Edit tour

Windows Analysis Report
https://jainiklifesciences.com/proposals

Overview

General Information

Sample URL:	https://jainiklifesciences.com/proposals
Analysis ID:	1647619
Infos:

Detection

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,14008752610587293321,42625843251848987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jainiklifesciences.com/proposals" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://jainiklifesciences.com/offers/box.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The legitimate domain for Box is 'box.com'., The provided URL 'jainiklifesciences.com' does not match the legitimate domain for Box., The URL 'jainiklifesciences.com' does not contain any recognizable association with the brand 'Box'., The URL appears to be unrelated to the brand and could potentially be used for phishing, especially given the request for a business email. DOM: 1.1.pages.csv
Source: https://jainiklifesciences.com/offers/box.html	Joe Sandbox AI: Score: 9 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The URL 'jainiklifesciences.com' does not match the legitimate domain 'box.com'., The domain 'jainiklifesciences.com' does not appear to be associated with the brand 'Box'., The presence of an input field asking for a business email on a non-associated domain is suspicious., The domain name does not contain any elements that suggest a legitimate association with 'Box'. DOM: 1.3.pages.csv

AI detected suspicious Javascript

Source: 0.0..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://jainiklifesciences.com/proposals/... This script demonstrates several high-risk behaviors, including disabling right-click and various keyboard shortcuts, preventing the use of debugging tools, and redirecting users to an external domain. The script also includes an attempt to detect and block bots, which could be used to bypass security measures. Overall, the combination of these behaviors suggests a high-risk script that is likely attempting to restrict user interaction and potentially engage in malicious activities.

Source: https://jainiklifesciences.com/offers/box.html

HTTP Parser: Number of links: 0

Source: https://jainiklifesciences.com/offers/box.html

HTTP Parser: Title: Construction Bid Invitation - Secure Access does not match URL

Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=checkbox&id=05ze218pndip&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html#frame=challenge&id=05ze218pndip&host=jainiklifesciences.com&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&theme=light&origin=https%3A%2F%2Fjainiklifesciences.com

Source: https://jainiklifesciences.com/proposals/	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://jainiklifesciences.com/offers/box.html	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=tyev@gmail.com	HTTP Parser: No favicon
Source: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=tyev@gmail.com	HTTP Parser: No favicon

Source: https://jainiklifesciences.com/offers/box.html

HTTP Parser: No <meta name="author".. found

Source: https://jainiklifesciences.com/offers/box.html

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.16:49774 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.227
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.140
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.16.164
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.16.164
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /proposals HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /proposals/ HTTP/1.1Host: jainiklifesciences.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://jainiklifesciences.com/proposals/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/box.html HTTP/1.1Host: jainiklifesciences.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://jainiklifesciences.com/proposals/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zGhnTT6t/image-1.png HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zGhnTT6t/image-1.png HTTP/1.1Host: i.postimg.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/challenge/image_drag_drop/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ad66ec5b520e64968c772dcbcbcefdd9729e55bf6b55694f06d3344932c20f17/80f7cbd5ad8c6ed1ec840c6a2b644e78be790334c4f5047b9e4f1e88f9b096e3.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a8200aafdce65c9307ad48b3c846d509b69561be4ac94ad32634994f7bdb4de8/73ebf57bc9385b3e59041f771a41fbd2d836d39f90cacf315305fc02dd3fa307.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ad66ec5b520e64968c772dcbcbcefdd9729e55bf6b55694f06d3344932c20f17/80f7cbd5ad8c6ed1ec840c6a2b644e78be790334c4f5047b9e4f1e88f9b096e3.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a8200aafdce65c9307ad48b3c846d509b69561be4ac94ad32634994f7bdb4de8/73ebf57bc9385b3e59041f771a41fbd2d836d39f90cacf315305fc02dd3fa307.png HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSWZvUTZrOHpHRXh4eGpwRWJ5UHE5TDlwalJwMHF6UmlPVXh6byt1VEdaYVRBcXdQMXNtYkNYRU5zU0NHS2RVdHgrQnk2Z3VaRXdoMHZ4ajQwcEFXSGh0bVVxdStMeHY2TEJFRFYwTldGeU1JQ0pybjczV0NpYW50RE1DeTRUYnhwVTBnc0orSTVWaU9aR2xGa1FVOGJZcFNxNzBsQ1JBMzRlWVNScVc4YUlidU00WDFTbThGOTFxcXJEWnpMSXg3R1RXaDlmdzZ2d25VZWorR2dlMDNKU2ZiUzVWYW44NzFNZWorb20zUnNZaENnR0dvTHJNR3l6bWVwMU5YNlJzdmJjbGRaME42UEJ5bTJOUW1nUlpOdzlqVElPbE1jNzVpIiwiZXhwIjoxNzQyODcxMDQxLCJrciI6ImE0ZDEzMjgifQ.UUTQhSzn3olwXY8rZPGMDe19wtqcaah3htGd5_FL8Qo HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ref=tyev@gmail.com HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://jainiklifesciences.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offers/validate-captcha.php HTTP/1.1Host: jainiklifesciences.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=64ea4742efffe444b5265ee35f2f4c35
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925b18bade66428b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=tyev@gmail.comAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: f7489275.1b3323017e50b50a29be84d5.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/532764594:1742869646:uCSJf4deX46d4cbWFCAurekKK9-AoHqKCfTr8BT3nZY/925b18bade66428b/L5GNJNqxPOK_0HEmU3M_C83C9okfjB60SgJwh4P29RY-1742870982-1.1.1.1-Q8KzZyI4m9kqnOPjO_O1iFJnYdMCd9_p_LzlXXZ4MVDS_rbNsjrNBI8bmbm7Rkot HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925b18bade66428b/1742870984120/Nbn9wTF6o97uAqH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925b18bade66428b/1742870984120/Nbn9wTF6o97uAqH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925b18bade66428b/1742870984129/1b39f8632be6dec6af3218566ec6349cb290220a2fcf8b963db4f978e10cc7f3/FxzXqILTJIKUwDc HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/532764594:1742869646:uCSJf4deX46d4cbWFCAurekKK9-AoHqKCfTr8BT3nZY/925b18bade66428b/L5GNJNqxPOK_0HEmU3M_C83C9okfjB60SgJwh4P29RY-1742870982-1.1.1.1-Q8KzZyI4m9kqnOPjO_O1iFJnYdMCd9_p_LzlXXZ4MVDS_rbNsjrNBI8bmbm7Rkot HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: jainiklifesciences.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: i.postimg.cc
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: imgs3.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: f7489275.1b3323017e50b50a29be84d5.workers.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plainsec-ch-ua-mobile: ?0Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Tue, 25 Mar 2025 02:47:57 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: closeVary: Accept-Encoding

Source: chromecache_89.1.dr, chromecache_81.1.dr, chromecache_80.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito
Source: chromecache_89.1.dr, chromecache_81.1.dr, chromecache_80.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_75.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_74.1.dr	String found in binary or memory: https://github.com/Joe12387/detectIncognito
Source: chromecache_70.1.dr	String found in binary or memory: https://google.com
Source: chromecache_79.1.dr, chromecache_95.1.dr, chromecache_83.1.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_69.1.dr	String found in binary or memory: https://i.postimg.cc/bNn6VR8f/box.jpg
Source: chromecache_69.1.dr	String found in binary or memory: https://i.postimg.cc/zGhnTT6t/image-1.png
Source: chromecache_69.1.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.16:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.193.229:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.16.100.157:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.16:49774 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6848_1288214506

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6848_1288214506

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@26/50@38/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,14008752610587293321,42625843251848987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://jainiklifesciences.com/proposals"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,14008752610587293321,42625843251848987,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://jainiklifesciences.com/proposals	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://jainiklifesciences.com/offers/validate-captcha.php	0%	Avira URL Cloud	safe
https://jainiklifesciences.com/favicon.ico	0%	Avira URL Cloud	safe
https://f7489275.1b3323017e50b50a29be84d5.workers.dev/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.193.229	true	false	high
js.hcaptcha.com	104.19.229.21	true	false	high
api.hcaptcha.com	104.19.229.21	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
i.postimg.cc	162.249.168.129	true	false	high
jainiklifesciences.com	103.16.100.157	true	false	high
www.google.com	142.251.40.228	true	false	high
imgs3.hcaptcha.com	104.19.230.21	true	false	high
newassets.hcaptcha.com	104.19.229.21	true	false	high
f7489275.1b3323017e50b50a29be84d5.workers.dev	104.21.96.1	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api.hcaptcha.com/getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870	false		high
https://jainiklifesciences.com/offers/validate-captcha.php	false	Avira URL Cloud: safe	unknown
https://jainiklifesciences.com/proposals/	true		unknown
https://f7489275.1b3323017e50b50a29be84d5.workers.dev/?ref=tyev@gmail.com	false		unknown
https://newassets.hcaptcha.com/c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js	false		high
https://i.postimg.cc/zGhnTT6t/image-1.png	false		high
https://api.hcaptcha.com/checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://i.postimg.cc/bNn6VR8f/box.jpg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925b18bade66428b/1742870984129/1b39f8632be6dec6af3218566ec6349cb290220a2fcf8b963db4f978e10cc7f3/FxzXqILTJIKUwDc	false		high
https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/challenge/image_drag_drop/challenge.js	false		high
https://jainiklifesciences.com/offers/box.html	true		unknown
https://jainiklifesciences.com/proposals	true		unknown
https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html	false		high
https://imgs3.hcaptcha.com/tip/ad66ec5b520e64968c772dcbcbcefdd9729e55bf6b55694f06d3344932c20f17/80f7cbd5ad8c6ed1ec840c6a2b644e78be790334c4f5047b9e4f1e88f9b096e3.png	false		high
https://f7489275.1b3323017e50b50a29be84d5.workers.dev/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://js.hcaptcha.com/1/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/925b18bade66428b/1742870984120/Nbn9wTF6o97uAqH	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925b18bade66428b&lang=auto	false		high
https://api.hcaptcha.com/checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSWZvUTZrOHpHRXh4eGpwRWJ5UHE5TDlwalJwMHF6UmlPVXh6byt1VEdaYVRBcXdQMXNtYkNYRU5zU0NHS2RVdHgrQnk2Z3VaRXdoMHZ4ajQwcEFXSGh0bVVxdStMeHY2TEJFRFYwTldGeU1JQ0pybjczV0NpYW50RE1DeTRUYnhwVTBnc0orSTVWaU9aR2xGa1FVOGJZcFNxNzBsQ1JBMzRlWVNScVc4YUlidU00WDFTbThGOTFxcXJEWnpMSXg3R1RXaDlmdzZ2d25VZWorR2dlMDNKU2ZiUzVWYW44NzFNZWorb20zUnNZaENnR0dvTHJNR3l6bWVwMU5YNlJzdmJjbGRaME42UEJ5bTJOUW1nUlpOdzlqVElPbE1jNzVpIiwiZXhwIjoxNzQyODcxMDQxLCJrciI6ImE0ZDEzMjgifQ.UUTQhSzn3olwXY8rZPGMDe19wtqcaah3htGd5_FL8Qo	false		high
https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js	false		high
https://imgs3.hcaptcha.com/tip/a8200aafdce65c9307ad48b3c846d509b69561be4ac94ad32634994f7bdb4de8/73ebf57bc9385b3e59041f771a41fbd2d836d39f90cacf315305fc02dd3fa307.png	false		high
https://jainiklifesciences.com/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://hcaptcha.com/license	chromecache_79.1.dr, chromecache_95.1.dr, chromecache_83.1.dr	false	high
https://github.com/Joe12387/detectIncognito	chromecache_74.1.dr	false	high
https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito	chromecache_89.1.dr, chromecache_81.1.dr, chromecache_80.1.dr	false	high
https://google.com	chromecache_70.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.16.1	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.193.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
103.16.100.157	jainiklifesciences.com	India	132563	MEGAHOSTZONE-AS-INMegaHostZoneIN	false
162.249.168.129	i.postimg.cc	United States	26548	PUREVOLTAGE-INCUS	false
104.19.229.21	js.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
104.21.96.1	f7489275.1b3323017e50b50a29be84d5.workers.dev	United States	13335	CLOUDFLARENETUS	false
104.19.230.21	imgs3.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647619
Start date and time:	2025-03-25 03:47:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://jainiklifesciences.com/proposals
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@26/50@38/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.14, 142.250.65.195, 142.251.32.110, 142.251.167.84, 142.250.72.110, 142.251.41.14, 142.251.40.174, 142.250.65.202, 142.251.32.99, 142.251.40.106, 142.251.40.170, 142.250.81.234, 142.250.176.202, 142.250.80.42, 142.250.80.106, 142.251.35.170, 142.250.80.10, 142.251.40.234, 142.250.64.74, 142.251.40.138, 142.251.41.10, 142.251.32.106, 142.250.80.74, 142.250.72.106, 142.251.40.202, 199.232.214.172, 142.251.40.238, 142.250.176.206, 142.251.35.174, 142.250.65.238, 142.251.40.110, 142.250.81.238, 142.250.65.163, 142.250.80.3, 142.250.65.174, 4.245.163.56, 184.31.69.3
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://jainiklifesciences.com/proposals

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HoUinYn:IUyY
MD5:	903747EA4323C522742842A52CE710C9
SHA1:	9F806EA4288867A31A4AD53AC171AA4029DF182B
SHA-256:	4BD8B60F91849C936AE45615145A7B7BE2CF803322A30BABBAE7267A142CA5BB
SHA-512:	EEF73DC29A38ED70FFCFC321931BCB5B5A29FAAC356E8F6D84F57C532EEF44AE75021C341CF7DAE26B8211924A1C0E0EC4735F6BFC4AF3970A48EB63BFB7895F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCWN7p-1aO5feEgUNg6hbPSGqG06FM2HNcA==?alt=proto
Preview:	CgkKBw2DqFs9GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 03:47:52.734601021 CET	53	51924	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:52.809139967 CET	53	59921	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:53.407396078 CET	53	56226	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:53.539197922 CET	53	61470	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:53.659488916 CET	49824	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:53.661840916 CET	55070	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:54.340759993 CET	53	49824	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:54.966633081 CET	53	55070	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:57.321635008 CET	49155	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:57.321981907 CET	58703	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:57.418740034 CET	53	49155	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:57.420270920 CET	53	58703	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.153974056 CET	61394	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.154196978 CET	60626	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.155879021 CET	60917	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.156145096 CET	64709	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.251754045 CET	53	61394	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.252177954 CET	53	54568	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.252494097 CET	53	60626	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.253875971 CET	53	60917	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.254663944 CET	53	64709	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.636123896 CET	56266	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.636274099 CET	57038	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:47:59.734926939 CET	53	56266	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.737157106 CET	53	57038	1.1.1.1	192.168.2.16
Mar 25, 2025 03:47:59.795708895 CET	53	63049	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:00.005312920 CET	56472	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:00.005713940 CET	50134	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:00.103002071 CET	53	56472	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:00.103214025 CET	53	50134	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:00.912409067 CET	53594	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:00.912821054 CET	57505	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:01.010685921 CET	53	57505	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:01.011694908 CET	53	53594	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:01.495259047 CET	57995	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:01.495451927 CET	50527	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:48:01.593436956 CET	53	57995	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:01.594283104 CET	53	50527	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:10.615787983 CET	53	52963	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:14.643356085 CET	53	50780	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:29.325795889 CET	53	63428	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:52.191090107 CET	53	51083	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:52.678706884 CET	53	62157	1.1.1.1	192.168.2.16
Mar 25, 2025 03:48:55.715737104 CET	53	62097	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:06.943188906 CET	138	138	192.168.2.16	192.168.2.255
Mar 25, 2025 03:49:09.920519114 CET	56509	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:09.921073914 CET	53109	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:10.019071102 CET	53	56509	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:10.019879103 CET	53	53109	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:11.105653048 CET	59346	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:11.105796099 CET	56738	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:11.205362082 CET	53	56738	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:11.205507040 CET	53	59346	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:11.562309980 CET	61193	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:11.562449932 CET	52001	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:11.661662102 CET	53	61193	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:11.661987066 CET	53	52001	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:12.186413050 CET	53021	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:12.186553001 CET	54969	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:12.285101891 CET	53	54969	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:12.285571098 CET	53	53021	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:22.436120033 CET	53	60822	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:40.765597105 CET	50689	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:40.765984058 CET	65247	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:40.767817020 CET	58969	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:40.768178940 CET	54702	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:40.871622086 CET	53	65247	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:40.874453068 CET	53	50689	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.350461006 CET	51187	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:41.350797892 CET	61252	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:41.358033895 CET	63881	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:41.358242989 CET	51301	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:41.446934938 CET	53	58969	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.447223902 CET	53	51187	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.449227095 CET	53	61252	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.454819918 CET	53	63881	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.454902887 CET	53	51301	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:41.858685970 CET	53	54702	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:42.363171101 CET	51004	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:42.363320112 CET	60300	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:42.459559917 CET	53	51004	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:42.462035894 CET	53	60300	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:43.519284964 CET	61504	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:43.519432068 CET	62568	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:43.616343021 CET	53	62568	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:43.617548943 CET	53	61504	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:43.721882105 CET	55884	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:43.722023964 CET	54581	53	192.168.2.16	1.1.1.1
Mar 25, 2025 03:49:43.824460030 CET	53	54581	1.1.1.1	192.168.2.16
Mar 25, 2025 03:49:43.825222969 CET	53	55884	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 03:47:54.966713905 CET	192.168.2.16	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 03:49:41.858901978 CET	192.168.2.16	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:55 UTC	681	OUT	GET /proposals HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:55 UTC	224	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Tue, 25 Mar 2025 02:47:55 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 249 Connection: close Location: https://jainiklifesciences.com/proposals/
2025-03-25 02:47:55 UTC	249	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6a 61 69 6e 69 6b 6c 69 66 65 73 63 69 65 6e 63 65 73 2e 63 6f 6d 2f 70 72 6f 70 6f 73 61 6c 73 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://jainiklifesciences.com/proposals/">here</a>.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:55 UTC	682	OUT	GET /proposals/ HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:56 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:47:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2025-03-25 02:47:56 UTC	4280	IN	Data Raw: 31 30 61 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 75 73 69 6e 65 73 73 20 53 6f 6c 75 74 69 6f 6e 73 20 2d 20 53 65 63 75 72 65 20 42 69 64 64 69 6e 67 20 50 72 6f 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 10ab<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Business Solutions - Secure Bidding Process</title> <style> body {

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:57 UTC	617	OUT	GET /favicon.ico HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://jainiklifesciences.com/proposals/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:58 UTC	186	IN	HTTP/1.1 404 Not Found Server: nginx Date: Tue, 25 Mar 2025 02:47:57 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 315 Connection: close Vary: Accept-Encoding
2025-03-25 02:47:58 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:58 UTC	726	OUT	GET /offers/box.html HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://jainiklifesciences.com/proposals/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:59 UTC	228	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:47:58 GMT Content-Type: text/html Content-Length: 5857 Connection: close Vary: Accept-Encoding Last-Modified: Mon, 24 Mar 2025 14:18:21 GMT Accept-Ranges: bytes
2025-03-25 02:47:59 UTC	5857	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6e 73 74 72 75 63 74 69 6f 6e 20 42 69 64 20 49 6e 76 69 74 61 74 69 6f 6e 20 2d 20 53 65 63 75 72 65 20 41 63 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 31 2f 61 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Construction Bid Invitation - Secure Access</title> <script src="https://js.hcaptcha.com/1/a

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:59 UTC	635	OUT	GET /bNn6VR8f/box.jpg HTTP/1.1 Host: i.postimg.cc Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:59 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:47:59 GMT Content-Type: image/jpeg Content-Length: 5278 Connection: close Last-Modified: Sun, 23 Mar 2025 04:52:26 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2025-03-25 02:47:59 UTC	3717	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0e 0f 0d 0d 0d 0d 0f 0d 0e 0d 0d 15 11 17 17 15 11 15 15 18 1e 28 22 18 1a 27 1e 15 15 2d 31 21 25 2e 2d 2e 2e 2e 17 20 33 38 35 2c 38 28 2d 2f 2b 01 0a 0a 0a 0e 0d 0e 1a 10 10 17 2d 25 20 20 2b 2e 37 2b 2b 2e 2d 2d 2b 2d 2b 2b 2b 2b 2d 2b 2d 2d 2b 2d 2d 2d 2b 2e 2d 2d 2d 2b 2d 2d 2d 2b 2d 2d 2d 2b 2d 2b 2d 2d 2d 2d 2d 2d 2d 2b 2e 2d 2d 2d ff c0 00 11 08 00 e1 00 e1 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 05 07 06 02 04 03 ff c4 00 45 10 00 02 02 01 01 03 08 05 07 0a 04 07 00 00 00 00 00 01 02 03 11 04 05 06 41 07 12 13 21 22 31 51 61 42 71 81 91 a1 14 23 32 33 62 73 b1 15 24 35 Data Ascii: JFIF("'-1!%.-... 385,8(-/+-% +.7++.--+-++++-+--+---+.---+---+---+-+-------+.---EA!"1QaBq#23bs$5
2025-03-25 02:47:59 UTC	1561	IN	Data Raw: fd f8 fe 04 ff 00 4c dc d3 b9 1f 14 3f 45 d1 fb a7 e0 e8 76 0e e8 e8 f4 0d 4e aa e5 65 cb fd eb 9a 9c d7 ab a9 28 fb 11 0b 23 3e f5 f8 d2 a9 d2 3a 42 55 9c 4b 56 b8 c4 71 eb 2b 9d 4e a2 14 d7 2b 6d 9c 6b ae 09 ca 73 93 c4 62 88 b4 d3 35 cc 53 4c 6b 32 91 55 51 4c 6b 3c 99 75 fc a0 cf f2 9a d4 41 49 e8 62 ba 2e 87 ba 53 a9 be bb 71 fa f9 49 af 25 8e 2c d0 53 b2 e9 fc 3e e4 f7 b9 eb ed e9 e4 a5 ab 68 4f 6d bd 1d de 9f 36 9f a2 d5 d7 a8 ae 17 53 38 d9 5c d6 63 38 bc a7 fd 7c 8a 0a ed d5 45 53 4d 51 a4 c2 e6 8a e9 ae 37 a9 9d 61 57 b7 b7 57 47 b4 3b 57 56 e3 6e 30 ae a9 f3 2c c7 9b ee 97 b5 32 46 3e 6d eb 1c 29 9e 1d 27 93 c6 f6 2d bb dc 6a 8e 3d 5c df f9 5d 46 7f d5 df cd f0 e6 57 9c 7a ff 00 a1 3b d3 37 34 ee 47 c5 13 d1 74 7e e9 f8 3a 5d 83 ba da 4d 9f da Data Ascii: L?EvNe(#>:BUKVq+N+mksb5SLk2UQLk<uAIb.SqI%,S>hOm6S8\c8\|ESMQ7aWWG;WVn0,2F>m)'-j=\]FWz;74Gt~:]M

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:59 UTC	570	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:47:59 UTC	507	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:47:59 GMT Content-Type: application/javascript Content-Length: 207216 Connection: close CF-Ray: 925b1635de5c42a5-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: max-age=300 ETag: W/"e762c9be8367bcd5190ea932fef0fd3d" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin alt-svc: h3=":443"; ma=86400 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare
2025-03-25 02:47:59 UTC	862	IN	Data Raw: 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 31 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 55 43 49 45 62 7a 7a 75 31 4b 4f 2b 30 2b 59 79 78 4c 66 46 4c 74 32 4b 58 67 78 70 6d 42 43 54 4b 4b 62 2f 56 37 50 76 35 6a 68 73 47 53 41 69 45 41 67 57 43 6f 64 56 4b 31 32 55 72 54 70 77 4e 36 70 76 52 58 61 4b 44 48 34 4a 44 31 52 7a 44 51 65 52 34 2f 6b 37 71 6b 74 33 59 3d 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f Data Ascii: /* { "version": "1", "hash": "MEUCIEbzzu1KO+0+YyxLfFLt2KXgxpmBCTKKb/V7Pv5jhsGSAiEAgWCodVK12UrTpwN6pvRXaKDH4JD1RzDQeR4/k7qkt3Y=" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((functio
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 29 29 7d 72 5b 65 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 Data Ascii: ))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d Data Ascii: eferreds=null}function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function p(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 72 6e 28 22 50 6f 73 73 69 62 6c 65 20 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: rn("Possible Unhandled Promise Rejection:",e)};var d=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function f
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 54 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 6b 2c 45 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 28 65 29 7d 7d 2c 78 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 65 29 7d 7d 2c 56 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 Data Ascii: nction(e){e.labels.forEach((function(t){T[t]=e}))}))}));var k,E={"UTF-8":function(e){return new P(e)}},x={"UTF-8":function(e){return new U(e)}},V="utf-8";function S(e,t){if(!(this instanceof S))throw TypeError("Called as a function. Did you forget 'new'?"
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 55 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 76 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 66 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 66 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c Data Ascii: Object.defineProperty\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function U(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return v;if(0===i){if(f(s,0,127))return s;if(f(s,194,223))i=1,
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 78 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 77 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 76 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d Data Ascii: s._do_not_flush\|\|(this._decoder=x[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new w(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===v)break;null!=
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 37 33 34 33 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e Data Ascii: 7343)i.push(65533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 22 75 6e 77 72 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 Data Ascii: reak;case"unwrapKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.lengt
2025-03-25 02:47:59 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 Data Ascii: ction(e){return"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:47:59 UTC	639	OUT	GET /zGhnTT6t/image-1.png HTTP/1.1 Host: i.postimg.cc Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:00 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:48:00 GMT Content-Type: image/png Content-Length: 163080 Connection: close Last-Modified: Sun, 23 Mar 2025 14:53:25 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2025-03-25 02:48:00 UTC	3716	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 02 0d 08 06 00 00 00 61 dd d2 a7 00 00 00 b4 65 58 49 66 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 2f 19 01 00 e8 03 00 00 2f 19 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 00 05 00 00 03 a0 04 00 01 00 00 00 0d 02 00 00 00 00 00 00 46 61 79 b6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 Data Ascii: PNGIHDRaeXIfII*V^(if//02100100FaypHYs~ IDATx
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: 39 62 3f 80 61 e6 ea 20 9f 3f 4d 6b 6e 96 42 ce 2a 4e 9f 7b f6 97 b4 2e e7 ca 4a 81 b4 de a3 9e 75 6e a3 aa b7 2c 40 6e 6a 7d bd 17 0b fa 52 22 d7 0e 21 df 7d 7b a1 cf 1d cb 82 61 f8 a5 63 72 71 f3 75 81 cf 55 0e f2 fb 17 cd fe 78 ce 3a d8 83 e4 b2 3e 61 f4 07 43 a1 50 68 7d 8a 70 0d 53 4c 31 45 b7 70 f4 30 6d 67 7b 26 ed 70 db b8 ed 39 37 6a db 4e 0f db e6 e3 43 b6 e1 48 01 fb 9e 3d 30 50 2a 1c 7f b9 7a de a6 ea f9 b0 16 dc 5d bd 1e eb 03 62 fd 40 ac 25 08 a0 34 32 59 4c 05 6e 14 00 d2 39 09 a6 f4 8e 11 fe 8d 14 f0 ea 5c cf b4 9d ea 9e b6 93 9d d3 09 1e 9d a8 09 de 65 71 ec 7c 5f 25 79 99 9d 87 61 83 c5 67 ab a8 4d 84 75 ee 00 d8 10 3e 81 9b 5a d7 c1 03 6e 87 a8 b3 44 5d b5 70 74 1f c0 16 ef 83 38 79 31 2e 09 c4 0d 16 e7 cf c7 b7 76 4e 73 35 3d 48 13 2c Data Ascii: 9b?a ?MknBN{.Jun,@nj}R"!}{acrquUx:>aCPh}pSL1Ep0mg{&p97jNCH=0Pz]b@%42YLn9\eq\|_%yagMu>ZnD]pt8y1.vNs5=H,
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: de 7a 5c 21 0c 81 02 01 05 c3 20 60 61 38 0c 2b 07 73 08 6f 68 69 a9 53 ad 75 fa a9 82 d6 9c b5 15 f3 5e a5 16 75 04 5b b4 02 24 00 54 0f b3 de 21 03 9d c6 70 1a 29 ee 83 fa 83 f4 10 d6 a2 9c 36 6f de 9c 84 ef d8 07 30 8b e3 04 58 1e b0 78 6b 49 9f ef fa 72 8e e5 a6 53 a7 35 7d 5a b7 3c 48 54 78 a5 79 ae d0 57 a7 8c 13 56 ea 14 51 9d c6 ce e7 87 cf 0e ca 18 f5 8e 75 11 e2 73 c4 fa 87 30 91 ff ba 26 a2 4e 29 45 b9 32 5f 09 93 f8 5c f2 79 cc f5 5f b4 6f c3 fc 65 5d 52 cb 3d ae d5 88 e3 c8 67 94 0b e1 39 e3 cc f2 e2 3d 19 7f d6 59 7f 7f 7d 66 f4 98 82 4b bd 56 ad 78 59 ce aa b2 17 b4 6a f1 cb 67 87 16 91 b4 04 cc ad f3 a7 90 99 75 83 56 ab 3e ae b9 38 78 4b 62 b5 e4 d5 ba cb 70 18 4f b5 4e f6 e2 bd 98 bf 7a 0f 0f 7b 69 91 89 34 e0 79 45 5d 09 00 18 0a 85 42 Data Ascii: z\! `a8+sohiSu^u[$T!p)6o0XxkIrS5}Z<HTxyWVQus0&N)E2_\y_oe]R=g9=Y}fKVxYjguV>8xKbpONz{i4yE]B
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: c2 bf 60 23 04 54 2b 2b 3f dd 3b 07 93 3d f4 cc 01 51 0f fa 7c dc 19 ff 5c 5d 55 0b 7f 2d 47 cd 7f 05 88 5a 8f 7c fd 52 0b cc 9c d5 2b d7 44 cc 81 59 9d 2e ac e5 ed eb 0d 1d 7f f1 45 24 61 7a ee c5 65 ae 1e f3 19 62 f9 f3 3e cc 17 d6 1d 9d b9 a0 8e 7b f4 fa 9c b5 a1 82 75 4d 93 de c7 43 49 0d 43 9f 5b ef a4 43 81 ba b7 cc 2d f3 68 4d f8 4e c8 cf 34 ea cb 08 df 0e 35 f2 cc 6b 9b 53 e6 5d 3b 57 ae 2a ff 72 a1 4c fe 1e b9 97 11 5a 96 ac 33 7e 59 19 5d 1f 7a b5 ff 6b 42 a1 50 28 74 e3 55 f4 e3 8b 75 f6 c6 30 bd 76 ac 62 1d 83 d3 09 e0 c1 0a 10 53 79 61 d9 07 0b 3f ea f5 ea ef 1d 67 46 6c cf 39 4c db 1c 4b 5e 83 8f b6 8f db 89 ae c9 74 1d 00 22 c2 e8 1d ad 24 ab c2 31 c2 bf d9 85 a9 bf 17 2e 34 18 bf 14 c7 02 54 22 9e b3 b5 b8 d2 1a 10 ce 41 c6 a6 0b ab c0 91 Data Ascii: `#T++?;=Q\|\]U-GZ\|R+DY.E$azeb>{uMCIC[C-hMN45kS];W*rLZ3~Y]zkBP(tUu0vbSya?gFl9LK^t"$1.4T"A
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: da f4 8f d7 4f b1 e5 9a 5b 00 6b ba ce 1e 84 3f e5 d5 14 da 27 08 f9 ec c5 63 d0 6a c7 33 14 0a 5d bf f4 99 f6 5a ed b8 85 42 a1 d0 cd 54 b4 7f a1 7a f2 6b 60 f3 45 38 01 b1 ce 84 61 9f 7f 2d 6e 88 97 4e 03 c6 d8 03 e9 0b 00 18 0a d5 57 00 c0 50 68 05 b4 1e 01 a0 ff d3 45 1b a0 4e 80 74 0d d0 b5 a4 7a eb 21 84 42 a1 50 28 14 0a dd aa 6a 64 ed a7 d0 ed 2d 7a c2 e5 f8 63 7c 7c 3c f5 df 39 0b 09 2f f3 d1 bf 57 08 b8 16 b7 00 80 a1 d0 f2 14 00 30 14 5a 01 ad 37 00 c8 3f 5c 9a dc 23 ee 48 03 d2 03 57 e2 6d 6d 6d c9 9b 50 53 53 93 9d 3d 7b 36 14 0a 85 42 a1 50 28 14 0a ad b2 30 78 47 ff bc a5 a5 25 f5 d7 d1 6f 47 ff 1d fd 78 8c e5 31 16 51 08 b8 d6 c6 21 dc 02 00 86 42 cb 53 00 c0 50 68 05 b4 9e 00 20 d7 dc c0 9f 2d e0 1f de 1a e2 79 47 03 02 e8 77 ea d4 29 3b Data Ascii: O[k?'cj3]ZBTzk`E8a-nNWPhENtz!BP(jd-zc\|\|<9/W0Z7?\#HWmmmPSS={6BP(0xG%oGx1Q!BSPh -yGw);
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: 6f 0f 1b 98 6e 85 b5 2c 67 e4 83 96 a7 82 d9 b2 f0 b4 cc 1b 05 a9 65 f9 79 bd 79 b7 5c 79 88 c4 f4 30 af 7c 3d 2f cb 9b 46 ca cd 83 1f 0f 63 eb 81 b3 9b 51 df 1a cd 17 5f de f5 c4 bc cb a5 e9 46 c6 2d 57 07 73 e5 b4 1c 4b c4 5c 9b b1 14 60 5e 2f be be 8e 2d 16 e7 d8 62 8b 2d b6 d8 6e ec 16 00 30 00 60 28 a4 0a 00 18 0a ad 80 6e 77 00 88 f5 f4 70 3e 2d e2 00 61 10 06 21 20 a4 16 76 04 34 84 11 8d a8 d1 81 ba 4a 81 47 59 58 0a 2f bc b5 8f 1f e0 2a 2c d4 70 cb ac 84 ca 60 49 59 9c cb a0 89 86 41 6b 2e 05 93 c8 57 e4 af cf eb 32 40 59 66 f1 53 06 7e ea a5 6b 29 80 a8 5e ba 1b 49 3b c3 20 ec 64 3d 53 c8 8c ff 29 4e e3 d6 3c e0 7d 34 6c 1f 9e 42 5e 5a 82 6a fe f1 99 6d c4 7a ac d1 fc 69 24 ff 16 3b a6 9f 9a 26 4d 0f 9f 47 02 78 3e 87 cc 1b 6f b9 b5 58 7d cd 3d Data Ascii: on,geyy\y0\|=/FcQ_F-WsK\`^/-b-n0`(nwp>-a! v4JGYX/*,p`IYAk.W2@YfS~k)^I; d=S)N<}4lB^Zjmzi$;&MGx>oX}=
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: 92 8c e0 80 6b 7f e9 ba 64 3a c5 92 b0 15 d7 12 a0 2a 2c a2 90 7e 82 4f e6 11 e3 aa 40 8b d3 51 b5 3c 08 b7 08 8f d4 8a 12 e5 84 73 34 4c e4 b3 42 08 fc 91 01 d8 28 04 44 dd a3 15 17 2d 94 68 e1 85 df 1e 0e 12 be d0 0a 95 e0 93 56 7f 48 2f ce 67 bd 46 b8 84 37 ac 73 2c 5f 42 2b 5a a8 69 1a 78 2f 7e 67 39 e2 93 f1 23 64 f4 10 9d a0 14 f5 92 53 82 51 6e 5c 1b d2 03 40 c4 8d d6 6c 04 80 84 3a 84 81 5a a7 d5 ba 0b df 75 7a 27 9e 49 42 7f 5d 57 8f 53 8f 59 4f 14 b2 e7 a6 55 7b ab 45 b5 f8 53 8b 4f b5 46 d3 fa c6 3c d3 67 4b 9f 43 b5 d2 d3 7d 0a b8 58 e6 ac 93 ac 0f b4 26 45 1d 7a f2 c9 27 e7 eb 93 d6 29 5a 05 aa 45 a0 42 60 42 47 86 4d 21 3f 55 6c 2b 18 16 cb 42 01 a0 4e 0d 27 fc a3 a5 26 5f 62 20 df e8 f8 86 30 18 f9 8a 3c d5 97 24 8c 8f 82 6f 3e 4f ac c3 7c Data Ascii: kd:*,~O@Q<s4LB(D-hVH/gF7s,_B+Zix/~g9#dSQn\@l:Zuz'IB]WSYOU{ESOF<gKC}X&Ez')ZEB`BGM!?Ul+BN'&_b 0<$o>O\|
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: 4e fd a5 f5 df 5a 1c 7c de de 9b c2 bf 2b 35 f8 f7 6e b5 83 f0 76 55 17 cc de 9d a9 aa 62 f6 ce 94 d9 a5 c9 ea 67 4d ef 56 f5 5e 75 df fb d3 66 97 ab c7 df af ea f2 4c a1 2b 8b eb 03 ea 72 46 b5 63 8d 84 13 0a 5d ad d9 9a aa 75 17 60 fa 03 c2 40 b5 06 64 67 fa d6 6b 8b 02 00 06 00 0c 85 54 01 00 43 eb 4a 00 80 1d 5d bd d6 d4 de 6b 47 cf f7 da 6e 4c ff 7d ab df 1e 7a a3 df be b8 71 d0 fe f6 c9 21 fb b3 87 86 93 e5 df 87 ef 19 b5 9f bd 73 d4 7e f2 4b 63 f6 e3 5f 1c b3 1f 83 be b0 82 fa e2 82 7e f4 8b e3 d5 cf 42 3f fe a5 71 fb 89 aa 7e ea 8e 71 fb d0 57 26 ec 17 bf 36 61 1f b9 6f c2 7e f7 db 53 f6 1f 7f 30 65 7f fd 64 c5 3e be 61 c6 ee da 76 c1 7e f8 d6 45 db 78 12 10 f0 9d 04 01 3b 6b 96 80 33 37 d1 12 b0 51 00 88 8e 05 a6 3f c2 fa 09 1d 09 0c 90 f1 c7 8c Data Ascii: NZ\|+5nvUbgMV^ufL+rFc]u`@dgkTCJ]kGnL}zq!s~Kc_~B?q~qW&6ao~S0ed>av~Ex;k37Q?
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: b0 de ae 9d 5b 67 57 cf ad 4d c2 ac b1 4b a7 56 db 45 c2 9f 59 63 d7 ce af b3 eb 17 f2 61 6e 5c e2 da e4 ba 6b 5b ac fe da 56 6b b8 b1 c5 1a 6f 6c b5 a6 ea 6d a9 d8 af 27 de ab 49 bc 97 37 5a 35 71 5f 5c 9f 5c bf 3e d9 df 98 5e d7 5c bb c3 da 1b 77 5b 4f db 7e eb ef 3c 64 c3 3d e5 36 d6 7f c4 c6 07 8e 25 79 3d 66 16 f5 48 8a ba c9 25 75 34 de 7f d4 46 7b 8f d8 48 cf 61 1b ea 2a b3 81 a4 0e 7b db 0e 58 4f eb 01 eb 6e 01 ee ee 4f f7 fb da 0f 26 e7 ca 93 fa 3d 96 5a 05 8e 0d 24 ed 77 08 2b c0 a4 2d a7 6e c0 9d f9 79 00 73 43 11 00 3e 82 ef cd 08 00 a3 a2 ee 4e 11 00 46 95 94 ee 09 00 fe 30 6f 91 07 90 03 ce 7d fc 99 3c e4 fb cc 0b 6d f6 0b d3 da d3 55 78 7f 09 bd 98 ec 17 f4 b9 a9 ed f6 f3 c9 f9 4f 03 06 93 b0 9f 44 c9 75 ff 33 11 e0 10 48 47 1c 1e 1e fe 5c Data Ascii: [gWMKVEYcan\k[Vkolm'I7Z5q_\\>^\w[O~<d=6%y=fH%u4F{Ha*{XOnO&=Z$w+-nysC>NF0o}<mUxODu3HG\
2025-03-25 02:48:00 UTC	4096	IN	Data Raw: 4f 8e a9 5d f9 30 02 3c be ad 91 2f dd 97 fb d0 16 68 1b d4 83 ac 31 fd 82 1e d4 09 f5 e4 ad c8 94 5e ef f6 1d 5a 66 ca 82 8c eb 88 df cf 49 a9 7b 68 8e 44 9e 39 c2 09 90 85 56 6a 2a 7f 59 37 ca 8a 96 7c 78 c0 2c 0b 36 81 59 59 01 7a 77 73 2d 0c 23 37 7f 59 fa fa 67 42 75 ad 7b 90 26 ea 98 f7 82 e6 ed 94 34 1f 9f 4f 3f 65 2b e0 ab 77 8e 8e a9 0d 2a 5e a5 99 fb cb 72 31 04 f5 02 8b c4 e1 ad 40 fd 3b 41 00 50 65 1e 02 40 dd 5b cf 30 6d 87 77 93 07 c7 7a 77 29 6e 7d 72 0d d7 93 3f e2 a6 0c 68 2b 0c 7a e9 a3 e2 06 1c 01 e0 fd da dc 2a c0 63 03 96 1b ee b4 dc 40 93 e5 7a af 59 ae e3 b4 e5 5a 8e 58 ae 61 af e5 6a b7 d9 f8 8d 0d 36 7c 75 b5 f5 5d 5c 6e 1d 67 97 5a fd 89 85 76 f9 c8 3c 3b b1 7f b6 95 ef 7c c3 f6 6e 79 d5 76 6c 78 c5 36 af 9d 66 eb 57 e5 41 df da Data Ascii: O]0</h1^ZfI{hD9VjY7\|x,6YYzws-#7YgBu{&4O?e+w^r1@;APe@[0mwzw)n}r?h+z*c@zYZXaj6\|u]\ngZv<;\|nyvlx6fWA

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:48:00 UTC	804	OUT	GET /captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:00 UTC	572	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:48:00 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 925b163b0b978c60-EWR
2025-03-25 02:48:00 UTC	797	IN	Data Raw: 37 64 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 38 33 34 36 35 39 30 66 34 34 61 39 65 62 39 32 30 31 63 61 61 65 65 63 37 39 61 63 33 30 39 38 36 36 31 37 39 36 64 61 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 7d58<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-8346590f44a9eb9201caaeec79ac3098661796da"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 Data Ascii: n:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selecti
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 69 66 28 21 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 69 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 6f 3d 69 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 69 66 28 6e 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: if(!t\|\|"undefined"==typeof t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var i=Array.prototype.slice.call(t);if(0===i.length)return e([]);var o=i.length;function r(t,n){if(n&&("object"==t
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 68 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 69 3d 6e 2c 6f 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 63 61 74 63 68 28 72 29 7b 63 28 74 2c 72 29 7d 76 61 72 20 69 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 Data Ascii: instanceof s)return t._state=3,t._value=e,void h(t);if("function"==typeof n)return void f((i=n,o=e,function(){i.apply(o,arguments)}),t)}t._state=1,t._value=e,h(t)}catch(r){c(t,r)}var i,o}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._sta
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 3d 3d 3d 73 3f 74 3a 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 73 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 73 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 6f 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 72 3b 69 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 69 5d 29 2e 74 68 Data Ascii: ===s?t:new s((function(e){e(t)}))},s.reject=function(t){return new s((function(e,n){n(t)}))},s.race=function(t){return new s((function(e,n){if(!o(t))return n(new TypeError("Promise.race accepts an array"));for(var i=0,r=t.length;i<r;i++)s.resolve(t[i]).th
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 65 2e 73 68 69 66 74 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 74 29 7d 7d 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 69 66 28 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 36 35 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: rray(t))for(var e=t;e.length;)this.tokens.unshift(e.shift());else this.tokens.unshift(t)}};var v=-1;function w(t,e){if(t)throw TypeError("Decoder error");return e\|\|65533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 22 29 3b 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 2c 74 68 69 73 2e 5f 66 61 74 61 6c 3d 65 2e 66 61 74 61 6c 3f 22 66 61 74 61 6c 22 3a 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3b 76 61 72 20 6e 3d 74 68 69 73 3b 69 66 28 65 2e 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 61 6c 6c 6f 77 4c 65 67 61 63 79 45 6e 63 6f 64 69 6e 67 29 7b 76 61 72 20 69 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 56 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 69 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 69 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e Data Ascii: ");e=y(e),this._encoding=null,this._encoder=null,this._do_not_flush=!1,this._fatal=e.fatal?"fatal":"replacement";var n=this;if(e.NONSTANDARD_allowLegacyEncoding){var i=x(t=t!==undefined?String(t):V);if(null===i\|\|"replacement"===i.name)throw RangeError("Un
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 54 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 74 61 6c 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 54 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 67 6e 6f 72 65 42 4f 4d 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 54 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3b 6e 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 Data Ascii: t.defineProperty(T.prototype,"fatal",{get:function(){return"fatal"===this._error_mode}}),Object.defineProperty(T.prototype,"ignoreBOM",{get:function(){return this._ignoreBOM}})),T.prototype.decode=function(t,e){var n;n="object"==typeof t&&t instanceof Arr
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 22 22 3a 53 74 72 69 6e 67 28 74 29 2c 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c Data Ascii: prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),S.prototype.encode=function(t,e){t=t===undefined?"":String(t),e=y(e),this._do_not_flush\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_fl
2025-03-25 02:48:00 UTC	1369	IN	Data Raw: 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 7d 2c 63 3d 7b 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 3a 22 4b 6f 5a 49 68 76 63 4e 41 51 45 42 22 7d 3b 69 66 28 5b 22 67 65 6e 65 72 61 74 65 4b 65 79 22 2c 22 69 6d 70 6f 72 74 4b 65 79 22 2c 22 75 6e 77 72 61 70 4b 65 79 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 6e 5b 74 5d 3b 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 64 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 6f 29 2c 68 3d 72 2c 75 3d 6c 3b 62 Data Ascii: IhvcNAQEB:"1.2.840.113549.1.1.1"},c={"1.2.840.113549.1.1.1":"KoZIhvcNAQEB"};if(["generateKey","importKey","unwrapKey"].forEach((function(t){var i=n[t];n[t]=function(o,r,l){var c,h,u,d,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(o),h=r,u=l;b

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:48:01 UTC	806	OUT	POST /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:01 UTC	587	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:48:01 GMT Content-Type: application/json Content-Length: 797 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b1640c9bbc472-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:48:01 UTC	782	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 78 4e 69 77 69 64 43 49 36 49 6e 63 69 4c 43 4a 6b 49 6a 6f 69 53 7a 4e 6e 64 32 67 79 5a 6d 73 72 52 6e 46 6a 64 55 39 6d 55 6a 52 79 64 57 46 4c 54 6d 73 77 64 47 35 6d 4b 31 5a 30 53 56 6b 34 5a 58 6f 7a 59 6e 52 30 4b 32 74 32 63 30 59 33 57 56 59 78 55 6d 6c 69 4f 55 31 4e 51 7a 5a 42 56 7a 42 6b 4d 46 67 35 61 31 68 76 51 58 51 31 4b 32 74 59 51 55 56 6a 52 6b 4e 43 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoxNiwidCI6InciLCJkIjoiSzNnd2gyZmsrRnFjdU9mUjRydWFLTmswdG5mK1Z0SVk4ZXozYnR0K2t2c0Y3WVYxUmliOU1NQzZBVzBkMFg5a1hvQXQ1K2tYQUVjRkNC
2025-03-25 02:48:01 UTC	15	IN	Data Raw: 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d Data Ascii: "},"pass":true}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:48:01 UTC	715	OUT	GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/8346590f44a9eb9201caaeec79ac3098661796da/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:01 UTC	462	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:48:01 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"7bd876c8f9f3642a65f0c04e462ef689" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b1643cc4c180d-EWR
2025-03-25 02:48:01 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 4b 58 61 4b 59 6d 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 72 3d 66 75 6e 63 74 69 6f 6e 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 72 3f 28 74 68 69 73 2e 72 65 6d 61 69 6e 64 65 72 3d 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 65 3f 44 77 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 2c 63 47 29 3a 76 6f 69 64 20 30 3d 3d 3d 63 47 3f 44 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 29 3a 76 6f 69 64 20 42 77 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 3a 6e 65 77 20 64 72 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7d 2c 44 4a 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: 7dc6var hsw=function KXaKYm(){"use strict";var dr=function(de,cG,rg,tZ){return this instanceof dr?(this.remainder=null,"string"==typeof de?Dw.call(this,de,cG):void 0===cG?DJ.call(this,de):void Bw.apply(this,arguments)):new dr(de,cG,rg,tZ)},DJ=function(d
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 2e 75 62 5b 64 77 28 32 33 35 29 5d 7c 7c 28 56 4a 3d 6a 78 28 49 6e 74 33 32 41 72 72 61 79 2c 79 43 2e 75 62 5b 64 77 28 64 72 29 5d 29 29 2c 56 4a 7d 2c 70 5a 3d 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 2c 64 65 29 7b 79 43 2e 4f 62 28 64 72 2c 44 4a 2c 44 76 28 64 65 29 29 7d 3b 76 61 72 20 76 4c 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 66 6f 72 28 44 4a 3d 55 63 2c 64 65 3d 6e 65 77 20 41 72 72 61 79 28 64 72 5b 44 4a 28 33 35 33 29 5d 29 2c 63 47 3d 30 2c 72 67 3d 64 72 5b 44 4a 28 33 35 33 29 5d 2c 76 6f 69 64 20 30 3b 63 47 3c 72 67 3b 63 47 2b 2b 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3b 76 61 72 20 72 67 3b 64 65 5b 63 47 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 72 5b 63 47 5d 29 7d 72 65 Data Ascii: .ub[dw(235)]\|\|(VJ=jx(Int32Array,yC.ub[dw(dr)])),VJ},pZ=function(dr,DJ,de){yC.Ob(dr,DJ,Dv(de))};var vL=function(dr){for(DJ=Uc,de=new Array(dr[DJ(353)]),cG=0,rg=dr[DJ(353)],void 0;cG<rg;cG++){var DJ;var de;var cG;var rg;de[cG]=String.fromCharCode(dr[cG])}re
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 65 6a 35 73 77 71 22 2c 22 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 61 22 2c 22 44 67 39 65 79 78 72 48 76 76 6a 6d 22 2c 22 7a 67 66 30 79 71 22 2c 22 42 33 6a 50 7a 32 4c 55 22 2c 22 43 67 58 31 7a 32 4c 55 43 57 22 2c 22 43 67 58 48 44 67 7a 56 43 4d 30 22 2c 22 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 22 2c 22 42 67 66 55 7a 33 76 48 7a 32 75 22 2c 22 7a 32 76 30 72 77 35 30 43 4d 4c 4c 43 30 6a 35 76 68 4c 57 7a 71 22 2c 22 41 77 35 50 44 67 4c 48 44 67 39 59 76 68 4c 57 7a 71 22 2c 22 79 78 7a 48 41 77 58 78 41 77 72 30 41 61 22 2c 22 79 78 7a 48 41 77 58 69 7a 77 4c 4e 41 68 71 22 2c 22 44 32 4c 4b 44 67 47 22 2c 22 41 67 76 50 7a 32 48 30 22 2c 22 79 32 39 53 42 33 6a 65 7a 78 Data Ascii: XLBwvUDej5swq","AgfZqxr0CMLIDxrL","z2v0q29UDgv4Da","Dg9eyxrHvvjm","zgf0yq","B3jPz2LU","CgX1z2LUCW","CgXHDgzVCM0","DxnLCKfNzw50","BgfUz3vHz2u","z2v0rw50CMLLC0j5vhLWzq","Aw5PDgLHDg9YvhLWzq","yxzHAwXxAwr0Aa","yxzHAwXizwLNAhq","D2LKDgG","AgvPz2H0","y29SB3jezx
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 4a 29 7b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3d 43 4b 3b 76 61 72 20 72 67 3d 64 72 5b 63 47 28 70 63 29 5d 28 44 4a 29 3b 69 66 28 72 67 29 7b 76 61 72 20 74 5a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 67 29 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 3b 69 66 28 74 5a 3f 28 47 58 5b 63 47 28 37 34 32 29 5d 5b 63 47 28 38 36 39 29 5d 28 47 58 2c 72 67 29 2c 68 68 5b 63 47 28 44 6b 29 5d 28 64 4a 28 5b 5d 2c 72 67 2c 21 30 29 29 29 3a 28 63 47 28 35 37 39 29 3d 3d 74 79 70 65 6f 66 20 72 67 26 26 47 58 5b 63 47 28 37 34 32 29 5d 28 72 67 29 2c 68 68 5b 63 47 28 37 34 32 29 5d 28 72 67 29 29 2c 21 47 6c 29 72 65 74 75 72 6e 3b 76 Data Ascii: J){var de;var cG=CK;var rg=dr[cG(pc)](DJ);if(rg){var tZ=Array.isArray(rg)\|\|rg instanceof Int32Array\|\|rg instanceof Float32Array;if(tZ?(GX[cG(742)][cG(869)](GX,rg),hh[cG(Dk)](dJ([],rg,!0))):(cG(579)==typeof rg&&GX[cG(742)](rg),hh[cG(742)](rg)),!Gl)return;v
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 3d 3d 64 77 28 32 35 34 29 29 7b 76 61 72 20 44 24 3d 64 72 5b 64 77 28 32 35 35 29 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 44 24 3f 64 77 28 64 65 29 3a 64 77 28 63 47 29 2b 44 24 2b 22 29 22 7d 69 66 28 44 6b 3d 3d 64 77 28 72 67 29 29 7b 76 61 72 20 4c 74 3d 64 72 5b 64 77 28 32 35 39 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 4c 74 3d 3d 64 77 28 32 35 33 29 26 26 4c 74 5b 64 77 28 32 34 36 29 5d 3e 30 3f 64 77 28 32 36 30 29 2b 4c 74 2b 22 29 22 3a 64 77 28 32 36 31 29 7d 69 66 28 41 72 72 61 79 5b 64 77 28 74 5a 29 5d 28 64 72 29 29 7b 76 61 72 20 5f 75 3d 64 72 5b 64 77 28 70 5a 29 5d 3b 76 61 72 20 43 55 3d 22 5b 22 3b 5f 75 3e 30 26 26 28 43 55 2b 3d 70 63 28 64 72 5b 30 5d 29 29 3b 66 6f 72 28 76 61 72 20 6c 65 3d 31 3b 6c 65 3c 5f Data Ascii: ==dw(254)){var D$=dr[dw(255)];return null==D$?dw(de):dw(cG)+D$+")"}if(Dk==dw(rg)){var Lt=dr[dw(259)];return typeof Lt==dw(253)&&Lt[dw(246)]>0?dw(260)+Lt+")":dw(261)}if(Array[dw(tZ)](dr)){var _u=dr[dw(pZ)];var CU="[";_u>0&&(CU+=pc(dr[0]));for(var le=1;le<_
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 6c 65 28 70 63 29 3b 69 66 28 70 5a 3d 5b 5d 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 5b 6c 65 28 44 6b 29 5d 2e 74 6f 53 74 72 69 6e 67 5b 6c 65 28 44 24 29 5d 28 66 67 29 29 7b 66 6f 72 28 74 5a 3d 66 67 5b 6c 65 28 4c 74 29 5d 2c 64 65 3d 30 3b 64 65 3c 74 5a 3b 64 65 2b 3d 31 29 70 5a 5b 64 65 5d 3d 5f 75 28 64 65 2c 66 67 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 72 67 3d 30 3d 3d 3d 70 5a 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 70 5a 5b 6c 65 28 33 33 30 29 5d 28 22 2c 22 29 2b 22 5d 22 7d 66 6f 72 28 63 47 20 69 6e 20 66 67 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 65 28 36 37 39 29 5d 2e 63 61 6c 6c 28 66 67 2c 63 47 29 26 26 28 72 67 3d 5f 75 28 63 47 Data Ascii: )return le(pc);if(pZ=[],"[object Array]"===Object[le(Dk)].toString[le(D$)](fg)){for(tZ=fg[le(Lt)],de=0;de<tZ;de+=1)pZ[de]=_u(de,fg)\|\|"null";return rg=0===pZ.length?"[]":"["+pZ[le(330)](",")+"]"}for(cG in fg)Object.prototype[le(679)].call(fg,cG)&&(rg=_u(cG
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 36 34 41 72 72 61 79 7d 2c 68 3a 66 67 3d 3d 74 72 75 65 3f 22 5f 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 Data Ascii: y\|\|dr instanceof Uint8Array\|\|dr instanceof Uint8ClampedArray\|\|dr instanceof Int16Array\|\|dr instanceof Uint16Array\|\|dr instanceof Int32Array\|\|dr instanceof Uint32Array\|\|dr instanceof Float32Array\|\|dr instanceof Float64Array},h:fg==true?"_":function(){var d
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 71 65 2c 71 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 61 4c 28 38 39 30 29 5d 28 71 65 29 3b 74 72 79 7b 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6f 70 65 6e 44 61 74 61 62 61 73 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 43 59 28 21 31 29 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 77 69 6e 64 6f 77 5b 61 4c 28 35 36 32 29 5d 5b 61 4c 28 33 32 38 29 5d 28 71 65 2c 31 29 5b 61 4c 28 64 65 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3d 61 4c 3b 76 61 72 20 76 4c 3d 6e 75 6c 6c 3d 3d 3d 28 44 4a 3d 64 72 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 Data Ascii: orage.setItem(qe,qe),localStorage[aL(890)](qe);try{"openDatabase"in window&&openDatabase(null,null,null,null),CY(!1)}catch(dr){CY(!0)}}catch(dr){CY(!0)}window[aL(562)][aL(328)](qe,1)[aL(de)]=function(dr){var DJ;var de=aL;var vL=null===(DJ=dr.target)\|\|void
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 44 4a 29 5d 28 29 5b 63 47 28 64 65 29 5d 29 7d 63 61 74 63 68 28 64 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 21 44 6b 3f 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 72 65 74 75 72 6e 20 35 37 7c 64 72 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 72 3d 55 63 3b 72 65 74 75 72 6e 20 64 72 28 37 33 37 29 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 64 72 28 33 32 32 29 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 3f 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 28 29 3a 44 61 74 65 5b 64 72 28 38 38 37 29 5d 28 29 7d 2c 21 70 7a 3f 66 61 6c 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 76 61 72 20 64 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: DJ)]()[cG(de)])}catch(dr){return null}},!Dk?function(dr,DJ){return 57\|dr}:function(){var dr=Uc;return dr(737)!=typeof performance&&dr(322)==typeof performance[dr(887)]?performance[dr(887)]():Date[dr(887)]()},!pz?false:function(dr,DJ){var de;try{return nul
2025-03-25 02:48:01 UTC	1369	IN	Data Raw: 67 29 5d 2c 71 65 5b 76 4c 28 74 5a 29 5d 5d 2c 43 59 26 26 5b 43 59 5b 76 4c 28 33 32 30 29 5d 2c 43 59 2e 72 61 6e 67 65 4d 61 78 2c 43 59 5b 76 4c 28 70 5a 29 5d 5d 2c 61 4c 26 26 5b 61 4c 5b 76 4c 28 33 32 30 29 5d 2c 61 4c 5b 76 4c 28 36 33 37 29 5d 2c 61 4c 5b 76 4c 28 38 32 39 29 5d 5d 2c 43 4c 26 26 5b 43 4c 2e 70 72 65 63 69 73 69 6f 6e 2c 43 4c 2e 72 61 6e 67 65 4d 61 78 2c 43 4c 2e 72 61 6e 67 65 4d 69 6e 5d 5d 7d 2c 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3d 37 33 32 3b 76 61 72 20 64 65 3d 36 32 30 3b 76 61 72 20 63 47 3d 38 36 36 3b 76 61 72 20 72 67 3d 55 63 3b 72 65 74 75 72 6e 20 50 55 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 50 55 5b 72 67 28 33 34 37 29 5d 28 64 72 29 3f 22 5c 22 22 2b 64 72 5b 72 67 28 34 34 35 Data Ascii: g)],qe[vL(tZ)]],CY&&[CY[vL(320)],CY.rangeMax,CY[vL(pZ)]],aL&&[aL[vL(320)],aL[vL(637)],aL[vL(829)]],CL&&[CL.precision,CL.rangeMax,CL.rangeMin]]},Gn=function(dr){var DJ=732;var de=620;var cG=866;var rg=Uc;return PU.lastIndex=0,PU[rg(347)](dr)?"\""+dr[rg(445

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:48:01 UTC	529	OUT	GET /checksiteconfig?v=8346590f44a9eb9201caaeec79ac3098661796da&host=jainiklifesciences.com&sitekey=1944dfca-21c2-483c-9d9a-cfdc77ccf870&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:02 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:48:02 GMT Content-Type: application/json Content-Length: 797 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b16446c257095-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:48:02 UTC	797	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 78 4e 69 77 69 64 43 49 36 49 6e 63 69 4c 43 4a 6b 49 6a 6f 69 51 32 6c 4f 63 32 46 55 56 47 74 57 62 57 39 6f 4e 6d 4d 79 5a 45 55 30 65 57 74 71 63 32 64 77 61 54 52 68 56 55 6b 32 51 58 4a 55 57 6d 70 44 51 56 64 47 54 55 6f 30 5a 45 35 69 5a 6d 35 4a 65 54 5a 68 62 58 5a 61 62 46 4a 54 59 6b 5a 72 56 47 4a 79 54 53 39 31 53 54 45 31 5a 57 73 77 5a 48 63 77 65 6d 45 34 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoxNiwidCI6InciLCJkIjoiQ2lOc2FUVGtWbW9oNmMyZEU0eWtqc2dwaTRhVUk2QXJUWmpDQVdGTUo0ZE5iZm5JeTZhbXZabFJTYkZrVGJyTS91STE1ZWswZHcwemE4

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:48:07 UTC	396	OUT	GET /zGhnTT6t/image-1.png HTTP/1.1 Host: i.postimg.cc Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:48:07 UTC	380	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:48:07 GMT Content-Type: image/png Content-Length: 163080 Connection: close Last-Modified: Sun, 23 Mar 2025 14:53:25 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2025-03-25 02:48:07 UTC	3716	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 00 00 00 02 0d 08 06 00 00 00 61 dd d2 a7 00 00 00 b4 65 58 49 66 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 2f 19 01 00 e8 03 00 00 2f 19 01 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 00 05 00 00 03 a0 04 00 01 00 00 00 0d 02 00 00 00 00 00 00 46 61 79 b6 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 Data Ascii: PNGIHDRaeXIfII*V^(if//02100100FaypHYs~ IDATx
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: 39 62 3f 80 61 e6 ea 20 9f 3f 4d 6b 6e 96 42 ce 2a 4e 9f 7b f6 97 b4 2e e7 ca 4a 81 b4 de a3 9e 75 6e a3 aa b7 2c 40 6e 6a 7d bd 17 0b fa 52 22 d7 0e 21 df 7d 7b a1 cf 1d cb 82 61 f8 a5 63 72 71 f3 75 81 cf 55 0e f2 fb 17 cd fe 78 ce 3a d8 83 e4 b2 3e 61 f4 07 43 a1 50 68 7d 8a 70 0d 53 4c 31 45 b7 70 f4 30 6d 67 7b 26 ed 70 db b8 ed 39 37 6a db 4e 0f db e6 e3 43 b6 e1 48 01 fb 9e 3d 30 50 2a 1c 7f b9 7a de a6 ea f9 b0 16 dc 5d bd 1e eb 03 62 fd 40 ac 25 08 a0 34 32 59 4c 05 6e 14 00 d2 39 09 a6 f4 8e 11 fe 8d 14 f0 ea 5c cf b4 9d ea 9e b6 93 9d d3 09 1e 9d a8 09 de 65 71 ec 7c 5f 25 79 99 9d 87 61 83 c5 67 ab a8 4d 84 75 ee 00 d8 10 3e 81 9b 5a d7 c1 03 6e 87 a8 b3 44 5d b5 70 74 1f c0 16 ef 83 38 79 31 2e 09 c4 0d 16 e7 cf c7 b7 76 4e 73 35 3d 48 13 2c Data Ascii: 9b?a ?MknBN{.Jun,@nj}R"!}{acrquUx:>aCPh}pSL1Ep0mg{&p97jNCH=0Pz]b@%42YLn9\eq\|_%yagMu>ZnD]pt8y1.vNs5=H,
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: de 7a 5c 21 0c 81 02 01 05 c3 20 60 61 38 0c 2b 07 73 08 6f 68 69 a9 53 ad 75 fa a9 82 d6 9c b5 15 f3 5e a5 16 75 04 5b b4 02 24 00 54 0f b3 de 21 03 9d c6 70 1a 29 ee 83 fa 83 f4 10 d6 a2 9c 36 6f de 9c 84 ef d8 07 30 8b e3 04 58 1e b0 78 6b 49 9f ef fa 72 8e e5 a6 53 a7 35 7d 5a b7 3c 48 54 78 a5 79 ae d0 57 a7 8c 13 56 ea 14 51 9d c6 ce e7 87 cf 0e ca 18 f5 8e 75 11 e2 73 c4 fa 87 30 91 ff ba 26 a2 4e 29 45 b9 32 5f 09 93 f8 5c f2 79 cc f5 5f b4 6f c3 fc 65 5d 52 cb 3d ae d5 88 e3 c8 67 94 0b e1 39 e3 cc f2 e2 3d 19 7f d6 59 7f 7f 7d 66 f4 98 82 4b bd 56 ad 78 59 ce aa b2 17 b4 6a f1 cb 67 87 16 91 b4 04 cc ad f3 a7 90 99 75 83 56 ab 3e ae b9 38 78 4b 62 b5 e4 d5 ba cb 70 18 4f b5 4e f6 e2 bd 98 bf 7a 0f 0f 7b 69 91 89 34 e0 79 45 5d 09 00 18 0a 85 42 Data Ascii: z\! `a8+sohiSu^u[$T!p)6o0XxkIrS5}Z<HTxyWVQus0&N)E2_\y_oe]R=g9=Y}fKVxYjguV>8xKbpONz{i4yE]B
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: c2 bf 60 23 04 54 2b 2b 3f dd 3b 07 93 3d f4 cc 01 51 0f fa 7c dc 19 ff 5c 5d 55 0b 7f 2d 47 cd 7f 05 88 5a 8f 7c fd 52 0b cc 9c d5 2b d7 44 cc 81 59 9d 2e ac e5 ed eb 0d 1d 7f f1 45 24 61 7a ee c5 65 ae 1e f3 19 62 f9 f3 3e cc 17 d6 1d 9d b9 a0 8e 7b f4 fa 9c b5 a1 82 75 4d 93 de c7 43 49 0d 43 9f 5b ef a4 43 81 ba b7 cc 2d f3 68 4d f8 4e c8 cf 34 ea cb 08 df 0e 35 f2 cc 6b 9b 53 e6 5d 3b 57 ae 2a ff 72 a1 4c fe 1e b9 97 11 5a 96 ac 33 7e 59 19 5d 1f 7a b5 ff 6b 42 a1 50 28 74 e3 55 f4 e3 8b 75 f6 c6 30 bd 76 ac 62 1d 83 d3 09 e0 c1 0a 10 53 79 61 d9 07 0b 3f ea f5 ea ef 1d 67 46 6c cf 39 4c db 1c 4b 5e 83 8f b6 8f db 89 ae c9 74 1d 00 22 c2 e8 1d ad 24 ab c2 31 c2 bf d9 85 a9 bf 17 2e 34 18 bf 14 c7 02 54 22 9e b3 b5 b8 d2 1a 10 ce 41 c6 a6 0b ab c0 91 Data Ascii: `#T++?;=Q\|\]U-GZ\|R+DY.E$azeb>{uMCIC[C-hMN45kS];W*rLZ3~Y]zkBP(tUu0vbSya?gFl9LK^t"$1.4T"A
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: da f4 8f d7 4f b1 e5 9a 5b 00 6b ba ce 1e 84 3f e5 d5 14 da 27 08 f9 ec c5 63 d0 6a c7 33 14 0a 5d bf f4 99 f6 5a ed b8 85 42 a1 d0 cd 54 b4 7f a1 7a f2 6b 60 f3 45 38 01 b1 ce 84 61 9f 7f 2d 6e 88 97 4e 03 c6 d8 03 e9 0b 00 18 0a d5 57 00 c0 50 68 05 b4 1e 01 a0 ff d3 45 1b a0 4e 80 74 0d d0 b5 a4 7a eb 21 84 42 a1 50 28 14 0a dd aa 6a 64 ed a7 d0 ed 2d 7a c2 e5 f8 63 7c 7c 3c f5 df 39 0b 09 2f f3 d1 bf 57 08 b8 16 b7 00 80 a1 d0 f2 14 00 30 14 5a 01 ad 37 00 c8 3f 5c 9a dc 23 ee 48 03 d2 03 57 e2 6d 6d 6d c9 9b 50 53 53 93 9d 3d 7b 36 14 0a 85 42 a1 50 28 14 0a ad b2 30 78 47 ff bc a5 a5 25 f5 d7 d1 6f 47 ff 1d fd 78 8c e5 31 16 51 08 b8 d6 c6 21 dc 02 00 86 42 cb 53 00 c0 50 68 05 b4 9e 00 20 d7 dc c0 9f 2d e0 1f de 1a e2 79 47 03 02 e8 77 ea d4 29 3b Data Ascii: O[k?'cj3]ZBTzk`E8a-nNWPhENtz!BP(jd-zc\|\|<9/W0Z7?\#HWmmmPSS={6BP(0xG%oGx1Q!BSPh -yGw);
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: 6f 0f 1b 98 6e 85 b5 2c 67 e4 83 96 a7 82 d9 b2 f0 b4 cc 1b 05 a9 65 f9 79 bd 79 b7 5c 79 88 c4 f4 30 af 7c 3d 2f cb 9b 46 ca cd 83 1f 0f 63 eb 81 b3 9b 51 df 1a cd 17 5f de f5 c4 bc cb a5 e9 46 c6 2d 57 07 73 e5 b4 1c 4b c4 5c 9b b1 14 60 5e 2f be be 8e 2d 16 e7 d8 62 8b 2d b6 d8 6e ec 16 00 30 00 60 28 a4 0a 00 18 0a ad 80 6e 77 00 88 f5 f4 70 3e 2d e2 00 61 10 06 21 20 a4 16 76 04 34 84 11 8d a8 d1 81 ba 4a 81 47 59 58 0a 2f bc b5 8f 1f e0 2a 2c d4 70 cb ac 84 ca 60 49 59 9c cb a0 89 86 41 6b 2e 05 93 c8 57 e4 af cf eb 32 40 59 66 f1 53 06 7e ea a5 6b 29 80 a8 5e ba 1b 49 3b c3 20 ec 64 3d 53 c8 8c ff 29 4e e3 d6 3c e0 7d 34 6c 1f 9e 42 5e 5a 82 6a fe f1 99 6d c4 7a ac d1 fc 69 24 ff 16 3b a6 9f 9a 26 4d 0f 9f 47 02 78 3e 87 cc 1b 6f b9 b5 58 7d cd 3d Data Ascii: on,geyy\y0\|=/FcQ_F-WsK\`^/-b-n0`(nwp>-a! v4JGYX/*,p`IYAk.W2@YfS~k)^I; d=S)N<}4lB^Zjmzi$;&MGx>oX}=
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: 92 8c e0 80 6b 7f e9 ba 64 3a c5 92 b0 15 d7 12 a0 2a 2c a2 90 7e 82 4f e6 11 e3 aa 40 8b d3 51 b5 3c 08 b7 08 8f d4 8a 12 e5 84 73 34 4c e4 b3 42 08 fc 91 01 d8 28 04 44 dd a3 15 17 2d 94 68 e1 85 df 1e 0e 12 be d0 0a 95 e0 93 56 7f 48 2f ce 67 bd 46 b8 84 37 ac 73 2c 5f 42 2b 5a a8 69 1a 78 2f 7e 67 39 e2 93 f1 23 64 f4 10 9d a0 14 f5 92 53 82 51 6e 5c 1b d2 03 40 c4 8d d6 6c 04 80 84 3a 84 81 5a a7 d5 ba 0b df 75 7a 27 9e 49 42 7f 5d 57 8f 53 8f 59 4f 14 b2 e7 a6 55 7b ab 45 b5 f8 53 8b 4f b5 46 d3 fa c6 3c d3 67 4b 9f 43 b5 d2 d3 7d 0a b8 58 e6 ac 93 ac 0f b4 26 45 1d 7a f2 c9 27 e7 eb 93 d6 29 5a 05 aa 45 a0 42 60 42 47 86 4d 21 3f 55 6c 2b 18 16 cb 42 01 a0 4e 0d 27 fc a3 a5 26 5f 62 20 df e8 f8 86 30 18 f9 8a 3c d5 97 24 8c 8f 82 6f 3e 4f ac c3 7c Data Ascii: kd:*,~O@Q<s4LB(D-hVH/gF7s,_B+Zix/~g9#dSQn\@l:Zuz'IB]WSYOU{ESOF<gKC}X&Ez')ZEB`BGM!?Ul+BN'&_b 0<$o>O\|
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: 4e fd a5 f5 df 5a 1c 7c de de 9b c2 bf 2b 35 f8 f7 6e b5 83 f0 76 55 17 cc de 9d a9 aa 62 f6 ce 94 d9 a5 c9 ea 67 4d ef 56 f5 5e 75 df fb d3 66 97 ab c7 df af ea f2 4c a1 2b 8b eb 03 ea 72 46 b5 63 8d 84 13 0a 5d ad d9 9a aa 75 17 60 fa 03 c2 40 b5 06 64 67 fa d6 6b 8b 02 00 06 00 0c 85 54 01 00 43 eb 4a 00 80 1d 5d bd d6 d4 de 6b 47 cf f7 da 6e 4c ff 7d ab df 1e 7a a3 df be b8 71 d0 fe f6 c9 21 fb b3 87 86 93 e5 df 87 ef 19 b5 9f bd 73 d4 7e f2 4b 63 f6 e3 5f 1c b3 1f 83 be b0 82 fa e2 82 7e f4 8b e3 d5 cf 42 3f fe a5 71 fb 89 aa 7e ea 8e 71 fb d0 57 26 ec 17 bf 36 61 1f b9 6f c2 7e f7 db 53 f6 1f 7f 30 65 7f fd 64 c5 3e be 61 c6 ee da 76 c1 7e f8 d6 45 db 78 12 10 f0 9d 04 01 3b 6b 96 80 33 37 d1 12 b0 51 00 88 8e 05 a6 3f c2 fa 09 1d 09 0c 90 f1 c7 8c Data Ascii: NZ\|+5nvUbgMV^ufL+rFc]u`@dgkTCJ]kGnL}zq!s~Kc_~B?q~qW&6ao~S0ed>av~Ex;k37Q?
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: b0 de ae 9d 5b 67 57 cf ad 4d c2 ac b1 4b a7 56 db 45 c2 9f 59 63 d7 ce af b3 eb 17 f2 61 6e 5c e2 da e4 ba 6b 5b ac fe da 56 6b b8 b1 c5 1a 6f 6c b5 a6 ea 6d a9 d8 af 27 de ab 49 bc 97 37 5a 35 71 5f 5c 9f 5c bf 3e d9 df 98 5e d7 5c bb c3 da 1b 77 5b 4f db 7e eb ef 3c 64 c3 3d e5 36 d6 7f c4 c6 07 8e 25 79 3d 66 16 f5 48 8a ba c9 25 75 34 de 7f d4 46 7b 8f d8 48 cf 61 1b ea 2a b3 81 a4 0e 7b db 0e 58 4f eb 01 eb 6e 01 ee ee 4f f7 fb da 0f 26 e7 ca 93 fa 3d 96 5a 05 8e 0d 24 ed 77 08 2b c0 a4 2d a7 6e c0 9d f9 79 00 73 43 11 00 3e 82 ef cd 08 00 a3 a2 ee 4e 11 00 46 95 94 ee 09 00 fe 30 6f 91 07 90 03 ce 7d fc 99 3c e4 fb cc 0b 6d f6 0b d3 da d3 55 78 7f 09 bd 98 ec 17 f4 b9 a9 ed f6 f3 c9 f9 4f 03 06 93 b0 9f 44 c9 75 ff 33 11 e0 10 48 47 1c 1e 1e fe 5c Data Ascii: [gWMKVEYcan\k[Vkolm'I7Z5q_\\>^\w[O~<d=6%y=fH%u4F{Ha*{XOnO&=Z$w+-nysC>NF0o}<mUxODu3HG\
2025-03-25 02:48:07 UTC	4096	IN	Data Raw: 4f 8e a9 5d f9 30 02 3c be ad 91 2f dd 97 fb d0 16 68 1b d4 83 ac 31 fd 82 1e d4 09 f5 e4 ad c8 94 5e ef f6 1d 5a 66 ca 82 8c eb 88 df cf 49 a9 7b 68 8e 44 9e 39 c2 09 90 85 56 6a 2a 7f 59 37 ca 8a 96 7c 78 c0 2c 0b 36 81 59 59 01 7a 77 73 2d 0c 23 37 7f 59 fa fa 67 42 75 ad 7b 90 26 ea 98 f7 82 e6 ed 94 34 1f 9f 4f 3f 65 2b e0 ab 77 8e 8e a9 0d 2a 5e a5 99 fb cb 72 31 04 f5 02 8b c4 e1 ad 40 fd 3b 41 00 50 65 1e 02 40 dd 5b cf 30 6d 87 77 93 07 c7 7a 77 29 6e 7d 72 0d d7 93 3f e2 a6 0c 68 2b 0c 7a e9 a3 e2 06 1c 01 e0 fd da dc 2a c0 63 03 96 1b ee b4 dc 40 93 e5 7a af 59 ae e3 b4 e5 5a 8e 58 ae 61 af e5 6a b7 d9 f8 8d 0d 36 7c 75 b5 f5 5d 5c 6e 1d 67 97 5a fd 89 85 76 f9 c8 3c 3b b1 7f b6 95 ef 7c c3 f6 6e 79 d5 76 6c 78 c5 36 af 9d 66 eb 57 e5 41 df da Data Ascii: O]0</h1^ZfI{hD9VjY7\|x,6YYzws-#7YgBu{&4O?e+w^r1@;APe@[0mwzw)n}r?h+z*c@zYZXaj6\|u]\ngZv<;\|nyvlx6fWA

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:10 UTC	567	OUT	OPTIONS /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:10 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:10 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b17f01c565017-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:10 UTC	748	OUT	POST /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 27706 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: application/json, application/octet-stream sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/octet-stream sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:10 UTC	16384	OUT	Data Raw: 92 da 02 d7 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 78 4e 69 77 69 64 43 49 36 49 6e 63 69 4c 43 4a 6b 49 6a 6f 69 53 7a 4e 6e 64 32 67 79 5a 6d 73 72 52 6e 46 6a 64 55 39 6d 55 6a 52 79 64 57 46 4c 54 6d 73 77 64 47 35 6d 4b 31 5a 30 53 56 6b 34 5a 58 6f 7a 59 6e 52 30 4b 32 74 32 63 30 59 33 57 56 59 78 55 6d 6c 69 4f 55 31 4e 51 7a 5a 42 56 7a 42 6b 4d 46 67 35 61 31 68 76 51 58 51 31 4b 32 74 59 51 55 56 6a 52 6b 4e 43 52 46 68 4f 62 6e 55 72 4f 56 70 73 56 6e 46 79 4b 7a 5a 4d 64 6c 56 56 56 6b 5a 5a 54 55 74 69 52 30 63 76 55 33 4e 44 59 57 4a 58 57 6d 6c 79 5a 30 68 35 52 Data Ascii: {"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoxNiwidCI6InciLCJkIjoiSzNnd2gyZmsrRnFjdU9mUjRydWFLTmswdG5mK1Z0SVk4ZXozYnR0K2t2c0Y3WVYxUmliOU1NQzZBVzBkMFg5a1hvQXQ1K2tYQUVjRkNCRFhObnUrOVpsVnFyKzZMdlVVVkZZTUtiR0cvU3NDYWJXWmlyZ0h5R
2025-03-25 02:49:10 UTC	11322	OUT	Data Raw: ba 23 f4 80 4e 31 c2 ce 97 b0 07 5f 29 f9 c3 4e f2 81 66 ec 89 1d 84 4a ed 6f 37 51 12 8c 96 06 13 44 47 30 e7 92 41 68 d6 a9 76 e5 8f bb 8f 59 5e 9f ff 60 66 8d af 23 8e 5d 25 d8 8b 18 af 53 5e c8 15 cc 8e 28 3b 6d d3 69 dd 0f 36 96 6e a5 5e dc ca 64 e3 56 b1 10 b5 53 09 5f 65 cb 0c da b4 00 13 a9 7d 0a 9e 7a c0 ed 70 a3 c3 ab 6a 31 b7 a0 44 6e a9 24 32 c8 4c ac e0 e3 aa 64 4f 3f 0f 2c 94 ed d1 d7 d2 2e 8e c2 b9 44 c3 24 c8 79 a9 1e c7 b2 82 75 40 33 ac 1e 2d 53 08 c2 26 d2 3e 2b 87 d3 19 9d 8b 3b 7d 2f e4 75 90 0f bd 65 6a 8c 10 02 99 00 7d d7 d0 b7 41 4d e0 d0 9d f3 66 c9 72 15 30 5a 77 a8 76 70 96 de 48 45 f5 89 6a 00 ef 96 35 0f c3 a3 58 b4 30 38 cc d8 02 73 03 ed a1 f7 17 7f de 82 65 4f 4f 62 73 ca 25 70 1b 0e b1 a4 c5 6c 3c b6 1e e4 51 00 6a 24 d7 Data Ascii: #N1_)NfJo7QDG0AhvY^`f#]%S^(;mi6n^dVS_e}zpj1Dn$2LdO?,.D$yu@3-S&>+;}/uej}AMfr0ZwvpHEj5X08seOObs%pl<Qj$
2025-03-25 02:49:11 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:11 GMT Content-Type: application/octet-stream Content-Length: 2749 Connection: close CF-Ray: 925b17f21aea0cba-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cf6kvKN44ia9; SameSite=Lax; path=/; expires=Tue, 25-Mar-25 03:19:11 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:11 UTC	1369	IN	Data Raw: 73 3d 63 47 0f bb 25 01 d0 c5 25 df 89 19 ad bf 9d 8c 9c 25 71 d9 28 c0 15 63 0a fb ec 85 aa d5 9a d4 f4 f4 d6 95 b4 31 53 b5 88 85 f8 e8 1f 7d 85 c2 34 61 32 f0 ee 02 f2 f4 a0 67 c3 52 e0 c1 ed 1d 64 63 5c 9d 44 b7 4e 91 fd 7c 9f 81 9f 97 b2 50 8e 1b 0e 00 ba 58 77 15 44 59 7e 2a 73 fc b3 58 71 e6 8f 23 e8 62 3b 3a cb e7 3d 77 22 e0 ab 15 d0 83 20 41 02 1e 10 04 bf 1e 15 d1 20 03 53 7d 27 ed 70 9e 66 6f 16 13 27 ba 8a 00 c1 6b a0 ab 8c 21 82 a7 66 10 07 b3 c1 b9 84 ba e9 84 dc d3 a8 97 a7 96 c6 46 b4 73 14 07 00 78 ac 07 83 ed 85 19 de d8 28 f7 67 94 30 48 48 27 46 84 cb 39 de 91 c8 77 d3 98 0f a3 00 67 2d 69 87 cf c9 22 e6 b1 83 00 93 9c 56 b8 b0 a0 a1 3d e9 f7 1b c9 4e 68 f4 71 3b de 79 a2 a0 bc 2a 7c 18 c3 2d c8 3a 18 1c 67 ed 41 bd 3c f5 0e da c7 75 Data Ascii: s=cG%%%q(c1S}4a2gRdc\DN\|PXwDY~sXq#b;:=w" A S}'pfo'k!fFsx(g0HH'F9wg-i"V=Nhq;y\|-:gA<u
2025-03-25 02:49:11 UTC	1369	IN	Data Raw: e3 37 c8 5c 97 68 59 3d 56 9f 96 ea f5 95 3e dc e7 77 68 71 53 3e fc 82 25 b2 71 84 ec f3 d5 65 19 ec 56 96 8f 20 85 c1 f5 7c d2 5b 4c 99 21 22 aa 62 f1 11 8e 64 04 4a dd 01 db c4 fd a0 ca 13 46 00 e3 e0 0e cf 6e 17 8b 09 42 90 a7 b4 1b 6c eb f5 83 9b 7f 27 7e de 5f 92 8b 5e 1c 9d fa b4 dd f3 05 1a 71 b1 5d a5 98 10 e6 e9 a7 1b 78 d6 0c ea f7 5b b4 54 52 74 b6 12 6d f4 3a 28 c7 79 09 6c ff 1f be 19 ab 29 97 25 6d 0b 53 34 6d 8c e9 a2 19 91 e7 91 04 64 c1 a0 90 6e ba fd 7d 0d bb b6 6e 53 06 63 49 78 11 1e e7 bd 0e 71 9b 34 3c f7 a8 87 02 5e f2 df 56 1d 63 db 36 e3 d6 9c 48 72 a8 2c 23 c7 9e 19 73 7a fc b0 d9 7f be 6c 41 ef d7 00 6a bd a8 8a cc 2b cf 4a e4 27 45 6c 09 d3 25 78 a2 73 6b 63 b5 d2 da a0 9b a5 3e c0 d4 13 63 fb 86 33 cd 33 70 ce 01 05 c7 a8 9e Data Ascii: 7\hY=V>whqS>%qeV \|[L!"bdJFnBl'~_^q]x[TRtm:(yl)%mS4mdn}nScIxq4<^Vc6Hr,#szlAj+J'El%xskc>c33p
2025-03-25 02:49:11 UTC	11	IN	Data Raw: 51 21 c6 39 cb c2 c0 cf f0 8a c9 Data Ascii: Q!9

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:11 UTC	427	OUT	GET /getcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:11 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 25 Mar 2025 02:49:11 GMT Content-Type: text/plain Content-Length: 18 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b17f77f2f0f46-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:11 UTC	18	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:11 UTC	761	OUT	GET /tip/ad66ec5b520e64968c772dcbcbcefdd9729e55bf6b55694f06d3344932c20f17/80f7cbd5ad8c6ed1ec840c6a2b644e78be790334c4f5047b9e4f1e88f9b096e3.png HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:12 UTC	477	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:12 GMT Content-Type: image/png Content-Length: 3969 Connection: close Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 Vary: Origin CF-Cache-Status: MISS Expires: Wed, 26 Mar 2025 02:49:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925b17fa5f90cb3a-EWR
2025-03-25 02:49:12 UTC	892	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 62 00 00 00 62 08 06 00 00 00 ab a5 06 0e 00 00 0f 48 49 44 41 54 78 9c ed 5c 7b 8c 5c d5 7d fe be 73 67 6d ef f2 b0 80 5d 7b c3 c3 e0 5d 63 5e a6 01 33 6b 8c 81 a4 86 d2 24 a8 52 aa a2 12 22 da 0a b5 6a 22 9a 56 44 a5 4a aa 2a 7d 88 62 85 aa 28 8d 9a a4 ad da 48 51 69 9a 16 ab 0d f9 8b 88 a8 62 d5 96 87 bd 63 52 ea 75 4b b0 77 d7 d8 c6 38 eb b5 49 6a 6c 07 bc 73 7f 5f ff 38 e7 ce cc ee ce 9d 99 9d 99 dd 19 94 fb 49 ab dd 9d 7b cf b9 e7 9c ef fc ce ef 79 07 c8 90 21 43 86 0c 19 32 64 c8 90 21 43 86 0c 19 32 64 c8 90 21 43 86 0c ed 07 3b 3d 80 66 70 ec b9 57 cf cb ad 3e ff 5a 3a 5e 25 6a 80 e0 cd 02 d7 40 ba 74 f4 8d 57 b6 dd 7f ff fd 71 a7 c7 b8 58 e4 3a 3d 80 6a 38 38 3a ba ea fc de 2b 6e 40 a4 2b Data Ascii: PNGIHDRbbHIDATx\{\}sgm]{]c^3k$R"j"VDJ*}b(HQibcRuKw8Ijls_8I{y!C2d!C2d!C;=fpW>Z:^%j@tWqX:=j88:+n@+
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 95 25 c2 82 74 24 07 96 40 88 40 4e 71 45 3b c2 55 09 87 cf ec 9a c8 d3 b9 df 05 f1 00 00 8a 3e 72 5b d3 1a 03 a1 20 23 f3 e1 9c bb f0 42 b3 df 02 f0 c5 a6 27 19 d0 b2 f9 7a bc 30 f9 68 44 f7 64 f2 bf 99 7e 08 6a 2f 81 71 80 e3 a6 e2 de 35 5b 36 fe 57 33 7d 1f db f5 83 f5 2b 72 2b a7 62 00 b1 1c 8c 3d 88 05 88 d1 82 7b a9 18 11 84 1c 63 50 31 1c 54 7c 83 6f f7 e5 f3 f9 d9 e3 85 89 7b 29 7e de 39 f7 21 6f 59 f9 9d 5e b6 b4 1c a2 1a 12 97 98 c4 d5 20 d9 f4 d9 d9 e9 f5 eb b6 6d fb 49 33 73 4c d0 b2 44 38 70 f3 9c ff 1d 07 01 0e 02 f8 79 00 88 d8 83 93 7b 0e 42 b2 ff 96 30 0e 72 dc 2c de 1b c5 36 de bf ed 9a a3 b5 fa 3e 79 a8 78 74 70 68 85 81 ce 39 12 b1 0c a4 4b b7 9f 42 88 03 20 48 e4 ae b2 8b 3e 77 62 6c ea 93 24 6f 10 84 58 08 04 38 48 42 2c 42 88 02 21 Data Ascii: %t$@@NqE;U>r[ #B'z0hDd~j/q5[6W3}+r+b={cP1T\|o{)~9!oY^ mI3sLD8py{B0r,6>yxtph9KB H>wbl$oX8HB,B!
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 50 39 06 95 48 8a 4c 7f d3 bf 65 e8 e1 e5 98 7f 23 e8 58 5d d3 e4 9e c9 d5 17 16 75 0b 22 97 27 94 97 98 77 8e eb 93 eb 3e 7f e0 c3 d5 b1 08 a3 43 ac 08 16 c2 10 0c f6 7e 84 d8 9b b2 41 5a bc 2f 61 65 0b 09 f2 ba 21 58 4d 11 13 79 02 4c f6 a7 03 23 c3 7f d4 a9 35 a8 44 c7 88 a8 86 c3 2f ed bb b8 af a7 37 2f f0 cb 24 ae f3 61 6f 22 46 ae 42 1a 7c d0 90 70 de 02 a2 81 b2 52 74 ca e0 bc ec 54 ce 2c 48 08 09 af 2f 02 39 c1 5c fd 9d fe 91 e1 af 76 6c d2 01 5d 45 04 00 1c 1b 9b d8 d4 43 f7 aa 81 91 18 f9 14 29 dc 9c dc 86 20 48 ce ab 71 0a 51 88 43 15 11 a5 9b 72 12 5c 20 2d aa 68 47 48 06 7b 70 cd c8 86 7f 5a c6 69 2e 40 d7 55 71 f4 d0 7d 51 40 64 70 3e 7a 4a b7 c0 d4 25 e8 cf 7d 12 2e 89 6b c9 ef 76 28 c5 2d a4 d7 33 de 75 8b 7c 5e 23 b8 74 0e ee ef a7 77 1f Data Ascii: P9HLe#X]u"'w>C~AZ/ae!XMyL#5D/7/$ao"FB\|pRtT,H/9\vl]EC) HqQCr\ -hGH{pZi.@Uq}Q@dp>zJ%}.kv(-3u\|^#tw
2025-03-25 02:49:12 UTC	339	IN	Data Raw: bd 08 fa 03 9e 10 52 90 f4 fd af 3c fb 0f 4f b5 6b 3c 03 5b 37 bc 52 34 fb 58 da d7 9a 4a 7a 7e f6 ed 53 f7 5c 79 e7 cf fc a8 5d cf ac 85 65 f5 23 a6 0b 13 b7 3b f1 2f 9c 73 23 8b 6d 1b 9b 7e 76 cd 96 a1 7f 6f f7 98 66 0a 07 b6 13 d1 b3 24 57 25 9f 99 f4 9d 1f cd 14 1f d8 78 ef c6 f7 da fd bc 34 74 c6 a1 1b 3b f0 80 43 b4 83 8e a9 5f d3 50 09 33 7d 7b 60 cb 50 d5 6f 8a 69 07 a6 c7 0e 7c 2c 62 f4 1d 92 2b cc ec a9 7d 67 0e ff 46 2b af ea 36 83 8e c5 9a f6 3d bd 6f c5 e0 55 7d 0f c3 e1 8f 49 5e 94 76 9f a4 73 31 8a d7 af 1d d9 38 b9 94 e3 39 b1 7b e2 97 e4 f8 e1 81 91 e1 47 96 f2 39 69 e8 78 5d d3 e4 9e c9 d5 ab 85 2f 00 fc ed ca e3 21 81 4c 5f ea df 32 f4 68 27 c6 b6 9c e8 38 11 09 de 7a 71 ea ca 9e 1e 3d ee 9c fb 95 e4 33 93 9d 38 7d fa d4 d5 dd 50 ad fd Data Ascii: R<Ok<[7R4XJz~S\y]e#;/s#m~vof$W%x4t;C_P3}{`Poi\|,b+}gF+6=oU}I^vs189{G9ix]/!L_2h'8zq=38}P

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:11 UTC	764	OUT	GET /tip/a8200aafdce65c9307ad48b3c846d509b69561be4ac94ad32634994f7bdb4de8/73ebf57bc9385b3e59041f771a41fbd2d836d39f90cacf315305fc02dd3fa307.png HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive Origin: https://newassets.hcaptcha.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:12 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:12 GMT Content-Type: image/png Content-Length: 192686 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Wed, 26 Mar 2025 02:49:12 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925b17fa5e7a435b-EWR
2025-03-25 02:49:12 UTC	833	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 01 40 08 02 00 00 00 eb aa 38 2c 00 01 00 00 49 44 41 54 78 9c bc fd 5b b3 64 d9 71 26 06 7e 9f fb 5a 7b 47 c4 b9 64 66 65 55 01 28 90 00 08 10 bc 74 37 29 35 25 53 cb 34 97 9e 17 99 e9 6d 6c 5e e6 2f cc ef d0 1f 99 f7 79 98 a7 31 1b 93 c9 ac c7 4c 6d 33 1a 6b 4d 77 4b 3d 24 9b 4d 90 b8 92 05 a0 50 95 b7 73 89 88 bd d7 72 ff f4 b0 e2 9c ca 42 e5 29 32 8b 85 f6 87 aa cc 93 71 76 ac bd 2e be fc f2 f9 e7 fc bf fe df fe 5b 5c 5e 46 47 4d 6b 96 30 65 84 99 01 c2 57 22 f2 37 fe 78 83 78 e7 e2 9d b3 72 56 e0 13 bd 2b d7 7e 90 e9 87 37 9f 28 8c 74 87 52 4b 6a cd 44 2d 73 c8 68 22 d1 b3 b9 d7 0c 52 06 95 b3 9b 7a dc cc 22 d0 8e 7f fc e1 f1 58 03 40 69 08 7b f3 70 98 e3 bd 4c c6 4f 7f 48 c2 cb bb df Data Ascii: PNGIHDR@8,IDATx[dq&~Z{GdfeU(t7)5%S4ml^/y1Lm3kMwK=$MPsrB)2qv.[\^FGMk0eW"7xxrV+~7(tRKjD-sh"Rz"X@i{pLOH
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 30 b8 97 c3 d2 58 6b 13 d7 65 d9 95 cd 0c b7 66 3d c2 4a 11 b0 b6 56 61 31 ae 4f 77 27 1d 84 80 24 65 42 8e 23 4f 0d ad 43 00 06 a2 bb 4f 53 d5 84 40 d7 49 1f 91 9e ad 03 34 92 49 92 84 01 10 c4 82 ec 69 2c db 3a 49 8a 68 99 49 92 46 bc ae 74 f5 e9 cb 10 04 8c 9f d1 80 09 bc f9 86 4c 75 80 24 dd 0b 32 99 b5 90 92 95 32 76 20 87 1e 26 4f 17 03 01 4b 93 11 4c c8 20 8e 0b 88 e3 3a b9 3f 3d 92 60 26 d1 df ac 28 53 6f 1e 8f 8b 4c 02 26 89 a0 52 63 79 48 09 82 64 9f b9 8a 4c 9c 04 0a 43 c3 dd 3f 9c f6 b6 f6 0c 0d f8 cc ad 61 a7 0b a9 27 90 b4 34 0b 67 ba a5 41 c6 4e 33 61 dc 21 63 61 45 16 a3 ad 7c 7c d8 dd 5e 9c ad 2c db e6 80 d2 a3 98 ea ca a3 95 17 8f ca a6 1f df bb ee c1 7e 28 9a 92 08 10 20 40 b9 cc c9 09 59 60 5e fb 23 2b 13 e9 45 48 b5 1a 2e d6 92 65 f1 Data Ascii: 0Xkef=JVa1Ow'$eB#OCOS@I4Ii,:IhIFtLu$22v &OKL :?=`&(SoL&RcyHdLC?a'4gAN3a!caE\|\|^,~( @Y`^#+EH.e
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: ad 67 f1 0a 20 14 66 76 ef c3 49 42 c2 1e 30 38 be 32 b1 4e 40 30 1a 01 51 29 f4 d6 a3 9c ae 65 a3 79 fa 5c b7 db ed 9c 45 62 f8 57 34 71 7c b3 65 91 36 6b d5 32 ad 9b ed 6c b4 b0 58 d7 9e a1 c7 78 4a 87 14 5d 79 7d ad 84 c6 81 2c a5 10 b8 38 7f 64 32 de 5b 1f 86 a3 e6 29 7c 7b 28 5f db 67 c7 76 13 dd 26 d5 4e 3d 30 fc 4f 43 1c fc 4c 5c e9 20 9e cd 9b 69 77 86 69 07 58 06 4a 35 01 e5 70 db f6 d3 7c 7e be d9 ce 6e 58 5b 08 31 d7 92 89 97 2f 5f 52 28 34 9e 7c f6 7a 79 79 49 aa 67 44 82 b4 62 5e 8b 03 d9 a2 e3 4d 31 17 92 3d db 34 6d a2 2b 4a 79 f7 9b df 8a 3a 1d 13 b4 fa c1 a3 6f 7f f4 d3 9f 95 cc c9 78 7b 7b ed 5e e7 3a 59 f0 96 47 a6 0c ac a5 0c 4b a4 f5 9e 89 0d a7 66 a2 ac 74 c9 b8 9a 0e 6d ed c7 83 29 0b 0d 04 a9 cd 66 3a 3f 3f a7 cc 82 dd 96 b1 0b f3 Data Ascii: g fvIB082N@0Q)ey\EbW4q\|e6k2lXxJ]y},8d2[)\|{(_gv&N=0OCL\ iwiXJ5p\|~nX[1/_R(4\|zyyIgDb^M1=4m+Jy:ox{{^:YGKftm)f:??
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: b3 1d a1 62 11 01 a8 f6 6a 00 c7 fd 26 ca 5c 30 d1 4f c1 a3 14 14 02 38 bc 51 e6 b0 0a 3f 2f 35 1e 48 1e 96 75 6c 01 03 49 47 a4 24 b3 92 4f 4f 9f cf 4c 45 e8 94 2b a2 ad 61 6d e8 14 57 44 aa c9 4c 92 e9 cd 31 ee 87 25 05 08 d6 0d 61 be ba 75 f7 30 d0 ba 43 b8 4f e8 63 28 30 ae 3a 34 b7 6a d5 8e 61 55 5e bd 92 46 4c 30 23 8f 15 3a e6 7b b7 a9 39 8e 6b 93 0a 6d e5 8a 35 c4 a4 25 6f 88 4f dc 77 2b d9 66 9c 02 2c 04 04 ca 41 82 95 ab e7 96 5b 31 e8 61 70 d1 49 b1 d7 d2 85 44 f6 26 2b a5 ef 81 56 dd 6b 24 a4 ec 7b ac 37 3d 33 9d 16 21 33 b1 30 24 93 05 53 92 b1 00 a0 69 32 57 a2 74 ad c7 b5 f7 1c 26 2a 99 d6 7f b3 16 74 b7 8c d3 ed 6e 0e 57 66 8a 34 f8 13 33 12 b2 cc 30 ca cc 04 73 1a 0e de f6 50 21 c0 08 b9 5b 66 9a f1 81 94 dc 57 26 c7 da 29 14 79 66 c2 e8 Data Ascii: bj&\0O8Q?/5HulIG$OOLE+amWDL1%au0COc(0:4jaU^FL0#:{9km5%oOw+f,A[1apID&+Vk${7=3!30$Si2Wt&*tnWf430sP![fW&)yf
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: b3 0f 9b d6 b0 c8 23 12 07 e5 41 d8 86 a2 e5 ab cd 74 d6 b7 5e 5e 78 63 10 c5 1c 88 34 76 68 ae 98 42 49 a4 cc e6 63 e9 9b 9e d3 d2 0f e1 46 89 85 45 09 23 7b ef a5 38 49 3d e0 f1 3c 24 69 52 a2 fa a4 cc cc ee 6e 11 29 98 6c a9 dc 35 b5 75 dd fb ae 18 8a bd 2a bc cc 34 89 09 05 4c 18 78 67 c9 0c 99 7d bb 4c 7d 03 a9 07 97 68 42 ed d4 39 90 77 99 64 91 50 a4 c9 dd 6b d7 5b a2 77 d0 87 57 01 63 66 87 31 c4 88 0c 20 12 db dd 36 96 2c 51 d3 b9 e7 71 ab cd 03 91 66 00 a9 fd cd 6d eb 4b f1 a9 b5 70 1f 75 10 58 7c 71 f0 3e bf 41 9e d2 71 cc 04 c6 75 8f 13 d0 9e 02 1e cc 7e 92 77 b6 c1 bd 18 67 df f8 03 1e 8f 38 ae fa 7b 64 18 db ba 1e f6 ed 70 7d 75 79 3b 1d af b0 28 e4 25 0f 9b a3 57 a6 b1 5e bd f1 39 ee 15 27 e8 42 de 3d 4a 38 c1 25 0d 62 2a c6 f0 60 84 3c 4a Data Ascii: #At^^xc4vhBIcFE#{8I=<$iRn)l5u4Lxg}L}hB9wdPk[wWcf1 6,QqfmKpuX\|q>Aqu~wg8{dp}uy;(%W^9'B=J8%b`<J
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 60 9e dc 61 e0 f5 ee 82 3b 00 c6 d5 4d 8e 1c 0e 40 10 28 22 90 fd 2e 49 85 cf a6 f6 59 ba 92 89 12 d9 bc 58 1b 05 75 cc 07 cd 3e 26 79 0a cf e1 04 94 71 b7 5a 77 d3 59 9b 02 69 e6 55 01 54 66 ad 2c fd 01 5c 8c 4e 55 1e 34 9e 6a e7 00 c0 9c bd d1 ad 0b 06 99 13 91 04 a9 2a e3 76 8b b0 76 38 74 e3 84 90 49 30 b3 ea 5e ad 1f 0f 7a 19 42 87 cc 9d 53 f1 78 f6 3c 7d ab 9a 8d 6a bf 7c 16 57 d7 67 4f 1e 65 39 b3 e4 09 c2 05 83 b2 a4 55 42 d9 97 4f 57 e0 33 2b ca 9e 66 c5 0c d9 26 d3 ae 58 a6 72 9e e7 50 42 33 14 d1 a0 9c b2 f5 32 15 47 84 2d c9 34 2b 52 dc af cb 17 08 7b 37 61 32 df 4d f3 6e 73 7e e4 1a 8e 6c d9 db 1c 38 a6 8f 73 d2 99 2d 81 e0 24 3b d5 51 dc 2f 41 7e 2e ce ff ba 35 61 ea 12 95 96 19 ee 35 7b 60 14 c0 81 6f 3a 1f 36 6c 1f 29 7c e6 ee ec 6c f3 fe Data Ascii: `a;M@(".IYXu>&yqZwYiUTf,\NU4j*vv8tI0^zBSx<}j\|WgOe9UBOW3+f&XrPB32G-4+R{7a2Mns~l8s-$;Q/A~.5a5{`o:6l)\|l
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 1d 7d 0b b3 54 0f 12 e6 66 0d 20 07 ea 51 03 d5 7a 07 6b bb 0f c1 0d a7 f0 7e 53 4a c2 de c8 9a 2d 81 84 99 88 d4 da 63 b9 bb 33 72 60 bc a0 00 84 bb ea da 6a 6e 53 b1 b9 2c 58 22 c2 c0 1d f7 1d 7e 93 11 d4 d9 e3 72 7b 63 3e c3 38 41 2b ee 23 92 27 87 30 f0 70 c5 a0 90 26 52 51 68 19 52 34 cb d2 97 0e 8d b3 1b f7 8e 2d 98 99 e9 0f 17 50 9c 62 47 1a 19 e6 e2 5e 81 4c 2d 65 4a 2f 09 87 b9 75 58 a8 d3 39 ad 94 a1 39 e4 8c c2 34 13 47 3a e5 3e 0c f8 a9 10 b0 16 e6 c9 0c 76 94 00 a3 d5 e3 55 bd 69 8f 92 5c 7a 5f 6e 4c e9 ee aa 54 47 84 c2 42 bc 47 b9 18 e1 96 dd 52 f3 cd ab ab e3 3e b7 db f4 d6 27 34 b6 a9 b8 a1 c7 05 a4 5c 24 a6 79 2f b5 27 23 03 31 59 41 41 61 ee 77 d1 4b 9f 83 2c 84 02 98 dc 0b 58 a1 9a 2c d8 a8 fb 9a c0 94 a0 db 9a 0a 99 7b 16 57 82 60 c7 Data Ascii: }Tf Qzk~SJ-c3r`jnS,X"~r{c>8A+#'0p&RQhR4-PbG^L-eJ/uX994G:>vUi\z_nLTGBGR>'4\$y/'#1YAAawK,X,{W`
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 4d b6 a9 93 5a ef ca 96 51 cc 2c c2 75 ba 54 3b 54 60 26 af f2 23 6e 57 dc 1a 8a 65 b8 d1 82 84 37 e5 74 75 1d 05 cd d8 53 de 60 8b a6 14 05 66 4a ac dc 3a 65 35 fc 20 d4 04 44 df d3 0a 73 2f 15 d9 26 5e 1d f5 72 49 4e 69 6e bb 99 1d 96 6e 9c 8c b3 50 23 cb 43 2e a1 59 49 7d 56 20 20 3b 67 c1 61 cd bd 95 ec c7 db e7 a4 95 60 3c b8 04 0f e9 07 64 97 44 99 a5 82 d3 5c 77 97 35 73 8d 10 92 06 77 56 a3 22 20 9a 3d 08 46 c8 4c c7 29 16 43 52 a9 38 01 be 82 08 8b a5 dd 5e 79 56 87 31 c2 4c 0f c7 a0 1f f0 5c 15 9d 81 52 7d 73 ee 7e 2e f6 f0 c2 bb 59 7b 2d fa 4c 82 f6 05 37 49 42 ee 6e b2 88 b0 1a a1 29 b4 80 ad b3 41 e9 66 6e f0 d6 89 f5 b6 df de ae 37 cf ec d5 8d dd 2e be ca 61 66 14 98 ca 8c 24 03 1a c5 26 5d 9d e4 04 f3 c0 7c 24 b2 37 18 31 a3 47 ac 00 76 1d Data Ascii: MZQ,uT;T`&#nWe7tuS`fJ:e5 Ds/&^rINinnP#C.YI}V ;ga`<dD\w5swV" =FL)CR8^yV1L\R}s~.Y{-L7IBn)Afn7.af$&]\|$71Gv
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 7d 44 9e 22 67 6e 5e 0b 76 ef e7 3d cb a2 11 64 c6 a9 ae 78 1c c3 7b 1c 31 48 27 54 56 65 a4 a0 26 dc f4 50 42 72 7a 7c 45 34 a1 45 74 12 66 98 0c 67 5b d6 d2 fb aa ea a5 6f 30 0a 5c 07 d3 f9 78 07 1b 64 c8 94 94 44 46 d0 7d 94 fb 79 3b da 3a 60 20 27 23 dd ef 5e fc cd df fb d6 23 15 93 0c b3 1b 75 b2 47 f4 9e e1 4d 9a 40 33 19 ef 9b 44 d0 60 42 ae 1a e3 28 69 48 5d b8 1b 12 ad 45 ba 12 ad 2f d2 1a c9 d4 22 84 95 39 bb 65 ef 68 6b 32 80 13 31 7d 26 74 c2 3c 60 50 cb 43 06 42 52 2a 4e ec 6e ee 8e cc 46 29 ad f3 d9 f4 d2 b9 ec b0 39 a2 a7 31 e5 9d da c1 0e c7 57 b6 a6 fa d2 8f b7 fb 76 1d 11 d3 bc 91 2c 16 22 63 de 6e e6 a9 88 4a c9 ef 50 23 e3 75 92 80 06 13 e5 17 61 74 1e 12 22 07 de 20 07 d9 36 b5 ef 4b d2 c0 ab bc af c9 34 f2 8e f4 61 19 74 47 91 a6 30 Data Ascii: }D"gn^v=dx{1H'TVe&PBrz\|E4Etfg[o0\xdDF}y;:` '#^#uGM@3D`B(iH]E/"9ehk21}&t<`PCBR*NnF)91Wv,"cnJP#uat" 6K4atG0
2025-03-25 02:49:12 UTC	1369	IN	Data Raw: 9d 6b 89 db eb 96 74 1d 3a 04 1b d6 9f be 80 9a 2b 4b 42 34 ca 33 26 f8 d9 7c 86 ea 35 d1 1e ca 56 78 b3 d0 62 8a 75 c5 a1 ab 46 30 e4 5f ac 9d 07 34 fe 33 83 a0 01 48 21 cc 8a 5b 45 7a db 2f 71 b5 ae 65 49 1d d7 db 28 e7 65 2a b3 d9 1a 3d bb fa d6 a6 ca b6 dd ec 58 7c 0a 74 43 2b 5e 44 46 03 13 bd 79 44 c1 00 08 33 8d dc e7 f5 61 3f a5 b3 c9 85 0e d0 ac 95 fc d2 16 d6 d8 91 a7 0a 11 a2 82 41 5b 0c cb d9 8c a9 ca 0d 4d e7 93 4f 97 33 81 0a 4b a8 9f 90 e1 86 e8 f0 92 99 85 a7 1a f7 96 91 b1 40 bd e5 52 2a 77 4f 77 e7 5f 3f 3f 66 af 1b 5a 59 0f 9f 5c bf fe bd 04 4c 18 7e d2 80 f7 8e 8b e5 f5 d0 0c 4f b4 01 b2 0c 8b c5 63 b2 9c bb a6 c5 58 83 96 56 56 16 d5 ed f6 42 6e 55 24 39 9f f5 ed d2 ab 4f 3a bf 28 67 3b a8 cc 4b c6 14 ab bc 97 58 1b 74 68 f0 48 ef f0 Data Ascii: kt:+KB43&\|5VxbuF0_43H![Ez/qeI(e=X\|tC+^DFyD3a?A[MO3K@RwOw_??fZY\L~OcXVVBnU$9O:(g;KXthH

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:34 UTC	1096	OUT	OPTIONS /checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSWZvUTZrOHpHRXh4eGpwRWJ5UHE5TDlwalJwMHF6UmlPVXh6byt1VEdaYVRBcXdQMXNtYkNYRU5zU0NHS2RVdHgrQnk2Z3VaRXdoMHZ4ajQwcEFXSGh0bVVxdStMeHY2TEJFRFYwTldGeU1JQ0pybjczV0NpYW50RE1DeTRUYnhwVTBnc0orSTVWaU9aR2xGa1FVOGJZcFNxNzBsQ1JBMzRlWVNScVc4YUlidU00WDFTbThGOTFxcXJEWnpMSXg3R1RXaDlmdzZ2d25VZWorR2dlMDNKU2ZiUzVWYW44NzFNZWorb20zUnNZaENnR0dvTHJNR3l6bWVwMU5YNlJzdmJjbGRaME42UEJ5bTJOUW1nUlpOdzlqVElPbE1jNzVpIiwiZXhwIjoxNzQyODcxMDQxLCJrciI6ImE0ZDEzMjgifQ.UUTQhSzn3olwXY8rZPGMDe19wtqcaah3htGd5_FL8Qo HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:34 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:34 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b188859460f6d-EWR alt-svc: h3=":443"; ma=86400

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://jainiklifesciences.com/proposals

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Windows Analysis Report
https://jainiklifesciences.com/proposals

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:35 UTC	1244	OUT	POST /checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSWZvUTZrOHpHRXh4eGpwRWJ5UHE5TDlwalJwMHF6UmlPVXh6byt1VEdaYVRBcXdQMXNtYkNYRU5zU0NHS2RVdHgrQnk2Z3VaRXdoMHZ4ajQwcEFXSGh0bVVxdStMeHY2TEJFRFYwTldGeU1JQ0pybjczV0NpYW50RE1DeTRUYnhwVTBnc0orSTVWaU9aR2xGa1FVOGJZcFNxNzBsQ1JBMzRlWVNScVc4YUlidU00WDFTbThGOTFxcXJEWnpMSXg3R1RXaDlmdzZ2d25VZWorR2dlMDNKU2ZiUzVWYW44NzFNZWorb20zUnNZaENnR0dvTHJNR3l6bWVwMU5YNlJzdmJjbGRaME42UEJ5bTJOUW1nUlpOdzlqVElPbE1jNzVpIiwiZXhwIjoxNzQyODcxMDQxLCJrciI6ImE0ZDEzMjgifQ.UUTQhSzn3olwXY8rZPGMDe19wtqcaah3htGd5_FL8Qo HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 24581 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:35 UTC	16384	OUT	Data Raw: 7b 22 76 22 3a 22 38 33 34 36 35 39 30 66 34 34 61 39 65 62 39 32 30 31 63 61 61 65 65 63 37 39 61 63 33 30 39 38 36 36 31 37 39 36 64 61 22 2c 22 6a 6f 62 5f 6d 6f 64 65 22 3a 22 69 6d 61 67 65 5f 64 72 61 67 5f 64 72 6f 70 22 2c 22 61 6e 73 77 65 72 73 22 3a 7b 22 36 34 62 36 36 62 64 36 2d 38 35 39 36 2d 34 62 64 32 2d 39 32 38 39 2d 61 61 34 33 34 62 65 63 64 65 34 65 22 3a 5b 7b 22 65 6e 74 69 74 79 5f 6e 61 6d 65 22 3a 22 38 64 38 62 61 36 38 30 2d 65 66 31 34 2d 34 61 37 65 2d 62 35 33 63 2d 62 61 30 38 65 62 38 30 66 37 30 37 22 2c 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 65 6e 74 69 74 79 5f 63 6f 6f 72 64 73 22 3a 5b 32 37 35 2c 36 32 5d 7d 5d 7d 2c 22 73 65 72 76 65 72 64 6f 6d 61 69 6e 22 3a 22 6a 61 69 6e 69 Data Ascii: {"v":"8346590f44a9eb9201caaeec79ac3098661796da","job_mode":"image_drag_drop","answers":{"64b66bd6-8596-4bd2-9289-aa434becde4e":[{"entity_name":"8d8ba680-ef14-4a7e-b53c-ba08eb80f707","entity_type":"default","entity_coords":[275,62]}]},"serverdomain":"jaini
2025-03-25 02:49:35 UTC	8197	OUT	Data Raw: 44 77 34 49 4d 37 2f 4d 71 4f 72 6e 67 66 66 31 75 73 5a 4f 6b 49 74 4f 79 54 33 75 79 63 5a 71 63 6c 30 68 45 4f 67 79 6c 73 68 6d 5a 78 2f 4b 51 48 52 63 46 59 38 48 68 6a 6b 54 4f 69 5a 2b 31 45 55 74 4d 4b 6f 31 76 61 47 64 6c 66 2f 34 63 30 4a 62 48 47 32 4b 4d 5a 47 66 63 2f 72 4b 33 32 77 33 4d 4a 61 30 2f 6d 6a 64 62 45 56 57 63 30 41 53 59 43 79 56 4f 67 2b 6c 54 75 65 70 34 63 4a 2b 6e 43 71 68 4d 42 6e 5a 43 66 64 4b 71 62 32 49 4d 73 59 6c 57 33 4d 45 2f 30 35 34 39 6c 6a 6d 79 4b 56 56 6a 32 65 42 48 67 35 6f 46 6d 34 65 6f 34 75 61 42 4c 68 57 73 4a 72 65 64 54 63 57 6c 2f 4f 62 6c 55 51 36 44 6f 69 70 42 44 33 69 46 70 53 34 63 6f 35 46 37 79 68 6b 6c 70 75 72 66 38 36 31 68 46 43 6d 73 4f 52 77 62 7a 6a 51 77 41 41 47 58 31 73 32 32 61 70 Data Ascii: Dw4IM7/MqOrngff1usZOkItOyT3uycZqcl0hEOgylshmZx/KQHRcFY8HhjkTOiZ+1EUtMKo1vaGdlf/4c0JbHG2KMZGfc/rK32w3MJa0/mjdbEVWc0ASYCyVOg+lTuep4cJ+nCqhMBnZCfdKqb2IMsYlW3ME/0549ljmyKVVj2eBHg5oFm4eo4uaBLhWsJredTcWl/OblUQ6DoipBD3iFpS4co5F7yhklpurf861hFCmsORwbzjQwAAGX1s22ap
2025-03-25 02:49:35 UTC	589	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:35 GMT Content-Type: application/json Content-Length: 3755 Connection: close CF-Ray: 925b188a5e1080d6-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cjHHjfYXPvG5; SameSite=Lax; path=/; expires=Tue, 25-Mar-25 03:19:35 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:35 UTC	1369	IN	Data Raw: 7b 22 70 61 73 73 22 3a 74 72 75 65 2c 22 67 65 6e 65 72 61 74 65 64 5f 70 61 73 73 5f 55 55 49 44 22 3a 22 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 77 59 58 4e 7a 61 32 56 35 49 6a 6f 69 62 56 52 54 55 32 45 31 57 58 68 59 4d 48 52 48 56 32 31 75 56 33 68 56 5a 6b 68 59 63 46 56 77 4d 79 39 56 63 6a 55 32 62 7a 4d 35 65 6d 78 31 4b 31 41 78 61 6a 4d 35 4b 30 5a 4a 65 57 30 32 4d 45 34 76 59 30 4d 34 62 6b 78 6c 65 55 74 47 65 6d 70 56 53 48 6c 5a 54 45 4a 52 4f 45 4e 35 52 6d 35 79 52 47 52 45 54 6c 70 50 56 44 68 61 62 55 68 6a 65 69 39 6e 64 55 4e 68 5a 54 46 7a 52 58 42 71 59 32 78 6a 54 45 70 75 61 6d 39 59 65 46 46 45 65 45 78 33 4f 47 4a 58 54 47 31 77 64 47 74 Data Ascii: {"pass":true,"generated_pass_UUID":"P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwYXNza2V5IjoibVRTU2E1WXhYMHRHV21uV3hVZkhYcFVwMy9VcjU2bzM5emx1K1AxajM5K0ZJeW02ME4vY0M4bkxleUtGempVSHlZTEJROEN5Rm5yRGRETlpPVDhabUhjei9ndUNhZTFzRXBqY2xjTEpuam9YeFFEeEx3OGJXTG1wdGt
2025-03-25 02:49:35 UTC	1369	IN	Data Raw: 6a 4e 57 64 30 70 51 54 69 74 54 4e 31 6b 35 62 48 64 70 57 54 42 4c 53 33 46 43 51 55 78 47 54 55 63 76 54 6b 4e 4f 54 56 6c 75 62 30 73 76 52 30 56 45 54 30 70 54 56 48 59 31 53 6a 64 54 4e 54 42 68 63 69 73 35 4d 56 4a 74 53 33 64 78 56 47 78 45 56 6d 6c 52 5a 7a 4a 47 54 47 45 7a 65 6a 5a 71 4e 45 52 6a 65 55 39 78 51 56 4e 69 55 46 49 30 59 6a 5a 58 4e 44 46 78 53 47 6c 4f 63 57 38 34 51 6c 51 35 63 6b 68 58 55 47 73 35 54 7a 4e 74 61 33 68 6c 52 57 4a 78 63 31 56 33 62 30 68 52 62 58 4e 70 4d 6d 31 53 52 6d 55 77 65 46 46 35 4e 57 46 6c 5a 6e 68 6d 52 31 5a 56 63 30 46 4f 4d 56 70 54 4e 45 64 79 5a 47 46 32 61 45 6c 78 54 44 41 77 5a 48 46 35 4c 7a 46 46 61 6d 78 6e 57 6e 70 47 4e 57 39 58 52 6d 74 68 57 54 56 43 62 54 42 6b 64 31 46 68 64 47 39 4c Data Ascii: jNWd0pQTitTN1k5bHdpWTBLS3FCQUxGTUcvTkNOTVlub0svR0VET0pTVHY1SjdTNTBhcis5MVJtS3dxVGxEVmlRZzJGTGEzejZqNERjeU9xQVNiUFI0YjZXNDFxSGlOcW84QlQ5ckhXUGs5TzNta3hlRWJxc1V3b0hRbXNpMm1SRmUweFF5NWFlZnhmR1ZVc0FOMVpTNEdyZGF2aElxTDAwZHF5LzFFamxnWnpGNW9XRmthWTVCbTBkd1FhdG9L
2025-03-25 02:49:35 UTC	1017	IN	Data Raw: 70 33 55 6e 52 4c 63 6e 46 43 64 57 39 57 56 33 56 4b 4d 56 68 6c 62 43 39 4a 63 54 64 71 4e 6e 4e 6a 56 6a 4e 33 62 7a 46 42 64 7a 63 77 62 56 6c 4a 64 69 74 57 52 48 68 68 51 6a 4a 68 4d 56 5a 71 52 53 39 36 51 57 51 30 5a 45 4a 31 54 31 41 31 57 47 74 54 55 47 6b 72 53 6a 63 34 53 45 74 4d 61 54 68 49 5a 6c 68 4d 51 30 78 6b 61 48 70 7a 57 43 74 45 64 6a 64 47 4c 32 56 35 53 6e 4e 79 64 55 70 6c 54 57 38 39 49 69 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 51 79 4f 44 63 78 4d 44 6b 31 4c 43 4a 7a 61 47 46 79 5a 46 39 70 5a 43 49 36 4f 44 4d 7a 4e 44 51 77 4f 44 6b 33 4c 43 4a 72 63 69 49 36 49 6a 4a 6b 4e 6d 4e 68 4f 44 4a 68 49 69 77 69 63 47 51 69 4f 6a 42 39 2e 4c 63 71 75 4b 51 66 37 76 4f 47 35 73 34 73 48 4c 51 38 66 70 66 69 51 6f 72 30 6a 70 4d 31 45 Data Ascii: p3UnRLcnFCdW9WV3VKMVhlbC9JcTdqNnNjVjN3bzFBdzcwbVlJditWRHhhQjJhMVZqRS96QWQ0ZEJ1T1A1WGtTUGkrSjc4SEtMaThIZlhMQ0xkaHpzWCtEdjdGL2V5SnNydUplTW89IiwiZXhwIjoxNzQyODcxMDk1LCJzaGFyZF9pZCI6ODMzNDQwODk3LCJrciI6IjJkNmNhODJhIiwicGQiOjB9.LcquKQf7vOG5s4sHLQ8fpfiQor0jpM1E

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:35 UTC	956	OUT	GET /checkcaptcha/1944dfca-21c2-483c-9d9a-cfdc77ccf870/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSWZvUTZrOHpHRXh4eGpwRWJ5UHE5TDlwalJwMHF6UmlPVXh6byt1VEdaYVRBcXdQMXNtYkNYRU5zU0NHS2RVdHgrQnk2Z3VaRXdoMHZ4ajQwcEFXSGh0bVVxdStMeHY2TEJFRFYwTldGeU1JQ0pybjczV0NpYW50RE1DeTRUYnhwVTBnc0orSTVWaU9aR2xGa1FVOGJZcFNxNzBsQ1JBMzRlWVNScVc4YUlidU00WDFTbThGOTFxcXJEWnpMSXg3R1RXaDlmdzZ2d25VZWorR2dlMDNKU2ZiUzVWYW44NzFNZWorb20zUnNZaENnR0dvTHJNR3l6bWVwMU5YNlJzdmJjbGRaME42UEJ5bTJOUW1nUlpOdzlqVElPbE1jNzVpIiwiZXhwIjoxNzQyODcxMDQxLCJrciI6ImE0ZDEzMjgifQ.UUTQhSzn3olwXY8rZPGMDe19wtqcaah3htGd5_FL8Qo HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:35 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 25 Mar 2025 02:49:35 GMT Content-Type: text/plain Content-Length: 14 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925b188f0ef94f77-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:35 UTC	14	IN	Data Raw: 49 6e 76 61 6c 69 64 20 4d 65 74 68 6f 64 Data Ascii: Invalid Method

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:39 UTC	703	OUT	POST /offers/validate-captcha.php HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive Content-Length: 3015 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://jainiklifesciences.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://jainiklifesciences.com/offers/box.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:39 UTC	3015	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 74 79 65 76 40 67 6d 61 69 6c 2e 63 6f 6d 22 2c 22 63 61 70 74 63 68 61 52 65 73 70 6f 6e 73 65 22 3a 22 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 77 59 58 4e 7a 61 32 56 35 49 6a 6f 69 62 56 52 54 55 32 45 31 57 58 68 59 4d 48 52 48 56 32 31 75 56 33 68 56 5a 6b 68 59 63 46 56 77 4d 79 39 56 63 6a 55 32 62 7a 4d 35 65 6d 78 31 4b 31 41 78 61 6a 4d 35 4b 30 5a 4a 65 57 30 32 4d 45 34 76 59 30 4d 34 62 6b 78 6c 65 55 74 47 65 6d 70 56 53 48 6c 5a 54 45 4a 52 4f 45 4e 35 52 6d 35 79 52 47 52 45 54 6c 70 50 56 44 68 61 62 55 68 6a 65 69 39 6e 64 55 4e 68 5a 54 46 7a 52 58 42 71 59 32 78 6a 54 45 70 75 61 6d 39 59 65 46 46 45 65 45 78 33 4f 47 Data Ascii: {"email":"tyev@gmail.com","captchaResponse":"P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwYXNza2V5IjoibVRTU2E1WXhYMHRHV21uV3hVZkhYcFVwMy9VcjU2bzM5emx1K1AxajM5K0ZJeW02ME4vY0M4bkxleUtGempVSHlZTEJROEN5Rm5yRGRETlpPVDhabUhjei9ndUNhZTFzRXBqY2xjTEpuam9YeFFEeEx3OG
2025-03-25 02:49:40 UTC	975	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 02:49:40 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Access-Control-Allow-Origin: https://login.procore.com/ Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, X-Requested-With X-Content-Type-Options: nosniff X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=(), interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains; preload List-Unsubscribe: <mailto:support@procore.com> X-SES-Campaign-ID: campaign_2025_bid_invite X-Campaign: Construction_Bid_Invite_2025 X-Mailer: PHP/8.1.30 X-Sender: support@procore.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=64ea4742efffe444b5265ee35f2f4c35; path=/
2025-03-25 02:49:40 UTC	99	IN	Data Raw: 35 38 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 66 37 34 38 39 32 37 35 2e 31 62 33 33 32 33 30 31 37 65 35 30 62 35 30 61 32 39 62 65 38 34 64 35 2e 77 6f 72 6b 65 72 73 2e 64 65 76 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 58{"success":true,"redirectUrl":"https:\/\/f7489275.1b3323017e50b50a29be84d5.workers.dev"}0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:41 UTC	762	OUT	GET /?ref=tyev@gmail.com HTTP/1.1 Host: f7489275.1b3323017e50b50a29be84d5.workers.dev Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://jainiklifesciences.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:41 UTC	813	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:41 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sOBEy6A%2Fd4j8DVT4kPsfbB3pyNpBp%2BjyhvRE%2FIe1%2Bos78%2B%2Bpi19yhjKH%2BoLnhWQQVHbgSwUmK%2B6ahIt4luTsGgbZ4kreMaz9CSTuUGXBkPUeiPuWNwC2L3fsDngy3Kin4vqoNx6H04tGjFQGWJp2iOV62DAQSEE1eecVAuF9LTM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925b18b0eb7432b1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97567&min_rtt=97493&rtt_var=20683&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2900&recv_bytes=1334&delivery_rate=38109&cwnd=252&unsent_bytes=0&cid=47e34c8090f5d123&ts=252&x=0"
2025-03-25 02:49:41 UTC	1369	IN	Data Raw: 39 34 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 72 65 20 73 74 65 70 20 62 65 66 6f 72 65 20 79 6f 75 20 70 72 6f 63 65 65 64 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 4a 6f 65 31 32 33 38 Data Ascii: 941<!doctype html><html lang="en-US"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>One more step before you proceed...</title> <script src="https://cdn.jsdelivr.net/gh/Joe1238
2025-03-25 02:49:41 UTC	1007	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 52 6f 62 6f 74 6f 2c 20 4f 78 79 67 65 6e 2c 20 55 62 75 6e 74 75 2c 20 43 61 6e 74 61 72 65 6c 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 30 66 32 66 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 Data Ascii: nt-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; background: #f0f2f5; margin: 0; padding: 20px; display: flex; justify-content: center;
2025-03-25 02:49:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:41 UTC	650	OUT	GET /gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:41 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5270 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: main X-JSD-Version-Type: branch ETag: W/"1496-EyMXTBkrHpcMTYrS0OlQMjZMCcY" Accept-Ranges: bytes Age: 12174 Date: Tue, 25 Mar 2025 02:49:41 GMT X-Served-By: cache-fra-etou8220038-FRA, cache-lga21985-LGA X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-25 02:49:41 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 0a 20 2a 20 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 20 76 31 2e 33 2e 37 0a 20 2a 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4a 6f 65 31 32 33 38 37 2f 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 0a 20 2a 0a 20 2a 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 32 31 20 2d 20 32 30 32 35 20 4a 6f 65 20 52 75 74 6b 6f 77 73 6b 69 20 3c 4a 6f 65 40 64 72 65 67 67 6c 65 2e 63 6f 6d 3e 0a 20 2a 0a 20 2a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 20 61 20 63 6f 70 79 0a 20 2a 20 6f 66 20 74 Data Ascii: /! * detectIncognito v1.3.7 * * https://github.com/Joe12387/detectIncognito * * MIT License * * Copyright (c) 2021 - 2025 Joe Rutkowski <Joe@dreggle.com> * * Permission is hereby granted, free of charge, to any person obtaining a copy * of t
2025-03-25 02:49:41 UTC	1378	IN	Data Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 3d 74 28 29 3a 65 2e 64 65 74 65 63 74 49 6e 63 6f 67 6e 69 74 6f 3d 74 28 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 7b 35 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 Data Ascii: ect"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.detectIncognito=t():e.detectIncognito=t()}(this,(function(){return function(){"use strict";var e={};return{598:function(e,t){var n=t
2025-03-25 02:49:41 UTC	1378	IN	Data Raw: 30 5d 26 26 63 5b 31 5d 3c 72 5b 33 5d 29 29 7b 61 2e 6c 61 62 65 6c 3d 63 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 36 3d 3d 3d 63 5b 30 5d 26 26 61 2e 6c 61 62 65 6c 3c 72 5b 31 5d 29 7b 61 2e 6c 61 62 65 6c 3d 72 5b 31 5d 2c 72 3d 63 3b 62 72 65 61 6b 7d 69 66 28 72 26 26 61 2e 6c 61 62 65 6c 3c 72 5b 32 5d 29 7b 61 2e 6c 61 62 65 6c 3d 72 5b 32 5d 2c 61 2e 6f 70 73 2e 70 75 73 68 28 63 29 3b 62 72 65 61 6b 7d 72 5b 32 5d 26 26 61 2e 6f 70 73 2e 70 6f 70 28 29 2c 61 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 63 3d 74 2e 63 61 6c 6c 28 65 2c 61 29 7d 63 61 74 63 68 28 65 29 7b 63 3d 5b 36 2c 65 5d 2c 6f 3d 30 7d 66 69 6e 61 6c 6c 79 7b 6e 3d 72 3d 30 7d 69 66 28 35 26 63 5b 30 5d 29 74 68 72 6f 77 20 63 5b 31 5d 3b 72 65 74 75 72 6e 7b Data Ascii: 0]&&c[1]<r[3])){a.label=c[1];break}if(6===c[0]&&a.label<r[1]){a.label=r[1],r=c;break}if(r&&a.label<r[2]){a.label=r[2],a.ops.push(c);break}r[2]&&a.ops.pop(),a.trys.pop();continue}c=t.call(e,a)}catch(e){c=[6,e],o=0}finally{n=r=0}if(5&c[0])throw c[1];return{
2025-03-25 02:49:41 UTC	1136	IN	Data Raw: 31 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 6b 69 74 54 65 6d 70 6f 72 61 72 79 53 74 6f 72 61 67 65 2e 71 75 65 72 79 55 73 61 67 65 41 6e 64 51 75 6f 74 61 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 72 28 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2f 31 30 34 38 35 37 36 29 3c 32 2a 4d 61 74 68 2e 72 6f 75 6e 64 28 28 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 77 69 6e 64 6f 77 29 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 6e 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 26 26 76 6f 69 64 20 30 21 3d 3d 6e 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d 6f 72 79 2e 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 65 6d Data Ascii: 1)}()}function u(){navigator.webkitTemporaryStorage.queryUsageAndQuota((function(e,t){var n;r(Math.round(t/1048576)<2*Math.round((void 0!==(n=window).performance&&void 0!==n.performance.memory&&void 0!==n.performance.memory.jsHeapSizeLimit?performance.mem

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:41 UTC	645	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:41 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 02:49:41 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 925b18b47eca42e0-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:42 UTC	629	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:42 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:42 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 925b18b74e54e351-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:42 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:42 UTC	465	OUT	GET /offers/validate-captcha.php HTTP/1.1 Host: jainiklifesciences.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=64ea4742efffe444b5265ee35f2f4c35
2025-03-25 02:49:43 UTC	904	IN	HTTP/1.1 405 Method Not Allowed Server: nginx Date: Tue, 25 Mar 2025 02:49:42 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: https://login.procore.com/ Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, X-Requested-With X-Content-Type-Options: nosniff X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=(), interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains; preload List-Unsubscribe: <mailto:support@procore.com> X-SES-Campaign-ID: campaign_2025_bid_invite X-Campaign: Construction_Bid_Invite_2025 X-Mailer: PHP/8.1.30 X-Sender: support@procore.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache
2025-03-25 02:49:43 UTC	57	IN	Data Raw: 32 65 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2e{"success":false,"error":"Method Not Allowed"}0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:42 UTC	870	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://f7489275.1b3323017e50b50a29be84d5.workers.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:42 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28146 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-fWqcNy8UuyKUNBSt' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-25 02:49:42 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-25 02:49:42 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 66 57 71 63 4e 79 38 55 75 79 4b 55 4e 42 53 74 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-fWqcNy8UuyKUNBSt' 'unsafe-
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-03-25 02:49:42 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-03-25 02:49:43 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925b18bade66428b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/hk1re/0x4AAAAAABCRugtUMR-EQ7Q7/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 02:49:43 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 02:49:43 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114460 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 925b18bddfad49c1-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 02:49:43 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 43 75 55 53 37 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 Data Ascii: window._cf_chl_opt.CuUS7={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsi
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 73 74 72 61 74 6f 72 25 32 30 6f 72 25 32 30 73 75 62 6d 69 74 25 32 30 61 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 Data Ascii: strator%20or%20submit%20a%20feedback%20report","human_button_text":"Verify%20you%20are%20human","turnstile_feedback_description":"Send%20Feedback","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","invalid_sitekey":"Inva
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 79 69 6e 67 2e 2e 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 55 2c 66 31 2c 66 34 2c 66 35 2c 66 76 2c 66 77 2c 66 41 2c 66 42 2c 66 43 2c 66 46 2c 66 49 2c 66 4b 2c 66 4c 2c 66 Data Ascii: ying...","testing_only":"Testing%20only."},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eU,f1,f4,f5,fv,fw,fA,fB,fC,fF,fI,fK,fL,f
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 35 35 33 35 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 68 6a 28 31 31 33 30 29 5d 28 27 27 29 7d 2c 66 32 3d 5b 5d 2c 66 33 3d 30 3b 32 35 36 3e 66 33 3b 66 32 5b 66 33 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 35 30 33 29 5d 28 66 33 29 2c 66 33 2b 2b 29 3b 66 34 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 31 31 37 39 29 29 2c 66 35 3d 61 74 6f 62 28 67 4a 28 31 35 37 39 29 29 2c 66 76 3d 7b 7d 2c 66 76 5b 67 4a 28 31 32 37 33 29 5d 3d 27 6f 27 2c 66 76 5b 67 4a 28 31 33 30 32 29 5d 3d 27 73 27 2c 66 76 5b 67 4a 28 36 31 37 29 5d 3d 27 75 27 2c 66 76 5b 67 4a 28 31 33 37 39 29 5d 3d 27 7a 27 2c 66 76 5b 67 4a 28 31 33 37 37 29 5d 3d 27 6e 27 2c 66 76 5b 67 4a 28 31 35 31 30 29 5d 3d 27 49 27 2c 66 76 5b 67 4a 28 31 36 30 39 29 5d 3d 27 62 27 2c 66 77 3d Data Ascii: 5535,255))));return k[hj(1130)]('')},f2=[],f3=0;256>f3;f2[f3]=String[gJ(503)](f3),f3++);f4=(0,eval)(gJ(1179)),f5=atob(gJ(1579)),fv={},fv[gJ(1273)]='o',fv[gJ(1302)]='s',fv[gJ(617)]='u',fv[gJ(1379)]='z',fv[gJ(1377)]='n',fv[gJ(1510)]='I',fv[gJ(1609)]='b',fw=
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 31 39 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 68 53 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 66 6f 72 28 68 53 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 68 53 28 31 36 30 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 68 53 28 34 34 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 76 7d 2c 6a 5b 68 53 28 31 33 35 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3c 3c 76 7d 2c 6a 5b 68 53 28 37 38 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 26 76 7d 2c 6a 5b 68 53 28 31 35 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3d 3d 76 7d 2c 6a 5b 68 53 28 31 30 31 31 29 5d 3d 66 75 6e Data Ascii: 194)]=function(h,i,hS,j,k,l,m,n,o){for(hS=gJ,j={},j[hS(1608)]=function(s,v){return s>v},j[hS(449)]=function(s,v){return s<v},j[hS(1355)]=function(s,v){return s<<v},j[hS(787)]=function(s,v){return s&v},j[hS(1524)]=function(s,v){return s==v},j[hS(1011)]=fun
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 61 47 69 73 74 27 3a 68 54 28 34 30 36 29 2c 27 45 70 58 48 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 4b 50 75 76 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 71 4f 72 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 51 77 48 74 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 74 57 64 6c 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 76 55 55 6e 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 74 43 65 59 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 Data Ascii: return h<i},'aGist':hT(406),'EpXHd':function(h,i){return h<i},'KPuvZ':function(h,i){return h==i},'qOrng':function(h,i){return h>i},'QwHty':function(h,i){return h<<i},'tWdlQ':function(h,i){return h&i},'vUUnO':function(h,i){return h<i},'tCeYC':function(h,i)
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 28 31 31 36 38 29 5d 5b 68 56 28 31 31 36 31 29 5d 28 6b 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 57 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 68 57 3d 68 54 2c 69 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 64 5b 68 57 28 39 35 34 29 5d 28 4a 2c 69 5b 68 57 28 34 32 33 29 5d 29 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 68 57 28 31 31 36 31 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 68 57 28 31 32 31 36 29 5d 5b 68 57 28 31 30 32 36 29 5d 5b 68 57 28 31 31 39 30 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b Data Ascii: (1168)][hV(1161)](k)})},'g':function(i,j,o,hW,s,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O){if(hW=hT,i==null)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;d[hW(954)](J,i[hW(423)]);J+=1)if(K=i[hW(1161)](J),Object[hW(1216)][hW(1026)][hW(1190)](x,K)\|\|(x[K]=E++
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 68 57 28 33 34 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 68 57 28 37 33 30 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 68 57 28 39 37 33 29 5d 28 48 3c 3c 31 2c 31 26 4f 29 2c 49 3d 3d 64 5b 68 57 28 31 35 37 37 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 68 57 28 33 34 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 64 5b 68 57 28 38 35 34 29 5d 28 73 2c 46 29 3b 48 3d 48 3c 3c 31 7c 4f 2c 64 5b 68 57 28 34 37 37 29 5d 28 49 2c 64 5b 68 57 28 31 35 37 37 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 57 28 33 34 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a Data Ascii: =j-1?(I=0,G[hW(349)](o(H)),H=0):I++,s++);for(O=C[hW(730)](0),s=0;8>s;H=d[hW(973)](H<<1,1&O),I==d[hW(1577)](j,1)?(I=0,G[hW(349)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;d[hW(854)](s,F);H=H<<1\|O,d[hW(477)](I,d[hW(1577)](j,1))?(I=0,G[hW(349)](o(H)),H=0):
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 5a 28 36 31 33 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 68 5a 28 39 39 30 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 68 5a 28 31 31 35 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 68 5a 28 35 32 39 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 68 5a 28 33 34 39 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 5a 28 36 31 33 29 5d 28 32 2c 43 29 2c 46 3d 31 Data Ascii: M=e(J);break;case 1:for(J=0,K=Math[hZ(613)](2,16),F=1;d[hZ(990)](F,K);L=G&H,H>>=1,d[hZ(1152)](0,H)&&(H=j,G=o(I++)),J\|=F*(0<L?1:0),F<<=1);M=d[hZ(529)](e,J);break;case 2:return''}for(E=s[3]=M,D[hZ(349)](M);;){if(I>i)return'';for(J=0,K=Math[hZ(613)](2,C),F=1
2025-03-25 02:49:43 UTC	1369	IN	Data Raw: 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 31 28 31 33 36 38 29 5d 5b 69 31 28 35 37 37 29 5d 2c 27 63 6f 64 65 27 3a 69 31 28 31 37 37 31 29 2c 27 72 63 56 27 3a 65 4d 5b 69 31 28 31 33 36 38 29 5d 5b 69 31 28 33 39 37 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 4a 28 31 32 37 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 69 32 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 76 2c 78 2c 42 29 7b 6b 3d 28 69 32 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 32 28 31 30 33 32 29 5d 3d 69 32 28 39 36 35 29 2c 6a 5b 69 32 28 39 36 30 29 5d 3d 69 32 28 38 33 35 29 2c 6a 5b 69 32 28 31 36 37 39 29 5d 3d 69 32 28 31 33 33 32 29 2c 6a 5b 69 32 28 31 34 35 38 29 5d 3d 69 32 28 31 32 34 38 29 2c 6a 5b 69 32 28 31 34 31 38 29 5d 3d 69 32 28 31 32 31 31 29 2c Data Ascii: ChlOutS':eM[i1(1368)][i1(577)],'code':i1(1771),'rcV':eM[i1(1368)][i1(397)]},'*'))},g)},eM[gJ(1277)]=function(g,h,i,i2,j,k,l,m,n,o,s,v,x,B){k=(i2=gJ,j={},j[i2(1032)]=i2(965),j[i2(960)]=i2(835),j[i2(1679)]=i2(1332),j[i2(1458)]=i2(1248),j[i2(1418)]=i2(1211),