Raw: 20 69 6e 20 61 29 20 22 70 72 6f 74 6f 74 79 70 65 22 20 3d 3d 20 63 20 7c 7c 20 22 6c 65 6e 67 74 68 22 20 3d 3d 20 63 20 7c 7c 20 22 6e 61 6d 65 22 20 3d 3d 20 63 20 7c 7c 20 61 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 26 26 20 21 61 2e Data Ascii: in a) "prototype" == c \|\| "length" == c \|\| "name" == c \|\| a.hasOwnProperty && !a.hasOwnProperty(c) \|\| b.call(d, a[c], c, a); else if (L(a) \|\| Ca(a)) { var f = "object" !== typeof a; c = 0; f
Jan 13, 2025 00:12:44.464071035 CET	1236	IN	Data Raw: 3b 20 6b 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6d 20 3d 20 68 5b 6b 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 3d 20 67 5b 6d 5d 3b 0d 0a 20 20 Data Ascii: ; k++) { var m = h[k], n = g[m]; d && I(n) ? ga(n) ? a[m] = new Date(n.valueOf()) : Ya(n) ? a[m] = new RegExp(n) : n.nodeName ? a[m] = n.cloneNode(!0) :
Jan 13, 2025 00:12:44.464082003 CET	1236	IN	Data Raw: 69 6f 6e 20 6e 63 28 61 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 20 21 3d 3d 20 61 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 3d 20 74 79 70 65 6f 66 20 61 20 26 26 20 21 72 63 28 61 29 0d 0a 20 20 20 20 7d 0d 0a Data Ascii: ion nc(a) { return null !== a && "object" === typeof a && !rc(a) } function D(a) { return "string" === typeof a } function W(a) { return "number" === typeof a } function ga(a) {
Jan 13, 2025 00:12:44.464092016 CET	890	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 20 62 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 28 61 2c 20 62 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 62 2e 24 24 68 61 73 68 4b 65 79 2c Data Ascii: function qa(a, b) { function d(a, b) { var d = b.$$hashKey, e; if (L(a)) { e = 0; for (var f = a.length; e < f; e++) b.push(c(a[e])) } else if
Jan 13, 2025 00:12:44.464255095 CET	1236	IN	Data Raw: 28 63 20 3d 20 4c 28 61 29 20 3f 20 5b 5d 20 3a 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 72 63 28 61 29 29 2c 20 62 20 3d 20 21 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 70 75 73 68 28 61 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: (c = L(a) ? [] : Object.create(rc(a)), b = !0); f.push(a); g.push(c); return b ? d(a, c) : c } function e(a) { switch (ha.call(a)) { case "[object Int8Arr
Jan 13, 2025 00:12:44.464309931 CET	1236	IN	Data Raw: 61 73 65 20 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 62 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 61 2e 73 6f 75 72 63 65 2c 20 61 2e 74 6f 53 74 Data Ascii: ase "[object RegExp]": return b = new RegExp(a.source, a.toString().match(/[^\/]*$/)[0]), b.lastIndex = a.lastIndex, b; case "[object Blob]": return new a.constructor([a], {
Jan 13, 2025 00:12:44.464320898 CET	448	IN	Data Raw: 66 20 28 61 20 21 3d 3d 20 61 20 26 26 20 62 20 21 3d 3d 20 62 29 20 72 65 74 75 72 6e 20 21 30 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 20 3d 20 74 79 70 65 6f 66 20 61 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 3b 0d 0a 20 20 20 20 Data Ascii: f (a !== a && b !== b) return !0; var d = typeof a, c; if (d == typeof b && "object" == d) if (L(a)) { if (!L(b)) return !1; if ((d = a.length) == b.len
Jan 13, 2025 00:12:44.464332104 CET	1236	IN	Data Raw: 61 29 29 20 72 65 74 75 72 6e 20 67 61 28 62 29 20 3f 20 6f 61 28 61 2e 67 65 74 54 69 6d 65 28 29 2c 20 62 2e 67 65 74 54 69 6d 65 28 29 29 20 3a 20 21 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 59 61 28 61 29 29 20 Data Ascii: a)) return ga(b) ? oa(a.getTime(), b.getTime()) : !1; if (Ya(a)) return Ya(b) ? a.toString() == b.toString() : !1; if ($a(a) \|\| $a(b) \|\| Xa(a) \|\| Xa(b) \|\| L(b) \|\| ga(b) \|\| Ya(b)) return !1; d
Jan 13, 2025 00:12:44.471740007 CET	1236	IN	Data Raw: 64 20 3d 20 77 20 3a 20 58 61 28 62 29 20 3f 20 64 20 3d 20 22 24 57 49 4e 44 4f 57 22 20 3a 20 62 20 26 26 20 51 20 3d 3d 3d 20 62 20 3f 20 64 20 3d 20 22 24 44 4f 43 55 4d 45 4e 54 22 20 3a 20 24 61 28 62 29 20 26 26 20 28 64 20 3d 20 22 24 53 Data Ascii: d = w : Xa(b) ? d = "$WINDOW" : b && Q === b ? d = "$DOCUMENT" : $a(b) && (d = "$SCOPE"); return d } function cb(a, b) { if (v(a)) return w; W(b) \|\| (b = b ? 2 : null); return JSON.stringify(a, Z
Jan 13, 2025 00:12:45.635134935 CET	358	OUT	GET /assets/logos/LATAM_navbar.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:45.782943010 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 53429 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 1b 00 00 00 b4 08 06 00 00 00 3d f2 ee af 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 5e ec 5d 07 78 15 d5 d6 5d d3 6e 49 2f 04 90 26 02 52 95 22 4a 13 15 14 f4 c7 02 82 82 28 cd 2e 36 50 ec 5d 6c f8 2c 58 50 10 54 44 81 a7 80 4a 53 50 54 44 50 11 15 29 02 82 f4 16 6a 48 cf 2d 53 ce ff f6 39 33 f7 de 04 82 09 24 88 32 e3 87 69 73 67 ce ec 39 65 9d bd d7 5e 5b 82 7b b8 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 ae 05 2a d1 02 52 25 5e db bd b4 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d e0 5a 00 2e d8 70 3b 81 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d 50 a9 16 70 c1 46 a5 9a d7 bd b8 6b 01 d7 02 ae 05 5c 0b b8 16 70 2d e0 82 0d b7 0f b8 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 95 6a 01 17 6c 54 aa 79 dd 8b bb 16 70 2d e0 5a c0 b5 80 6b 01 d7 02 c7 0d d8 68 89 4e 29 7e 84 42 8b b1 38 e0 be 16 d7 02 ae 05 5c 0b b8 16 70 2d e0 5a e0 df 63 81 e3 02 6c 5c 19 7f e5 05 67 d6 48 fb 50 63 d2 b2 3f 77 e5 4f 5e 5f b8 fb 87 f9 98 bf f1 df 63 66 f7 49 5c 0b b8 [TRUNCATED] Data Ascii: PNGIHDR=sRGB IDATx^]x]nI/&R"J(.6P]l,XPTDJSPTDP)jH-S93$2isg9e^[{p-ZkR%^k\p-Z.p;k\p-PpFk\p-p-ZkjlTyp-ZkhN)~B8\p-Zcl\gHPc?wO^_cfI\p-Zkl<)eX:L\|H=Kn'krk\s-p\#jQ."[WRj_2[>sv[ZkN<`WNQP2!+,M:7+s(0{ep-Zkd$^Y$B4""7`='wY_,u-Zk'qWkN*)d&S 1dH$&#tT-3~6C7N4yp-ZkxJI}~6@ Kn@e`Va0dIC`0!;L`YV{>os-Zk~`kkb:H0!YbdZ,8dKdyZaaak7%PpxOgwf]p-Zq6FOP3HDU`@)`%@E9YxE6{BMAG8((br~^7mk\wZB7 [TRUNCATED]
Jan 13, 2025 00:12:45.857601881 CET	363	OUT	GET /assets/media/index_menu_icon_2.png HTTP/1.1 Host: latamavuelospromosco.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=53a2ccf70f255cdd57a6d1339cccc903
Jan 13, 2025 00:12:46.005220890 CET	211	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 12 Jan 2025 23:12:45 GMT Content-Type: image/png Content-Length: 34939 Connection: keep-alive Last-Modified: Sun, 08 Dec 2024 17:02:06 GMT Accept-Ranges: bytes

Timestamp	Bytes transferred	Direction	Data
2025-01-12 23:12:43 UTC	584	OUT	GET /ajax/libs/animate.css/4.1.1/animate.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://latamavuelospromosco.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-12 23:12:43 UTC	947	IN	HTTP/1.1 200 OK Date: Sun, 12 Jan 2025 23:12:43 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5f5628a2-11846" Last-Modified: Mon, 07 Sep 2020 12:33:38 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 276769 Expires: Fri, 02 Jan 2026 23:12:43 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uvqhcbrQ6eUTEXG%2FuRs0Yu7UBXB68oSo4vUsxdO4xYu5hc9mREDchGXw%2BXC9PziTlOwkvvVfgBxmELIOwPYd5jeo%2F0vaDkJc8QMp4FAwEBREylmg4e2%2BuccCBfOY2dZ0qHJRIfqT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9010d53f5b2442a6-EWR alt-svc: h3=":443"; ma=86400
2025-01-12 23:12:43 UTC	422	IN	Data Raw: 37 62 66 64 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 73 3a 2f 2f 61 6e 69 6d 61 74 65 2e 73 74 79 6c 65 2f 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 34 2e 31 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 30 20 41 6e 69 6d 61 74 65 2e 63 73 73 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 61 6e 69 6d 61 74 65 2d 64 75 72 61 74 69 6f 6e 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 3a 31 73 3b 2d 2d 61 6e 69 6d 61 74 65 2d 72 Data Ascii: 7bfd@charset "UTF-8";/! animate.css - https://animate.style/ * Version - 4.1.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2020 Animate.css */:root{--animate-duration:1s;--animate-delay:1s;--animate-r
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 74 69 6f 6e 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 62 6f 74 68 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 69 6e 66 69 6e 69 74 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 72 65 70 65 61 74 2d 31 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 3b 61 6e 69 Data Ascii: tion);-webkit-animation-fill-mode:both;animation-fill-mode:both}.animate__animated.animate__infinite{-webkit-animation-iteration-count:infinite;animation-iteration-count:infinite}.animate__animated.animate__repeat-1{-webkit-animation-iteration-count:1;ani
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 34 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 34 73 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 63 61 6c 63 28 76 61 72 28 2d 2d 61 6e 69 6d 61 74 65 2d 64 65 6c 61 79 29 2a 34 29 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 2e 61 6e 69 6d 61 74 65 5f 5f 64 65 6c 61 79 2d 35 73 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 35 73 3b 2d 77 65 62 6b 69 74 Data Ascii: ed.animate__delay-4s{-webkit-animation-delay:4s;animation-delay:4s;-webkit-animation-delay:calc(var(--animate-delay)4);animation-delay:calc(var(--animate-delay)4)}.animate__animated.animate__delay-5s{-webkit-animation-delay:5s;animation-delay:5s;-webkit
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 6e 69 6d 61 74 65 5f 5f 61 6e 69 6d 61 74 65 64 5b 63 6c 61 73 73 2a 3d 4f 75 74 5d 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 33 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 Data Ascii: -iteration-count:1!important;animation-iteration-count:1!important}.animate__animated[class*=Out]{opacity:0}}@-webkit-keyframes bounce{0%,20%,53%,to{-webkit-animation-timing-function:cubic-bezier(.215,.61,.355,1);animation-timing-function:cubic-bezier(.21
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 33 30 70 78 2c 30 29 20 73 63 61 6c 65 59 28 31 2e 31 29 7d 37 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 37 35 35 2c 2e 30 35 2c 2e 38 35 35 2c 2e 30 36 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f Data Ascii: .06);animation-timing-function:cubic-bezier(.755,.05,.855,.06);-webkit-transform:translate3d(0,-30px,0) scaleY(1.1);transform:translate3d(0,-30px,0) scaleY(1.1)}70%{-webkit-animation-timing-function:cubic-bezier(.755,.05,.855,.06);animation-timing-functio
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 2e 30 35 2c 31 2e 30 35 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 70 75 6c 73 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 70 75 6c 73 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 72 75 62 62 65 72 42 61 6e 64 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: .05,1.05)}to{-webkit-transform:scaleX(1);transform:scaleX(1)}}.animate__pulse{-webkit-animation-name:pulse;animation-name:pulse;-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}@-webkit-keyframes rubberBand{0%{-webkit-tr
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 25 2c 37 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 30 2c 30 29 7d 32 30 25 2c 34 30 25 2c 36 30 25 2c 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 31 30 70 78 2c 30 2c 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 6b 65 58 7b 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 30 Data Ascii: %,70%,90%{-webkit-transform:translate3d(-10px,0,0);transform:translate3d(-10px,0,0)}20%,40%,60%,80%{-webkit-transform:translate3d(10px,0,0);transform:translate3d(10px,0,0)}}@keyframes shakeX{0%,to{-webkit-transform:translateZ(0);transform:translateZ(0)}10
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 70 78 29 20 72 6f 74 61 74 65 59 28 37 64 65 67 29 7d 33 31 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 33 70 78 29 20 72 6f 74 61 74 65 59 28 2d 35 64 65 67 29 7d 34 33 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 70 78 29 20 72 6f 74 61 74 65 59 28 33 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d Data Ascii: px) rotateY(7deg)}31.5%{-webkit-transform:translateX(-3px) rotateY(-5deg);transform:translateX(-3px) rotateY(-5deg)}43.5%{-webkit-transform:translateX(2px) rotateY(3deg);transform:translateX(2px) rotateY(3deg)}50%{-webkit-transform:translateX(0);transform
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 30 64 65 67 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 38 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 2e 61 6e 69 6d 61 74 65 5f 5f 73 77 69 6e 67 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 Data Ascii: transform:rotate(-10deg);transform:rotate(-10deg)}60%{-webkit-transform:rotate(5deg);transform:rotate(5deg)}80%{-webkit-transform:rotate(-5deg);transform:rotate(-5deg)}to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}.animate__swing{-webkit-trans
2025-01-12 23:12:43 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 31 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 35 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 32 30 25 2c 30 2c 30 29 20 72 6f 74 61 74 65 28 33 64 65 67 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e Data Ascii: ;transform:translateZ(0)}15%{-webkit-transform:translate3d(-25%,0,0) rotate(-5deg);transform:translate3d(-25%,0,0) rotate(-5deg)}30%{-webkit-transform:translate3d(20%,0,0) rotate(3deg);transform:translate3d(20%,0,0) rotate(3deg)}45%{-webkit-transform:tran