Edit tour

Windows Analysis Report
https://wv5n.cuevana.biz/

Overview

General Information

Sample URL:	https://wv5n.cuevana.biz/
Analysis ID:	1596530
Infos:

Detection

Anonymous Proxy

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected Anonymous Proxy detection

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1940,i,14216765404329871179,14051426318904368169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wv5n.cuevana.biz/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_68	JoeSecurity_AnonymousProxy	Yara detected Anonymous Proxy detection	Joe Security

HTML

Source	Rule	Description	Author	Strings
2.1.pages.csv	JoeSecurity_AnonymousProxy	Yara detected Anonymous Proxy detection	Joe Security

HTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveContent-Length: 1774sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: */*Origin: https://wv5n.cuevana.bizSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_56.2.dr, chromecache_61.2.dr	String found in binary or memory: https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c
Source: chromecache_67.2.dr	String found in binary or memory: https://cuevana.cloud/android-chrome-192x192.png
Source: chromecache_67.2.dr	String found in binary or memory: https://cuevana.cloud/android-chrome-512x512.png

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59056
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59126
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal48.phis.win@17/29@23/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1940,i,14216765404329871179,14051426318904368169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://wv5n.cuevana.biz/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1940,i,14216765404329871179,14051426318904368169,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://wv5n.cuevana.biz/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://concealmentmimic.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
www.google.com	142.250.186.164	true	false	high
cuevana.biz	188.114.97.3	true	false	high
concealmentmimic.com	172.240.108.84	true	false	unknown
wv5n.cuevana.biz	188.114.96.3	true	false	high
206.23.85.13.in-addr.arpa	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://wv5n.cuevana.biz/index_files/edgeSystemV1.js	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://a.nel.cloudflare.com/report/v4?s=w5hJiJGsLlD3bZnxz2kTCeeqDgsIpE700vR16h6U9GQt12B7Thvw219oXOsP5TTZv6CH%2FPZpUJqDaE7Sq6DtF%2FcY9HwaG8kj%2B9WtO34v9Mv2JCNAXjn8pqHAQVUwDg%3D%3D	false		high
https://wv5n.cuevana.biz/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js	false		high
https://wv5n.cuevana.biz/index_files/34238b1fe98b2080.css	false		high
https://cuevana.biz/favicon-32x32.png	false		high
https://wv5n.cuevana.biz/site.webmanifest	false		high
https://wv5n.cuevana.biz/index_files/plus.32985734.svg	false		high
https://wv5n.cuevana.biz/index_files/edgeSystemRun.js	false		high
https://wv5n.cuevana.biz/index_files/08d2fb47fa386cc4.css	false		high
https://wv5n.cuevana.biz/	false		high
https://wv5n.cuevana.biz/cdn-cgi/rum?	false		high
https://cuevana.biz/cdn-cgi/rum	false		high
https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c	false		unknown
https://wv5n.cuevana.biz/index_files/cuevana3.png	false		high
https://concealmentmimic.com/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cuevana.cloud/android-chrome-192x192.png	chromecache_67.2.dr	false		high
https://cuevana.cloud/android-chrome-512x512.png	chromecache_67.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.240.108.84	concealmentmimic.com	United States	7979	SERVERS-COMUS	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	cuevana.biz	European Union	13335	CLOUDFLARENETUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
188.114.96.3	wv5n.cuevana.biz	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1596530
Start date and time:	2025-01-22 04:34:55 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://wv5n.cuevana.biz/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/29@23/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 66.102.1.84, 216.58.212.142, 142.250.186.110, 142.250.184.206, 142.250.186.142, 199.232.210.172, 2.23.77.188, 216.58.206.78, 142.250.185.174, 172.217.16.206, 142.250.185.110, 142.250.186.35, 184.28.90.27, 52.149.20.212, 13.85.23.206, 4.245.163.56, 4.175.87.197, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://wv5n.cuevana.biz/

Input	Output
URL: https://wv5n.cuevana.biz Model: Joe Sandbox AI	```json{ "brand": "cuevana", "brand_classification": "known", "legit_url": "https://cuevana3.io", "similarity": 5, "spoofed": 3, "reasoning": "The URL 'https://wv5n.cuevana.biz' includes the brand name 'cuevana', which is a known brand associated with streaming services. The subdomain 'wv5n' does not have an obvious connection to the brand and could be an attempt to create a deceptive URL, but it could also be used for legitimate purposes such as a specific server or service within the 'cuevana' network. The domain extension '.biz' is different from the more commonly associated '.io' for Cuevana, which might suggest a different purpose or service. The similarity score is moderate due to the inclusion of the brand name, but the likelihood of typosquatting is low to moderate as the subdomain and domain extension do not strongly suggest an attempt to deceive users."}
URL: https://wv5n.cuevana.biz
URL: https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://wv5n.cuevana.biz/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Queremos enviar un extraamiento a MPA:", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://wv5n.cuevana.biz/ Model: Joe Sandbox AI	{ "brands": [ "Cuevana3" ] }
	{ "brands": [ "Cuevana3" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	321
Entropy (8bit):	4.477670392075888
Encrypted:	false
SSDEEP:	6:tI9mc4sl3BBXX5Qm+usYQ1o6B8RCGJxEgewVQUe22CJeFkoRCQLb:t41BBXX8usTorRCGJimQUe2tI+oge
MD5:	023491ED3566639338A183EEFB856270
SHA1:	DBE058B46055117C74EEAD0A223D510A0423C58F
SHA-256:	F7EF13BB783FB18EFA0B222ED65EFFE7679721CC492D31D151F61C86D33C6597
SHA-512:	EC9013EB9169AF7CA281CF64826B80202668D8F622FB25B4FAA7C4F298F0D2B80A1DC41BCE583F93A877D0E14FDEED8FA42C8A7189C99E06948657E700639AD7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path d="M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.01s32 14.32 32 32.01v144h144C417.7 224 432 238.3 432 256z"/></svg>

Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_68, type: DROPPED

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/08d2fb47fa386cc4.css HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://wv5n.cuevana.bizsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/34238b1fe98b2080.css HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/edgeSystemRun.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/cuevana3.png HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/plus.32985734.svg HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/edgeSystemRun.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/edgeSystemV1.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/cuevana3.png HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/plus.32985734.svg HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site.webmanifest HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/edgeSystemV1.js HTTP/1.1Host: wv5n.cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: cuevana.bizConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/rum HTTP/1.1Host: cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonAccept: /Origin: https://wv5n.cuevana.bizSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c HTTP/1.1Host: concealmentmimic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: concealmentmimic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201cAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u_pl20799373=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: concealmentmimic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: u_pl20799373=1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/rum HTTP/1.1Host: cuevana.bizConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: /Origin: https://wv5n.cuevana.bizSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wv5n.cuevana.biz/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: wv5n.cuevana.biz
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cuevana.biz
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: concealmentmimic.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 22, 2025 04:35:51.254081011 CET	53	65099	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:51.389108896 CET	53	52031	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:52.467137098 CET	53	59951	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:55.635382891 CET	52314	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:55.635540009 CET	59967	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:55.642103910 CET	53	59967	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:55.642503023 CET	53	52314	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:56.708770037 CET	63647	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:56.708909035 CET	49193	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:56.721781969 CET	53	63647	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:56.723834038 CET	53	49193	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:58.438956976 CET	56007	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:58.439074993 CET	58032	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:58.445764065 CET	53	56007	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:58.446973085 CET	53	58032	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:59.165046930 CET	53786	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:59.165163040 CET	54856	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:59.171715021 CET	53	54856	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:59.172629118 CET	53	53786	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:59.563091993 CET	54764	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:59.563246965 CET	58223	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:35:59.572268009 CET	53	54764	1.1.1.1	192.168.2.4
Jan 22, 2025 04:35:59.574404955 CET	53	58223	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:01.273478031 CET	51821	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:01.273588896 CET	61020	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:01.284378052 CET	53	51821	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:01.285815001 CET	53	61020	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:02.765836000 CET	49223	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:02.765993118 CET	58393	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:02.774015903 CET	53	58393	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:02.775887012 CET	53	49223	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:05.915771008 CET	60681	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:05.915838003 CET	51692	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:05.923404932 CET	53	51692	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:05.923574924 CET	53	60681	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:08.236253977 CET	138	138	192.168.2.4	192.168.2.255
Jan 22, 2025 04:36:09.535851002 CET	53	52243	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:12.727488995 CET	49602	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:12.727608919 CET	64333	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:12.892674923 CET	53	49602	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:12.897317886 CET	53	64333	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:13.771631956 CET	53873	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:13.771800995 CET	54983	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:13.789135933 CET	53	54983	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:13.935854912 CET	53	53873	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:19.360533953 CET	53	60838	162.159.36.2	192.168.2.4
Jan 22, 2025 04:36:19.832679033 CET	56802	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:19.840058088 CET	53	56802	1.1.1.1	192.168.2.4
Jan 22, 2025 04:36:55.698149920 CET	65296	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:36:55.704900980 CET	53	65296	1.1.1.1	192.168.2.4
Jan 22, 2025 04:37:05.918319941 CET	63137	53	192.168.2.4	1.1.1.1
Jan 22, 2025 04:37:05.925384045 CET	53	63137	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:57 UTC	659	OUT	GET / HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:58 UTC	1083	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=60, s-maxage=31536000, no-store Vary: Accept-Encoding X-Varnish: 17465517 19563794 Via: 1.1 varnish (Varnish/6.4) X-Cache: HIT X-Cache-Hits: 1 Last-Modified: Wed, 15 Jan 2025 16:54:44 GMT CF-Cache-Status: HIT Age: 554880 Accept-Ranges: bytes Server-Timing: cfCacheStatus;desc="HIT" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z9r%2FulsGkBL6a48fXB8HEWPAZ1bQEerFtbE1aoQSbB0yCx7TL5pf8c0cZar6CJA1XL1jP3M8FRYT%2FVGVJOhDlx1%2F9QwlSeMOzRKE%2BDs%2BN%2FE3aobRbD2Z2ozgqTdRgskKXY5I"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f3b6926e65b-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=42610&min_rtt=42607&rtt_var=15985&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1237&delivery_rate=68485&cwnd=32&unsent_bytes=0&cid=cb4cd9b7d2ce2924&ts=239&x=0"
2025-01-22 03:35:58 UTC	286	IN	Data Raw: 37 31 61 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 73 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 43 75 65 76 61 6e 61 20 33 20 2d 20 56 65 72 20 50 65 6c c3 ad 63 75 6c 61 73 2c 20 76 65 72 20 73 65 72 69 65 73 20 6f 6e 6c 69 6e 65 20 47 72 61 74 69 73 20 48 44 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: 71ad<!DOCTYPE html><html lang="es"><head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width"> <title>Cuevana 3 - Ver Pelculas, ver series online Gratis HD</title> <meta name
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 76 35 6e 2e 63 75 65 76 61 6e 61 2e 62 69 7a 2f 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 56 65 72 20 79 20 64 65 73 63 61 72 67 61 72 20 74 6f 64 61 73 20 6c 61 73 20 70 65 6c c3 ad 63 75 6c 61 73 20 79 20 73 65 72 69 65 73 20 67 72 61 74 69 73 20 65 6e 20 43 75 65 76 61 6e 61 20 33 20 e2 9a a1 20 54 65 6e 65 6d 6f 73 20 6c 6f 73 20 c3 ba 6c 74 69 6d 6f 73 20 65 73 74 72 65 6e 6f 73 20 65 6e 20 74 65 6e 64 65 6e 63 69 61 20 70 6f 72 20 64 c3 ad 61 20 79 20 73 65 6d 61 6e 61 20 61 63 74 75 61 6c 69 7a 61 64 6f 73 20 70 61 72 61 20 74 69 2e Data Ascii: "> <link rel="canonical" href="https://wv5n.cuevana.biz/" /> <meta name="description" content="Ver y descargar todas las pelculas y series gratis en Cuevana 3 Tenemos los ltimos estrenos en tendencia por da y semana actualizados para ti.
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2e 2f 69 6e 64 65 78 5f 66 69 6c 65 73 2f 33 34 32 33 38 62 31 66 65 39 38 62 32 30 38 30 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2e 2f 69 6e 64 65 78 5f 66 69 6c 65 73 2f 33 34 32 33 38 62 31 66 65 39 38 62 32 30 38 30 2e 63 73 73 22 20 64 61 74 61 2d 6e 2d 70 3d 22 22 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 20 20 3c 64 69 76 20 69 64 3d 22 5f 5f 6e 65 78 74 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 40 63 Data Ascii: <link rel="preload" href="./index_files/34238b1fe98b2080.css" as="style"> <link rel="stylesheet" href="./index_files/34238b1fe98b2080.css" data-n-p=""></head><body> <div id="__next"> <script type="application/ld+json">{ "@c
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 65 6d 70 72 65 20 71 75 65 20 73 65 20 65 6e 63 75 65 6e 74 72 65 20 64 69 73 70 6f 6e 69 62 6c 65 20 65 6e 20 6e 75 65 73 74 72 6f 20 70 6f 72 74 61 6c 2e 20 43 75 65 76 61 6e 61 20 6e 6f 20 61 6c 6f 6a 61 20 6d 61 74 65 72 69 61 6c 20 61 75 64 69 6f 76 69 73 75 61 6c 20 65 6e 20 73 75 73 20 73 65 72 76 69 64 6f 72 65 73 2c 20 75 74 69 6c 69 7a 61 6d 6f 73 20 65 6e 6c 61 63 65 73 20 64 65 20 74 65 72 63 65 72 6f 73 20 70 61 72 61 20 63 6f 6d 70 61 72 74 69 72 6c 6f 20 65 6e 20 70 6f 72 74 61 6c 2e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 40 74 79 70 65 22 3a 20 22 51 75 65 73 74 Data Ascii: empre que se encuentre disponible en nuestro portal. Cuevana no aloja material audiovisual en sus servidores, utilizamos enlaces de terceros para compartirlo en portal." } },{ "@type": "Quest
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 61 3a 20 63 75 65 76 61 6e 61 2e 62 69 7a 2c 20 65 73 20 69 6d 70 6f 72 74 61 6e 74 65 20 71 75 65 20 72 65 63 75 65 72 64 65 73 20 65 73 74 65 20 6e 6f 6d 62 72 65 20 70 61 72 61 20 61 63 63 65 64 65 72 20 61 20 74 72 61 76 c3 a9 73 20 61 6c 20 73 69 74 69 6f 20 77 65 62 20 63 6f 72 72 65 63 74 61 6d 65 6e 74 65 2e 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 5d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 40 63 6f 6e 74 65 78 74 22 Data Ascii: a: cuevana.biz, es importante que recuerdes este nombre para acceder a travs al sitio web correctamente." } }] }</script> <script type="application/ld+json">{ "@context"
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 52 67 68 74 20 42 67 41 20 64 66 78 63 20 61 6c 67 2d 63 72 20 66 67 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 53 65 61 72 63 68 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 67 65 74 22 20 61 63 74 69 6f 6e 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 73 65 61 72 63 68 22 20 69 64 3d 22 73 65 61 72 63 68 66 6f 72 6d 22 3e 3c 73 70 61 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 46 6f 72 6d 2d 49 63 6f 6e 22 3e 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 71 22 20 74 79 70 65 3d 22 73 65 61 72 63 68 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 42 75 73 Data Ascii: iv class="Rght BgA dfxc alg-cr fg1"> <div class="Search"> <form method="get" action="https://cuevana.biz/search" id="searchform"><span class="Form-Icon"><input name="q" type="search" placeholder="Bus
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 73 74 6f 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 22 3e 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 70 65 6c 69 63 75 6c 61 73 22 3e 50 65 6c c3 ad 63 75 6c 61 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 73 75 62 2d 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 22 3e 3c 61 0a 20 20 20 20 Data Ascii: stom menu-item-has-children"><a href="https://cuevana.biz/peliculas">Pelculas</a> <ul class="sub-menu"> <li class="menu-item menu-item-type-taxonomy menu-item-object-category"><a
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 67 65 6e 65 72 6f 2f 61 63 63 69 6f 6e 22 3e 41 63 63 69 c3 b3 6e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 22 3e 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 67 65 6e 65 72 6f 2f 61 76 65 6e 74 75 72 61 22 3e 41 Data Ascii: href="https://cuevana.biz/genero/accion">Accin</a></li> <li class="menu-item menu-item-type-taxonomy menu-item-object-category"><a href="https://cuevana.biz/genero/aventura">A
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 7a 2f 67 65 6e 65 72 6f 2f 66 61 6e 74 61 73 69 61 22 3e 46 61 6e 74 61 73 c3 ad 61 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 22 3e 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 67 65 6e 65 72 6f 2f 6d 69 73 74 65 72 69 6f 22 3e 4d 69 73 74 65 72 69 6f 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 Data Ascii: z/genero/fantasia">Fantasa</a></li> <li class="menu-item menu-item-type-taxonomy menu-item-object-category"><a href="https://cuevana.biz/genero/misterio">Misterio</a></li> <li c
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 73 65 72 69 65 73 2f 65 73 74 72 65 6e 6f 73 22 3e 45 73 74 72 65 6e 6f 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 74 61 78 6f 6e 6f 6d 79 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 63 61 74 65 67 6f 72 79 22 3e 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 62 69 7a 2f 65 70 69 73 6f 64 69 6f 73 22 3e 45 70 69 73 6f 64 69 6f 73 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: href="https://cuevana.biz/series/estrenos">Estrenos</a></li> <li class="menu-item menu-item-type-taxonomy menu-item-object-category"><a href="https://cuevana.biz/episodios">Episodios</a></li>

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:58 UTC	563	OUT	GET /index_files/08d2fb47fa386cc4.css HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:58 UTC	1020	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:58 GMT Content-Type: text/css Content-Length: 39131 Connection: close Last-Modified: Thu, 23 Mar 2023 16:19:24 GMT Vary: Accept-Encoding X-Varnish: 20417006 15668679 Age: 75886 Via: 1.1 varnish (Varnish/6.4) ETag: W/"98db-5f793a3ce1b00-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LX5rG11i2%2FOnkuZik6HFLFU8W1qx33Ci1cNIZWlfkMbdEQSDVfYBTDnZsmGckjoztjufy0TnO0lJ7F51Bl1TGnqddLtLbdXTeG6WjAMV68goQvVTtw%2BqK1QeLN8QEuyjHCWz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f3d0c36d593-AMS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=77409&min_rtt=77403&rtt_var=29040&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1141&delivery_rate=37697&cwnd=32&unsent_bytes=0&cid=79b80ff4de8fd504&ts=311&x=0"
2025-01-22 03:35:58 UTC	349	IN	Data Raw: 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 34 30 30 20 31 72 65 6d 2f 31 2e 35 36 32 35 72 65 6d 20 73 61 6e 73 2d 73 65 72 69 66 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 68 31 68 6f 6d 65 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 34 30 70 78 7d 2e 63 65 6e 74 72 61 64 6f 46 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 20 32 30 70 78 7d 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 Data Ascii: *{box-sizing:border-box}body{margin:0;font:400 1rem/1.5625rem sans-serif;word-wrap:break-word}.h1home h1{font-size:25px;text-align:center;margin:0 auto 40px}.centradoFooter{margin:0 auto 20px}img{vertical-align:middle;max-width:100%}a{text-decoration:none
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 73 6f 6d 65 5c 20 35 20 66 72 65 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 62 7b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 62 5b 63 6c 61 73 73 2a 3d 66 61 2d 5d 3a 62 65 66 6f 72 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 66 6f 6e 74 20 61 77 65 73 6f 6d 65 5c 20 35 20 62 72 61 6e 64 73 7d 2e 54 69 74 6c 65 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 4d 6f 76 69 65 4c 69 73 74 53 6c 64 43 6e 20 2e 54 69 74 6c 65 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 32 35 76 77 20 2b 20 31 2e 32 35 76 68 20 2b 20 31 2e 38 72 65 6d 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 68 32 7b 66 6f 6e 74 2d 73 69 Data Ascii: some\ 5 free;font-weight:900;font-style:normal}.fab{font:inherit}.fab[class*=fa-]:before{font-family:font awesome\ 5 brands}.Title,h1,h2,h3,h4,h5{font-weight:700}.MovieListSldCn .Title,h1{font-size:calc(1.25vw + 1.25vh + 1.8rem);line-height:1.3}h2{font-si
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 64 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 73 65 6c 65 63 74 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 6d 61 57 78 73 50 53 63 6a 4d 44 41 33 51 55 5a 47 4a 79 42 32 61 57 56 33 51 6d 39 34 50 53 63 77 49 44 41 67 4d 6a 51 67 4d 6a 51 6e 49 48 68 74 62 47 35 7a 50 53 64 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 Data Ascii: der{color:currentColor}::placeholder{color:currentColor}select{-webkit-appearance:none;-moz-appearance:none;appearance:none;background-image:url(data:image/svg+xml;base64,PHN2ZyBmaWxsPScjMDA3QUZGJyB2aWV3Qm94PScwIDAgMjQgMjQnIHhtbG5zPSdodHRwOi8vd3d3LnczLm9y
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 6f 6c 69 64 20 23 31 65 32 37 34 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 32 37 34 37 3b 63 6f 6c 6f 72 3a 23 38 64 61 30 62 63 7d 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 33 33 31 36 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 33 33 31 36 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 42 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 61 2e 42 75 74 74 6f 6e 2c 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 37 61 66 66 7d 2e 42 75 74 74 6f 6e 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 Data Ascii: olid #1e2747;background-color:#1e2747;color:#8da0bc}input:focus,select:focus{background-color:#233160;border-color:#233160;color:#fff}.Button,[type=button],[type=submit],a.Button,button{color:#fff;background-color:#007aff}.Button.fa-facebook-f{position:re
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 6c 61 74 69 76 65 3b 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 6d 65 6e 75 2d 69 74 65 6d 3e 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 30 7d 2e 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 3e 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 3b 62 61 73 65 36 34 2c 49 44 78 7a 64 6d 63 67 49 47 5a 70 62 47 77 39 49 6d 4a 73 64 57 55 69 49 48 64 70 5a 48 52 6f 50 53 49 78 4d 43 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 Data Ascii: lative;bottom:2px}.menu-item>a{display:inline-block;padding:.5rem 0}.menu-item-has-children>a:after{content:url(data:image/svg+xml;charset=UTF-8;base64,IDxzdmcgIGZpbGw9ImJsdWUiIHdpZHRoPSIxMCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDA
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 6e 20 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 31 29 7d 2e 54 50 6f 73 74 20 2e 49 6d 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 38 30 66 32 38 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 4f 62 6a 66 3e 73 70 61 6e 7b 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 54 50 6f 73 74 20 2e 49 6d 61 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 Data Ascii: n button:hover{transform:scale(1.1)}.TPost .Image{position:relative;background-color:#080f28;border-radius:5px;margin-bottom:0;height:100%;display:flex}.Objf>span{width:100%!important;height:100%!important}.TPost .Image:before{content:url(data:image/svg+x
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 54 50 6f 73 74 2e 41 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 54 50 6f 73 74 2e 41 20 2e 49 6d 61 67 65 7b 77 69 64 74 68 3a 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 54 50 6f 73 74 2e 41 20 2e 49 6d 61 67 65 3a 61 66 74 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 30 25 7d 2e 57 64 67 74 20 2e 4d 6f 76 69 65 4c 69 73 74 2e 65 70 69 73 6f 64 65 73 20 2e 54 50 6f 73 74 2e 43 3a 62 65 66 6f 72 65 2c 2e 57 64 67 74 20 2e 54 50 6f 73 74 2e 41 20 2e 49 6d 61 67 65 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 36 29 7d 2e Data Ascii: tle{font-weight:400}.TPost.A{position:relative;padding-left:100px}.TPost.A .Image{width:80px;position:absolute;left:0;top:0}.TPost.A .Image:after{padding-top:100%}.Wdgt .MovieList.episodes .TPost.C:before,.Wdgt .TPost.A .Image:before{transform:scale(.6)}.
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 50 4d 76 43 6e 3e 2a 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 54 50 6f 73 74 2e 43 20 2e 54 50 4d 76 43 6e 20 2e 44 65 73 63 72 69 70 74 69 6f 6e 3e 70 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 54 50 6f 73 74 2e 43 20 2e 54 50 4d 76 43 6e 20 2e 49 6e 66 6f 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 7d 2e 54 50 6f 73 74 2e 43 20 2e 54 50 4d 76 43 6e 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 59 65 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 72 69 67 68 74 3a 2e 35 72 65 6d 3b 7a 2d 69 6e 64 65 78 3a 33 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 Data Ascii: PMvCn>*{position:relative;z-index:2}.TPost.C .TPMvCn .Description>p:first-child,.TPost.C .TPMvCn .Info{margin-bottom:.5rem}.TPost.C .TPMvCn p{margin-bottom:0}.Year{position:absolute;bottom:.5rem;right:.5rem;z-index:3;font-size:.75rem;font-weight:700;backg
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 2d 6f 2d 6f 62 6a 65 63 74 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 20 31 35 25 3b 6f 62 6a 65 63 74 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 20 31 35 25 3b 74 6f 70 3a 30 7d 2e 4d 6f 76 69 65 4c 69 73 74 53 6c 64 43 6e 20 2e 54 50 4d 76 43 6e 3e 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 4d 6f 76 69 65 4c 69 73 74 53 6c 64 43 6e 20 2e 54 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 2d 31 70 78 7d Data Ascii: 0;width:100%;height:100%;-o-object-fit:cover;object-fit:cover;-o-object-position:50% 15%;object-position:50% 15%;top:0}.MovieListSldCn .TPMvCn>a{display:inline-block;vertical-align:top}.MovieListSldCn .Title{color:#fff;font-weight:700;letter-spacing:-1px}
2025-01-22 03:35:58 UTC	1369	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 2d 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 2e 35 72 65 6d 7d 2e 4d 6f 76 69 65 4c 69 73 74 2e 52 6f 77 73 3e 6c 69 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 35 72 65 6d 3b 66 6c 65 78 3a 30 20 30 20 35 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 73 65 63 74 69 6f 6e 3e 2e 54 6f 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 73 65 63 74 69 6f 6e 3e 2e 54 6f 70 3e 2e 54 69 74 6c 65 2c 73 65 63 74 69 6f 6e 3e 2e 54 6f 70 3e 2e 62 74 6e 73 74 70 2c 73 65 63 74 69 6f 6e 3e 2e 54 6f 70 3e 68 31 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 Data Ascii: gin-left:-.5rem;margin-right:-.5rem}.MovieList.Rows>li{padding-left:.5rem;padding-right:.5rem;flex:0 0 50%;max-width:50%;margin-bottom:2rem}section>.Top{margin-bottom:2rem}section>.Top>.Title,section>.Top>.btnstp,section>.Top>h1{display:inline-block;verti

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:58 UTC	620	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://wv5n.cuevana.biz sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 905c7f41ebab8c36-EWR
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 72 20 69 3d 6e 28 36 39 39 29 2c 6f 3d 6e 28 37 35 32 29 2c 61 3d 6e 28 31 30 34 29 2c 63 3d 6e 28 35 30 38 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 74 2b 3d 65 3b 65 6c 73 65 20 74 72 79 7b 76 61 Data Ascii: r i=n(699),o=n(752),a=n(104),c=n(508);!function(){function e(e){var t="";if(t=window.location.origin?window.location.origin:"".concat(window.location.protocol,"://").concat(window.location.host),e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{va
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 29 3d 3d 74 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 29 2c 5f 28 74 29 7d 21 62 26 26 77 26 26 28 62 3d 21 30 2c 42 28 29 29 7d 65 6c 73 65 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 29 3b 76 61 72 20 45 3d 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 30 2c 61 2e 6f 6e 4c 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 49 44 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 49 4e 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 54 54 46 42 29 28 78 29 2c Data Ascii: )==t&&(null==w?void 0:w.triggered)\|\|P(),_(t)}!b&&w&&(b=!0,B())}else"visible"===document.visibilityState&&(new Date).getTime()}));var E={};"function"==typeof PerformanceObserver&&((0,a.onLCP)(x),(0,a.onFID)(x),(0,a.onFCP)(x),(0,a.onINP)(x),(0,a.onTTFB)(x),
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 2c 70 26 26 28 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 43 29 2c 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 26 26 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 29 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 2c 6e 3d 22 22 3b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ,p&&((0,o.sendObjectBeacon)("",a,(function(){}),!1,C),void 0!==p.forward&&void 0!==p.forward.url&&(0,o.sendObjectBeacon)("",a,(function(){}),!1,p.forward.url)))},B=function(){var t=function(){var t=s.getEntriesByType("navigation")[0],n="";try{n="function"
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 28 6f 2c 61 2c 63 29 7b 6e 3d 65 28 63 29 3b 76 61 72 20 75 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 6e 3d 3d 75 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 75 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 75 29 2c 5f 28 75 29 29 2c 69 28 29 29 2c 72 2e 61 70 70 6c 79 28 74 2c 5b 6f 2c 61 2c 63 5d 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 Data Ascii: (o,a,c){n=e(c);var u=e(),s=!0;return n==u&&(s=!1),s&&(A()&&((null==w?void 0:w.url)==u&&(null==w?void 0:w.triggered)\|\|P(u),_(u)),i()),r.apply(t,[o,a,c])},window.addEventListener("popstate",(function(t){A()&&((null==w?void 0:w.url)==n&&(null==w?void 0:w.tri
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 45 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 45 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 73 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 69 66 28 70 26 26 70 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 2c 6e 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 73 6f 75 72 63 65 22 5d 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 3d 6e 5b 74 5d 2c 69 3d 30 2c 6f 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 72 29 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6f 5b 69 5d 2c 63 3d 61 Data Ascii: E.inp.element=c.eventTarget,E.inp.name=c.eventType))}}function F(){return s.timeOrigin}function I(){if(p&&p.serverTiming){for(var e=[],t=0,n=["navigation","resource"];t<n.length;t++)for(var r=n[t],i=0,o=s.getEntriesByType(r);i<o.length;i++){var a=o[i],c=a
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 29 7d 28 29 7d 2c 37 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 69 7c 7c 28 74 2e 73 69 74 65 54 6f 6b 65 6e 26 26 74 2e 76 65 72 73 69 6f 6e 73 2e 66 6c 3f 22 2f 63 64 6e 2d 63 67 69 2f 72 75 6d 3f 22 2e 63 6f 6e 63 61 74 28 65 29 3a 22 2f 63 64 6e 2d 63 67 69 2f 62 65 61 63 6f 6e 2f 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2e 63 6f 6e Data Ascii: )}()},752:function(e,t){"use strict";t.__esModule=!0,t.sendObjectBeacon=void 0,t.sendObjectBeacon=function(e,t,n,r,i){void 0===r&&(r=!1),void 0===i&&(i=null);var o=i\|\|(t.siteToken&&t.versions.fl?"/cdn-cgi/rum?".concat(e):"/cdn-cgi/beacon/performance?".con
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 76 61 72 20 74 3d 61 28 29 3b 69 66 28 74 29 7b 69 66 28 65 3c 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 29 72 65 74 75 72 6e 22 64 6f 6d 2d 69 6e 74 65 72 61 63 74 69 76 65 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 72 65 74 75 72 6e 22 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 22 7d 72 Data Ascii: ing"===document.readyState)return"loading";var t=a();if(t){if(e<t.domInteractive)return"loading";if(0===t.domContentLoadedEventStart\|\|e<t.domContentLoadedEventStart)return"dom-interactive";if(0===t.domComplete\|\|e<t.domComplete)return"dom-content-loaded"}r
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 74 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 69 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 Data Ascii: e){Promise.resolve().then((function(){t(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},n\|\|{})),r}}catch(e){}},g=function(e,t,n,r){var i,o;return function(a){t.value>=0&&(a\|\|r)&&((o=t.value-(i\|\|0))\|\|void 0===i)&&(i=t.value,t.delt
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 43 28 29 2c 69 3d 70 28 22 46 43 50 22 29 2c 6f 3d 6d 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 76 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 6f 26 26 28 6e 3d 67 28 65 2c 69 2c 42 2c 74 2e Data Ascii: {},P((function(){var n,r=C(),i=p("FCP"),o=m("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-v(),0),i.entries.push(e),n(!0)))}))}));o&&(n=g(e,i,B,t.

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:59 UTC	563	OUT	GET /index_files/34238b1fe98b2080.css HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	1025	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: text/css Content-Length: 3993 Connection: close Last-Modified: Thu, 23 Mar 2023 16:19:24 GMT Vary: Accept-Encoding X-Varnish: 9247000 18811805 Via: 1.1 varnish (Varnish/6.4) ETag: W/"f99-5f793a3ce1b00-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 28753 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=85INJJZxHlRF0ZUFjpxafC1x63oKQ9lFq84NlEXquGNqg2mYvP1%2FNJxlCeASs85QBxwyUB05P%2FgO6M%2Fk8wXp7%2BTKwvWtEfHh%2Bx33Zotj8FR9CdkpXN3vWw5jJWr3DZ%2B4XZXo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f445f335344-DEN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=42125&min_rtt=42122&rtt_var=15802&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1141&delivery_rate=69276&cwnd=32&unsent_bytes=0&cid=49636f0ffbe8800d&ts=237&x=0"
2025-01-22 03:35:59 UTC	344	IN	Data Raw: 2e 46 61 71 5f 74 69 74 6c 65 5f 5f 42 51 4a 50 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 46 61 71 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 63 49 30 47 4a 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 7d 2e 46 61 71 5f 63 6f 6e 74 61 69 6e 65 72 43 65 6e 74 65 72 5f 5f 63 53 58 56 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 46 61 71 5f 62 6f 78 5f 5f 79 65 47 54 42 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 46 61 71 5f 71 75 65 73 74 69 6f 6e 5f 5f 4c 70 4b 62 4e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 66 35 39 37 66 38 30 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 Data Ascii: .Faq_title__BQJPd{font-size:36px;text-align:center;width:100%}.Faq_container__cI0GJ{margin-top:30px}.Faq_containerCenter__cSXVd{margin-top:30px;text-align:center}.Faq_box__yeGTB{margin-bottom:10px}.Faq_question__LpKbN{background:#4f597f80;display:flex;jus
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 6f 6d 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 2e 38 65 6d 20 32 2e 32 65 6d 20 2e 38 65 6d 20 31 2e 32 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 65 35 64 66 64 66 7d 2e 46 61 71 5f 71 75 65 73 74 69 6f 6e 5f 5f 4c 70 4b 62 4e 20 69 6d 67 7b 66 69 6c 74 65 72 3a 62 72 69 67 68 74 6e 65 73 73 28 30 29 20 69 6e 76 65 72 74 28 31 29 3b 77 69 64 74 68 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 46 61 71 5f 61 6e 73 77 65 72 5f 5f 4a 65 79 4b 36 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 30 32 35 33 61 3b 66 6f 6e 74 2d 77 65 69 Data Ascii: om:1px;padding:.8em 2.2em .8em 1.2em;position:relative;width:100%;font-size:16px;cursor:pointer;color:#e5dfdf}.Faq_question__LpKbN img{filter:brightness(0) invert(1);width:16px!important;height:16px!important}.Faq_answer__JeyK6{background:#20253a;font-wei
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 69 67 68 74 3a 30 7d 2e 48 6f 6d 65 61 6c 74 32 5f 66 69 67 75 72 65 5f 5f 47 66 72 56 77 20 69 6d 67 7b 77 69 64 74 68 3a 32 38 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 40 6d 65 64 69 61 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 48 6f 6d 65 61 6c 74 32 5f 66 69 67 75 72 65 5f 5f 47 66 72 56 77 20 69 6d 67 7b 77 69 64 74 68 3a 33 36 30 70 78 7d 7d 2e 48 6f 6d 65 61 6c 74 32 5f 63 6e 74 5f 5f 32 42 64 32 6f 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 30 70 78 7d 2e 48 6f 6d 65 61 6c 74 32 5f 69 73 6e 70 5f 5f 63 42 78 49 49 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 35 70 78 7d 2e 48 6f 6d 65 61 6c 74 32 5f 61 62 6e 5f 5f 48 56 39 45 51 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 Data Ascii: ight:0}.Homealt2_figure__GfrVw img{width:280px;height:auto}@media(min-width:768px){.Homealt2_figure__GfrVw img{width:360px}}.Homealt2_cnt__2Bd2o{padding-top:60px}.Homealt2_isnp__cBxII{border-radius:4px;padding-left:35px}.Homealt2_abn__HV9EQ{margin-top:20p
2025-01-22 03:35:59 UTC	911	IN	Data Raw: 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 6f 6d 65 61 6c 74 32 5f 62 64 62 67 5f 5f 44 70 56 6a 50 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 74 6f 70 3a 61 75 74 6f 3b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 35 30 25 3b 7a 2d 69 6e 64 65 78 3a 32 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 30 64 65 67 2c 23 30 64 31 30 32 33 20 30 2c 72 67 62 61 28 31 33 2c 31 36 2c 33 35 2c 30 29 29 7d 2e 48 6f 6d 65 61 6c 74 32 5f 62 64 62 67 5f 5f 44 70 56 6a 50 20 69 6d 67 7b 6f 70 61 63 69 74 79 3a 2e 30 36 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 48 6f 6d 65 61 6c 74 32 5f 66 6f 72 6d 5f 5f 32 75 Data Ascii: on:0 0;width:100%;height:100%;margin:0;padding:0}.Homealt2_bdbg__DpVjP:before{content:"";top:auto;bottom:0;height:50%;z-index:2;background:linear-gradient(0deg,#0d1023 0,rgba(13,16,35,0))}.Homealt2_bdbg__DpVjP img{opacity:.06;width:100%}.Homealt2_form__2u

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:59 UTC	545	OUT	GET /index_files/edgeSystemRun.js HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	1031	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: application/javascript Content-Length: 1893 Connection: close Last-Modified: Thu, 05 Dec 2024 23:42:58 GMT Vary: Accept-Encoding X-Varnish: 18321274 7089455 Via: 1.1 varnish (Varnish/6.4) ETag: W/"765-6288e754d1a9c-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 28965 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=296VztFFerA7XHcutmiCtUHhj%2FIJv9V5ODKtsxl8hzzr%2BcVOxvLAbhf7jvRVHycrf20VkUo2Eg1u54FeaCZxaYLDcifuIwPuslDUX1jNcaGh6UsGiEQGYqODaSskPw1JEiRx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f44bc7cb32b-MAN alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=77880&min_rtt=77870&rtt_var=29221&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1123&delivery_rate=37459&cwnd=32&unsent_bytes=0&cid=2445a0e604c03d3d&ts=305&x=0"
2025-01-22 03:35:59 UTC	338	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 73 79 6e 63 45 64 67 65 53 79 73 74 65 6d 28 75 2c 20 63 29 20 7b 0d 0a 09 76 61 72 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2c 20 74 20 3d 20 27 73 63 72 69 70 74 27 2c 0d 0a 09 09 6f 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 2c 0d 0a 09 09 73 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 3b 0d 0a 09 6f 2e 73 72 63 20 3d 20 75 3b 0d 0a 09 69 66 20 28 63 29 20 7b 20 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 63 28 6e 75 6c 6c 2c 20 65 29 3b 20 7d 2c 20 66 61 6c 73 65 29 3b 20 7d 0d 0a 09 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 20 73 29 Data Ascii: function asyncEdgeSystem(u, c) {var d = document, t = 'script',o = d.createElement(t),s = d.getElementsByTagName(t)[0];o.src = u;if (c) { o.addEventListener('load', function (e) { c(null, e); }, false); }s.parentNode.insertBefore(o, s)
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 20 62 61 73 65 36 34 55 72 69 20 3d 20 62 61 73 65 36 34 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 20 27 2d 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2f 67 2c 20 27 5f 27 29 2e 72 65 70 6c 61 63 65 28 2f 3d 2b 24 2f 2c 20 27 27 29 3b 0d 0a 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 62 61 73 65 36 34 55 72 69 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 64 67 65 53 79 73 74 65 6d 46 69 6e 69 73 68 28 29 20 7b 0d 0a 0d 0a 09 63 4a 73 45 64 67 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 09 09 70 65 72 70 61 67 65 3a 20 33 2c 0d 0a 09 09 64 65 6c 61 79 3a 20 31 30 30 30 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 76 61 72 20 6c 61 73 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 09 76 61 72 20 70 6f 70 46 69 72 65 64 20 3d 20 30 3b 0d 0a 09 76 61 72 20 75 72 6c 45 64 67 65 57 Data Ascii: base64Uri = base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, ''); return base64Uri;}function edgeSystemFinish() {cJsEdge.config({perpage: 3,delay: 1000});var lastPath = "";var popFired = 0;var urlEdgeW
2025-01-22 03:35:59 UTC	186	IN	Data Raw: 09 09 7d 2c 0d 0a 09 09 62 65 66 6f 72 65 4f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 09 09 09 70 6f 70 46 69 72 65 64 20 3d 20 70 6f 70 46 69 72 65 64 20 2b 20 31 3b 0d 0a 09 09 7d 0d 0a 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 61 73 79 6e 63 45 64 67 65 53 79 73 74 65 6d 28 27 2f 69 6e 64 65 78 5f 66 69 6c 65 73 2f 65 64 67 65 53 79 73 74 65 6d 56 31 2e 6a 73 27 2c 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 65 64 67 65 53 79 73 74 65 6d 46 69 6e 69 73 68 28 29 3b 0d 0a 7d 29 3b Data Ascii: },beforeOpen: function (url, options) {popFired = popFired + 1;}});}asyncEdgeSystem('/index_files/edgeSystemV1.js', async function () {edgeSystemFinish();});

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1893
Entropy (8bit):	5.18854894639041
Encrypted:	false
SSDEEP:	48:AyItmwicU9vbETR/pWIrSu9u3PIs6BUpuxa9u3PIs6BUOev:A5LTRBWIrSu8pug8Oev
MD5:	1E3B195CD8C6A6391F855B579CE7D38B
SHA1:	532EF327D41A7D4B5F269A65ECC00E2E85DEF5AF
SHA-256:	C781ADFF05C8A4E1B08E6C65D6C9C662E955F8C9016FB850154B817A808716B8
SHA-512:	0D96D8191B04DA69E039840844C40867DD147B9D5EE9E47125582E22E2DC6BA34EFC1E09F4781129AAD2ED06723B214B273EF43EFBF1FAA1C8EF523AA3E9845E
Malicious:	false
Reputation:	low
Preview:	function asyncEdgeSystem(u, c) {...var d = document, t = 'script',....o = d.createElement(t),....s = d.getElementsByTagName(t)[0];...o.src = u;...if (c) { o.addEventListener('load', function (e) { c(null, e); }, false); }...s.parentNode.insertBefore(o, s);..}....function toBase64UriEncode(str) {.... let base64 = btoa(str);.... let base64Uri = base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');.... return base64Uri;..}....function edgeSystemFinish() {.....cJsEdge.config({....perpage: 3,....delay: 1000...});.....var lastPath = "";...var popFired = 0;...var urlEdgeWin = "https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c";.....cJsEdge.add(urlEdgeWin, {....device: 'desktop',....newTab: true,....cookieName: 'edgeSystemDesktop',....cookieExpires: 3, // 3 seconds....under: false,....shouldFire: function () {.....//if(window.location.pathname == '/'){.....//.return false;.....//}.....if (lastPath == window.location.pathname) {......if (popFired >

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	88776
Entropy (8bit):	5.808481458454747
Encrypted:	false
SSDEEP:	1536:LIjOTAo5m/W9LuU1ASanHcBsSccOT+AWF0qyhn6NNOr3JCP0lynEmaCidM:cK7mH8sGFk6NNOr3w00Em3
MD5:	E7A070016F5D2E7927D6A902F1255127
SHA1:	E873A36D02389EF9C857B6AACC893163D4B8101F
SHA-256:	845761F7B7DBFBFCEFC576BBBAE414D87005440C2CA511AB5143BF9597E9BC58
SHA-512:	9B3CBADE3D50A0186626AA17932C10D395DE1CF7141D6912939E094B29E8B002FB4619C6701C0981A2CFB9757AE2537FFA5A5653A38A055D9A1D2794FFB7FD31
Malicious:	false
Reputation:	low
Preview:	window.ffc798b5 = 'cJsEdge';c2uZu[228288]=function(){var t=2;for(;t!==9;){switch(t){case 2:t=typeof globalThis==="object"?1:5;break;case 5:var e;try{var r=2;for(;r!==6;){switch(r){case 2:Object["defineProperty"](Object["prototype"],"SliZq",{get:function(){return this},configurable:true});e=SliZq;r=5;break;case 5:e["I2C1P"]=e;r=4;break;case 9:delete e["I2C1P"];var i=Object["prototype"];delete i["SliZq"];r=6;break;case 4:r=typeof I2C1P==="undefined"?3:9;break;case 3:throw"";r=9;break}}}catch(t){e=window}return e;break;case 1:return globalThis;break}}}();c2uZu.H8_5t=H8_5t;r30l$b(c2uZu[228288]);c2uZu[600277]=function(){var t=2;for(;t!==5;){switch(t){case 2:var k={Z8hVlko:function(t){var e=2;for(;e!==18;){switch(e){case 8:e=r<o.length?7:12;break;case 6:i=0;e=14;break;case 19:return a;break;case 14:s+=S(f(r)^h(i));e=13;break;case 9:var r=0,i=0;e=8;break;case 7:e=i===t.length?6:14;break;case 12:s=s.o$D$N("`");var n=0;var a=function(t){var e=2;for(;e!==23;){switch(e){case 27:n+=1;e=26;break;ca

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:59 UTC	601	OUT	GET /index_files/cuevana3.png HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	991	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: image/png Content-Length: 1678 Connection: close Last-Modified: Thu, 23 Mar 2023 16:19:24 GMT ETag: "68e-5f793a3ce1b00" X-Varnish: 14359062 18289451 Via: 1.1 varnish (Varnish/6.4) X-Cache: HIT X-Cache-Hits: 2 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 29497 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0902m1fqNC6mTiZQ14pZ3QxT4pSw9yenbnr9vN9tYF4jNi0h%2BvYcRMbzkZFo7CnxZ1UFNGkfxLrkUvbzW5%2BEwsp98Iz3lxBX9I7I1Rl1%2F8NaQSyp6TTDZ6FqAkQ52UoUsQdA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f451f5e75aa-SEA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=64790&min_rtt=64723&rtt_var=24319&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1179&delivery_rate=45115&cwnd=32&unsent_bytes=0&cid=8aa8474c0ed3cf72&ts=284&x=0"
2025-01-22 03:35:59 UTC	378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f0 00 00 00 3c 08 03 00 00 00 6f a1 c7 6f 00 00 00 6c 50 4c 54 45 4c 69 71 f1 f9 ff ff ff ff ff ff ff ff ff ff ff ff ff 00 99 ff ff ff ff ff ff ff ff ff ff 00 9b ff ff ff ff 00 9f ff 00 9d ff 00 87 ff ff ff ff ff ff ff ff ff ff 00 b1 ff 00 ae ff 00 93 ff ff ff ff 00 83 ff 00 8e ff 00 b4 ff ff ff ff 00 86 ff 00 b2 ff 00 ae ff 00 81 ff 00 8c ff 00 b8 ff 00 a9 ff 00 7d ff 00 9f ff 00 97 ff 0e 97 d5 35 00 00 00 19 74 52 4e 53 00 0b 95 d4 81 f4 59 c0 e7 70 17 ad 34 7d bc 1b 2a 57 cc b6 96 3c d8 ee e6 71 76 5c e6 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 05 a3 49 44 41 54 68 81 e5 5b 8b 92 a2 3a 10 0d 10 02 84 97 02 a2 c8 8c ce e0 ff ff e3 56 ba f3 02 a3 83 77 ac ba 1b f6 50 b5 Data Ascii: PNGIHDR<oolPLTELiq}5tRNSYp4}*W<qv\pHYsIDATh[:VwP
2025-01-22 03:35:59 UTC	1300	IN	Data Raw: f0 97 f7 2e 4d 08 29 bf 16 68 4a f0 db a2 6c 97 4f fc 68 30 03 56 36 27 d8 f6 9d 9a b6 ed ec ed 1e 0d c4 bf 45 63 71 9a 3a eb 39 9f 2d 86 1f dd a5 63 cf d7 aa c4 73 18 d2 3d dc 18 5e 36 5d 01 de 3e 7c f4 57 82 bb 37 41 25 3e cd 87 61 48 6a 94 43 52 0e 1b ca c5 68 bc 48 cf c5 c9 dd 31 5d 21 d7 d6 83 40 9c 81 28 9b dc 7c 09 61 82 af 1f c9 8a 3f e0 3b 8e a3 a0 96 01 61 6d e4 f6 11 2b e6 89 79 09 69 ad 82 d2 b4 6d 6b 55 a0 13 21 24 91 84 b5 91 1f cd f3 2c 59 d5 61 04 53 44 e1 0e 3e 87 49 92 24 78 4b 76 e2 9e 4a 39 1a 09 a9 3c 3c e8 27 7b 6b 92 24 49 84 12 41 96 47 b1 98 2e df 43 3e 25 84 e2 7c bb 30 1e 86 18 7f 59 20 c8 f2 04 04 13 25 28 6c a6 e9 75 d2 42 9c 9d 4c c7 84 1e 8d 88 a4 8a af 22 08 ad 49 42 f1 d5 42 8b 01 17 10 5d 28 45 bd 61 5c 3b d4 1e ee 94 fa Data Ascii: .M)hJlOh0V6'Ecq:9-cs=^6]>\|W7A%>aHjCRhH1]!@(\|a?;am+yimkU!$,YaSD>I$xKvJ9<<'{k$IAG.C>%\|0Y %(luBL"IBB](Ea\;

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:59 UTC	606	OUT	GET /index_files/plus.32985734.svg HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	1019	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: image/svg+xml Content-Length: 321 Connection: close Last-Modified: Thu, 23 Mar 2023 16:19:24 GMT Vary: Accept-Encoding X-Varnish: 20975445 1778163 Via: 1.1 varnish (Varnish/6.4) ETag: W/"141-5f793a3ce1b00-gzip" X-Cache: HIT X-Cache-Hits: 3 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 29497 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fN31kN5nZHL8eJetU7ijE7MOh48vhZJLYpvbZxEh2ZlOSLL9aF4XCXJbTpcoxI36GJGvKeJRYb47Yk6l89hv%2Fmgv88ZhrUCwe2T2HWVECXOlAOa5yQ6T8Ip1fLtyr0vWcR7d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f4558c875fe-SEA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=64105&min_rtt=64071&rtt_var=24051&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1184&delivery_rate=45574&cwnd=32&unsent_bytes=0&cid=9ef3a59e7a445c4c&ts=282&x=0"
2025-01-22 03:35:59 UTC	321	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 38 20 35 31 32 22 3e 3c 70 61 74 68 20 64 3d 22 4d 34 33 32 20 32 35 36 63 30 20 31 37 2e 36 39 2d 31 34 2e 33 33 20 33 32 2e 30 31 2d 33 32 20 33 32 2e 30 31 48 32 35 36 76 31 34 34 63 30 20 31 37 2e 36 39 2d 31 34 2e 33 33 20 33 31 2e 39 39 2d 33 32 20 33 31 2e 39 39 73 2d 33 32 2d 31 34 2e 33 2d 33 32 2d 33 31 2e 39 39 76 2d 31 34 34 48 34 38 63 2d 31 37 2e 36 37 20 30 2d 33 32 2d 31 34 2e 33 32 2d 33 32 2d 33 32 2e 30 31 73 31 34 2e 33 33 2d 33 31 2e 39 39 20 33 32 2d 33 31 2e 39 39 48 31 39 32 76 2d 31 34 34 63 30 2d 31 37 2e 36 39 20 31 34 2e 33 33 2d 33 32 2e 30 31 20 33 32 2d 33 32 2e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 448 512"><path d="M432 256c0 17.69-14.33 32.01-32 32.01H256v144c0 17.69-14.33 31.99-32 31.99s-32-14.3-32-31.99v-144H48c-17.67 0-32-14.32-32-32.01s14.33-31.99 32-31.99H192v-144c0-17.69 14.33-32.01 32-32.

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:35:59 UTC	580	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:35:59 UTC	758	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:35:59 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Fri, 17 Jan 2025 16:55:54 GMT ETag: "678a8b9a-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BQxAg0nH4EOWPst%2BQvsIMsPxy5QU%2B%2FSjyM8MKtjW85%2B3EzAGj%2FOZFyR6HMtSCo%2Fdm4tL8%2FChzBDGWBGu1gN6AqYW90H1DfSgkepWq0p340aGgnCBfJjLO6XI7lll88FVRbuB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f46e856957c-DUB X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Fri, 24 Jan 2025 03:35:59 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-01-22 03:35:59 UTC	611	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 63 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 2c 65 2e Data Ascii: c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: f(!e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prototyp
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: :!0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createElement("
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 69 6e 67 44 Data Ascii: otype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPendingD
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d Data Ascii: ype.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c Data Ascii: .write=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loading",
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 6e 50 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d Data Ascii: nProxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTargetM
2025-01-22 03:35:59 UTC	1369	IN	Data Raw: 61 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c 74 2e 73 65 Data Ascii: ator",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,t.se
2025-01-22 03:35:59 UTC	769	IN	Data Raw: 65 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 62 6c Data Ascii: eScript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.settings.bl

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:00 UTC	368	OUT	GET /index_files/edgeSystemRun.js HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:00 UTC	1030	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:00 GMT Content-Type: application/javascript Content-Length: 1893 Connection: close Last-Modified: Thu, 05 Dec 2024 23:42:58 GMT Vary: Accept-Encoding X-Varnish: 18321274 7089455 Via: 1.1 varnish (Varnish/6.4) ETag: W/"765-6288e754d1a9c-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 38374 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H60giWbroyAnvJ2GKSVCwVTvOruASaQTeIKe0K%2Brpdf5NYXFpJQxdfwP%2BwcCEI7kf0DHjYSdsyBEzZ8GsynDDjSZ57gOlQcUVe%2FikxnTVKGBIC9mJUb2lnwEbPPjDX76WRAo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f4d098b6fd9-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7195&min_rtt=7181&rtt_var=2721&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=946&delivery_rate=400329&cwnd=32&unsent_bytes=0&cid=0c8434804891ca2d&ts=169&x=0"
2025-01-22 03:36:00 UTC	339	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 73 79 6e 63 45 64 67 65 53 79 73 74 65 6d 28 75 2c 20 63 29 20 7b 0d 0a 09 76 61 72 20 64 20 3d 20 64 6f 63 75 6d 65 6e 74 2c 20 74 20 3d 20 27 73 63 72 69 70 74 27 2c 0d 0a 09 09 6f 20 3d 20 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 2c 0d 0a 09 09 73 20 3d 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 3b 0d 0a 09 6f 2e 73 72 63 20 3d 20 75 3b 0d 0a 09 69 66 20 28 63 29 20 7b 20 6f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 63 28 6e 75 6c 6c 2c 20 65 29 3b 20 7d 2c 20 66 61 6c 73 65 29 3b 20 7d 0d 0a 09 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6f 2c 20 73 29 Data Ascii: function asyncEdgeSystem(u, c) {var d = document, t = 'script',o = d.createElement(t),s = d.getElementsByTagName(t)[0];o.src = u;if (c) { o.addEventListener('load', function (e) { c(null, e); }, false); }s.parentNode.insertBefore(o, s)
2025-01-22 03:36:00 UTC	1369	IN	Data Raw: 62 61 73 65 36 34 55 72 69 20 3d 20 62 61 73 65 36 34 2e 72 65 70 6c 61 63 65 28 2f 5c 2b 2f 67 2c 20 27 2d 27 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2f 2f 67 2c 20 27 5f 27 29 2e 72 65 70 6c 61 63 65 28 2f 3d 2b 24 2f 2c 20 27 27 29 3b 0d 0a 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 62 61 73 65 36 34 55 72 69 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 65 64 67 65 53 79 73 74 65 6d 46 69 6e 69 73 68 28 29 20 7b 0d 0a 0d 0a 09 63 4a 73 45 64 67 65 2e 63 6f 6e 66 69 67 28 7b 0d 0a 09 09 70 65 72 70 61 67 65 3a 20 33 2c 0d 0a 09 09 64 65 6c 61 79 3a 20 31 30 30 30 0d 0a 09 7d 29 3b 0d 0a 0d 0a 09 76 61 72 20 6c 61 73 74 50 61 74 68 20 3d 20 22 22 3b 0d 0a 09 76 61 72 20 70 6f 70 46 69 72 65 64 20 3d 20 30 3b 0d 0a 09 76 61 72 20 75 72 6c 45 64 67 65 57 69 Data Ascii: base64Uri = base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, ''); return base64Uri;}function edgeSystemFinish() {cJsEdge.config({perpage: 3,delay: 1000});var lastPath = "";var popFired = 0;var urlEdgeWi
2025-01-22 03:36:00 UTC	185	IN	Data Raw: 09 7d 2c 0d 0a 09 09 62 65 66 6f 72 65 4f 70 65 6e 3a 20 66 75 6e 63 74 69 6f 6e 20 28 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 09 09 09 70 6f 70 46 69 72 65 64 20 3d 20 70 6f 70 46 69 72 65 64 20 2b 20 31 3b 0d 0a 09 09 7d 0d 0a 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 61 73 79 6e 63 45 64 67 65 53 79 73 74 65 6d 28 27 2f 69 6e 64 65 78 5f 66 69 6c 65 73 2f 65 64 67 65 53 79 73 74 65 6d 56 31 2e 6a 73 27 2c 20 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 09 65 64 67 65 53 79 73 74 65 6d 46 69 6e 69 73 68 28 29 3b 0d 0a 7d 29 3b Data Ascii: },beforeOpen: function (url, options) {popFired = popFired + 1;}});}asyncEdgeSystem('/index_files/edgeSystemV1.js', async function () {edgeSystemFinish();});

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:00 UTC	544	OUT	GET /index_files/edgeSystemV1.js HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:01 UTC	1047	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:00 GMT Content-Type: application/javascript Content-Length: 88776 Connection: close Last-Modified: Wed, 18 Dec 2024 15:29:12 GMT Vary: Accept-Encoding X-Varnish: 17077199 18289489 Via: 1.1 varnish (Varnish/6.4) ETag: W/"15ac8-6298d135d0f7e-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 21862 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5vMQVp5QLUj2x4PO7jZT9n6SLnLPjH0%2B7ye50pCN6G%2Bt14ebWHylITT%2BliFj16LYQxafuHN0nX2azr%2BgzIBZAoHDKHs7ehkHk4HMMKDpCwVSWy%2BF2%2Bg9PY3um0lpO8IjSF%2F%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f4dda937618-SEA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=64416&min_rtt=64410&rtt_var=24158&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1122&delivery_rate=45334&cwnd=32&unsent_bytes=0&cid=2eaad75c3850eca7&ts=279&x=0"
2025-01-22 03:36:01 UTC	322	IN	Data Raw: 77 69 6e 64 6f 77 2e 66 66 63 37 39 38 62 35 20 3d 20 27 63 4a 73 45 64 67 65 27 3b 63 32 75 5a 75 5b 32 32 38 32 38 38 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 32 3b 66 6f 72 28 3b 74 21 3d 3d 39 3b 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 32 3a 74 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 31 3a 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 76 61 72 20 65 3b 74 72 79 7b 76 61 72 20 72 3d 32 3b 66 6f 72 28 3b 72 21 3d 3d 36 3b 29 7b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 32 3a 4f 62 6a 65 63 74 5b 22 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 22 5d 28 4f 62 6a 65 63 74 5b 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 53 6c 69 5a 71 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: window.ffc798b5 = 'cJsEdge';c2uZu[228288]=function(){var t=2;for(;t!==9;){switch(t){case 2:t=typeof globalThis==="object"?1:5;break;case 5:var e;try{var r=2;for(;r!==6;){switch(r){case 2:Object["defineProperty"](Object["prototype"],"SliZq",{get:function()
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 22 5d 3d 65 3b 72 3d 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a 64 65 6c 65 74 65 20 65 5b 22 49 32 43 31 50 22 5d 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 5b 22 70 72 6f 74 6f 74 79 70 65 22 5d 3b 64 65 6c 65 74 65 20 69 5b 22 53 6c 69 5a 71 22 5d 3b 72 3d 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 3d 74 79 70 65 6f 66 20 49 32 43 31 50 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 33 3a 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 72 6f 77 22 22 3b 72 3d 39 3b 62 72 65 61 6b 7d 7d 7d 63 61 74 63 68 28 74 29 7b 65 3d 77 69 6e 64 6f 77 7d 72 65 74 75 72 6e 20 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 62 72 65 61 6b 7d 7d 7d 28 29 3b 63 32 75 5a 75 2e 48 38 5f 35 74 3d 48 38 5f 35 74 3b 72 Data Ascii: "]=e;r=4;break;case 9:delete e["I2C1P"];var i=Object["prototype"];delete i["SliZq"];r=6;break;case 4:r=typeof I2C1P==="undefined"?3:9;break;case 3:throw"";r=9;break}}}catch(t){e=window}return e;break;case 1:return globalThis;break}}}();c2uZu.H8_5t=H8_5t;r
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 6b 3b 63 61 73 65 20 31 33 3a 65 3d 6e 3d 3d 3d 33 26 26 74 3d 3d 3d 31 32 34 3f 31 32 3a 31 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 30 3a 6e 2b 3d 31 3b 65 3d 31 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a 6e 2b 3d 31 3b 65 3d 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 35 3a 65 3d 6e 3d 3d 3d 36 26 26 74 3d 3d 3d 33 38 33 3f 32 37 3a 32 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 73 2e 46 38 33 67 55 2e 79 5f 33 30 6c 28 73 2c 73 2e 72 36 74 46 63 7a 28 2d 36 2c 36 29 2e 72 36 74 46 63 7a 28 30 2c 34 29 29 3b 65 3d 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 75 28 74 29 3b 62 72 65 61 6b 7d 7d 7d 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 32 3b 66 6f 72 28 3b 65 21 3d 3d 31 3b 29 7b 73 77 69 74 Data Ascii: k;case 13:e=n===3&&t===124?12:10;break;case 20:n+=1;e=19;break;case 9:n+=1;e=8;break;case 15:e=n===6&&t===383?27:25;break;case 8:s.F83gU.y_30l(s,s.r6tFcz(-6,6).r6tFcz(0,4));e=4;break;case 24:return u(t);break}}};var u=function(t){var e=2;for(;e!==1;){swit
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 61 6b 3b 63 61 73 65 20 39 3a 63 32 75 5a 75 2e 6a 34 3d 2d 32 3b 62 34 7a 65 70 6c 3d 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 37 3a 63 32 75 5a 75 2e 4b 5f 3d 35 38 3b 62 34 7a 65 70 6c 3d 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 63 32 75 5a 75 2e 58 34 3d 39 35 3b 62 34 7a 65 70 6c 3d 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 62 34 7a 65 70 6c 3d 63 32 75 5a 75 2e 53 34 28 33 37 30 29 21 3d 3d 63 32 75 5a 75 2e 53 34 28 31 35 34 29 3f 31 3a 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 62 34 7a 65 70 6c 3d 63 32 75 5a 75 2e 53 36 28 33 32 31 29 3d 3d 3d 63 32 75 5a 75 2e 53 34 28 38 38 29 3f 39 3a 38 3b 62 72 65 61 6b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 33 30 6c 24 62 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 65 3d 32 3b 66 Data Ascii: ak;case 9:c2uZu.j4=-2;b4zepl=8;break;case 7:c2uZu.K_=58;b4zepl=6;break;case 4:c2uZu.X4=95;b4zepl=3;break;case 2:b4zepl=c2uZu.S4(370)!==c2uZu.S4(154)?1:5;break;case 3:b4zepl=c2uZu.S6(321)===c2uZu.S4(88)?9:8;break}}function r30l$b(t){function e(t){var e=2;f
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 5d 2b 3d 6f 5b 31 31 5d 3b 6f 5b 39 34 5d 2b 3d 6f 5b 32 33 5d 3b 72 3d 31 30 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 35 3a 6f 5b 31 38 5d 3d 22 22 3b 6f 5b 31 38 5d 3d 22 57 22 3b 6f 5b 32 35 5d 3d 22 22 3b 6f 5b 32 35 5d 3d 22 41 24 53 79 22 3b 6f 5b 35 35 5d 3d 22 22 3b 72 3d 36 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 38 3a 6f 5b 38 37 5d 3d 22 32 42 22 3b 6f 5b 34 30 5d 3d 22 78 22 3b 6f 5b 33 34 5d 3d 22 22 3b 6f 5b 33 34 5d 3d 22 33 57 22 3b 72 3d 34 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 37 3a 6f 5b 37 30 5d 2b 3d 6f 5b 33 32 5d 3b 6f 5b 37 30 5d 2b 3d 6f 5b 36 39 5d 3b 6f 5b 32 39 5d 3d 6f 5b 33 39 5d 3b 6f 5b 32 39 5d 2b 3d 6f 5b 33 34 5d 3b 72 3d 31 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 32 3a 69 28 53 2c 22 73 70 6c 69 63 65 Data Ascii: ]+=o[11];o[94]+=o[23];r=109;break;case 65:o[18]="";o[18]="W";o[25]="";o[25]="A$Sy";o[55]="";r=60;break;case 28:o[87]="2B";o[40]="x";o[34]="";o[34]="3W";r=41;break;case 127:o[70]+=o[32];o[70]+=o[69];o[29]=o[39];o[29]+=o[34];r=123;break;case 162:i(S,"splice
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 5b 33 37 5d 3d 6f 5b 31 34 5d 3b 6f 5b 33 37 5d 2b 3d 6f 5b 37 36 5d 3b 72 3d 39 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 34 36 3a 6f 5b 33 36 5d 3d 6f 5b 32 37 5d 3b 6f 5b 33 36 5d 2b 3d 6f 5b 32 5d 3b 6f 5b 33 36 5d 2b 3d 6f 5b 38 37 5d 3b 6f 5b 36 38 5d 3d 6f 5b 36 5d 3b 72 3d 31 34 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 31 3a 69 28 53 2c 22 73 6f 72 74 22 2c 6f 5b 39 31 5d 2c 6f 5b 33 36 5d 29 3b 72 3d 31 36 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 38 3a 6f 5b 31 35 5d 3d 22 22 3b 6f 5b 31 35 5d 3d 22 5f 5f 72 65 22 3b 6f 5b 37 39 5d 3d 22 61 6c 22 3b 6f 5b 32 34 5d 3d 22 22 3b 72 3d 38 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 35 3a 69 28 65 2c 22 73 70 6c 69 74 22 2c 6f 5b 39 31 5d 2c 6f 5b 36 34 5d 29 3b 72 3d 31 36 34 3b 62 72 65 61 6b Data Ascii: [37]=o[14];o[37]+=o[76];r=96;break;case 146:o[36]=o[27];o[36]+=o[2];o[36]+=o[87];o[68]=o[6];r=142;break;case 161:i(S,"sort",o[91],o[36]);r=160;break;case 88:o[15]="";o[15]="__re";o[79]="al";o[24]="";r=84;break;case 165:i(e,"split",o[91],o[64]);r=164;break
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 3d 32 3b 66 6f 72 28 3b 74 21 3d 3d 31 34 3b 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 65 5b 37 5d 3d 22 75 6e 64 22 3b 65 5b 35 5d 3d 65 5b 37 5d 3b 65 5b 35 5d 2b 3d 65 5b 38 5d 3b 65 5b 35 5d 2b 3d 6f 5b 34 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 75 5b 31 5d 5b 75 5b 30 5d 5b 32 5d 5d 3d 3d 65 5b 35 5d 3f 75 6e 64 65 66 69 6e 65 64 3a 75 5b 31 5d 5b 75 5b 30 5d 5b 32 5d 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 76 61 72 20 65 3d 5b 61 72 67 75 6d 65 6e 74 73 5d 3b 65 5b 38 5d 3d 22 22 3b 65 5b 38 5d 3d 22 65 66 69 6e 65 22 3b 65 5b 37 5d 3d 22 22 3b 74 3d 33 3b 62 72 65 61 6b 7d 7d 7d 3b 75 5b 32 5d 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 75 5b 37 5d 3b 74 72 79 7b 76 61 72 20 73 3d 32 3b 66 6f 72 28 3b 73 21 3d 3d 33 3b 29 7b 73 Data Ascii: =2;for(;t!==14;){switch(t){case 3:e[7]="und";e[5]=e[7];e[5]+=e[8];e[5]+=o[4];return typeof u[1][u[0][2]]==e[5]?undefined:u[1][u[0][2]];break;case 2:var e=[arguments];e[8]="";e[8]="efine";e[7]="";t=3;break}}};u[2].enumerable=u[7];try{var s=2;for(;s!==3;){s
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 35 36 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 75 38 6a 74 6d 33 71 7d 3b 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 7b 73 31 77 37 48 57 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 61 72 67 75 6d 65 6e 74 73 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 31 32 3a 74 3d 2d 28 65 5b 31 5d 3e 3e 65 5b 32 5d 29 3c 65 5b 30 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 74 3d 65 5b 34 5d 2b 65 5b 36 5d 2b 65 5b 31 5d 2b 65 5b 33 5d 2b 65 5b 35 5d 2b 65 5b 32 5d 2b 65 5b 37 5d 2b 65 5b 30 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 34 3a 74 3d 65 5b 30 5d 3c 2b 65 5b 31 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 35 3a 74 3d 28 2d 65 5b 34 5d 2b 65 5b Data Ascii: 56],arguments):c2uZu[625656].u8jtm3q};c2uZu[625656]=function(r){return{s1w7HWq:function(){var t,e=arguments;switch(r){case 12:t=-(e[1]>>e[2])<e[0];break;case 10:t=e[4]+e[6]+e[1]+e[3]+e[5]+e[2]+e[7]+e[0];break;case 14:t=e[0]<+e[1];break;case 25:t=(-e[4]+e[
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 6c 79 28 63 32 75 5a 75 5b 34 34 31 39 35 35 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 63 32 75 5a 75 5b 34 34 31 39 35 35 5d 2e 47 34 55 6f 53 53 75 7d 3b 63 32 75 5a 75 2e 4e 36 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 2e 61 70 70 6c 79 28 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 7d 3b 63 32 75 5a 75 5b 32 32 38 32 38 38 5d 2e 47 32 74 74 3d 63 32 75 5a 75 3b 63 32 75 5a 75 2e 75 30 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 Data Ascii: ly(c2uZu[441955],arguments):c2uZu[441955].G4UoSSu};c2uZu.N6=function(){return typeof c2uZu[625656].s1w7HWq==="function"?c2uZu[625656].s1w7HWq.apply(c2uZu[625656],arguments):c2uZu[625656].s1w7HWq};c2uZu[228288].G2tt=c2uZu;c2uZu.u0=function(){return typeof
2025-01-22 03:36:01 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 31 34 37 3a 65 5b 39 5d 3d 31 32 3b 72 65 74 75 72 6e 20 37 37 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 38 3a 69 5b 34 32 5d 2e 4c 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2b 65 7d 76 61 72 20 65 3d 2f 5c 78 36 66 5c 31 35 36 5b 5c 72 5c 75 32 30 32 66 5c 75 32 30 35 66 5c 75 32 30 32 39 5c 6e 5c 66 5c 75 30 30 61 30 5c 75 66 65 66 66 20 5c 75 32 30 32 38 5c 76 5c 74 5c 75 32 30 30 61 5c 75 31 36 38 30 2d 5c 75 32 30 30 30 5c 75 33 30 30 30 5d 7b 30 2c 7d 5c 78 32 38 2f 2e 43 34 65 34 75 65 28 74 2b 5b 5d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 69 5b 37 38 5d 3d 69 5b 34 32 5d 3b 69 5b 38 37 5d 3d 7b 7d 3b 69 5b 38 37 5d 2e 55 36 3d 5b 22 57 33 22 2c 22 44 38 22 Data Ascii: reak;case 147:e[9]=12;return 77;break;case 48:i[42].L5=function(){function t(t,e){return t+e}var e=/\x6f\156[\r\u202f\u205f\u2029\n\f\u00a0\ufeff \u2028\v\t\u200a\u1680-\u2000\u3000]{0,}\x28/.C4e4ue(t+[]);return e};i[78]=i[42];i[87]={};i[87].U6=["W3","D8"

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:02 UTC	587	OUT	GET /favicon-32x32.png HTTP/1.1 Host: cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:02 UTC	1023	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:02 GMT Content-Type: image/png Content-Length: 1252 Connection: close Cache-Control: public, max-age=7200 Last-Modified: Tue, 17 Sep 2024 17:21:19 GMT ETag: W/"4e4-1920100c071" X-Served-By: cuevana.biz X-Varnish: 1114116 1114115 Via: 1.1 varnish (Varnish/6.4) X-Cache: HIT X-Cache-Hits: 1 CF-Cache-Status: HIT Age: 38737 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w5hJiJGsLlD3bZnxz2kTCeeqDgsIpE700vR16h6U9GQt12B7Thvw219oXOsP5TTZv6CH%2FPZpUJqDaE7Sq6DtF%2FcY9HwaG8kj%2B9WtO34v9Mv2JCNAXjn8pqHAQVUwDg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f58be09f819-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38267&min_rtt=38259&rtt_var=14364&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1165&delivery_rate=76184&cwnd=32&unsent_bytes=0&cid=e9a20e9db17c3050&ts=227&x=0"
2025-01-22 03:36:02 UTC	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 04 9e 49 44 41 54 58 47 b5 96 7f 68 d4 65 18 c0 3f cf f7 ee 36 b7 52 9b 59 a6 46 14 fd b0 1f 20 e1 aa a9 d3 21 51 59 ea 96 50 50 10 15 f5 4f cd b6 b9 73 98 73 4b 3a 7f 34 9d ce 9b b9 d4 0c fd a7 82 ac 11 b9 dd 74 2c 28 46 de 6d 0e 5a 12 24 f5 87 91 a2 90 85 54 66 6d 6e de bd 4f 7c cf cd bb db fd fa 5a eb 85 83 2f ef 3d cf fb 7c de e7 e7 2b c4 96 8c 7c 6a dc de ff fe 39 6a d4 b1 a1 c2 d2 bd f9 79 d6 c0 7c 35 32 5f 84 bb 81 a9 80 5b 91 3f 41 4f ab 6a bf 71 d1 7d f4 a0 f7 14 90 f5 32 36 80 fd 1b 15 8c ff 4e 80 5a b0 64 fb 5d ea 76 79 05 9e 01 0a b2 10 47 80 5e 15 de f1 9c ff e3 d3 ee 6e 5f 38 9d 7c 3c 40 ca 10 14 97 Data Ascii: PNGIHDR szzsRGBIDATXGhe?6RYF !QYPPOssK:4t,(FmZ$TfmnO\|Z/=\|+\|j9jy\|52_[?AOjq}26NZd]vyG^n_8\|<@
2025-01-22 03:36:02 UTC	906	IN	Data Raw: 81 1b b3 bb dc 31 80 9d 6e aa 62 ea 42 6d d5 5b 46 cf 4d a5 2d c5 65 3b ba 05 4a b2 1b b7 25 ae 06 20 ea 88 b0 31 5a d2 d3 e1 ed 4d ab 5d 5c b6 63 96 05 bb 15 79 38 03 84 9d e9 c7 41 8f 2b 3a 2c 30 13 e4 01 e0 ba 0c 3a 03 a8 36 9c 0d bb 9a 4e 74 56 0d 25 03 d4 6a 01 c2 2a 72 68 44 d6 0f 2c ec 9f fc b2 5a d2 88 ca 94 58 52 63 10 7d df 15 91 86 af 3a 56 9e 88 4f aa d9 8f 6d bb 66 62 ae e7 59 11 36 02 d3 13 40 94 ee 08 ae f2 de 40 e5 0f f1 fb 89 fe ab 53 2f aa 7e 90 13 98 70 05 8d 9e ae e2 b2 96 19 82 d9 01 3c 0d 0c 09 bc 74 a4 7d e5 81 4c e1 59 b4 64 eb 4d 61 77 ce 41 a0 08 e5 37 90 b5 d3 27 04 f7 b7 b6 b6 da 5e 4b 58 71 00 2a d4 e9 d7 28 73 46 24 0c e8 07 60 ad 66 b3 9c 5b b8 bc f9 49 a3 92 1b 6a ab fe d8 49 6e 14 96 36 4d cd c3 b5 e1 52 d8 d5 d0 d7 59 75 Data Ascii: 1nbBm[FM-e;J% 1ZM]\cy8A+:,0:6NtV%jrhD,ZXRc}:VOmfbY6@@S/~p<t}LYdMawA7'^KXq(sF$`f[IjIn6MRYu

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:02 UTC	532	OUT	GET /site.webmanifest HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:02 UTC	988	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:02 GMT Content-Length: 305 Connection: close Last-Modified: Thu, 23 Mar 2023 19:51:26 GMT Vary: Accept-Encoding X-Varnish: 18056077 Via: 1.1 varnish (Varnish/6.4) ETag: W/"131-5f7969a186b80-gzip" X-Cache: MISS X-Cache-Hits: 0 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 536971 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=maZPh%2FwU8FsoejuVXceXom9yrk21Vc5xo%2Fx5rDRcAUOOjbh0zOJNLJG6FHVd5QM4S%2FFzrRIeb4DRPz8IxkJLf2KQhcKUPuUgEOp6H8Vvj756W2ytWRk3nErKYs94rJmRcd5l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f58ce2c757b-SEA alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=64200&min_rtt=64144&rtt_var=24094&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1110&delivery_rate=45522&cwnd=32&unsent_bytes=0&cid=7be1ab1db3517001&ts=283&x=0"
2025-01-22 03:36:02 UTC	305	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 63 6c 6f 75 64 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 7d 2c 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 63 75 65 76 61 6e 61 2e 63 6c 6f 75 64 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 35 31 32 78 35 31 32 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 7d 5d 2c 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 62 Data Ascii: {"name":"","short_name":"","icons":[{"src":"https://cuevana.cloud/android-chrome-192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://cuevana.cloud/android-chrome-512x512.png","sizes":"512x512","type":"image/png"}],"theme_color":"#ffffff","b

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:02 UTC	614	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive Content-Length: 1774 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://wv5n.cuevana.biz Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:02 UTC	1774	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 34 35 31 35 39 33 32 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 35 37 36 36 30 34 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 32 39 33 37 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 32 39 33 37 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 37 35 31 36 39 35 35 34 39 36 2e 38 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 35 2e 31 2e 30 22 2c 22 6a 73 22 3a 22 32 30 32 34 2e 36 2e 31 22 2c 22 74 Data Ascii: {"memory":{"totalJSHeapSize":4515932,"usedJSHeapSize":3576604,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"","eventType":1,"firstPaint":2937,"firstContentfulPaint":2937,"startTime":1737516955496.8,"versions":{"fl":"2025.1.0","js":"2024.6.1","t
2025-01-22 03:36:02 UTC	354	IN	HTTP/1.1 301 Moved Permanently Date: Wed, 22 Jan 2025 03:36:02 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Wed, 22 Jan 2025 04:36:02 GMT Location: https://cuevana.biz/cdn-cgi/rum Server: cloudflare CF-RAY: 905c7f587eabb384-MAN X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-22 03:36:02 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:02 UTC	367	OUT	GET /index_files/edgeSystemV1.js HTTP/1.1 Host: wv5n.cuevana.biz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:03 UTC	1036	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:03 GMT Content-Type: application/javascript Content-Length: 88776 Connection: close Last-Modified: Wed, 18 Dec 2024 15:29:12 GMT Vary: Accept-Encoding X-Varnish: 17077199 18289489 Via: 1.1 varnish (Varnish/6.4) ETag: W/"15ac8-6298d135d0f7e-gzip" X-Cache: HIT X-Cache-Hits: 1 Cache-Control: max-age=7200 CF-Cache-Status: HIT Age: 34516 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mA8Y0tnjiTgyYeoyH3YOviJnLFGwJ0rW9Jto5UuUu6o5Hew6tHQ6FnB8ufFVgpiKoZ8HY2HLX6usUMsFxz6GfuQu818ML43%2FVWMa4h1GXsRs7%2FZj%2BVZWJ6ps%2BrUTtrm7vxpQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f5b58d882bd-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7463&min_rtt=7463&rtt_var=2799&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=945&delivery_rate=391106&cwnd=32&unsent_bytes=0&cid=1bc490d46251eeee&ts=165&x=0"
2025-01-22 03:36:03 UTC	333	IN	Data Raw: 77 69 6e 64 6f 77 2e 66 66 63 37 39 38 62 35 20 3d 20 27 63 4a 73 45 64 67 65 27 3b 63 32 75 5a 75 5b 32 32 38 32 38 38 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 32 3b 66 6f 72 28 3b 74 21 3d 3d 39 3b 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 32 3a 74 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 3f 31 3a 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 76 61 72 20 65 3b 74 72 79 7b 76 61 72 20 72 3d 32 3b 66 6f 72 28 3b 72 21 3d 3d 36 3b 29 7b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 32 3a 4f 62 6a 65 63 74 5b 22 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 22 5d 28 4f 62 6a 65 63 74 5b 22 70 72 6f 74 6f 74 79 70 65 22 5d 2c 22 53 6c 69 5a 71 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: window.ffc798b5 = 'cJsEdge';c2uZu[228288]=function(){var t=2;for(;t!==9;){switch(t){case 2:t=typeof globalThis==="object"?1:5;break;case 5:var e;try{var r=2;for(;r!==6;){switch(r){case 2:Object["defineProperty"](Object["prototype"],"SliZq",{get:function()
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 65 61 6b 3b 63 61 73 65 20 39 3a 64 65 6c 65 74 65 20 65 5b 22 49 32 43 31 50 22 5d 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 5b 22 70 72 6f 74 6f 74 79 70 65 22 5d 3b 64 65 6c 65 74 65 20 69 5b 22 53 6c 69 5a 71 22 5d 3b 72 3d 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 3d 74 79 70 65 6f 66 20 49 32 43 31 50 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 33 3a 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 72 6f 77 22 22 3b 72 3d 39 3b 62 72 65 61 6b 7d 7d 7d 63 61 74 63 68 28 74 29 7b 65 3d 77 69 6e 64 6f 77 7d 72 65 74 75 72 6e 20 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 62 72 65 61 6b 7d 7d 7d 28 29 3b 63 32 75 5a 75 2e 48 38 5f 35 74 3d 48 38 5f 35 74 3b 72 33 30 6c 24 62 28 63 32 75 5a 75 Data Ascii: eak;case 9:delete e["I2C1P"];var i=Object["prototype"];delete i["SliZq"];r=6;break;case 4:r=typeof I2C1P==="undefined"?3:9;break;case 3:throw"";r=9;break}}}catch(t){e=window}return e;break;case 1:return globalThis;break}}}();c2uZu.H8_5t=H8_5t;r30l$b(c2uZu
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 3d 6e 3d 3d 3d 33 26 26 74 3d 3d 3d 31 32 34 3f 31 32 3a 31 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 30 3a 6e 2b 3d 31 3b 65 3d 31 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a 6e 2b 3d 31 3b 65 3d 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 35 3a 65 3d 6e 3d 3d 3d 36 26 26 74 3d 3d 3d 33 38 33 3f 32 37 3a 32 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 73 2e 46 38 33 67 55 2e 79 5f 33 30 6c 28 73 2c 73 2e 72 36 74 46 63 7a 28 2d 36 2c 36 29 2e 72 36 74 46 63 7a 28 30 2c 34 29 29 3b 65 3d 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 34 3a 72 65 74 75 72 6e 20 75 28 74 29 3b 62 72 65 61 6b 7d 7d 7d 3b 76 61 72 20 75 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 32 3b 66 6f 72 28 3b 65 21 3d 3d 31 3b 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 Data Ascii: =n===3&&t===124?12:10;break;case 20:n+=1;e=19;break;case 9:n+=1;e=8;break;case 15:e=n===6&&t===383?27:25;break;case 8:s.F83gU.y_30l(s,s.r6tFcz(-6,6).r6tFcz(0,4));e=4;break;case 24:return u(t);break}}};var u=function(t){var e=2;for(;e!==1;){switch(e){case
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 32 75 5a 75 2e 6a 34 3d 2d 32 3b 62 34 7a 65 70 6c 3d 38 3b 62 72 65 61 6b 3b 63 61 73 65 20 37 3a 63 32 75 5a 75 2e 4b 5f 3d 35 38 3b 62 34 7a 65 70 6c 3d 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 63 32 75 5a 75 2e 58 34 3d 39 35 3b 62 34 7a 65 70 6c 3d 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 62 34 7a 65 70 6c 3d 63 32 75 5a 75 2e 53 34 28 33 37 30 29 21 3d 3d 63 32 75 5a 75 2e 53 34 28 31 35 34 29 3f 31 3a 35 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 62 34 7a 65 70 6c 3d 63 32 75 5a 75 2e 53 36 28 33 32 31 29 3d 3d 3d 63 32 75 5a 75 2e 53 34 28 38 38 29 3f 39 3a 38 3b 62 72 65 61 6b 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 33 30 6c 24 62 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 65 3d 32 3b 66 6f 72 28 3b 65 21 3d 3d 35 3b 29 Data Ascii: 2uZu.j4=-2;b4zepl=8;break;case 7:c2uZu.K_=58;b4zepl=6;break;case 4:c2uZu.X4=95;b4zepl=3;break;case 2:b4zepl=c2uZu.S4(370)!==c2uZu.S4(154)?1:5;break;case 3:b4zepl=c2uZu.S6(321)===c2uZu.S4(88)?9:8;break}}function r30l$b(t){function e(t){var e=2;for(;e!==5;)
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 39 34 5d 2b 3d 6f 5b 32 33 5d 3b 72 3d 31 30 39 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 35 3a 6f 5b 31 38 5d 3d 22 22 3b 6f 5b 31 38 5d 3d 22 57 22 3b 6f 5b 32 35 5d 3d 22 22 3b 6f 5b 32 35 5d 3d 22 41 24 53 79 22 3b 6f 5b 35 35 5d 3d 22 22 3b 72 3d 36 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 38 3a 6f 5b 38 37 5d 3d 22 32 42 22 3b 6f 5b 34 30 5d 3d 22 78 22 3b 6f 5b 33 34 5d 3d 22 22 3b 6f 5b 33 34 5d 3d 22 33 57 22 3b 72 3d 34 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 37 3a 6f 5b 37 30 5d 2b 3d 6f 5b 33 32 5d 3b 6f 5b 37 30 5d 2b 3d 6f 5b 36 39 5d 3b 6f 5b 32 39 5d 3d 6f 5b 33 39 5d 3b 6f 5b 32 39 5d 2b 3d 6f 5b 33 34 5d 3b 72 3d 31 32 33 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 32 3a 69 28 53 2c 22 73 70 6c 69 63 65 22 2c 6f 5b 39 31 5d 2c 6f 5b 36 Data Ascii: 94]+=o[23];r=109;break;case 65:o[18]="";o[18]="W";o[25]="";o[25]="A$Sy";o[55]="";r=60;break;case 28:o[87]="2B";o[40]="x";o[34]="";o[34]="3W";r=41;break;case 127:o[70]+=o[32];o[70]+=o[69];o[29]=o[39];o[29]+=o[34];r=123;break;case 162:i(S,"splice",o[91],o[6
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 6f 5b 33 37 5d 2b 3d 6f 5b 37 36 5d 3b 72 3d 39 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 34 36 3a 6f 5b 33 36 5d 3d 6f 5b 32 37 5d 3b 6f 5b 33 36 5d 2b 3d 6f 5b 32 5d 3b 6f 5b 33 36 5d 2b 3d 6f 5b 38 37 5d 3b 6f 5b 36 38 5d 3d 6f 5b 36 5d 3b 72 3d 31 34 32 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 31 3a 69 28 53 2c 22 73 6f 72 74 22 2c 6f 5b 39 31 5d 2c 6f 5b 33 36 5d 29 3b 72 3d 31 36 30 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 38 3a 6f 5b 31 35 5d 3d 22 22 3b 6f 5b 31 35 5d 3d 22 5f 5f 72 65 22 3b 6f 5b 37 39 5d 3d 22 61 6c 22 3b 6f 5b 32 34 5d 3d 22 22 3b 72 3d 38 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 36 35 3a 69 28 65 2c 22 73 70 6c 69 74 22 2c 6f 5b 39 31 5d 2c 6f 5b 36 34 5d 29 3b 72 3d 31 36 34 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 33 38 3a 6f Data Ascii: o[37]+=o[76];r=96;break;case 146:o[36]=o[27];o[36]+=o[2];o[36]+=o[87];o[68]=o[6];r=142;break;case 161:i(S,"sort",o[91],o[36]);r=160;break;case 88:o[15]="";o[15]="__re";o[79]="al";o[24]="";r=84;break;case 165:i(e,"split",o[91],o[64]);r=164;break;case 138:o
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 3d 31 34 3b 29 7b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 33 3a 65 5b 37 5d 3d 22 75 6e 64 22 3b 65 5b 35 5d 3d 65 5b 37 5d 3b 65 5b 35 5d 2b 3d 65 5b 38 5d 3b 65 5b 35 5d 2b 3d 6f 5b 34 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 75 5b 31 5d 5b 75 5b 30 5d 5b 32 5d 5d 3d 3d 65 5b 35 5d 3f 75 6e 64 65 66 69 6e 65 64 3a 75 5b 31 5d 5b 75 5b 30 5d 5b 32 5d 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 76 61 72 20 65 3d 5b 61 72 67 75 6d 65 6e 74 73 5d 3b 65 5b 38 5d 3d 22 22 3b 65 5b 38 5d 3d 22 65 66 69 6e 65 22 3b 65 5b 37 5d 3d 22 22 3b 74 3d 33 3b 62 72 65 61 6b 7d 7d 7d 3b 75 5b 32 5d 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 75 5b 37 5d 3b 74 72 79 7b 76 61 72 20 73 3d 32 3b 66 6f 72 28 3b 73 21 3d 3d 33 3b 29 7b 73 77 69 74 63 68 28 73 29 7b 63 61 Data Ascii: =14;){switch(t){case 3:e[7]="und";e[5]=e[7];e[5]+=e[8];e[5]+=o[4];return typeof u[1][u[0][2]]==e[5]?undefined:u[1][u[0][2]];break;case 2:var e=[arguments];e[8]="";e[8]="efine";e[7]="";t=3;break}}};u[2].enumerable=u[7];try{var s=2;for(;s!==3;){switch(s){ca
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 74 73 29 3a 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 75 38 6a 74 6d 33 71 7d 3b 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 7b 73 31 77 37 48 57 71 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 65 3d 61 72 67 75 6d 65 6e 74 73 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 20 31 32 3a 74 3d 2d 28 65 5b 31 5d 3e 3e 65 5b 32 5d 29 3c 65 5b 30 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 74 3d 65 5b 34 5d 2b 65 5b 36 5d 2b 65 5b 31 5d 2b 65 5b 33 5d 2b 65 5b 35 5d 2b 65 5b 32 5d 2b 65 5b 37 5d 2b 65 5b 30 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 34 3a 74 3d 65 5b 30 5d 3c 2b 65 5b 31 5d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 35 3a 74 3d 28 2d 65 5b 34 5d 2b 65 5b 30 5d 29 2a 65 5b 32 5d 2d 65 5b Data Ascii: ts):c2uZu[625656].u8jtm3q};c2uZu[625656]=function(r){return{s1w7HWq:function(){var t,e=arguments;switch(r){case 12:t=-(e[1]>>e[2])<e[0];break;case 10:t=e[4]+e[6]+e[1]+e[3]+e[5]+e[2]+e[7]+e[0];break;case 14:t=e[0]<+e[1];break;case 25:t=(-e[4]+e[0])*e[2]-e[
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 31 39 35 35 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 63 32 75 5a 75 5b 34 34 31 39 35 35 5d 2e 47 34 55 6f 53 53 75 7d 3b 63 32 75 5a 75 2e 4e 36 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 2e 61 70 70 6c 79 28 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2c 61 72 67 75 6d 65 6e 74 73 29 3a 63 32 75 5a 75 5b 36 32 35 36 35 36 5d 2e 73 31 77 37 48 57 71 7d 3b 63 32 75 5a 75 5b 32 32 38 32 38 38 5d 2e 47 32 74 74 3d 63 32 75 5a 75 3b 63 32 75 5a 75 2e 75 30 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 63 32 75 5a 75 5b 36 32 35 36 35 Data Ascii: 1955],arguments):c2uZu[441955].G4UoSSu};c2uZu.N6=function(){return typeof c2uZu[625656].s1w7HWq==="function"?c2uZu[625656].s1w7HWq.apply(c2uZu[625656],arguments):c2uZu[625656].s1w7HWq};c2uZu[228288].G2tt=c2uZu;c2uZu.u0=function(){return typeof c2uZu[62565
2025-01-22 03:36:03 UTC	1369	IN	Data Raw: 34 37 3a 65 5b 39 5d 3d 31 32 3b 72 65 74 75 72 6e 20 37 37 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 38 3a 69 5b 34 32 5d 2e 4c 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2b 65 7d 76 61 72 20 65 3d 2f 5c 78 36 66 5c 31 35 36 5b 5c 72 5c 75 32 30 32 66 5c 75 32 30 35 66 5c 75 32 30 32 39 5c 6e 5c 66 5c 75 30 30 61 30 5c 75 66 65 66 66 20 5c 75 32 30 32 38 5c 76 5c 74 5c 75 32 30 30 61 5c 75 31 36 38 30 2d 5c 75 32 30 30 30 5c 75 33 30 30 30 5d 7b 30 2c 7d 5c 78 32 38 2f 2e 43 34 65 34 75 65 28 74 2b 5b 5d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 69 5b 37 38 5d 3d 69 5b 34 32 5d 3b 69 5b 38 37 5d 3d 7b 7d 3b 69 5b 38 37 5d 2e 55 36 3d 5b 22 57 33 22 2c 22 44 38 22 5d 3b 69 5b 38 37 5d 2e 4c 35 3d Data Ascii: 47:e[9]=12;return 77;break;case 48:i[42].L5=function(){function t(t,e){return t+e}var e=/\x6f\156[\r\u202f\u205f\u2029\n\f\u00a0\ufeff \u2028\v\t\u200a\u1680-\u2000\u3000]{0,}\x28/.C4e4ue(t+[]);return e};i[78]=i[42];i[87]={};i[87].U6=["W3","D8"];i[87].L5=

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:03 UTC	352	OUT	GET /favicon-32x32.png HTTP/1.1 Host: cuevana.biz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:04 UTC	1024	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:04 GMT Content-Type: image/png Content-Length: 1252 Connection: close Cache-Control: public, max-age=7200 Last-Modified: Tue, 17 Sep 2024 17:21:19 GMT ETag: W/"4e4-1920100c071" X-Served-By: cuevana.biz X-Varnish: 1114116 1114115 Via: 1.1 varnish (Varnish/6.4) X-Cache: HIT X-Cache-Hits: 1 CF-Cache-Status: HIT Age: 38739 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Lc1i%2BdM4RftX5hXiP6KcVtMUUiTSrf4Y8qRSMLxz5YhFC%2BbrtRPXPHWDAO4oa24PuEB%2F3rFJ%2FiQXChUb61Cpx2JhTFHqjQL5RWK017CJzhP7sngMBYwRvJTTI8XVKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 905c7f61ddad1441-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38255&min_rtt=38243&rtt_var=14365&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2823&recv_bytes=930&delivery_rate=76162&cwnd=32&unsent_bytes=0&cid=5975e6dc306fd5da&ts=235&x=0"
2025-01-22 03:36:04 UTC	345	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 04 9e 49 44 41 54 58 47 b5 96 7f 68 d4 65 18 c0 3f cf f7 ee 36 b7 52 9b 59 a6 46 14 fd b0 1f 20 e1 aa a9 d3 21 51 59 ea 96 50 50 10 15 f5 4f cd b6 b9 73 98 73 4b 3a 7f 34 9d ce 9b b9 d4 0c fd a7 82 ac 11 b9 dd 74 2c 28 46 de 6d 0e 5a 12 24 f5 87 91 a2 90 85 54 66 6d 6e de bd 4f 7c cf cd bb db fd fa 5a eb 85 83 2f ef 3d cf fb 7c de e7 e7 2b c4 96 8c 7c 6a dc de ff fe 39 6a d4 b1 a1 c2 d2 bd f9 79 d6 c0 7c 35 32 5f 84 bb 81 a9 80 5b 91 3f 41 4f ab 6a bf 71 d1 7d f4 a0 f7 14 90 f5 32 36 80 fd 1b 15 8c ff 4e 80 5a b0 64 fb 5d ea 76 79 05 9e 01 0a b2 10 47 80 5e 15 de f1 9c ff e3 d3 ee 6e 5f 38 9d 7c 3c 40 ca 10 14 97 Data Ascii: PNGIHDR szzsRGBIDATXGhe?6RYF !QYPPOssK:4t,(FmZ$TfmnO\|Z/=\|+\|j9jy\|52_[?AOjq}26NZd]vyG^n_8\|<@
2025-01-22 03:36:04 UTC	907	IN	Data Raw: 04 81 1b b3 bb dc 31 80 9d 6e aa 62 ea 42 6d d5 5b 46 cf 4d a5 2d c5 65 3b ba 05 4a b2 1b b7 25 ae 06 20 ea 88 b0 31 5a d2 d3 e1 ed 4d ab 5d 5c b6 63 96 05 bb 15 79 38 03 84 9d e9 c7 41 8f 2b 3a 2c 30 13 e4 01 e0 ba 0c 3a 03 a8 36 9c 0d bb 9a 4e 74 56 0d 25 03 d4 6a 01 c2 2a 72 68 44 d6 0f 2c ec 9f fc b2 5a d2 88 ca 94 58 52 63 10 7d df 15 91 86 af 3a 56 9e 88 4f aa d9 8f 6d bb 66 62 ae e7 59 11 36 02 d3 13 40 94 ee 08 ae f2 de 40 e5 0f f1 fb 89 fe ab 53 2f aa 7e 90 13 98 70 05 8d 9e ae e2 b2 96 19 82 d9 01 3c 0d 0c 09 bc 74 a4 7d e5 81 4c e1 59 b4 64 eb 4d 61 77 ce 41 a0 08 e5 37 90 b5 d3 27 04 f7 b7 b6 b6 da 5e 4b 58 71 00 2a d4 e9 d7 28 73 46 24 0c e8 07 60 ad 66 b3 9c 5b b8 bc f9 49 a3 92 1b 6a ab fe d8 49 6e 14 96 36 4d cd c3 b5 e1 52 d8 d5 d0 d7 59 Data Ascii: 1nbBm[FM-e;J% 1ZM]\cy8A+:,0:6NtV%jrhD,ZXRc}:VOmfbY6@@S/~p<t}LYdMawA7'^KXq(sF$`f[IjIn6MRY

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://wv5n.cuevana.biz/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Windows Analysis Report
https://wv5n.cuevana.biz/

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:04 UTC	507	OUT	OPTIONS /cdn-cgi/rum HTTP/1.1 Host: cuevana.biz Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://wv5n.cuevana.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:04 UTC	463	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:04 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://wv5n.cuevana.biz Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Headers: Content-Type access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 905c7f628be7be22-DUB X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-22 03:36:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:05 UTC	583	OUT	GET /cdn-cgi/rum HTTP/1.1 Host: cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://wv5n.cuevana.biz Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:05 UTC	236	IN	HTTP/1.1 405 Not Allowed Date: Wed, 22 Jan 2025 03:36:05 GMT Content-Type: text/html Content-Length: 557 Connection: close Server: cloudflare CF-RAY: 905c7f6c7a189f63-AMS X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-22 03:36:05 UTC	557	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>cloudflare</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE an

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:06 UTC	530	OUT	OPTIONS /report/v4?s=w5hJiJGsLlD3bZnxz2kTCeeqDgsIpE700vR16h6U9GQt12B7Thvw219oXOsP5TTZv6CH%2FPZpUJqDaE7Sq6DtF%2FcY9HwaG8kj%2B9WtO34v9Mv2JCNAXjn8pqHAQVUwDg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cuevana.biz Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 22 Jan 2025 03:36:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:07 UTC	476	OUT	POST /report/v4?s=w5hJiJGsLlD3bZnxz2kTCeeqDgsIpE700vR16h6U9GQt12B7Thvw219oXOsP5TTZv6CH%2FPZpUJqDaE7Sq6DtF%2FcY9HwaG8kj%2B9WtO34v9Mv2JCNAXjn8pqHAQVUwDg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 417 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:07 UTC	417	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 37 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 76 35 6e 2e 63 75 65 76 61 6e 61 2e 62 69 7a 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":0,"body":{"elapsed_time":1570,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://wv5n.cuevana.biz/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":405,"type":"http.error"},"type":"network-error","url":
2025-01-22 03:36:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Wed, 22 Jan 2025 03:36:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:13 UTC	750	OUT	GET /khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c HTTP/1.1 Host: concealmentmimic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:13 UTC	933	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Wed, 22 Jan 2025 03:36:13 GMT Content-Type: text/html Content-Length: 118 Connection: close p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA set-cookie: u_pl20799373=1; expires=Thu, 23 Jan 2025 03:36:13 GMT; path=/ x-envoy-upstream-service-time: 1 x-envoy-decorator-operation: go-banner.modules.svc.cluster.local:9090/* Host: concealmentmimic.com Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 329b046d4e581cee33e448abc15b3f08 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains
2025-01-22 03:36:13 UTC	118	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 70 3e 41 6e 6f 6e 79 6d 6f 75 73 20 50 72 6f 78 79 20 64 65 74 65 63 74 65 64 2e 3c 2f 70 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"></head><body><p>Anonymous Proxy detected.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:13 UTC	889	OUT	GET /favicon.ico HTTP/1.1 Host: concealmentmimic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://concealmentmimic.com/khxn5kgi?key=9c25ca87f6dffb55f30e3f0f6a21201c Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u_pl20799373=1
2025-01-22 03:36:13 UTC	377	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Wed, 22 Jan 2025 03:36:13 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 2e664bd4635ad27a94d0d9870d2ba4e4 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:14 UTC	379	OUT	GET /favicon.ico HTTP/1.1 Host: concealmentmimic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u_pl20799373=1
2025-01-22 03:36:14 UTC	377	IN	HTTP/1.1 200 OK Server: nginx/1.21.6 Date: Wed, 22 Jan 2025 03:36:14 GMT Content-Type: image/x-icon Content-Length: 0 Connection: close Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: c54ff2a53d78b3fdfb8f6711cb152636 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:15 UTC	507	OUT	OPTIONS /cdn-cgi/rum HTTP/1.1 Host: cuevana.biz Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: content-type Origin: https://wv5n.cuevana.biz User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:15 UTC	463	IN	HTTP/1.1 200 OK Date: Wed, 22 Jan 2025 03:36:15 GMT Content-Type: text/plain Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://wv5n.cuevana.biz Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Headers: Content-Type access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 905c7fa6bd938284-IAD X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-22 03:36:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:36:16 UTC	583	OUT	GET /cdn-cgi/rum HTTP/1.1 Host: cuevana.biz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://wv5n.cuevana.biz Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://wv5n.cuevana.biz/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:36:16 UTC	236	IN	HTTP/1.1 405 Not Allowed Date: Wed, 22 Jan 2025 03:36:16 GMT Content-Type: text/html Content-Length: 557 Connection: close Server: cloudflare CF-RAY: 905c7fb00cc27610-SEA X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-01-22 03:36:16 UTC	557	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 35 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e Data Ascii: <html><head><title>405 Not Allowed</title></head><body><center><h1>405 Not Allowed</h1></center><hr><center>cloudflare</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE an

Timestamp	Bytes transferred	Direction	Data
2025-01-22 03:37:06 UTC	530	OUT	OPTIONS /report/v4?s=w5hJiJGsLlD3bZnxz2kTCeeqDgsIpE700vR16h6U9GQt12B7Thvw219oXOsP5TTZv6CH%2FPZpUJqDaE7Sq6DtF%2FcY9HwaG8kj%2B9WtO34v9Mv2JCNAXjn8pqHAQVUwDg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cuevana.biz Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-22 03:37:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 22 Jan 2025 03:37:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close