Edit tour

Windows Analysis Report
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13

Overview

General Information

Sample URL:	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13
Analysis ID:	1638738
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6240 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3168 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a

Joe Sandbox AI: Page contains button: 'OPEN DOCUMENT' Source: '0.0.pages.csv'

AI detected suspicious Javascript

Source: 1.17.d.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. It attempts to collect sensitive information like user agent, platform, and error messages, and sends this data to an unknown domain. The script also attempts to clear the DOM and set an interval, which could be used for further malicious activities. Overall, the combination of these behaviors strongly suggests this is a malicious script that should be treated with caution.

Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon
Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon
Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon
Source: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 172.217.18.4:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.148.124.222:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.148.124.222:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.187.142.75:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.187.142.75:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.83.40:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.83.40:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.153.232.152:443 -> 192.168.2.5:49793 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: auth.microsites.m-atelier.cz to https://telegra.ph/charlotte-reeves-03-13?authtoken=3df6d156-69ce-4eec-bf31-18f394818e5a

Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10

Source: global traffic	HTTP traffic detected: GET /redir?url=https://telegra.ph/Charlotte-Reeves-03-13 HTTP/1.1Host: auth.microsites.m-atelier.czConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a HTTP/1.1Host: telegra.phConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1Host: t4.ftcdn.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/quill.core.min.css HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/core.min.css?47 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1Host: tripakservices.co.ukConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1Host: t4.ftcdn.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery.selection.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/autosize.min.js HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/load-image.all.min.js?1 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26 HTTP/1.1Host: t.meConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/quill.min.js?10 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/core.min.js?67 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1Host: tripakservices.co.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons.png?1 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?1 HTTP/1.1Host: telegra.phConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5aAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/icons.png?1 HTTP/1.1Host: telegra.phConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /check HTTP/1.1Host: edit.telegra.phConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tph_uuid=FvAaxQbOiG47sLghnCRT4LszTQvffWYUrz3WncLEQP
Source: global traffic	HTTP traffic detected: GET /favicon.ico?1 HTTP/1.1Host: telegra.phConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N9fSN/ HTTP/1.1Host: maintenanceinvoicedocument.siluetaneblewulosa.it.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=920516296e5e41e3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: maintenanceinvoicedocument.siluetaneblewulosa.it.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=64bmpm01omgai1f6oqo7brl7qr
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1270268775:1741966298:_Zmdwe1rPh5WG-gQan5cEetjRA_i_fy0Mbk1ezNMvkw/920516296e5e41e3/RiIp3s9_ujulViW4.OfNsnA3g0zgbPJbf219AE5y3DI-1741969102-1.1.1.1-WmuUr1RJnb5ypGEbeJiYc7yRNwTrwCWZHxPhuZ9EYFZu7Hdb9TThd9FkKAjr35vp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/920516296e5e41e3/1741969104181/eabd5bdc4484d509af7ec9ec171abe57ba668d1cb63dcf413db405f0833c453c/vbcwi9BjXmGCZqU HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/920516296e5e41e3/1741969104184/KgPW0jO3NYXWrGs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/920516296e5e41e3/1741969104184/KgPW0jO3NYXWrGs HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1270268775:1741966298:_Zmdwe1rPh5WG-gQan5cEetjRA_i_fy0Mbk1ezNMvkw/920516296e5e41e3/RiIp3s9_ujulViW4.OfNsnA3g0zgbPJbf219AE5y3DI-1741969102-1.1.1.1-WmuUr1RJnb5ypGEbeJiYc7yRNwTrwCWZHxPhuZ9EYFZu7Hdb9TThd9FkKAjr35vp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1270268775:1741966298:_Zmdwe1rPh5WG-gQan5cEetjRA_i_fy0Mbk1ezNMvkw/920516296e5e41e3/RiIp3s9_ujulViW4.OfNsnA3g0zgbPJbf219AE5y3DI-1741969102-1.1.1.1-WmuUr1RJnb5ypGEbeJiYc7yRNwTrwCWZHxPhuZ9EYFZu7Hdb9TThd9FkKAjr35vp HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://maintenanceinvoicedocument.siluetaneblewulosa.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrapp.min.js HTTP/1.1Host: 2067274913-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: auth.microsites.m-atelier.cz
Source: global traffic	DNS traffic detected: DNS query: telegra.ph
Source: global traffic	DNS traffic detected: DNS query: tripakservices.co.uk
Source: global traffic	DNS traffic detected: DNS query: t4.ftcdn.net
Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: edit.telegra.ph
Source: global traffic	DNS traffic detected: DNS query: maintenanceinvoicedocument.siluetaneblewulosa.it.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 2067274913-1317754460.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 2067274913.sbs

Source: unknown

HTTP traffic detected: POST /check HTTP/1.1Host: edit.telegra.phConnection: keep-aliveContent-Length: 29sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://telegra.phSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegra.ph/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Mar 2025 16:18:20 GMTContent-Type: text/plain; charset=utf-8Transfer-Encoding: chunkedConnection: closeaccess-control-allow-origin: access-control-expose-headers: timing-allow-origin: *Cache-Control: public, max-age=600, s-maxage=600cross-origin-resource-policy: cross-originx-content-type-options: nosniffstrict-transport-security: max-age=31536000; includeSubDomains; preloadetag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Age: 362x-served-by: cache-fra-etou8220171-FRA, cache-lga21940-LGAx-cache: HIT, HITvary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2Fsw2FDWF9li%2Bhrh4jmO0%2Fy78yGs86An3bGyWzdjLpt2kczA58WFRcB%2BFcH22yVKYv%2FMdbJxn6URuAU2DxwepIJdVqxVTnZ%2ByYeZH0FSFlz9SonE6pgPSiL8WtCh7ASHhVc%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92051620afcdcd7f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Mar 2025 16:18:23 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jXWYLzOu84ks6wFk7DXfDyCCeqi4NDbNQQkcn%2BongR37icpCQXlSxBGxgx3lIHfXuRbn6jxHsKMwHGREt9ImWQbp2yzq4X1g%2FY9JHuUWMlcdX9z4cgH8LWpZZAXAdkD%2BBlD4kIbB3F%2BcSZ6AFEvdq0MDuPo%2FKf5WkBNoIYfTTX7y3ddrQj3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 92051630b8c2939a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2085&min_rtt=2079&rtt_var=784&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1291&delivery_rate=1404521&cwnd=131&unsent_bytes=0&cid=777df4073cdc561f&ts=3688&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 14 Mar 2025 16:18:38 GMTContent-Type: text/plain; charset=utf-8Transfer-Encoding: chunkedConnection: closeaccess-control-allow-origin: access-control-expose-headers: timing-allow-origin: *Cache-Control: public, max-age=600, s-maxage=600cross-origin-resource-policy: cross-originx-content-type-options: nosniffstrict-transport-security: max-age=31536000; includeSubDomains; preloadetag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Age: 583x-served-by: cache-fra-etou8220171-FRA, cache-lga21954-LGAx-cache: HIT, HITvary: Accept-Encodingalt-svc: h3=":443"; ma=86400CF-Cache-Status: HITReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tDUw%2FuXiMasCZ9rH3ofpzEGWUlijrkFJXuRzGoiHPbQhF5A3ZpAr04LpJ0xPxsSMCOJNqz3mWCNAQ1JYAL4MRIR8T%2FjHV7uL7sJZatq39QQLJ8%2BV8g%2FVyVlIzY%2FvQWBtKaU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9205168d1ac242b0-EWR

Source: chromecache_133.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_127.3.dr	String found in binary or memory: http://www.jacklmoore.com/autosize
Source: chromecache_140.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_130.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_130.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_130.3.dr, chromecache_140.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_121.3.dr	String found in binary or memory: https://quilljs.com/

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 172.217.18.4:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.148.124.222:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.148.124.222:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.187.142.75:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.91:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.99:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 85.187.142.75:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.164.13:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.83.40:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.83.40:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.187.31:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.153.232.152:443 -> 192.168.2.5:49793 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5224_1792194390

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5224_1792194390

Jump to behavior

Source: classification engine

Classification label: mal48.win@27/52@46/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3168 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=268,i,9083209952174961058,13561182572122006226,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3168 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/favicon.ico	0%	Avira URL Cloud	safe
https://2067274913-1317754460.cos.ap-singapore.myqcloud.com/bootstrapp.min.js	0%	Avira URL Cloud	safe
https://tripakservices.co.uk/wp-content/uploads/2016/08/tripaklogo-copy1.png	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
n.sni.global.fastly.net	151.101.1.91	true	false	high
sgp.file.myqcloud.com	43.153.232.152	true	false	high
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.187.31	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
edit.telegra.ph	149.154.164.13	true	false	high
t.me	149.154.167.99	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
telegra.ph	149.154.164.13	true	false	high
maintenanceinvoicedocument.siluetaneblewulosa.it.com	104.21.83.40	true	false	unknown
2067274913.sbs	69.49.246.64	true	false	unknown
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	172.217.18.4	true	false	high
tripakservices.co.uk	85.187.142.75	true	false	high
catarina.m-atelier.cz	146.148.124.222	true	false	unknown
t4.ftcdn.net	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
2067274913-1317754460.cos.ap-singapore.myqcloud.com	unknown	unknown	true	unknown
auth.microsites.m-atelier.cz	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/920516296e5e41e3/1741969104181/eabd5bdc4484d509af7ec9ec171abe57ba668d1cb63dcf413db405f0833c453c/vbcwi9BjXmGCZqU	false		high
https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/	false		unknown
https://telegra.ph/images/icons.png?1	false		high
https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a	false		high
https://t.me/_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26	false		high
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13	false		unknown
https://a.nel.cloudflare.com/report/v4?s=i%2Fsw2FDWF9li%2Bhrh4jmO0%2Fy78yGs86An3bGyWzdjLpt2kczA58WFRcB%2BFcH22yVKYv%2FMdbJxn6URuAU2DxwepIJdVqxVTnZ%2ByYeZH0FSFlz9SonE6pgPSiL8WtCh7ASHhVc%3D	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=920516296e5e41e3&lang=auto	false		high
https://t4.ftcdn.net/jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg	false		high
https://telegra.ph/js/jquery.min.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/920516296e5e41e3/1741969104184/KgPW0jO3NYXWrGs	false		high
https://telegra.ph/css/core.min.css?47	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/	false		high
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://telegra.ph/favicon.ico?1	false		high
https://telegra.ph/js/load-image.all.min.js?1	false		high
https://telegra.ph/js/autosize.min.js	false		high
https://telegra.ph/js/core.min.js?67	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://telegra.ph/css/quill.core.min.css	false		high
https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://edit.telegra.ph/check	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://2067274913-1317754460.cos.ap-singapore.myqcloud.com/bootstrapp.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://telegra.ph/js/quill.min.js?10	false		high
https://telegra.ph/js/jquery.selection.min.js	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://tripakservices.co.uk/wp-content/uploads/2016/08/tripaklogo-copy1.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_130.3.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_130.3.dr, chromecache_140.3.dr	false	high
https://getbootstrap.com)	chromecache_140.3.dr	false	high
https://quilljs.com/	chromecache_121.3.dr	false	high
http://www.jacklmoore.com/autosize	chromecache_127.3.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_130.3.dr, chromecache_140.3.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_133.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.187.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
151.101.1.91	n.sni.global.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
149.154.167.99	t.me	United Kingdom	62041	TELEGRAMRU	false
69.49.246.64	2067274913.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
146.148.124.222	catarina.m-atelier.cz	United States	15169	GOOGLEUS	false
43.153.232.152	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
104.21.83.40	maintenanceinvoicedocument.siluetaneblewulosa.it.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
149.154.164.13	edit.telegra.ph	United Kingdom	62041	TELEGRAMRU	false
85.187.142.75	tripakservices.co.uk	United States	55293	A2HOSTINGUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638738
Start date and time:	2025-03-14 17:16:59 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@27/52@46/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.142, 172.217.18.99, 142.250.186.142, 173.194.76.84, 142.250.186.78, 142.250.185.110, 142.250.186.170, 142.250.186.42, 172.217.23.106, 142.250.185.170, 142.250.185.138, 172.217.18.10, 142.250.184.234, 142.250.185.202, 142.250.186.74, 142.250.186.138, 216.58.206.74, 142.250.185.106, 142.250.184.202, 142.250.186.106, 172.217.18.106, 172.217.16.138, 172.217.16.206, 142.250.186.174, 172.217.18.14, 172.217.16.195, 142.250.181.238, 34.104.35.123, 142.250.185.174, 142.250.185.227, 23.60.203.209, 172.202.163.200, 20.103.156.88, 150.171.27.10, 2.19.96.51
Excluded domains from analysis (whitelisted): www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, clientservices.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	1.5788986801415115
Encrypted:	false
SSDEEP:	6:EfhU5Uvnnnnn4niUrWlEUbIUPUonnnnnnnnnnnPnnnQUzIUby/8n:E5U5UxUrivDjC8
MD5:	DA022EEA8D752ED94ACE16C4DBB8BB0E
SHA1:	414322F345E53AACFC18F36CDFAD50AC9FF132F9
SHA-256:	9D9F12300D8D87B8C2E5035DE0C1ABE413CDAFCE47EABAAE2CF5E067DC2F4C33
SHA-512:	603B05E663CF1E1957F0FD413B37B73FEAD986ADE8439AD0AEA429C65E6260DCF3E76A4129C2F03B87066E86FF578876FECEC76DEE2EBC5D4E58144D0AA3D6DC
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 17:17:56.824274063 CET	53	55647	1.1.1.1	192.168.2.5
Mar 14, 2025 17:17:56.962038994 CET	53	62996	1.1.1.1	192.168.2.5
Mar 14, 2025 17:17:58.541151047 CET	53	60340	1.1.1.1	192.168.2.5
Mar 14, 2025 17:17:58.670479059 CET	53	54503	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:01.198587894 CET	61417	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:01.198960066 CET	58351	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:01.205415964 CET	53	61417	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:01.206195116 CET	53	58351	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:02.491971970 CET	62019	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:02.492257118 CET	50872	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:02.531527042 CET	53	62019	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:02.713367939 CET	53	50872	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:03.572258949 CET	57933	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:03.572717905 CET	55785	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:03.578880072 CET	53	57933	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:03.592612028 CET	53	55785	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:04.574687958 CET	62242	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:04.574863911 CET	58629	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:04.575453997 CET	51290	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:04.575685978 CET	50465	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:04.582798958 CET	53	51290	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:04.583961010 CET	53	50465	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:04.622559071 CET	53	62242	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:04.632786989 CET	53	58629	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:05.165363073 CET	60680	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:05.165544033 CET	52535	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:05.174335957 CET	53	52535	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:05.203686953 CET	53	60680	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:05.852691889 CET	52584	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:05.852850914 CET	61820	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:05.859251022 CET	53	61820	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:05.859266043 CET	53	52584	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:06.207808971 CET	53554	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:06.207999945 CET	57899	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:06.256190062 CET	53	53554	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:06.256208897 CET	53	57899	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:07.068125010 CET	65287	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:07.068346977 CET	60300	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:07.075182915 CET	53	65287	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:07.076033115 CET	53	60300	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:07.094355106 CET	53	58323	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:08.566530943 CET	52738	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:08.566874027 CET	55169	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:08.568840981 CET	62172	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:08.568979979 CET	58622	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:08.574002981 CET	53	52738	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:08.574750900 CET	53	55169	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:08.575645924 CET	53	62172	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:08.576154947 CET	53	58622	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:15.703495979 CET	53	64029	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:19.439903975 CET	64541	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:19.440053940 CET	50514	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:19.453886032 CET	53	50514	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:19.458842039 CET	53	64541	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.312252045 CET	61467	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.312453985 CET	61793	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.312968969 CET	51591	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.313133955 CET	58700	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.318967104 CET	53	61793	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.319184065 CET	53	61467	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.319704056 CET	53	51591	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.320908070 CET	53	58700	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.982117891 CET	58870	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.982405901 CET	55667	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:20.988892078 CET	53	58870	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:20.988908052 CET	53	55667	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:21.732750893 CET	53233	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:21.732892990 CET	54867	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:21.739321947 CET	53	53233	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:21.739439964 CET	53	54867	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:23.391845942 CET	61343	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:23.392055035 CET	65521	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:23.398684025 CET	53	61343	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:23.398788929 CET	53	65521	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.340892076 CET	56200	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.340892076 CET	60131	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.341396093 CET	50643	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.341677904 CET	50382	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.342324972 CET	60264	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.342732906 CET	62747	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.343628883 CET	60251	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.343899965 CET	53200	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.344301939 CET	65315	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.344774961 CET	59156	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:34.347668886 CET	53	60131	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.347954035 CET	53	50643	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.348366022 CET	53	56200	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.349140882 CET	53	60264	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.349152088 CET	53	50382	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.349525928 CET	53	62747	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.350303888 CET	53	60251	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.350821018 CET	53	65059	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.350939035 CET	53	53200	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.476244926 CET	53	49296	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.589834929 CET	53	59156	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:34.775405884 CET	53	65315	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:37.628433943 CET	60252	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:37.628941059 CET	55615	53	192.168.2.5	1.1.1.1
Mar 14, 2025 17:18:37.911854029 CET	53	60252	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:38.029268026 CET	53	55615	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:52.469475031 CET	138	138	192.168.2.5	192.168.2.255
Mar 14, 2025 17:18:56.586293936 CET	53	59638	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:57.364553928 CET	53	58841	1.1.1.1	192.168.2.5
Mar 14, 2025 17:18:59.676672935 CET	53	52145	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 17:18:02.713434935 CET	192.168.2.5	1.1.1.1	c24c	(Port unreachable)	Destination Unreachable
Mar 14, 2025 17:18:38.029370070 CET	192.168.2.5	1.1.1.1	c223	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:03 UTC	729	OUT	GET /redir?url=https://telegra.ph/Charlotte-Reeves-03-13 HTTP/1.1 Host: auth.microsites.m-atelier.cz Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:03 UTC	402	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 14:48:40 GMT Server: Apache-Coyote/1.1 Cache-Control: no-cache, no-store, must-revalidate, max-age=0 Expires: Sun, 31 Dec 2006 23:00:00 GMT Location: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Content-Length: 0 Set-Cookie: JSESSIONID=AAF7D992EC5B2E232DEF28BA9A7E97BE; Path=/; HttpOnly Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:04 UTC	729	OUT	GET /Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a HTTP/1.1 Host: telegra.ph Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:04 UTC	304	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:04 GMT Content-Type: text/html; charset=utf-8 Content-Length: 7749 Connection: close X-Frame-Options: SAMEORIGIN Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2025-03-14 16:18:04 UTC	7749	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 61 72 6c 6f 74 74 65 20 52 65 65 76 65 73 20 e2 80 93 20 54 65 6c 65 67 72 61 70 68 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d Data Ascii: <!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Charlotte Reeves Telegraph</title> <meta name="viewport" content="width=device-width, initial-scale=1.0, minimum-scale=1.0, maximum-scale=1.0, user-scalable=no" /> <meta nam

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:05 UTC	675	OUT	GET /jpg/04/65/41/29/360_F_465412924_Ir2XnMp0TYJYtpl1IdNSPYt0UNDVMJv3.jpg HTTP/1.1 Host: t4.ftcdn.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:05 UTC	471	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14700 Last-Modified: Tue, 26 Oct 2021 21:12:53 GMT ETag: "9e061b4e50b6424846566c9834385cc2" Access-Control-Allow-Origin: * Cache-Control: public, max-age=31536000 Content-Type: image/jpeg Accept-Ranges: bytes Age: 339268 Date: Fri, 14 Mar 2025 16:18:05 GMT X-Served-By: cache-iad-kiad7000091-IAD, cache-nyc-kteb1890089-NYC X-Cache: HIT, HIT X-Cache-Hits: 8, 0 Strict-Transport-Security: max-age=31536000
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e1 00 56 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 04 01 1a 00 05 00 00 00 01 00 00 00 3e 01 1b 00 05 00 00 00 01 00 00 00 46 01 28 00 03 00 00 00 01 00 02 00 00 02 13 00 03 00 00 00 01 00 01 00 00 00 00 00 00 00 00 01 2c 00 00 00 01 00 00 01 2c 00 00 00 01 ff ed 00 2c 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 01 00 00 02 00 04 00 ff e1 0c 81 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 27 ef bb bf 27 20 69 64 3d 27 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 27 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c Data Ascii: JFIF,,VExifMM*>F(,,,Photoshop 3.08BIMZ%Ghttp://ns.adobe.com/xap/1.0/<?xpacket begin='' id='W5M0MpCehiHzreSzNTczkc9d'?><x:xmpmeta xml
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: b4 77 45 9f 56 ee 94 1b 26 d1 dd 16 7d 5b ba 50 6c 9b 47 74 59 f5 6e e9 41 b2 6d 1d d1 67 d5 bb a5 06 c9 b4 77 45 9f 56 ee 94 1b 26 d3 d6 8a b2 1a ad 74 8d 72 73 17 27 35 77 a0 9a 66 15 8a a2 59 05 aa 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 00 00 00 00 00 00 00 00 00 00 00 8a 59 e5 a6 b8 3e 68 5d aa e6 bd 7d 0b e6 53 62 22 26 9d 25 8f 5d 25 b4 5a eb e2 ae 83 59 bd eb db f3 d9 c9 ff 00 06 b5 54 cd 32 cf 4d 5b 50 cb 2d 5c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 8f 70 e2 8f e6 eb 2b 0a 4f 04 49 73 18 00 00 00 00 00 00 00 00 00 00 00 00 01 0b 57 c6 a5 fb 4a 6c d3 c2 18 a7 89 4b 3c b4 d3 36 68 5d aa e4 fb fc ca 26 22 63 49 22 74 6d b6 ba f8 ab 60 d6 6f 7a f6 fc Data Ascii: wEV&}[PlGtYnAmgwEV&trs'5wfYqGu'$Y>h]}Sb"&%]%ZYT2M[P-\p+OIsWJlK<6h]&"cI"tm`oz
2025-03-14 16:18:05 UTC	1343	IN	Data Raw: fa 75 10 ee 58 a7 66 d5 31 d9 0f 17 ce af 78 6c c7 11 73 ae ba bf 19 4b 99 5c c0 00 00 00 00 00 00 07 bd bf 8d b3 9f a8 74 2b 4f 14 b9 63 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 63 dc 38 a3 f9 ba ca c2 93 c1 12 5c c6 00 00 00 00 00 00 13 34 5c d3 7a 01 55 74 99 6f 9f 0a e9 36 b9 69 53 b5 ea 54 b6 ba 91 77 6c 72 eb b7 a1 d9 a7 31 1a c5 51 36 6f ce 9d 7a c3 e8 be 4d 62 e8 cd f2 4b 7e 13 7e b4 cd 15 7a 3e 0c fa e3 49 61 62 fb 8a 62 dd 20 55 56 d3 b5 c8 db 8d 54 6c 89 ab bd 11 51 ac 44 2c bd 5f 87 bd 33 1d 32 da ca 30 9c cd 94 d1 6a be 36 e9 99 9f 46 b2 b6 b1 c6 d8 98 d8 99 f3 58 88 c4 f4 26 cf e4 4a 34 d3 73 e6 ba aa 9a e6 6a 9e 9d fe b7 e8 28 00 00 00 00 00 00 00 f7 b7 f1 b6 73 f5 0e 85 69 e2 97 2c 64 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: uXf1xlsK\t+Oc c8\4\zUto6iSTwlr1Q6ozMbK~~z>Iabb UVTlQD,_320j6FX&J4sj(si,d
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: 9e 29 72 c6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 00 00 00 00 e1 dd 92 98 99 1f 2d 2e 14 a5 93 64 79 54 d6 64 bf 95 b7 b5 b1 79 b3 77 3b 4e 36 69 7f 85 a8 ef 9f d1 eb 9e e6 d9 36 cd 35 e6 37 23 8f c1 a7 ff 00 b4 fe 9e b6 06 88 31 36 12 c1 38 72 a6 e1 72 ac 74 f7 6a f7 f1 6a 68 95 ef 8e 26 e7 aa d5 5d 8d 6a aa e6 ed ab c8 59 82 bf 67 0f 44 d5 54 ef 96 e7 2b b2 6c d7 3e c6 51 63 0f 46 96 ad c7 c6 aa 74 89 aa 78 cc 71 99 d2 34 8e 1d 6c 9b f6 9d ae 12 eb 47 62 b2 c1 4c df 14 b5 6f 59 1d fb ad c9 13 a5 4b ae 66 b5 4f c4 a7 d6 c1 80 f7 32 b1 46 fc 65 e9 ab b2 98 d2 3d 73 ac fb 21 a0 de f1 2e 2e c6 92 32 9a b2 a6 aa e6 8d 7e b4 74 f4 f0 22 b5 ae da 99 a3 58 9e 73 46 bb f7 b1 1b a6 75 4c f0 59 3e 53 Data Ascii: )r@qGu'$-.dyTdyw;N6i657#168rrtjjh&]jYgDT+l>QcFtxq4lGbLoYKfO2Fe=s!..2~t"XsFuLY>S
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: 33 cd 23 e4 b7 e1 0f ec a2 4c da eb 84 8d ef 9d fa 36 af cd 4f ce 5d bc 88 87 1f 13 99 4c fc 1b 5e bf f4 f5 ae 4e fb 9e 51 4c 45 fc cf 7c fc c8 e1 1f 5a 63 8f 74 6e eb 99 69 58 4b 02 62 bc 6d 52 eb 83 5b 23 69 e5 76 72 5c 2b 5c ec 9e be 6c fb e7 af a3 67 9d 0d 3b 38 4b d8 89 da f6 cf fd bd 2b cd b9 4d 95 e4 54 78 19 98 da 8e 14 53 a6 ee fe 8a 7d 3b fb 11 98 ee d7 69 b1 df 1f 67 b6 56 cb 5c ea 44 d4 ab aa 7e 48 d7 cb f9 48 c6 a6 e6 b7 76 f5 cd 73 e4 31 e2 2d d1 6e bd 8a 67 5d 38 cb a1 91 63 71 58 fc 2c 62 b1 14 45 1b 7b e9 a7 a6 29 e8 99 9e 99 9e 3c 23 48 d1 de 74 17 84 57 0e 61 6f 97 56 45 ab 72 b9 23 65 95 1c 9b 63 8b 7b 19 f7 eb 2f 9d 7c c7 6f 2f c3 f8 2b 7b 53 c6 5e 39 cb 8c fb 9c f1 de 06 d4 ff 00 4e d6 b1 1d b5 7f 74 fe 91 d9 1d ae 84 6f 21 20 00 00 Data Ascii: 3#L6O]L^NQLE\|ZctniXKbmR[#ivr\+\lg;8K+MTxS};igV\D~HHvs1-ng]8cqX,bE{)<#HtWaoVEr#ec{/\|o/+{S^9Nto!
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: cb 5b 2f c8 6a 78 98 9d 2b bd 7c dd bc 2e 16 9c 3d 3b b7 cc f4 bc 6b 94 bc a6 bf 9e 5e 89 aa 36 6d d3 f1 69 fd 67 ae 67 d9 c2 3b 76 e3 69 19 00 00 00 00 00 00 00 00 00 00 00 0f 7b 7f 1b 67 3f 50 e8 56 9e 29 72 c6 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 b8 71 47 f3 75 95 85 27 82 24 b9 8c 00 00 02 6c 5c d3 60 05 db bd 73 f4 83 80 00 00 00 00 00 00 00 00 00 00 00 00 01 ef 6f e3 6c e7 ea 1d 0a d3 c5 2e 58 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 f7 0e 28 fe 6e b2 b0 a4 f0 44 97 31 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 de df c6 d9 cf d4 3a 15 a7 8a 5c b1 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 35 cd 24 e2 04 c2 f8 32 ba f8 b4 9f 2c 4a 6e d7 fd 8f 6c d4 d6 d6 7a 37 7e 4b 96 fc f7 18 af de Data Ascii: [/jx+\|.=;k^6migg;vi{g?PV)r@qGu'$l\`sol.X(nD1:\5$2,Jnlz7~K
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: eb 35 59 ab 66 a7 b4 65 19 be 1b 36 c3 46 23 0f 3b ba 63 a6 27 aa 7f ed ed 9b b1 e6 96 9a b3 4a 54 54 f5 74 f0 d4 42 ea 69 d5 63 95 88 f6 aa a3 36 6c 5d 86 7c 05 31 55 e8 89 71 39 71 7a e5 9c 9e ba ed d5 31 3a d3 be 27 4e 95 a0 93 0f e1 b8 a3 59 24 b2 da 58 c6 ef 73 a9 63 44 4f b8 ee f8 2b 71 d1 0f 10 a7 32 c7 55 3a 45 da e6 7e b4 ff 00 b7 87 73 30 7f fd ba c5 fe 8c 3f d0 b7 62 d7 54 7b 19 7d f7 99 fc fa fd 75 1d cb c1 ff 00 f6 eb 17 fa 30 ff 00 41 b1 6b aa 3d 87 be f3 3f 9f 5f ae a5 3e c7 4d 85 98 de fa ca 76 b1 b0 b6 e3 3a 46 8c 44 46 a3 7b 63 b2 cb 2d 99 11 db da 78 4a b4 eb 97 d0 d9 34 d5 39 7d 89 af 8e c5 3a eb c7 84 21 8c 4e 90 00 0d e7 40 7e 16 ec 5f a4 97 f0 5e 6d 60 7c bd 28 bf 2c fe 44 bf dd 1f 9a 16 fd 37 12 37 cf 40 00 00 00 00 00 00 00 00 00 Data Ascii: 5Yfe6F#;c'JTTtBic6l]\|1Uq9qz1:'NY$XscDO+q2U:E~s0?bT{}u0Ak=?_>Mv:FDF{c-xJ49}:!N@~_^m`\|(,D77@
2025-03-14 16:18:05 UTC	1378	IN	Data Raw: 00 00 00 03 40 ec 86 f0 45 7a fd 87 e3 30 d3 c7 f9 0a 92 ce 43 fc b9 67 fc bf 2c aa 31 1e 7d 02 00 03 ea 6f 40 2e 3e 85 bc 15 61 df d4 59 fc c9 26 0f c8 53 dc f9 cf 95 7f 2c e2 7e b4 b4 ed 24 69 9e a3 09 63 1a db 04 78 7e 2a b6 d3 36 35 49 9d 56 ac 57 6b 31 1d bb 55 72 df ca 6b 62 31 f3 6a e4 d1 b3 aa 45 90 72 1a 8c d7 01 46 2e 6f 4d 3b 5a ee d9 d7 84 cc 71 d6 1a b5 5f 64 45 d9 d1 aa 52 61 aa 18 9f e2 74 b5 4f 7a 74 22 27 59 82 73 4a ba 29 77 6d 7b 99 e1 a2 7f a9 88 aa 63 b2 98 8f d6 5c df 1b e3 ac 4b 8c 25 6a de ab f5 a0 63 b5 a3 a6 85 ba 90 b1 79 75 7c 6b e7 55 55 34 af 62 2e 5e f8 d2 99 e5 1c 9e c0 65 14 cf bd a8 f8 53 c6 a9 df 33 e9 e8 8e c8 d1 15 85 ff 00 c4 d6 af d7 a0 fc 56 98 ed fc 78 ef 86 f6 61 ff 00 89 77 ea d5 f8 4a f3 2f cd 52 54 f9 7d 43 2a Data Ascii: @Ez0Cg,1}o@.>aY&S,~$icx~65IVWk1Urkb1jErF.oM;Zq_dERatOzt"'YsJ)wm{c\K%jcyu\|kUU4b.^eS3VxawJ/RT}C

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:05 UTC	617	OUT	GET /css/quill.core.min.css HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:05 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:05 GMT Content-Type: text/css Content-Length: 7190 Last-Modified: Mon, 14 Nov 2016 18:41:34 GMT Connection: close ETag: "582a055e-1c16" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:05 UTC	7190	IN	Data Raw: 2f 2a 21 0a 20 2a 20 51 75 69 6c 6c 20 45 64 69 74 6f 72 20 76 31 2e 30 2e 30 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 71 75 69 6c 6c 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 2c 20 4a 61 73 6f 6e 20 43 68 65 6e 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 2c 20 73 61 6c 65 73 66 6f 72 63 65 2e 63 6f 6d 0a 20 2a 2f 0a 2e 71 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 Data Ascii: /! Quill Editor v1.0.0 * https://quilljs.com/ * Copyright (c) 2014, Jason Chen * Copyright (c) 2013, salesforce.com */.ql-container{box-sizing:border-box;font-family:Helvetica,Arial,sans-serif;font-size:13px;height:100%;margin:0;position:relative

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:05 UTC	614	OUT	GET /css/core.min.css?47 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:05 UTC	310	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:05 GMT Content-Type: text/css Content-Length: 236100 Last-Modified: Thu, 20 Apr 2023 12:19:27 GMT Connection: close ETag: "64412dcf-39a44" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:05 UTC	16074	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 43 75 73 74 6f 6d 53 61 6e 73 53 65 72 69 66 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 64 61 74 61 3a 66 6f 6e 74 2f 6f 70 65 6e 74 79 70 65 3b 62 61 73 65 36 34 2c 64 30 39 47 52 6b 39 55 56 45 38 41 41 47 37 59 41 41 73 41 41 41 41 41 76 74 77 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 42 44 52 6b 59 67 41 41 41 4b 59 41 41 41 50 75 77 41 41 45 77 6b 42 78 43 78 7a 55 64 51 54 31 4d 41 41 45 6c 4d 41 41 41 6a 30 41 41 41 58 61 44 55 4c 73 45 6e 52 31 4e 56 51 67 41 41 62 52 77 41 41 41 47 36 41 41 41 44 63 44 4c 47 4c 52 39 50 55 79 38 79 41 41 41 46 Data Ascii: @font-face{font-family:CustomSansSerif;font-style:normal;font-weight:300;src:url(data:font/opentype;base64,d09GRk9UVE8AAG7YAAsAAAAAvtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDRkYgAAAKYAAAPuwAAEwkBxCxzUdQT1MAAElMAAAj0AAAXaDULsEnR1NVQgAAbRwAAAG6AAADcDLGLR9PUy8yAAAF
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 6c 6a 2f 6d 38 72 36 77 66 77 70 39 70 75 6e 72 38 6f 4c 53 6e 67 4e 6c 53 74 2f 58 30 32 51 6d 38 50 61 48 46 56 6c 43 39 67 48 38 68 72 36 44 6a 64 61 48 32 35 33 6c 6b 45 64 77 62 6b 6f 59 5a 65 51 47 2f 6d 5a 43 45 76 33 6b 64 75 47 6c 51 4c 68 53 54 33 2f 51 6e 42 64 71 64 4f 75 79 67 42 62 39 64 38 31 54 48 6c 32 70 44 50 76 6e 62 53 49 63 5a 32 50 42 50 74 47 35 6d 42 49 7a 42 79 6f 62 67 4a 41 78 4f 34 4b 76 69 65 4c 67 30 45 43 39 6d 38 78 70 36 71 42 48 4e 42 35 4f 64 6b 44 55 67 69 4d 34 77 46 6b 64 6b 6b 7a 52 65 54 6d 7a 72 58 76 76 46 4d 68 4d 4f 33 39 4a 38 48 4d 31 6e 67 4a 70 2b 63 52 39 4f 70 65 59 4f 4b 4f 67 6e 76 36 31 56 6a 53 55 5a 55 4c 2b 4d 34 41 70 76 48 56 68 6f 78 52 2f 51 74 4f 6d 77 4f 6e 2b 43 4e 6d 59 36 62 4b 38 46 66 31 Data Ascii: lj/m8r6wfwp9punr8oLSngNlSt/X02Qm8PaHFVlC9gH8hr6DjdaH253lkEdwbkoYZeQG/mZCEv3kduGlQLhST3/QnBdqdOuygBb9d81THl2pDPvnbSIcZ2PBPtG5mBIzByobgJAxO4KvieLg0EC9m8xp6qBHNB5OdkDUgiM4wFkdkkzReTmzrXvvFMhMO39J8HM1ngJp+cR9OpeYOKOgnv61VjSUZUL+M4ApvHVhoxR/QtOmwOn+CNmY6bK8Ff1
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 69 75 44 62 48 39 75 72 6b 2b 42 64 56 58 32 6d 62 56 6d 4a 66 6f 70 33 66 37 65 39 5a 2b 78 6b 59 79 2b 33 46 51 54 30 4d 4e 4c 6e 69 47 49 76 6c 6b 76 72 46 73 30 74 48 32 7a 4d 45 7a 45 75 78 4e 30 4f 42 71 33 6c 47 61 6f 50 72 5a 79 2f 75 47 73 49 5a 36 52 33 69 4e 61 37 4d 57 73 5a 69 48 77 32 2f 6e 5a 57 5a 38 54 37 49 64 32 4a 50 78 54 4d 6a 4c 78 37 37 37 31 2b 6a 70 39 43 51 57 43 53 6c 34 6b 68 71 4f 66 52 57 37 79 48 74 35 78 6d 70 71 6d 51 63 34 76 69 7a 72 6b 33 4b 62 30 68 61 71 33 57 74 30 6d 4a 64 65 2b 4a 7a 65 6b 42 76 73 61 70 77 68 74 34 2f 72 75 51 79 31 6f 6b 33 4f 56 38 46 74 66 4c 77 74 44 71 45 35 62 6b 37 56 62 48 38 62 36 4a 58 52 4d 54 61 65 4f 63 42 65 67 69 31 63 5a 61 37 69 68 6a 54 34 38 7a 39 62 30 45 4d 68 53 34 35 50 77 Data Ascii: iuDbH9urk+BdVX2mbVmJfop3f7e9Z+xkYy+3FQT0MNLniGIvlkvrFs0tH2zMEzEuxN0OBq3lGaoPrZy/uGsIZ6R3iNa7MWsZiHw2/nZWZ8T7Id2JPxTMjLx7771+jp9CQWCSl4khqOfRW7yHt5xmpqmQc4vizrk3Kb0haq3Wt0mJde+JzekBvsapwht4/ruQy1ok3OV8FtfLwtDqE5bk7VbH8b6JXRMTaeOcBegi1cZa7ihjT48z9b0EMhS45Pw
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 57 74 4f 67 45 47 2f 70 53 6d 44 72 75 75 62 6a 43 6d 75 72 75 34 75 37 79 43 74 2b 51 64 58 4d 72 48 42 4f 62 76 53 52 66 67 45 39 49 43 44 55 57 43 6b 68 4d 46 32 54 39 44 55 79 4d 6e 50 63 34 50 36 78 6e 53 71 72 65 31 59 38 78 58 56 32 53 4d 52 43 31 47 46 30 30 6d 7a 6f 31 46 50 35 48 61 41 4b 52 6e 51 51 68 6a 32 43 46 53 2f 7a 62 77 30 65 37 2b 34 6d 2f 6d 36 73 75 2f 4d 44 38 6f 58 43 36 2f 6a 66 79 59 75 43 59 34 4d 55 6c 2b 63 52 6c 55 33 64 6c 57 64 56 6c 31 73 69 66 46 79 57 65 49 33 50 6b 65 30 59 6d 44 59 72 74 76 52 38 35 51 4c 6c 77 64 5a 65 49 62 76 79 38 39 55 4a 78 68 52 4f 77 35 30 62 37 6d 71 34 74 37 41 64 36 44 6d 55 51 31 6a 51 66 33 6d 4c 77 74 70 4e 6f 35 6b 73 45 2f 6a 52 4e 6b 77 59 50 41 37 44 2f 4f 68 67 4e 71 4e 75 38 66 54 Data Ascii: WtOgEG/pSmDruubjCmuru4u7yCt+QdXMrHBObvSRfgE9ICDUWCkhMF2T9DUyMnPc4P6xnSqre1Y8xXV2SMRC1GF00mzo1FP5HaAKRnQQhj2CFS/zbw0e7+4m/m6su/MD8oXC6/jfyYuCY4MUl+cRlU3dlWdVl1sifFyWeI3Pke0YmDYrtvR85QLlwdZeIbvy89UJxhROw50b7mq4t7Ad6DmUQ1jQf3mLwtpNo5ksE/jRNkwYPA7D/OhgNqNu8fT
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 6e 54 4a 50 6e 63 35 35 4d 6c 2f 32 75 50 2b 6c 72 77 62 39 64 64 33 41 4c 66 33 74 4b 72 55 6e 6e 5a 4c 42 64 6e 50 48 49 38 30 6b 31 47 4f 52 35 76 4a 47 4d 61 36 39 33 50 4f 4a 37 76 33 46 4b 59 79 6a 65 6e 4d 6f 4a 69 5a 72 6e 2b 4e 31 33 6d 44 4e 33 6d 4c 64 2f 6a 51 6d 4a 38 77 69 39 6e 4d 59 53 37 7a 6d 4d 2b 2f 75 34 2f 39 38 2f 65 73 63 4b 39 4b 75 76 55 66 37 32 4e 73 5a 67 74 62 32 57 62 4f 4f 39 68 70 58 72 75 63 37 35 5a 37 35 46 36 35 54 2b 34 33 56 72 4b 50 79 57 51 66 6b 38 6b 2b 4a 76 2f 4c 66 55 79 66 45 6b 6f 35 7a 58 2f 30 66 6c 63 64 56 36 69 67 57 31 45 74 37 75 49 2b 6b 6e 31 4b 4a 76 75 55 54 50 59 70 6d 65 78 54 38 69 45 65 6f 5a 48 56 30 59 52 6d 4e 43 63 39 72 6f 70 61 30 70 70 32 2b 6d 62 77 47 42 33 6f 52 42 65 36 65 59 2f 71 Data Ascii: nTJPnc55Ml/2uP+lrwb9dd3ALf3tKrUnnZLBdnPHI80k1GOR5vJGMa693POJ7v3FKYyjenMoJiZrn+N13mDN3mLd/jQmJ8wi9nMYS7zmM+/u4/98/escK9KuvUf72NsZgtb2WbOO9hpXruc75Z75F65T+43VrKPyWQfk8k+Jv/LfUyfEko5zX/0flcdV6igW1Et7uI+kn1KJvuUTPYpmexT8iEeoZHV0YRmNCc9ropa0pp2+mbwGB3oRBe6eY/q
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 34 33 43 53 72 78 48 47 45 2b 6f 38 63 52 37 43 6f 73 64 66 53 47 53 76 68 6d 30 69 4d 34 2b 59 51 4f 71 45 62 76 6b 31 55 71 56 6c 5a 71 57 6e 4e 57 52 61 4c 79 57 53 78 5a 44 57 6e 4b 56 68 38 69 39 44 73 54 6c 49 4c 42 73 66 51 55 69 33 4a 51 33 54 71 4c 30 2b 6f 36 67 50 4e 43 66 5a 4b 6e 7a 4b 52 34 41 58 74 47 62 58 36 4f 6a 37 4f 6e 47 65 32 71 65 2b 64 50 2f 6e 43 61 74 36 57 64 31 44 65 6c 37 50 50 48 5a 79 6c 62 33 50 37 66 64 5a 55 68 55 72 73 6a 58 63 38 47 5a 35 6a 69 36 43 71 56 63 71 58 4d 5a 57 6c 35 68 7a 65 75 72 34 75 55 36 4f 65 46 78 4c 68 46 70 6c 55 61 55 79 51 43 2b 6f 4c 4b 51 54 34 43 49 4c 76 45 49 72 65 75 2f 43 56 4a 38 48 69 4c 4d 4a 77 65 31 66 53 56 35 4c 5a 73 4c 75 79 56 7a 6d 38 46 59 37 58 6d 58 35 66 72 34 51 54 44 2f Data Ascii: 43CSrxHGE+o8cR7CosdfSGSvhm0iM4+YQOqEbvk1UqVlZqWnNWRaLyWSxZDWnKVh8i9DsTlILBsfQUi3JQ3TqL0+o6gPNCfZKnzKR4AXtGbX6Oj7OnGe2qe+dP/nCat6Wd1Del7PPHZylb3P7fdZUhUrsjXc8GZ5ji6CqVcqXMZWl5hzeur4uU6OeFxLhFplUaUyQC+oLKQT4CILvEIreu/CVJ8HiLMJwe1fSV5LZsLuyVzm8FY7XmX5fr4QTD/
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 38 62 44 4e 6c 38 7a 46 4d 34 70 36 76 6f 33 6c 55 4f 68 45 6b 6d 70 4d 35 6c 4f 4e 4d 43 65 61 37 73 36 31 44 39 44 49 65 76 76 46 6e 54 50 69 6e 30 72 4d 35 48 6f 36 34 38 56 71 59 52 36 6f 6c 59 6f 79 56 45 6e 55 46 4b 2f 45 79 6d 61 4f 48 35 51 6f 4a 62 69 56 4c 2f 73 30 30 68 4f 73 47 50 41 37 69 6e 6d 6d 73 38 6d 59 78 67 35 6a 31 34 51 78 70 34 44 52 4e 62 38 4f 39 57 52 30 43 63 4a 61 34 69 46 77 66 71 4d 37 63 54 6a 41 55 65 50 4c 6f 4f 61 58 59 7a 70 6f 63 4a 6f 6f 74 65 41 66 51 4c 6a 6c 70 6d 52 52 61 4e 6a 4b 77 42 69 78 7a 79 7a 31 4b 71 43 48 59 46 73 42 59 5a 4b 49 4f 72 6f 5a 74 65 47 43 53 43 4d 32 6f 30 38 48 67 49 6e 43 67 50 4e 47 55 72 73 6f 38 4b 35 6d 38 68 35 6a 78 6b 71 70 79 53 76 79 59 53 53 74 33 4c 61 46 6b 63 63 31 7a 78 43 Data Ascii: 8bDNl8zFM4p6vo3lUOhEkmpM5lONMCea7s61D9DIevvFnTPin0rM5Ho648VqYR6olYoyVEnUFK/EymaOH5QoJbiVL/s00hOsGPA7inmms8mYxg5j14Qxp4DRNb8O9WR0CcJa4iFwfqM7cTjAUePLoOaXYzpocJooteAfQLjlpmRRaNjKwBixzyz1KqCHYFsBYZKIOroZteGCSCM2o08HgInCgPNGUrso8K5m8h5jxkqpySvyYSSt3LaFkcc1zxC
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 49 53 45 49 68 32 57 75 4a 78 2b 4b 57 43 58 35 44 6f 32 42 30 4b 5a 41 59 45 38 72 64 63 52 6c 74 58 72 46 63 4d 72 6f 2b 48 55 68 53 31 59 4e 4e 62 76 54 4c 5a 48 43 7a 6b 69 7a 54 53 4a 39 45 52 6e 6c 78 35 7a 34 43 45 58 67 50 62 70 49 61 64 6d 52 6b 79 57 53 74 61 55 4c 4a 32 73 33 4a 46 4e 6c 6b 74 57 31 75 6a 2f 36 75 50 33 4c 35 77 50 64 59 53 69 72 6a 66 42 35 67 64 38 67 63 79 44 2b 32 7a 44 43 32 52 56 77 47 48 4d 33 42 70 31 4c 71 49 70 74 71 76 36 77 63 61 4b 65 68 4c 53 47 6c 32 62 77 57 68 34 71 6a 64 43 42 67 38 74 6e 31 4c 45 53 43 76 52 79 6a 44 31 43 76 5a 74 5a 37 79 51 38 32 44 57 46 46 72 48 53 75 45 33 78 4c 4d 68 7a 79 5a 6c 62 4a 68 33 6f 34 63 4e 55 31 39 53 32 6d 56 6d 75 36 53 56 63 50 5a 6c 71 72 74 36 45 50 59 71 4a 31 31 54 Data Ascii: ISEIh2WuJx+KWCX5Do2B0KZAYE8rdcRltXrFcMro+HUhS1YNNbvTLZHCzkizTSJ9ERnlx5z4CEXgPbpIadmRkyWStaULJ2s3JFNlktW1uj/6uP3L5wPdYSirjfB5gd8gcyD+2zDC2RVwGHM3Bp1LqIptqv6wcaKehLSGl2bwWh4qjdCBg8tn1LESCvRyjD1CvZtZ7yQ82DWFFrHSuE3xLMhzyZlbJh3o4cNU19S2mVmu6SVcPZlqrt6EPYqJ11T
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 6e 35 65 77 54 53 4e 67 77 2b 68 56 74 36 47 36 68 4d 35 57 6e 70 45 75 4e 47 32 73 75 36 4c 41 73 45 76 61 4a 4c 52 77 71 4b 48 5a 32 35 4a 42 37 31 62 62 62 33 64 59 34 4b 39 32 65 4e 4f 48 67 66 32 53 72 63 50 57 7a 2b 59 48 4b 6b 65 6d 57 41 33 6f 69 79 71 72 69 49 79 4e 43 51 79 52 43 62 6e 41 69 4a 6c 53 66 61 70 34 71 64 31 76 61 4d 6a 74 41 53 66 51 61 76 2b 38 77 6b 56 48 42 34 52 48 46 6f 6c 72 32 2b 6f 71 61 71 70 43 36 73 4f 35 76 4c 78 47 69 71 45 77 43 41 59 68 49 71 75 78 39 6c 6a 42 35 41 65 6c 78 59 64 4a 2f 57 75 6c 48 65 32 64 52 56 55 44 72 4e 4e 6f 6b 53 66 61 41 47 36 44 49 6b 72 72 4d 6a 4a 7a 4d 39 55 72 65 52 6c 64 45 53 31 6b 74 4d 54 45 69 4b 36 6b 32 53 41 76 77 66 78 56 6d 6e 68 6b 56 4b 66 6d 6f 6a 75 35 76 62 38 79 68 47 68 Data Ascii: n5ewTSNgw+hVt6G6hM5WnpEuNG2su6LAsEvaJLRwqKHZ25JB71bbb3dY4K92eNOHgf2SrcPWz+YHKkemWA3oiyqriIyNCQyRCbnAiJlSfap4qd1vaMjtASfQav+8wkVHB4RHFolr2+oqaqpC6sO5vLxGiqEwCAYhIqux9ljB5AelxYdJ/WulHe2dRVUDrNNokSfaAG6DIkrrMjJzM9UreRldES1ktMTEiK6k2SAvwfxVmnhkVKfmoju5vb8yhGh
2025-03-14 16:18:05 UTC	16384	IN	Data Raw: 67 46 42 79 77 4d 79 41 42 7a 78 42 6e 42 51 59 67 2f 4d 33 43 39 50 6a 66 62 34 59 54 7a 43 73 59 4f 52 51 59 47 43 61 44 35 42 69 66 4d 38 30 48 55 67 6f 4d 7a 41 44 78 54 51 79 56 65 41 46 4d 7a 4c 56 68 67 6d 45 41 68 73 48 6e 6b 37 69 37 70 34 6c 41 52 59 2f 55 2f 77 54 6f 49 4d 67 49 32 42 34 30 79 42 54 59 42 69 79 41 37 59 42 46 33 6b 68 33 31 51 48 58 35 68 67 44 41 41 51 67 47 30 34 49 5a 49 73 6e 4a 54 75 65 79 4d 6d 65 53 77 72 79 46 67 6d 71 38 6a 62 6e 39 4f 51 39 6a 68 6e 4a 2b 2f 2f 2b 41 32 36 59 79 49 64 66 64 68 69 2f 42 39 52 5a 79 6f 5a 6e 55 35 45 74 75 36 59 68 4f 32 4b 6d 49 33 76 43 5a 69 35 76 55 62 4a 6e 38 6a 61 76 74 69 4c 76 38 57 68 62 38 76 36 2f 2f 34 43 49 48 63 71 48 6e 39 35 55 52 68 32 37 6a 73 4e 41 62 44 35 6c 66 69 Data Ascii: gFBywMyABzxBnBQYg/M3C9Pjfb4YTzCsYORQYGCaD5BifM80HUgoMzADxTQyVeAFMzLVhgmEAhsHnk7i7p4lARY/U/wToIMgI2B40yBTYBiyA7YBF3kh31QHX5hgDAAQgG04IZIsnJTueyMmeSwryFgmq8jbn9OQ9jhnJ+//+A26YyIdfdhi/B9RZyoZnU5Etu6YhO2KmI3vCZi5vUbJn8javtiLv8Whb8v6//4CIHcqHn95URh27jsNAbD5lfi

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:05 UTC	662	OUT	GET /wp-content/uploads/2016/08/tripaklogo-copy1.png HTTP/1.1 Host: tripakservices.co.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:05 UTC	593	IN	HTTP/1.1 200 OK Connection: close cache-control: max-age=604800, public expires: Fri, 21 Mar 2025 16:18:05 GMT content-type: image/png last-modified: Thu, 12 Jan 2023 09:33:44 GMT accept-ranges: bytes content-length: 29310 date: Fri, 14 Mar 2025 16:18:05 GMT server: LiteSpeed strict-transport-security: max-age=63072000; includeSubDomains x-frame-options: SAMEORIGIN x-content-type-options: nosniff alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-14 16:18:05 UTC	775	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2f 00 00 00 54 08 06 00 00 00 d3 4c b1 6e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 3a b6 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 33 32 20 37 39 2e 31 35 39 32 38 34 2c 20 32 30 31 36 2f 30 34 2f 31 39 2d 31 33 3a 31 33 3a 34 30 20 20 20 20 20 20 20 20 22 3e 0a 20 20 20 3c 72 64 66 Data Ascii: PNGIHDR/TLnpHYs:iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf
2025-03-14 16:18:05 UTC	14994	IN	Data Raw: 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 43 20 32 30 31 35 2e 35 20 28 4d 61 63 69 6e 74 6f 73 68 29 3c 2f 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a 33 38 3a 31 32 2b 30 31 3a 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a 34 39 3a 35 31 2b 30 31 3a 30 30 3c 2f 78 6d 70 3a 4d 6f 64 69 66 79 44 61 74 65 3e 0a 20 20 20 20 20 20 20 20 20 3c 78 6d 70 3a 4d 65 74 61 64 61 74 61 44 61 74 65 3e 32 30 31 36 2d 30 38 2d 31 35 54 31 30 3a Data Ascii: <xmp:CreatorTool>Adobe Photoshop CC 2015.5 (Macintosh)</xmp:CreatorTool> <xmp:CreateDate>2016-08-15T10:38:12+01:00</xmp:CreateDate> <xmp:ModifyDate>2016-08-15T10:49:51+01:00</xmp:ModifyDate> <xmp:MetadataDate>2016-08-15T10:
2025-03-14 16:18:05 UTC	13541	IN	Data Raw: dc dc 5c 64 66 a4 e3 e0 c1 fd 48 4d 4f 47 71 d1 10 54 54 56 a2 b1 ae 1e 00 b2 04 59 9a 7b e0 c0 7e ac 5b f7 2e 34 4d 7d 30 2d 2d ad c9 62 91 ff 96 92 92 fc 56 46 46 7a 63 63 23 ae d8 0c 85 e9 36 5e 1e 6b b0 ea 0a 41 d5 d4 a7 21 f6 23 8a 22 80 d1 2f 97 af bc eb 54 5d fd fd e9 69 e9 23 04 42 04 4f 7a 1a be fc e0 97 f1 ec 33 cf 20 39 25 05 76 9b 1d af bc f2 0a 0a 0a 0a 20 cb 32 22 91 28 24 51 42 72 b2 07 7e 7f 00 c1 50 04 fe 8e 20 82 c1 00 72 b2 b3 91 92 96 8a da ba 3a dc 74 d3 54 34 d4 d7 23 27 27 77 52 6d 6d 2d d6 af df 30 43 10 84 c3 05 05 b9 cb 26 4c 98 f4 8e 20 08 07 4c 78 99 32 65 2a 21 11 42 40 29 85 28 88 c3 56 ff 63 d5 dd 4d 8d cd 8f 16 15 0d ca bd 61 f2 14 49 10 04 dc 79 e7 ed 78 fd f5 d7 e1 74 58 51 50 58 80 ba fa 06 88 92 00 42 09 9c 4e 27 c2 a1 Data Ascii: \dfHMOGqTTVY{~[.4M}0--bVFFzcc#6^kA!#"/T]i#BOz3 9%v 2"($QBr~P r:tT4#''wRmm-0C&L Lx2e*!B@)(VcMaIyxtXQPXBN'

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:05 UTC	597	OUT	GET /js/jquery.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	323	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:05 GMT Content-Type: application/javascript Content-Length: 95786 Last-Modified: Wed, 09 Nov 2016 17:39:54 GMT Connection: close ETag: "58235f6a-1762a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	16061	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.1 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 2c 65 29 7b 76 61 72 20 66 2c 67 3d 64 28 61 2c 6e 75 6c 6c 2c 65 2c 5b 5d 29 2c 68 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 28 66 3d 67 5b 68 5d 29 26 26 28 61 5b 68 5d 3d 21 28 62 5b 68 5d 3d 66 29 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 62 5b 30 5d 3d 61 2c 64 28 62 2c 6e 75 6c 6c 2c 66 2c 63 29 2c 21 63 2e 70 6f 70 28 29 7d 7d 29 2c 68 61 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 66 62 28 61 2c 62 29 2e 6c 65 6e 67 74 68 3e 30 7d 7d 29 2c 63 6f 6e 74 61 69 6e 73 3a 68 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 28 62 2e 74 65 78 74 43 Data Ascii: ,e){var f,g=d(a,null,e,[]),h=a.length;while(h--)(f=g[h])&&(a[h]=!(b[h]=f))}):function(a,e,f){return b[0]=a,d(b,null,f,c),!c.pop()}}),has:hb(function(a){return function(b){return fb(a,b).length>0}}),contains:hb(function(a){return function(b){return(b.textC
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 61 29 2c 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 3d 64 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 3f 28 66 3d 67 5b 62 5d 2c 6e 75 6c 6c 3d 3d 66 26 26 28 66 3d 67 5b 6d 2e 63 61 6d 65 6c 43 61 73 65 28 62 29 5d 29 29 3a 66 3d 67 2c 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 28 61 2c 62 2c 63 29 7b 69 66 28 6d 2e 61 63 63 65 70 74 44 61 74 61 28 61 29 29 7b 76 61 72 20 64 2c 65 2c 66 3d 61 2e 6e 6f 64 65 54 79 70 65 2c 67 3d 66 3f 6d 2e 63 61 63 68 65 3a 61 2c 68 3d 66 3f 61 5b 6d 2e 65 78 70 61 6e 64 6f 5d 3a 6d 2e 65 78 70 61 6e 64 6f 3b 69 66 28 67 5b 68 5d 29 7b 69 66 28 62 26 26 28 64 3d 63 3f 67 5b 68 5d 3a 67 5b 68 5d 2e 64 61 74 61 29 29 7b 6d 2e 69 73 41 72 72 61 79 28 62 29 3f 62 3d Data Ascii: a),void 0!==d&&(g[m.camelCase(b)]=d),"string"==typeof b?(f=g[b],null==f&&(f=g[m.camelCase(b)])):f=g,f}}function R(a,b,c){if(m.acceptData(a)){var d,e,f=a.nodeType,g=f?m.cache:a,h=f?a[m.expando]:m.expando;if(g[h]){if(b&&(d=c?g[h]:g[h].data)){m.isArray(b)?b=
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 72 62 2e 74 66 6f 6f 74 3d 72 62 2e 63 6f 6c 67 72 6f 75 70 3d 72 62 2e 63 61 70 74 69 6f 6e 3d 72 62 2e 74 68 65 61 64 2c 72 62 2e 74 68 3d 72 62 2e 74 64 3b 66 75 6e 63 74 69 6f 6e 20 75 62 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 3d 30 2c 66 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 3d 4b 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 62 7c 7c 22 2a 22 29 3a 74 79 70 65 6f 66 20 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 21 3d 3d 4b 3f 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 62 7c 7c 22 2a 22 29 3a 76 6f 69 64 20 30 3b 69 66 28 21 66 29 66 6f 72 28 66 3d 5b 5d 2c 63 3d 61 2e 63 68 69 6c 64 4e 6f 64 65 73 7c 7c 61 3b 6e 75 6c 6c 21 3d 28 64 3d Data Ascii: rb.tfoot=rb.colgroup=rb.caption=rb.thead,rb.th=rb.td;function ub(a,b){var c,d,e=0,f=typeof a.getElementsByTagName!==K?a.getElementsByTagName(b\|\|""):typeof a.querySelectorAll!==K?a.querySelectorAll(b\|\|""):void 0;if(!f)for(f=[],c=a.childNodes\|\|a;null!=(d=
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 2c 6d 2e 65 61 73 69 6e 67 3d 7b 6c 69 6e 65 61 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2e 35 2d 4d 61 74 68 2e 63 6f 73 28 61 2a 4d 61 74 68 2e 50 49 29 2f 32 7d 7d 2c 6d 2e 66 78 3d 5a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 2c 6d 2e 66 78 2e 73 74 65 70 3d 7b 7d 3b 76 61 72 20 24 62 2c 5f 62 2c 61 63 3d 2f 5e 28 3f 3a 74 6f 67 67 6c 65 7c 73 68 6f 77 7c 68 69 64 65 29 24 2f 2c 62 63 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 2b 2d 5d 29 3d 7c 29 28 22 2b 53 2b 22 29 28 5b 61 2d 7a 25 5d 2a 29 24 22 2c 22 69 22 29 2c 63 63 3d 2f 71 75 65 75 65 48 6f 6f 6b 73 24 2f 2c 64 63 3d 5b 69 63 5d 2c 65 63 3d 7b 22 2a 22 3a 5b 66 75 6e 63 Data Ascii: ,m.easing={linear:function(a){return a},swing:function(a){return.5-Math.cos(aMath.PI)/2}},m.fx=Zb.prototype.init,m.fx.step={};var $b,_b,ac=/^(?:toggle\|show\|hide)$/,bc=new RegExp("^(?:([+-])=\|)("+S+")([a-z%])$","i"),cc=/queueHooks$/,dc=[ic],ec={"*":[func
2025-03-14 16:18:06 UTC	14189	IN	Data Raw: 6d 69 6d 65 54 79 70 65 7c 7c 62 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 29 29 3b 69 66 28 65 29 66 6f 72 28 67 20 69 6e 20 68 29 69 66 28 68 5b 67 5d 26 26 68 5b 67 5d 2e 74 65 73 74 28 65 29 29 7b 69 2e 75 6e 73 68 69 66 74 28 67 29 3b 62 72 65 61 6b 7d 69 66 28 69 5b 30 5d 69 6e 20 63 29 66 3d 69 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 67 20 69 6e 20 63 29 7b 69 66 28 21 69 5b 30 5d 7c 7c 61 2e 63 6f 6e 76 65 72 74 65 72 73 5b 67 2b 22 20 22 2b 69 5b 30 5d 5d 29 7b 66 3d 67 3b 62 72 65 61 6b 7d 64 7c 7c 28 64 3d 67 29 7d 66 3d 66 7c 7c 64 7d 72 65 74 75 72 6e 20 66 3f 28 66 21 3d 3d 69 5b 30 5d 26 26 69 2e 75 6e 73 68 69 66 74 28 66 29 2c 63 5b 66 5d 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 Data Ascii: mimeType\|\|b.getResponseHeader("Content-Type"));if(e)for(g in h)if(h[g]&&h[g].test(e)){i.unshift(g);break}if(i[0]in c)f=i[0];else{for(g in c){if(!i[0]\|\|a.converters[g+" "+i[0]]){f=g;break}d\|\|(d=g)}f=f\|\|d}return f?(f!==i[0]&&i.unshift(f),c[f]):void 0}functi

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	607	OUT	GET /js/jquery.selection.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: application/javascript Content-Length: 2710 Last-Modified: Fri, 18 Nov 2016 17:42:12 GMT Connection: close ETag: "582f3d74-a96" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	2710	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 74 65 78 74 3a 22 22 2c 73 74 61 72 74 3a 30 2c 65 6e 64 3a 30 7d 3b 69 66 28 21 74 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 6e 3b 74 72 79 7b 69 66 28 65 2e 67 65 74 53 65 6c 65 63 74 69 6f 6e 29 6e 2e 73 74 61 72 74 3d 74 2e 73 65 6c 65 63 74 69 6f 6e 53 74 61 72 74 2c 6e 2e 65 6e 64 3d 74 2e 73 65 6c 65 63 74 69 6f 6e 45 6e 64 2c 6e 2e 74 65 78 74 3d 74 2e 76 61 6c 75 65 2e 73 6c 69 63 65 28 6e 2e 73 74 61 72 74 2c 6e 2e 65 6e 64 29 3b 65 6c 73 65 20 69 66 28 72 2e 73 65 6c 65 63 74 69 6f 6e 29 7b 74 2e 66 6f 63 75 73 28 29 3b 76 61 72 20 73 3d 72 2e 73 65 6c 65 63 74 69 6f 6e 2e 63 72 65 61 74 65 52 61 6e 67 65 28 29 2c 61 3d Data Ascii: !function(t,e,r){var n=function(t){var n={text:"",start:0,end:0};if(!t.value)return n;try{if(e.getSelection)n.start=t.selectionStart,n.end=t.selectionEnd,n.text=t.value.slice(n.start,n.end);else if(r.selection){t.focus();var s=r.selection.createRange(),a=

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32062)
Category:	downloaded
Size (bytes):	51742
Entropy (8bit):	5.240557693604196
Encrypted:	false
SSDEEP:	1536:Xc6F6d62B6K6kUV2lLMWMyup3jlmIRFK5DNzuN:XGUV2U
MD5:	A137B64516580CC0E354EE1D37D2FFC9
SHA1:	39BDB86A75BB9A41A97C44DF0177FB7B2FEAA3EF
SHA-256:	4D4C1F3C9334378DDCE87CE85D94CF99A75B65B9E6604D7779F8DC0999EF486F
SHA-512:	6C474B9922789D80E327474DAAAFD5D02319A088D8DFD1AC1460C3D3CAE55A9C57B86F0A07A195E88DC795241EA0FCFD1D3C5FF525C5F49201C4E76B7466618C
Malicious:	false
Reputation:	low
URL:	https://telegra.ph/js/core.min.js?67
Preview:	"use strict";function _classCallCheck(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function _possibleConstructorReturn(t,e){if(!t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!e\|\|"object"!=typeof e&&"function"!=typeof e?t:e}function _inherits(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}),e&&(Object.setPrototypeOf?Object.setPrototypeOf(t,e):t.__proto__=e)}function _sanitize(t,e){var o=document.createElement("a");o.href=t;var l=o.href.slice(0,o.href.indexOf(":"));return e.indexOf(l)>-1}function relativeUrl(t){var e=location,o=document.createElement("a");return o.href=t,e.origin!=o.origin?o.href:e.pathname!=o.pathname\|\|e.search!=o.search?o.pathname+o.search+o.hash:e.href==o.href?o.hash\|\|o.pathname+o.search+o.hash:o.has

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 487, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3295
Entropy (8bit):	7.865112262534193
Encrypted:	false
SSDEEP:	96:KZaQRfsP5JPnkB3eGjS1U5E+7NELIQS7jI:KZaFwOEwU5BxLQYI
MD5:	DBF6327FC24074B3CABF15AC2F39AA5C
SHA1:	43DA0594BCD09EB2CD6EF4F703CA40E4D6FA2C14
SHA-256:	4131357EE671EBC7F0430BC803D04A0CB7170D8F98302071D5C061AA6F93CF4E
SHA-512:	5FE748705592E1E5BD7D43F3D71A2EDF139B724FFC9A58B9122E1B22EBC6DA79EA4D259E1DD8C7744018563B5EF9CE5F6A02D9A972683ADE194AE74C0F70A242
Malicious:	false
Reputation:	low
URL:	https://telegra.ph/images/icons.png?1
Preview:	.PNG........IHDR...(..........7......tEXtSoftware.Adobe ImageReadyq.e<....IDATx....UU............t.".eGs.d .0-.a.&.F.ML.....69N...".T8.CG!.......dM.]3...0...'............{.=K.3...g....w...s.).J..Pk<..$ ..H@..........B..~.....r....P.;..`..j+=v.E.W.....t.oupch..o.#..ok}.....}..qOCMI..+.bm.........i.../A.5n.tS.V.e7#......S7#.=.yk../u....}..F8..~.'@....\.... 5U.._.N...t)..j=.g.>.....$ ..H@.....$..7`U.B.P.......5&....Zh..R,.w.r......D.........h.?.E....`..j.0..M..q....F....G.....p.. ......4.i.C...[.].(..&..:......:.........U#.$..j.... .....Q.?.:I....$ ..H@......*..H,7....#.(.....j...-...9.z.G@o.`.-.Q..1..[...9\W.q.4s.)..n.m....?.n.o.X./..W.R........hL...6.0hxL}..P~]......FKN.P.GC....+..t3.....M..l.@s.V.n.jT..-..5...9.;.......$ ..H@..,.B...Z+3.c...b.....,..$..^i.?-......j$. .A.d...+\|k.~..."E.......?.......Q......A..Q. ..k..? ......Q. ......?..j....5..H@.....$ .{...w!t..?r.&:R...l...f..\|.?..0.7..c.....M.?/O...b.tBh_...q...y..).LE..%.2...v.G.6..l..I...

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 360x360, components 3
Category:	dropped
Size (bytes):	14700
Entropy (8bit):	6.861202708623201
Encrypted:	false
SSDEEP:	384:SMCJha//wb6cf2I9JZjm4ZHw9w9w9w9wP87+y8QR:Su//wmcf3jmi7t
MD5:	9E061B4E50B6424846566C9834385CC2
SHA1:	0A8557CA0075589923850E0A4343E1491214DA0E
SHA-256:	C173F47350C48003E6F7196ECA744E67A0E1AC947D3B918A84824976252DE048
SHA-512:	1DCE64D7E1D0B66E3C8C3867AF8F201924C7F50A829967C67C73BF3BD34CD841497F4ED62FCE16BE1163699798C22AA3FB97BC358AC46F3D78ED064E056A6BDF
Malicious:	false
Reputation:	low
Preview:	......JFIF.....,.,.....VExif..MM.*.................>...........F.(.............................,.......,.......,Photoshop 3.0.8BIM..........Z...%G............http://ns.adobe.com/xap/1.0/.<?xpacket begin='.' id='W5M0MpCehiHzreSzNTczkc9d'?>.<x:xmpmeta xmlns:x='adobe:ns:meta/' x:xmptk='Image::ExifTool 11.88'>.<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#'>.. <rdf:Description rdf:about=''. xmlns:tiff='http://ns.adobe.com/tiff/1.0/'>. <tiff:ResolutionUnit>2</tiff:ResolutionUnit>. <tiff:XResolution>300/1</tiff:XResolution>. <tiff:YResolution>300/1</tiff:YResolution>. </rdf:Description>.. <rdf:Description rdf:about=''. xmlns:xmpMM='http://ns.adobe.com/xap/1.0/mm/'>. <xmpMM:DocumentID>adobe:docid:stock:226df9bd-30b3-4673-9812-b6418eeed5c4</xmpMM:DocumentID>. <xmpMM:InstanceID>xmp.iid:88e5b22e-b117-4be5-9bf6-949ca300510a</xmpMM:InstanceID>. </rdf:Description>.</rdf:RDF>.</x:xmpmeta>.

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	599	OUT	GET /js/autosize.min.js HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	320	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: application/javascript Content-Length: 3419 Last-Modified: Fri, 18 Nov 2016 12:56:51 GMT Connection: close ETag: "582efa93-d5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	3419	IN	Data Raw: 2f 2a 21 0a 09 41 75 74 6f 73 69 7a 65 20 33 2e 30 2e 31 37 0a 09 6c 69 63 65 6e 73 65 3a 20 4d 49 54 0a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 61 63 6b 6c 6d 6f 6f 72 65 2e 63 6f 6d 2f 61 75 74 6f 73 69 7a 65 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6d 6f 64 75 6c 65 22 5d 2c 74 29 3b 65 6c 73 65 20 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 74 28 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3b 65 6c 73 65 7b 76 61 72 20 6e 3d 7b Data Ascii: /!Autosize 3.0.17license: MIThttp://www.jacklmoore.com/autosize/!function(e,t){if("function"==typeof define&&define.amd)define(["exports","module"],t);else if("undefined"!=typeof exports&&"undefined"!=typeof module)t(exports,module);else{var n={

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	607	OUT	GET /js/load-image.all.min.js?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: application/javascript Content-Length: 16772 Last-Modified: Tue, 20 Dec 2016 17:17:36 GMT Connection: close ETag: "585967b0-4184" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	16062	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 69 2c 61 29 7b 76 61 72 20 6f 2c 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 66 28 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6e 65 72 72 6f 72 28 72 2c 6f 2c 65 2c 69 2c 61 29 7d 2c 72 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 2e 6f 6e 6c 6f 61 64 28 72 2c 6f 2c 65 2c 69 2c 61 29 7d 2c 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 28 22 42 6c 6f 62 22 2c 65 29 7c 7c 74 2e 69 73 49 6e 73 74 61 6e 63 65 4f 66 28 22 46 69 6c 65 22 2c 65 29 29 6f 3d 72 2e 5f 6f 62 6a 65 63 74 55 52 4c 3d 74 2e 63 72 Data Ascii: !function(e){"use strict";function t(e,i,a){var o,r=document.createElement("img");if(r.onerror=function(o){return t.onerror(r,o,e,i,a)},r.onload=function(o){return t.onload(r,o,e,i,a)},t.isInstanceOf("Blob",e)\|\|t.isInstanceOf("File",e))o=r._objectURL=t.cr
2025-03-14 16:18:06 UTC	710	IN	Data Raw: 72 65 74 75 72 6e 20 73 3b 72 3d 7b 7d 3b 66 6f 72 28 6e 20 69 6e 20 73 29 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 28 72 5b 6e 5d 3d 73 5b 6e 5d 29 3b 73 77 69 74 63 68 28 72 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 3d 6c 2c 6c 29 7b 63 61 73 65 20 32 3a 72 2e 6c 65 66 74 3d 73 2e 72 69 67 68 74 2c 72 2e 72 69 67 68 74 3d 73 2e 6c 65 66 74 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 72 2e 6c 65 66 74 3d 73 2e 72 69 67 68 74 2c 72 2e 74 6f 70 3d 73 2e 62 6f 74 74 6f 6d 2c 72 2e 72 69 67 68 74 3d 73 2e 6c 65 66 74 2c 72 2e 62 6f 74 74 6f 6d 3d 73 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 72 2e 74 6f 70 3d 73 2e 62 6f 74 74 6f 6d 2c 72 2e 62 6f 74 74 6f 6d 3d 73 2e 74 6f 70 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 72 2e 6c 65 66 Data Ascii: return s;r={};for(n in s)s.hasOwnProperty(n)&&(r[n]=s[n]);switch(r.orientation=l,l){case 2:r.left=s.right,r.right=s.left;break;case 3:r.left=s.right,r.top=s.bottom,r.right=s.left,r.bottom=s.top;break;case 4:r.top=s.bottom,r.bottom=s.top;break;case 5:r.lef

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	600	OUT	GET /_websync_?path=Charlotte-Reeves-03-13&hash=c0cdf245aed7a75c26 HTTP/1.1 Host: t.me Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	235	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: text/javascript Content-Length: 5 Connection: close Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000
2025-03-14 16:18:06 UTC	5	IN	Data Raw: 2f 2f 20 6f 6b Data Ascii: // ok

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	599	OUT	GET /js/quill.min.js?10 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	324	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: application/javascript Content-Length: 201874 Last-Modified: Fri, 06 Sep 2024 12:45:34 GMT Connection: close ETag: "66daf96e-31492" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	16060	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 51 75 69 6c 6c 3d 65 28 29 3a 74 2e 51 75 69 6c 6c 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Quill=e():t.Quill=e()}(this,function(){return function(t){function e(r){if(n[r])return
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 22 2d 22 29 7d 29 7d 76 61 72 20 6f 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 72 29 26 26 28 74 5b 72 5d 3d 65 5b 72 5d 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 2c 69 3d 6e 28 38 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 Data Ascii: "-")})}var o=this&&this.__extends\|\|function(t,e){function n(){this.constructor=t}for(var r in e)e.hasOwnProperty(r)&&(t[r]=e[r]);t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)},i=n(8),l=function(t){function e(){t.apply(this,argument
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 2c 6e 3d 69 5b 33 5d 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 64 69 74 6f 72 2e 64 65 6c 65 74 65 54 65 78 74 28 74 2c 65 29 7d 2c 6e 2c 74 2c 2d 31 2a 65 29 7d 7d 2c 7b 6b 65 79 3a 22 64 69 73 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 65 6e 61 62 6c 65 28 21 31 29 7d 7d 2c 7b 6b 65 79 3a 22 65 6e 61 62 6c 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 7c 7c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 74 68 69 73 2e 73 63 72 6f 6c 6c 2e 65 6e 61 62 6c 65 28 74 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 Data Ascii: ,n=i[3],a.call(this,function(){return r.editor.deleteText(t,e)},n,t,-1*e)}},{key:"disable",value:function(){this.enable(!1)}},{key:"enable",value:function(){var t=!(arguments.length>0&&void 0!==arguments[0])\|\|arguments[0];this.scroll.enable(t),this.contai
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 72 6e 21 31 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 74 79 70 65 6f 66 20 65 7d 76 61 72 20 6c 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 61 3d 6e 28 32 33 29 2c 73 3d 6e 28 32 34 29 2c 75 3d 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 7c 7c 28 6e 3d 7b 7d 29 2c 74 3d 3d 3d 65 7c 7c 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 26 26 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 3f 74 2e 67 65 74 54 69 6d 65 28 29 3d 3d 3d 65 2e 67 65 74 54 69 6d 65 28 29 3a 21 74 7c 7c 21 65 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 26 26 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 3f 6e 2e 73 74 72 69 63 74 3f 74 3d 3d 3d 65 3a 74 3d Data Ascii: rn!1;return typeof t==typeof e}var l=Array.prototype.slice,a=n(23),s=n(24),u=t.exports=function(t,e,n){return n\|\|(n={}),t===e\|\|(t instanceof Date&&e instanceof Date?t.getTime()===e.getTime():!t\|\|!e\|\|"object"!=typeof t&&"object"!=typeof e?n.strict?t===e:t=
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 29 2c 6b 3d 31 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 2c 65 29 2c 69 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 6c 28 65 2c 74 29 2c 73 28 65 2c 5b 7b 6b 65 79 3a 22 61 74 74 61 63 68 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 75 28 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 61 74 74 61 63 68 22 2c 74 68 69 73 29 2e 63 61 6c 6c 28 74 68 69 73 29 Data Ascii: ),k=1,E=function(t){function e(){return o(this,e),i(this,(e.__proto__\|\|Object.getPrototypeOf(e)).apply(this,arguments))}return l(e,t),s(e,[{key:"attach",value:function(){u(e.prototype.__proto__\|\|Object.getPrototypeOf(e.prototype),"attach",this).call(this)
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 2c 6f 2c 69 29 7b 76 61 72 20 61 3d 6c 3f 6c 2b 74 3a 74 3b 69 66 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 61 5d 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 73 2c 75 2c 63 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 61 5d 2c 66 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 63 2e 66 6e 29 7b 73 77 69 74 63 68 28 63 2e 6f 6e 63 65 26 26 74 68 69 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 74 2c 63 2e 66 6e 2c 76 6f 69 64 20 30 2c 21 30 29 2c 66 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 63 2e 66 6e 2e 63 61 6c 6c 28 63 2e 63 6f 6e 74 65 78 74 29 2c 21 30 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 63 2e 66 6e 2e 63 61 6c 6c 28 63 2e 63 6f 6e 74 65 78 74 2c 65 29 2c 21 30 3b 63 61 Data Ascii: function(t,e,n,r,o,i){var a=l?l+t:t;if(!this._events[a])return!1;var s,u,c=this._events[a],f=arguments.length;if(c.fn){switch(c.once&&this.removeListener(t,c.fn,void 0,!0),f){case 1:return c.fn.call(c.context),!0;case 2:return c.fn.call(c.context,e),!0;ca
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 2c 65 7d 7d 28 29 2c 63 3d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d Data Ascii: (t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r),e}}(),c=function k(t,e,n){null===t&&(t=
2025-03-14 16:18:07 UTC	16384	IN	Data Raw: 3d 72 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 79 28 6f 2c 65 2c 6e 29 7d 69 66 28 22 76 61 6c 75 65 22 69 6e 20 72 29 72 65 74 75 72 6e 20 72 2e 76 61 6c 75 65 3b 76 61 72 20 69 3d 72 2e 67 65 74 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 6e 29 7d 2c 75 3d 6e 28 32 29 2c 63 3d 72 28 75 29 2c 66 3d 7b 73 63 6f 70 65 3a 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 53 63 6f 70 65 2e 49 4e 4c 49 4e 45 2c 77 68 69 74 65 6c 69 73 74 3a 5b 22 73 65 72 69 66 22 2c 22 6d 6f 6e 6f 73 70 61 63 65 22 5d 7d 2c 70 3d 6e 65 77 20 63 5b 22 64 65 66 61 75 6c 74 22 5d 2e 41 74 74 72 69 62 75 74 6f 72 2e 43 6c Data Ascii: =r){var o=Object.getPrototypeOf(t);return null===o?void 0:y(o,e,n)}if("value"in r)return r.value;var i=r.get;if(void 0!==i)return i.call(n)},u=n(2),c=r(u),f={scope:c["default"].Scope.INLINE,whitelist:["serif","monospace"]},p=new c["default"].Attributor.Cl
2025-03-14 16:18:07 UTC	16384	IN	Data Raw: 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 2c 65 7d 7d 28 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 20 68 28 74 2c 65 2c 6e 29 7b 6e 75 6c 6c 3d 3d 3d 74 26 26 28 74 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 3b 69 66 28 76 6f Data Ascii: le\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r),e}}(),s=function h(t,e,n){null===t&&(t=Function.prototype);var r=Object.getOwnPropertyDescriptor(t,e);if(vo
2025-03-14 16:18:07 UTC	16384	IN	Data Raw: 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 65 5b 6e 5d 3b 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 72 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 72 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 72 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2e 6b 65 79 2c 72 29 7d 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 6e 26 26 74 28 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 26 26 74 28 65 2c 72 29 Data Ascii: ,{value:!0});var a=function(){function t(t,e){for(var n=0;n<e.length;n++){var r=e[n];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,r.key,r)}}return function(e,n,r){return n&&t(e.prototype,n),r&&t(e,r)

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:06 UTC	598	OUT	GET /js/core.min.js?67 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:06 UTC	322	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:06 GMT Content-Type: application/javascript Content-Length: 51742 Last-Modified: Fri, 06 Sep 2024 12:45:34 GMT Connection: close ETag: "66daf96e-ca1e" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:06 UTC	16062	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 2c 65 29 7b 69 66 28 21 74 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 6f 72 28 22 74 68 69 73 20 68 61 73 6e 27 74 20 62 65 65 6e 20 69 6e 69 74 69 61 6c 69 73 65 64 20 2d 20 73 75 70 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 Data Ascii: "use strict";function _classCallCheck(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class as a function")}function _possibleConstructorReturn(t,e){if(!t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");r
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 61 76 65 50 61 67 65 28 29 7b 69 66 28 24 74 6c 5f 61 72 74 69 63 6c 65 2e 68 61 73 43 6c 61 73 73 28 22 74 6c 5f 61 72 74 69 63 6c 65 5f 73 61 76 69 6e 67 22 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 24 28 22 68 31 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 74 65 78 74 28 29 2c 65 3d 24 28 22 61 64 64 72 65 73 73 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 74 65 78 74 28 29 2c 6f 3d 24 28 22 61 64 64 72 65 73 73 20 61 22 2c 24 74 6c 5f 63 6f 6e 74 65 6e 74 29 2e 61 74 74 72 28 22 68 72 65 66 22 29 7c 7c 22 22 3b 69 66 28 74 2e 6c 65 6e 67 74 68 3c 32 29 7b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 24 74 6c 5f 61 72 74 69 63 6c 65 2e 74 6f 29 2c 24 74 6c 5f 61 72 74 69 63 6c 65 2e 61 64 64 43 6c 61 73 73 28 22 74 69 74 6c 65 5f 72 65 71 75 69 72 Data Ascii: avePage(){if($tl_article.hasClass("tl_article_saving"))return!1;var t=$("h1",$tl_content).text(),e=$("address",$tl_content).text(),o=$("address a",$tl_content).attr("href")\|\|"";if(t.length<2){clearTimeout($tl_article.to),$tl_article.addClass("title_requir
2025-03-14 16:18:06 UTC	16384	IN	Data Raw: 22 4f 4c 22 2c 22 55 4c 22 5d 2c 4c 69 73 74 41 75 74 6f 2e 61 6c 6c 6f 77 65 64 43 68 69 6c 64 72 65 6e 3d 5b 4c 69 73 74 49 74 65 6d 5d 2c 51 75 69 6c 6c 2e 72 65 67 69 73 74 65 72 28 4c 69 73 74 41 75 74 6f 29 3b 76 61 72 20 53 69 6e 67 6c 65 4c 69 6e 65 42 6c 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 65 29 2c 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 68 69 73 2c 28 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 29 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 72 65 74 75 72 6e 20 5f 69 6e 68 65 72 Data Ascii: "OL","UL"],ListAuto.allowedChildren=[ListItem],Quill.register(ListAuto);var SingleLineBlot=function(t){function e(){return _classCallCheck(this,e),_possibleConstructorReturn(this,(e.__proto__\|\|Object.getPrototypeOf(e)).apply(this,arguments))}return _inher
2025-03-14 16:18:06 UTC	2912	IN	Data Raw: 61 64 65 72 42 6c 6f 74 2c 6c 2e 69 6e 64 65 78 2c 6c 2e 6c 65 6e 67 74 68 29 3b 72 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 6f 66 66 73 65 74 28 71 75 69 6c 6c 2e 73 63 72 6f 6c 6c 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 28 29 3b 71 75 69 6c 6c 2e 66 6f 72 6d 61 74 54 65 78 74 28 65 2c 6f 2c 7b 62 6f 6c 64 3a 21 31 2c 69 74 61 6c 69 63 3a 21 31 2c 63 6f 64 65 3a 21 31 7d 2c 51 75 69 6c 6c 2e 73 6f 75 72 63 65 73 2e 53 49 4c 45 4e 54 29 7d 29 2c 71 75 69 6c 6c 2e 75 70 64 61 74 65 53 65 6c 65 63 74 69 6f 6e 28 51 75 69 6c 6c 2e 73 6f 75 72 63 65 73 2e 41 50 49 29 7d 29 2c 24 71 75 6f 74 65 5f 62 75 74 74 6f 6e 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 2c 6f Data Ascii: aderBlot,l.index,l.length);r.forEach(function(t){var e=t.offset(quill.scroll),o=t.length();quill.formatText(e,o,{bold:!1,italic:!1,code:!1},Quill.sources.SILENT)}),quill.updateSelection(Quill.sources.API)}),$quote_button.click(function(t){var e=t.target,o

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:07 UTC	672	OUT	POST /check HTTP/1.1 Host: edit.telegra.ph Connection: keep-alive Content-Length: 29 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://telegra.ph Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:07 UTC	29	OUT	Data Raw: 70 61 67 65 5f 69 64 3d 32 39 35 35 38 62 37 33 34 37 36 61 32 63 64 35 63 39 65 62 36 Data Ascii: page_id=29558b73476a2cd5c9eb6
2025-03-14 16:18:07 UTC	573	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:07 GMT Content-Type: application/json; charset=utf-8 Content-Length: 153 Connection: close Access-Control-Allow-Origin: https://telegra.ph Access-Control-Allow-Credentials: true Set-Cookie: tph_uuid=FvAaxQbOiG47sLghnCRT4LszTQvffWYUrz3WncLEQP; expires=Fri, 20 Mar 2026 06:22:30 GMT; path=/; secure; HttpOnly Set-Cookie: tph_auth_alert=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000
2025-03-14 16:18:07 UTC	153	IN	Data Raw: 7b 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 22 2c 22 61 75 74 68 6f 72 5f 6e 61 6d 65 22 3a 22 22 2c 22 61 75 74 68 6f 72 5f 75 72 6c 22 3a 22 22 2c 22 73 61 76 65 5f 68 61 73 68 22 3a 22 32 39 34 66 36 66 66 66 37 30 34 64 62 33 38 34 35 30 61 38 66 61 33 37 31 38 35 30 30 35 38 65 66 35 36 61 22 2c 22 63 61 6e 5f 65 64 69 74 22 3a 66 61 6c 73 65 2c 22 72 65 70 6f 72 74 5f 68 61 73 68 22 3a 22 36 38 31 36 33 61 66 39 35 63 37 39 31 30 30 37 65 62 22 7d Data Ascii: {"short_name":"","author_name":"","author_url":"","save_hash":"294f6fff704db38450a8fa371850058ef56a","can_edit":false,"report_hash":"68163af95c791007eb"}

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:07 UTC	659	OUT	GET /images/icons.png?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:07 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:07 GMT Content-Type: image/png Content-Length: 3295 Last-Modified: Tue, 22 Nov 2016 01:40:43 GMT Connection: close ETag: "5833a21b-cdf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:07 UTC	3295	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 01 e7 08 06 00 00 00 ca 37 1f b8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0c 81 49 44 41 54 78 da ec 9d 0f 90 55 55 1d c7 cf ae c0 16 da 0a fb 12 d9 02 ca 74 8d 22 08 65 47 73 98 64 20 83 30 2d ad 61 b2 26 1b 46 1c 4d 4c 12 c7 00 ff a4 36 39 4e 99 b4 e3 8c 22 da 54 38 fd 43 47 21 84 06 15 83 d1 19 c5 64 4d 11 5d 33 17 c1 14 30 e0 01 f1 27 e3 ef eb fb eb fe 1e 9c bd dc bb bb ef be 7b cf 3d 4b df 33 f3 9d f7 ee b9 67 ef fd ec f9 77 ef f9 be 73 ef a9 29 95 4a c6 e7 50 6b 3c 0f 04 24 20 01 09 48 40 02 e6 0b b8 0e 2a 85 b4 13 da a5 df b7 42 7f 81 7e 08 9d 90 e8 0c 72 b3 90 82 ec 50 8e 3b 13 da 60 c5 af 84 6a 2b 3d 76 96 Data Ascii: PNGIHDR(7tEXtSoftwareAdobe ImageReadyqe<IDATxUUt"eGsd 0-a&FML69N"T8CG!dM]30'{=K3gws)JPk<$ H@*B~rP;`j+=v

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:08 UTC	654	OUT	GET /favicon.ico?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegra.ph/Charlotte-Reeves-03-13?authToken=3df6d156-69ce-4eec-bf31-18f394818e5a Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:08 UTC	311	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:08 GMT Content-Type: image/x-icon Content-Length: 5430 Last-Modified: Tue, 22 Nov 2016 15:54:16 GMT Connection: close ETag: "58346a28-1536" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:08 UTC	5430	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fb fb fb c4 fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa fa fa ff fa Data Ascii: h& (

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:09 UTC	392	OUT	GET /images/icons.png?1 HTTP/1.1 Host: telegra.ph Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:09 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:09 GMT Content-Type: image/png Content-Length: 3295 Last-Modified: Tue, 22 Nov 2016 01:40:43 GMT Connection: close ETag: "5833a21b-cdf" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2025-03-14 16:18:09 UTC	3295	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 01 e7 08 06 00 00 00 ca 37 1f b8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0c 81 49 44 41 54 78 da ec 9d 0f 90 55 55 1d c7 cf ae c0 16 da 0a fb 12 d9 02 ca 74 8d 22 08 65 47 73 98 64 20 83 30 2d ad 61 b2 26 1b 46 1c 4d 4c 12 c7 00 ff a4 36 39 4e 99 b4 e3 8c 22 da 54 38 fd 43 47 21 84 06 15 83 d1 19 c5 64 4d 11 5d 33 17 c1 14 30 e0 01 f1 27 e3 ef eb fb eb fe 1e 9c bd dc bb bb ef be 7b cf 3d 4b df 33 f3 9d f7 ee b9 67 ef fd ec f9 77 ef f9 be 73 ef a9 29 95 4a c6 e7 50 6b 3c 0f 04 24 20 01 09 48 40 02 e6 0b b8 0e 2a 85 b4 13 da a5 df b7 42 7f 81 7e 08 9d 90 e8 0c 72 b3 90 82 ec 50 8e 3b 13 da 60 c5 af 84 6a 2b 3d 76 96 Data Ascii: PNGIHDR(7tEXtSoftwareAdobe ImageReadyqe<IDATxUUt"eGsd 0-a&FML69N"T8CG!dM]30'{=K3gws)JPk<$ H@*B~rP;`j+=v

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:09 UTC	445	OUT	GET /check HTTP/1.1 Host: edit.telegra.ph Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: tph_uuid=FvAaxQbOiG47sLghnCRT4LszTQvffWYUrz3WncLEQP
2025-03-14 16:18:09 UTC	252	IN	HTTP/1.1 200 OK Server: nginx/1.20.1 Date: Fri, 14 Mar 2025 16:18:09 GMT Content-Type: application/json; charset=utf-8 Content-Length: 25 Connection: close Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000
2025-03-14 16:18:09 UTC	25	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 22 41 63 63 65 73 73 20 64 65 6e 69 65 64 22 7d Data Ascii: {"error":"Access denied"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Windows Analysis Report
https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:19 UTC	744	OUT	GET /N9fSN/ HTTP/1.1 Host: maintenanceinvoicedocument.siluetaneblewulosa.it.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://telegra.ph/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:20 UTC	1033	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 16:18:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=64bmpm01omgai1f6oqo7brl7qr; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zhkg0n6BInTRCn3yV4PvURw9kjXl0V3J4JacIq1hcrT%2FW7GrMynM1mZzXh10OoqrazxbVdb2wt7Zkq%2BTPkSw3M7qH0KQf0TRKVq3Wb%2F8Lh6fG%2BHNFk3sYjjeuTT1Gr6VaMs8WHCKcL8FokBeqj3YwdGeDG6K73Us5DzBTjL8eMf%2BqPpLJZhj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9205161b69284245-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7150&min_rtt=1620&rtt_var=4043&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2869&recv_bytes=1316&delivery_rate=1802469&cwnd=201&unsent_bytes=0&cid=4386662a3585ee0e&ts=316&x=0"
2025-03-14 16:18:20 UTC	336	IN	Data Raw: 31 30 33 62 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 45 6d 62 65 72 51 75 69 6c 6c 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 6e 20 6f 6c 64 20 6c 69 62 72 61 72 69 61 6e 20 73 68 61 72 65 64 20 66 61 73 63 69 6e 61 74 69 6e 67 20 73 74 6f 72 69 65 73 20 66 72 6f 6d 20 61 6e 63 69 65 6e 74 20 68 69 73 74 6f 72 79 20 62 6f 6f 6b 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 Data Ascii: 103b <html lang="en"> <head> <meta charset="UTF-8"> <title>EmberQuill</title> ... <span>An old librarian shared fascinating stories from ancient history books.</span> --> <meta name="robots" content="noinde
2025-03-14 16:18:20 UTC	1369	IN	Data Raw: 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 54 68 65 20 74 65 61 63 68 65 72 20 65 78 70 6c 61 69 6e 65 64 20 74 68 65 20 63 6f 6d 70 6c 65 78 20 74 6f 70 69 63 20 75 73 69 6e 67 20 73 69 6d 70 6c 65 20 72 65 61 6c 2d 6c 69 66 65 20 65 78 61 6d 70 6c 65 73 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 41 20 73 6b 69 6c 6c Data Ascii: -scale=1.0"> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>The teacher explained the complex topic using simple real-life examples.</p> --> <style> * /* A skill
2025-03-14 16:18:20 UTC	1369	IN	Data Raw: 65 20 6d 61 72 61 74 68 6f 6e 20 72 75 6e 6e 65 72 20 74 72 61 69 6e 65 64 20 68 61 72 64 20 74 6f 20 69 6d 70 72 6f 76 65 20 68 69 73 20 65 6e 64 75 72 61 6e 63 65 20 73 6b 69 6c 6c 73 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 52 65 Data Ascii: e marathon runner trained hard to improve his endurance skills. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width: 768px) { .Re
2025-03-14 16:18:20 UTC	1089	IN	Data Raw: 20 20 3c 21 2d 2d 20 53 68 65 20 63 61 72 65 66 75 6c 6c 79 20 61 72 72 61 6e 67 65 64 20 66 72 65 73 68 20 66 6c 6f 77 65 72 73 20 69 6e 20 74 68 65 20 65 6c 65 67 61 6e 74 20 63 72 79 73 74 61 6c 20 76 61 73 65 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 2d 75 5a 78 35 46 55 4f 64 50 48 2d 46 78 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 48 61 72 62 69 6e 67 65 72 52 69 70 70 6c 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 21 2d 2d 20 41 6e 20 61 64 76 65 6e 74 75 72 6f 75 73 20 74 72 61 76 65 6c 65 72 20 65 78 70 6c 6f 72 65 64 Data Ascii: ... She carefully arranged fresh flowers in the elegant crystal vase. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA-uZx5FUOdPH-Fx" data-callback="HarbingerRipple"> </span>... An adventurous traveler explored
2025-03-14 16:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:20 UTC	702	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:20 UTC	1031	IN	HTTP/1.1 404 Not Found Date: Fri, 14 Mar 2025 16:18:20 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=600, s-maxage=600 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload etag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4" Age: 362 x-served-by: cache-fra-etou8220171-FRA, cache-lga21940-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2Fsw2FDWF9li%2Bhrh4jmO0%2Fy78yGs86An3bGyWzdjLpt2kczA58WFRcB%2BFcH22yVKYv%2FMdbJxn6URuAU2DxwepIJdVqxVTnZ%2ByYeZH0FSFlz9SonE6pgPSiL8WtCh7ASHhVc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92051620afcdcd7f-EWR
2025-03-14 16:18:20 UTC	59	IN	Data Raw: 33 35 0d 0a 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 20 66 6f 72 20 70 72 61 6e 61 79 6e 61 6d 6e 61 69 6b 2f 66 69 6c 65 73 2e 0d 0a Data Ascii: 35Failed to fetch version info for pranaynamnaik/files.
2025-03-14 16:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:20 UTC	621	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:20 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 16:18:20 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 920516209efeb886-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:21 UTC	636	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:21 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 16:18:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 920516249a4443ff-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 16:18:21 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-14 16:18:21 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:21 UTC	549	OUT	OPTIONS /report/v4?s=i%2Fsw2FDWF9li%2Bhrh4jmO0%2Fy78yGs86An3bGyWzdjLpt2kczA58WFRcB%2BFcH22yVKYv%2FMdbJxn6URuAU2DxwepIJdVqxVTnZ%2ByYeZH0FSFlz9SonE6pgPSiL8WtCh7ASHhVc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdn.jsdelivr.net Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:21 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 14 Mar 2025 16:18:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:22 UTC	524	OUT	POST /report/v4?s=i%2Fsw2FDWF9li%2Bhrh4jmO0%2Fy78yGs86An3bGyWzdjLpt2kczA58WFRcB%2BFcH22yVKYv%2FMdbJxn6URuAU2DxwepIJdVqxVTnZ%2ByYeZH0FSFlz9SonE6pgPSiL8WtCh7ASHhVc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 496 Content-Type: application/reports+json Origin: https://cdn.jsdelivr.net User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:22 UTC	496	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6e 74 65 6e 61 6e 63 65 69 6e 76 6f 69 63 65 64 6f 63 75 6d 65 6e 74 2e 73 69 6c 75 65 74 61 6e 65 62 6c 65 77 75 6c 6f 73 61 2e 69 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 38 2e 31 38 37 2e 33 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 Data Ascii: [{"age":0,"body":{"elapsed_time":666,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/","sampling_fraction":1.0,"server_ip":"104.18.187.31","status_code":404,"type":"http.e
2025-03-14 16:18:22 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 14 Mar 2025 16:18:21 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:22 UTC	877	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:22 UTC	1297	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 16:18:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28424 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-qXCh62Rg3G3dLLhf' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-14 16:18:22 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-14 16:18:22 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 71 58 43 68 36 32 52 67 33 47 33 64 4c 4c 68 66 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-qXCh62Rg3G3dLLhf' 'unsafe-
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-14 16:18:22 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:22 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=920516296e5e41e3&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:23 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 16:18:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 124204 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9205162d9a57f5f6-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 16:18:23 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23bro
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 Data Ascii: %21","turnstile_verifying":"Verifying...","turnstile_feedback_description":"Send%20Feedback","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_expired":"Expired","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 55 2c 66 31 2c 66 32 2c 66 35 2c 66 36 2c 66 79 2c 66 42 2c 66 44 2c 66 45 2c 66 46 2c 66 52 2c 67 33 2c 67 39 2c Data Ascii: sts.","turnstile_footer_privacy":"Privacy"},"polyfills":{"feedback_report_guideline":false,"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eU,f1,f2,f5,f6,fy,fB,fD,fE,fF,fR,g3,g9,
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 41 52 69 6b 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4d 74 7a 67 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 47 78 57 4a 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 71 6d 67 41 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 42 69 45 54 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 55 41 4e 73 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 66 67 6a 6d 41 27 3a 68 41 28 39 32 37 29 2c 27 56 52 55 6f 73 27 3a 66 75 6e 63 74 69 6f Data Ascii: i){return h>i},'ARikp':function(h,i){return h<i},'Mtzga':function(h,i){return h(i)},'GxWJW':function(h,i){return h==i},'qmgAF':function(h,i){return h<<i},'BiETu':function(h,i){return i==h},'UANsz':function(h,i){return i==h},'fgjmA':hA(927),'VRUos':functio
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 28 36 36 36 29 5d 29 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 68 44 28 31 33 33 36 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 68 44 28 31 33 30 35 29 5d 5b 68 44 28 31 37 34 33 29 5d 5b 68 44 28 33 39 32 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 68 44 28 31 33 30 35 29 5d 5b 68 44 28 31 37 34 33 29 5d 5b 68 44 28 33 39 32 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 44 28 31 33 30 35 29 5d 5b 68 44 28 31 37 34 33 29 5d 5b 68 44 28 33 39 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 68 44 28 36 32 37 29 5d 28 32 35 36 2c 43 5b 68 44 28 31 31 30 39 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 68 44 28 37 34 30 29 5d 28 73 2c 46 29 3b 48 Data Ascii: (666)]);J+=1)if(K=i[hD(1336)](J),Object[hD(1305)][hD(1743)][hD(392)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[hD(1305)][hD(1743)][hD(392)](x,L))C=L;else{if(Object[hD(1305)][hD(1743)][hD(392)](B,C)){if(d[hD(627)](256,C[hD(1109)](0))){for(s=0;d[hD(740)](s,F);H
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 38 36 5d 5b 30 5d 2b 2b 29 2c 31 38 31 29 2c 32 35 36 29 26 32 35 35 2e 37 36 29 5e 31 36 35 5d 2c 55 2b 2b 29 3b 58 3d 59 28 5a 2c 61 30 29 7d 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 44 28 31 33 30 35 29 5d 5b 68 44 28 31 37 34 33 29 5d 5b 68 44 28 33 39 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 68 44 28 31 31 30 39 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 44 28 31 32 39 32 29 5d 28 64 5b 68 44 28 31 33 32 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 44 28 31 31 30 39 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 44 28 31 36 37 36 29 5d 28 48 2c 31 29 7c 64 5b 68 44 28 35 37 32 29 5d 28 4d Data Ascii: 86][0]++),181),256)&255.76)^165],U++);X=Y(Z,a0)}else{if(Object[hD(1305)][hD(1743)][hD(392)](B,C)){if(256>C[hD(1109)](0)){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[hD(1292)](d[hD(1326)](o,H)),H=0):I++,s++);for(M=C[hD(1109)](0),s=0;8>s;H=d[hD(1676)](H,1)\|d[hD(572)](M
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 62 2c 64 5b 68 48 28 35 31 31 29 5d 28 51 2c 52 29 7d 2c 27 73 65 4e 54 74 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 2b 52 7d 2c 27 74 7a 55 69 73 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 2d 52 7d 2c 27 54 67 4c 44 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 2c 68 49 29 7b 72 65 74 75 72 6e 20 68 49 3d 62 2c 64 5b 68 49 28 31 31 38 35 29 5d 28 51 2c 52 29 7d 2c 27 4e 55 5a 67 51 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 5e 52 7d 2c 27 49 47 67 50 74 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 3c 3c 52 7d 2c 27 4a 73 51 6e 68 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 3e 3e 52 7d 2c 27 44 44 4a 54 6a 27 3a 66 Data Ascii: b,d[hH(511)](Q,R)},'seNTt':function(Q,R){return Q+R},'tzUis':function(Q,R){return Q-R},'TgLDm':function(Q,R,hI){return hI=b,d[hI(1185)](Q,R)},'NUZgQ':function(Q,R){return Q^R},'IGgPt':function(Q,R){return Q<<R},'JsQnh':function(Q,R){return Q>>R},'DDJTj':f
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 20 66 6f 72 28 4d 3d 64 5b 68 4c 28 36 31 35 29 5d 5b 68 4c 28 39 33 37 29 5d 28 27 7c 27 29 2c 4e 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4d 5b 4e 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 4f 3d 64 5b 68 4c 28 35 31 31 29 5d 28 48 2c 49 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 4b 7c 3d 28 30 3c 4f 3f 31 3a 30 29 2a 47 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 47 3c 3c 3d 31 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 49 3e 3e 3d 31 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 73 77 69 74 63 68 28 4b 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 68 4c 28 34 31 35 29 5d Data Ascii: for(M=d[hL(615)][hL(937)]('\|'),N=0;!![];){switch(M[N++]){case'0':0==I&&(I=j,H=o(J++));continue;case'1':O=d[hL(511)](H,I);continue;case'2':K\|=(0<O?1:0)*G;continue;case'3':G<<=1;continue;case'4':I>>=1;continue}break}switch(K){case 0:for(K=0,L=Math[hL(415)]
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 2c 6d 29 7b 66 6f 72 28 68 4d 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 68 4d 28 33 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 68 4d 28 35 31 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 67 5b 68 4d 28 38 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 68 4d 28 31 31 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 68 3d 67 2c 6d 2c 6a 3d 33 32 2c 6c 3d 68 5b 68 4d 28 33 37 31 29 5d 28 65 4d 5b 68 4d 28 31 33 31 32 29 5d 5b 68 4d 28 31 30 32 34 29 5d 2b 27 5f 27 2c 30 29 2c 6c 3d 6c 5b 68 4d 28 32 36 37 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 68 4e Data Ascii: ,m){for(hM=gJ,g={},g[hM(371)]=function(n,s){return n+s},g[hM(514)]=function(n,s){return n%s},g[hM(897)]=function(n,s){return n+s},g[hM(1198)]=function(n,s){return n-s},h=g,m,j=32,l=h[hM(371)](eM[hM(1312)][hM(1024)]+'_',0),l=l[hM(267)](/./g,function(n,s,hN
2025-03-14 16:18:23 UTC	1369	IN	Data Raw: 69 73 2e 67 5e 38 36 2e 36 35 5d 5b 33 5d 5e 37 35 2b 74 68 69 73 2e 68 5b 69 5b 69 71 28 35 35 31 29 5d 28 38 36 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 71 28 31 31 30 39 29 5d 28 74 68 69 73 2e 68 5b 38 36 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 26 32 35 35 2e 33 39 2c 32 32 35 29 2c 42 3d 74 68 69 73 2e 68 5b 42 5e 74 68 69 73 2e 67 5d 2c 43 3d 69 5b 69 71 28 35 35 31 29 5d 28 74 68 69 73 2e 68 5b 69 5b 69 71 28 35 35 31 29 5d 28 38 36 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 2c 69 5b 69 71 28 32 35 37 29 5d 28 69 5b 69 71 28 31 31 30 34 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 38 36 5d 5b 31 5d 5b 69 71 28 31 31 30 39 29 5d 28 74 68 69 73 2e 68 5b 38 36 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2d 31 38 31 2c 32 35 36 29 2c 32 35 35 29 29 5e Data Ascii: is.g^86.65][3]^75+this.h[i[iq(551)](86,this.g)][1][iq(1109)](this.h[86^this.g][0]++)&255.39,225),B=this.h[B^this.g],C=i[iq(551)](this.h[i[iq(551)](86,this.g)][3],i[iq(257)](i[iq(1104)](this.h[this.g^86][1][iq(1109)](this.h[86^this.g][0]++)-181,256),255))^

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:22 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/w5bwp/0x4AAAAAAA-uZx5FUOdPH-Fx/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 16:18:23 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 16:18:23 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9205162e1a06a0fb-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 16:18:23 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-14 16:18:23 UTC	719	OUT	GET /favicon.ico HTTP/1.1 Host: maintenanceinvoicedocument.siluetaneblewulosa.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://maintenanceinvoicedocument.siluetaneblewulosa.it.com/N9fSN/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64bmpm01omgai1f6oqo7brl7qr
2025-03-14 16:18:23 UTC	881	IN	HTTP/1.1 404 Not Found Date: Fri, 14 Mar 2025 16:18:23 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2jXWYLzOu84ks6wFk7DXfDyCCeqi4NDbNQQkcn%2BongR37icpCQXlSxBGxgx3lIHfXuRbn6jxHsKMwHGREt9ImWQbp2yzq4X1g%2FY9JHuUWMlcdX9z4cgH8LWpZZAXAdkD%2BBlD4kIbB3F%2BcSZ6AFEvdq0MDuPo%2FKf5WkBNoIYfTTX7y3ddrQj3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92051630b8c2939a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2085&min_rtt=2079&rtt_var=784&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2868&recv_bytes=1291&delivery_rate=1404521&cwnd=131&unsent_bytes=0&cid=777df4073cdc561f&ts=3688&x=0"
2025-03-14 16:18:23 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-03-14 16:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0