Edit tour

Windows Analysis Report
FILLING SUMMON DOCUMENT.docx

Overview

General Information

Sample name:	FILLING SUMMON DOCUMENT.docx
Analysis ID:	1647886
MD5:	9a579e62103140d9c3abed8c4db790ce
SHA1:	8614c8739d2d88e0f366b6d078ce8fea9e1a9f14
SHA256:	b7c0e411f36a29451bf870e1aaa1672b2862707797e6cbdb304d5532086f66a4
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

Performs DNS queries to domains with low reputation

Creates files inside the system directory

Deletes files inside the Windows folder

Form action URLs do not match main URL

HTML body contains low number of good links

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Unable to load, office file is protected or invalid

Classification

Process Tree

System is w11x64_office

WINWORD.EXE (PID: 7528 cmdline: "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding MD5: A9F0EC89897AC6C878D217DFB64CA752)

chrome.exe (PID: 7956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 5672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14717041625160949595,12093668047587295034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2120 /prefetch:11 MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 3780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kangelaestate.co.mz/Authpage/" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_174	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://kangelaestate.co.mz/Authpage/

Joe Sandbox AI: Score: 7 Reasons: The brand 'OneDrive' is a well-known cloud storage service by Microsoft., The legitimate domain for OneDrive is 'onedrive.live.com'., The provided URL 'kangelaestate.co.mz' does not match the legitimate domain for OneDrive., The URL 'kangelaestate.co.mz' does not contain any recognizable association with Microsoft or OneDrive., The domain 'co.mz' is a Mozambican domain, which is unusual for a global service like OneDrive., The presence of input fields for 'Email Address' and 'Password' on a non-legitimate domain is a common phishing tactic. DOM: 0.0.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_174, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: Office document	Joe Sandbox AI: Page contains button: 'ACCESS SUMMON DOCUMENT HERE' Source: 'Office document'
Source: Office document	Joe Sandbox AI: Office document contains prominent button: 'access summon document here'
Source: Screenshot id: 6	Joe Sandbox AI: Page contains button: 'ACCESS SUMMON DOCUMENT HERE' Source: 'Screenshot id: 6'
Source: Screenshot id: 6	Joe Sandbox AI: Screenshot id: 6 contains prominent button: 'access summon document here'
Source: Screenshot id: 22	Joe Sandbox AI: Page contains button: 'ACCESS SUMMON DOCUMENT HERE' Source: 'Screenshot id: 22'
Source: Screenshot id: 22	Joe Sandbox AI: Screenshot id: 22 contains prominent button: 'access summon document here'
Source: Screenshot id: 23	Joe Sandbox AI: Page contains button: 'ACCESS SUMMON DOCUMENT HERE' Source: 'Screenshot id: 23'
Source: Screenshot id: 23	Joe Sandbox AI: Screenshot id: 23 contains prominent button: 'access summon document here'
Source: Screenshot id: 21	Joe Sandbox AI: Page contains button: 'ACCESS SUMMON DOCUMENT HERE' Source: 'Screenshot id: 21'
Source: Screenshot id: 21	Joe Sandbox AI: Screenshot id: 21 contains prominent button: 'access summon document here'

Source: https://kangelaestate.co.mz/Authpage/

HTTP Parser: Form action: https://api.staticforms.xyz/submit co staticforms

Source: https://kangelaestate.co.mz/Authpage/

HTTP Parser: Number of links: 0

Source: https://kangelaestate.co.mz/Authpage/

HTTP Parser: <input type="password" .../> found

Source: https://usersharepoint.nicepage.io/

HTTP Parser: No favicon

Source: https://kangelaestate.co.mz/Authpage/

HTTP Parser: No <meta name="author".. found

Source: https://kangelaestate.co.mz/Authpage/

HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files\Microsoft Office\root\vfs\System\MSVCR100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 142.250.185.164:443 -> 192.168.2.24:59540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59544 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59594 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59593 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.24:59615 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.24:59614 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.24:59616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59623 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.183:443 -> 192.168.2.24:59624 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.102.56.178:443 -> 192.168.2.24:59626 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: api.staticforms.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: api.staticforms.xyz

Source: global traffic

HTTP traffic detected: POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1742897447053&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1Accept-Encoding: gzip, deflateContent-Length: 3656Content-Type: application/json; charset=UTF-8Host: browser.events.data.msn.cnConnection: Keep-AliveCache-Control: no-cache

Source: Joe Sandbox View	IP Address: 104.21.16.1 104.21.16.1
Source: Joe Sandbox View	IP Address: 104.21.16.1 104.21.16.1
Source: Joe Sandbox View	IP Address: 212.102.56.178 212.102.56.178
Source: Joe Sandbox View	IP Address: 169.150.255.183 169.150.255.183

Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 52.168.117.174
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.103
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.103
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.103
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.11.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.214.10
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /Authpage/ HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.css?ver=6.18.14 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-132.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-180.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-grow.min.css?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/bcf-fonts/local-fonts.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/revslider/public/css/sr7.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1741157166 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maisonco-custom.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/03/download-1.jpeg HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/modernizr.custom.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/libs/owl.carousel.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/carousel.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-aliveOrigin: https://kangelaestate.co.mzsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1400x700.png HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/elementor/css/post-7.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/magnific-popup.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maisonco-update.css?ver=1742156475 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/mlpushmenu.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/classie.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/theme.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-util.min.js?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layout.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/maisonco-core/assets/js/SmoothScroll.min.js?ver=1.4.8 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/03/download-1.jpeg HTTP/1.1Host: kangelaestate.co.mzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1400x700.png HTTP/1.1Host: kangelaestate.co.mzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.1 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/maisonco-core/assets/js/libs/jquery.magnific-popup.min.js?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elementor/frontend.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/js/sp-scripts.min.js HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/dynamic-text.js?ver=1742154162 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/js/tsparticles.min.js HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7.5 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/burst-statistics/assets/js/build/burst.min.js?ver=1.7.5 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/revslider/public/js/libs/tptools.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/cache/min/1/wp-content/plugins/revslider/public/js/sr7.js?ver=1741170075 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: burst_uid=fdacc9dfe598d5937d6fa056b41253df
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/cropped-3-32x32.png HTTP/1.1Host: kangelaestate.co.mzConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://kangelaestate.co.mz/Authpage/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: burst_uid=fdacc9dfe598d5937d6fa056b41253df
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2025/02/cropped-3-32x32.png HTTP/1.1Host: kangelaestate.co.mzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: burst_uid=fdacc9dfe598d5937d6fa056b41253df
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: usersharepoint.nicepage.ioConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://kangelaestate.co.mz/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nicepage-site.css HTTP/1.1Host: usersharepoint.nicepage.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.css HTTP/1.1Host: usersharepoint.nicepage.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d29e8cf1cf4d4fade598bc5c32341cd518073458/nicepage.css HTTP/1.1Host: capp.nicepage.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/jquery-3.5.1.min.js HTTP/1.1Host: capp.nicepage.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /d29e8cf1cf4d4fade598bc5c32341cd518073458/nicepage.js HTTP/1.1Host: capp.nicepage.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eeff2eae/6366116/images/SharePoint-Symbol.webp HTTP/1.1Host: assets.nicepagecdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eeff2eae/6366116/images/SharePoint-Symbol.webp HTTP/1.1Host: assets.nicepagecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eeff2eae/6366116/images/11513839.png HTTP/1.1Host: assets.nicepagecdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: usersharepoint.nicepage.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://usersharepoint.nicepage.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sessionId=1831c73a-85f8-4076-8eef-d5105d356f91; userId=0cb6bc07-8845-4f8f-be89-630427f24553
Source: global traffic	HTTP traffic detected: GET /eeff2eae/6366116/images/11513839.png HTTP/1.1Host: assets.nicepagecdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_213.15.dr	String found in binary or memory: if (document.URL.indexOf ('www.youtube.com/watch') != -1) { equals www.youtube.com (Youtube)
Source: chromecache_188.15.dr	String found in binary or memory: this._core.enter('playing');this._core.trigger('play',null,'video');item=this._core.items(this._core.relative(item.index()));this._core.reset(item.index());if(video.type==='youtube'){html='<iframe width="'+width+'" height="'+height+'" src="//www.youtube.com/embed/'+video.id+'?autoplay=1&rel=0&v='+video.id+'" frameborder="0" allowfullscreen></iframe>'}else if(video.type==='vimeo'){html='<iframe src="//player.vimeo.com/video/'+video.id+'?autoplay=1" width="'+width+'" height="'+height+'" frameborder="0" webkitallowfullscreen mozallowfullscreen allowfullscreen></iframe>'}else if(video.type==='vzaar'){html='<iframe frameborder="0"'+'height="'+height+'"'+'width="'+width+'" allowfullscreen mozallowfullscreen webkitAllowFullScreen '+'src="//view.vzaar.com/'+video.id+'/player?autoplay=true"></iframe>'} equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: kangelaestate.co.mz
Source: global traffic	DNS traffic detected: DNS query: api.staticforms.xyz
Source: global traffic	DNS traffic detected: DNS query: usersharepoint.nicepage.io
Source: global traffic	DNS traffic detected: DNS query: capp.nicepage.com
Source: global traffic	DNS traffic detected: DNS query: assets.nicepagecdn.com

Source: unknown

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 5034Server: nginx/1.19.2Content-Type: text/htmlLast-Modified: Mon, 01 Jul 2024 13:10:38 GMTx-amz-version-id: FT9qWE0BVhUpA2Q17BX6y15wtpUeS1FKETag: "e01836379a08fd6809bc20a9933f25ef"x-amz-error-code: NoSuchKeyx-amz-error-message: The specified key does not exist.x-amz-error-detail-Key: oi/nt/usersharepoint/favicon.icox-amz-request-id: W42EGRC6FPSW9ZP5x-amz-id-2: 45NZp0kyENQ3r8MnZMLqVPVBQhuyuOguU8UO42aoEP9K3juE5iIMNPkunQpLPmkmhZd58LgJXds=Accept-Ranges: bytesAge: 0Date: Tue, 25 Mar 2025 10:12:19 GMTVia: 1.1 varnishX-Served-By: cache-nyc-kteb1890052-NYCX-Cache: MISSX-Cache-Hits: 0X-Timer: S1742897539.264445,VS0,VE211Vary: Accept-Encoding

Source: chromecache_161.15.dr	String found in binary or memory: http://codepen.io/dimsemenov/pen/yyBWoR
Source: chromecache_161.15.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_206.15.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_145.15.dr	String found in binary or memory: http://gilmoreorless.mit-license.org/
Source: chromecache_145.15.dr	String found in binary or memory: http://github.com/cferdinandi/gumshoe
Source: chromecache_161.15.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_145.15.dr	String found in binary or memory: http://photoswipe.com
Source: chromecache_200.15.dr	String found in binary or memory: http://schema.org
Source: chromecache_213.15.dr	String found in binary or memory: http://stereopsis.com/stopping/
Source: chromecache_209.15.dr	String found in binary or memory: http://www.smartmenus.org/
Source: chromecache_213.15.dr	String found in binary or memory: http://www.smoothscroll.net/
Source: chromecache_220.15.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_174.15.dr	String found in binary or memory: https://api.seedprod.com/v4/
Source: chromecache_174.15.dr	String found in binary or memory: https://api.staticforms.xyz/submit
Source: chromecache_174.15.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_167.15.dr	String found in binary or memory: https://assets.nicepagecdn.com/eeff2eae/6366116/images/11513839.png
Source: chromecache_200.15.dr	String found in binary or memory: https://assets.nicepagecdn.com/eeff2eae/6366116/images/SharePoint-Symbol.webp
Source: chromecache_161.15.dr	String found in binary or memory: https://blog.keanulee.com/2014/10/20/the-tale-of-three-spinners.html
Source: chromecache_204.15.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_204.15.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Inter:400
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Montserrat%3A100%2C100italic%2C200%2C200italic%2C300%2C300it
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto%3A100%2C100italic%2C200%2C200italic%2C300%2C300italic
Source: chromecache_200.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:100
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Work
Source: chromecache_174.15.dr	String found in binary or memory: https://fonts.gstatic.com/
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/berkshireswash/v20/ptRRTi-cavZOGqCvnNJDl5m5XmN_pM4zXX4.woff2)
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/berkshireswash/v20/ptRRTi-cavZOGqCvnNJDl5m5XmN_qs4z.woff2)
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZ9hiA.woff2)
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZBhiI2B.woff2
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZFhiI2B.woff2
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZJhiI2B.woff2
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZNhiI2B.woff2
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZthiI2B.woff2
Source: chromecache_197.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcCO3FwrK3iLTeHuS_nVMrMxCp50SjIw2boKoduKmMEVuLyfAZxhiI2B.woff2
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/marcellussc/v13/ke8iOgUHP1dg-Rmi6RWjbLE_htac.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/marcellussc/v13/ke8iOgUHP1dg-Rmi6RWjbLE_iNacKKg.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxC7mw9c.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxi7mw9c.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRxy7mw9c.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRyS7m.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUQjIg1_i6t8kCHKm459WxRzS7mw9c.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459W1hyzbi.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WRhyzbi.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459WZhyzbi.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wdhyzbi.woff2)
Source: chromecache_219.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/montserrat/v29/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkAnkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBXkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkC3kaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCHkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCXkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkCnkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkaHkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkenkaWzU.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_198.15.dr, chromecache_202.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufA5qW54A.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufB5qW54A.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufC5qW54A.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufD5qW54A.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufJ5qW54A.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufN5qU.woff2)
Source: chromecache_198.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotoslab/v34/BngMUXZYTXPIvIBgJJSb6ufO5qW54A.woff2)
Source: chromecache_222.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBi8Jpg.woff2)
Source: chromecache_222.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBiAJpp_c.woff2)
Source: chromecache_222.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/worksans/v19/QGY_z_wNahGAdqQ43RhVcIgYT2Xz5u32K0nXBiEJpp_c.woff2)
Source: chromecache_161.15.dr	String found in binary or memory: https://froala.com/wysiwyg-editor/terms/
Source: chromecache_145.15.dr	String found in binary or memory: https://github.com/Prinzhorn/skrollr
Source: chromecache_160.15.dr	String found in binary or memory: https://github.com/ded/bonzo
Source: chromecache_145.15.dr	String found in binary or memory: https://github.com/gilmoreorless/css-background-parser
Source: chromecache_145.15.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_145.15.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_161.15.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: chromecache_203.15.dr	String found in binary or memory: https://gsap.com
Source: chromecache_203.15.dr	String found in binary or memory: https://gsap.com/standard-license
Source: chromecache_220.15.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_220.15.dr	String found in binary or memory: https://jqueryui.com
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/#/schema/logo/image/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/#organization
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/#website
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/?page_id=5823
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/?page_id=5823#breadcrumb
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/?page_id=5823#primaryimage
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/?s=
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/authpage/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/comments/feed/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/feed/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-admin/admin-ajax.php
Source: chromecache_207.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/bcf-fonts/Work
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/bcf-fonts/local-fonts.css?ver=17421564
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/magni
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maiso
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/carous
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elemen
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/c
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/m
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/revslider/public/css/sr7.css?v
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/revslider/public/js/libs/tptoo
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/revslider/public/js/sr7.js?ver
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/pub
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/libs/owl.car
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layou
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/theme.js?ver
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/assets/js/build/burst.min.js?ver=1.7
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.1
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ve
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.27.6
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-gr
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-sh
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/maisonco-core/assets/js/SmoothScroll.min.js?ver=1.4.8
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/maisonco-core/assets/js/libs/jquery.magnific-popup.mi
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/revslider/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.cs
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/sp-scripts.min.j
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/tsparticles.min.
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/themes/maisonco/assets/js/libs/html5.js?ver=3.7.3
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2024/10/cropped-Logo_3-KANGELA-1.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-180x180.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-192x192.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-270x270.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-32x32.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-100x100.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1024x400.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1400x700.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-150x150.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1536x600.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-300x117.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-350x100.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-400x156.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-400x400.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-600x390.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue.png
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/2025/03/download-1.jpeg
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-132.css?ver=1742156475
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-180.css?ver=1742156475
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-7.css?ver=1742156475
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/css/dist/block-library/style.min.css?ver=0f1096306518dd6bf68
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/underscore.min.js?ver=1.13.7
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-includes/js/wp-util.min.js?ver=0f1096306518dd6bf6820293c7b564a7
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-json/
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fkangelaestate.co.mz%2Fauthpag
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/wp-json/wp/v2/pages/5823
Source: chromecache_174.15.dr	String found in binary or memory: https://kangelaestate.co.mz/xmlrpc.php?rsd
Source: chromecache_183.15.dr	String found in binary or memory: https://nicepage.com
Source: chromecache_200.15.dr, chromecache_183.15.dr	String found in binary or memory: https://nicepage.com/
Source: chromecache_183.15.dr	String found in binary or memory: https://nicepage.com/Content/Images/logo-w.png
Source: chromecache_183.15.dr	String found in binary or memory: https://nicepage.com/Editor/Contact
Source: chromecache_174.15.dr	String found in binary or memory: https://ogp.me/ns#
Source: chromecache_174.15.dr	String found in binary or memory: https://schema.org
Source: chromecache_145.15.dr	String found in binary or memory: https://service.nicepagesrv.com/form-attachment/v1/form-upload-url
Source: chromecache_145.15.dr	String found in binary or memory: https://service.nicepagesrv.com/place-email-order/v1/place-email-order
Source: chromecache_145.15.dr	String found in binary or memory: https://service.nicepagesrv.com/site-search/v1/site-search
Source: chromecache_145.15.dr	String found in binary or memory: https://service.nicepagesrv.com/stripe/v1/stripe-checkout
Source: chromecache_174.15.dr	String found in binary or memory: https://usersharepoint.nicepage.io/
Source: chromecache_200.15.dr	String found in binary or memory: https://usersharepoint.nicepage.io/Userportal.html?version=85c318ef-cf50-59b0-e164-cf5b864ad8df
Source: chromecache_174.15.dr	String found in binary or memory: https://wp-rocket.me
Source: chromecache_161.15.dr	String found in binary or memory: https://www.froala.com/wysiwyg-editor)
Source: chromecache_174.15.dr	String found in binary or memory: https://www.kangelaestate.greenroomevolution.co.za/wp-content/bcf-fonts/Work%20Sans/work-sans-300-no
Source: chromecache_147.15.dr	String found in binary or memory: https://www.themepunch.com/links/slider_revolution_wordpre
Source: chromecache_147.15.dr	String found in binary or memory: https://www.themepunch.com/links/slider_revolution_wordpress_regular_licen
Source: chromecache_177.15.dr	String found in binary or memory: https://www.themepunch.com/links/slider_revolution_wordpress_regular_license
Source: chromecache_147.15.dr	String found in binary or memory: https://www.themepunch.com/support-center
Source: chromecache_174.15.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/

Source: unknown	Network traffic detected: HTTP traffic on port 59540 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 59563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59614 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59546
Source: unknown	Network traffic detected: HTTP traffic on port 59577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59553
Source: unknown	Network traffic detected: HTTP traffic on port 59611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59552
Source: unknown	Network traffic detected: HTTP traffic on port 59583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59600
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59561
Source: unknown	Network traffic detected: HTTP traffic on port 59574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59560
Source: unknown	Network traffic detected: HTTP traffic on port 59557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60825
Source: unknown	Network traffic detected: HTTP traffic on port 59603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59609
Source: unknown	Network traffic detected: HTTP traffic on port 59565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59606
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59608
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59607
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59569
Source: unknown	Network traffic detected: HTTP traffic on port 59598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59601
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59604
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59603
Source: unknown	Network traffic detected: HTTP traffic on port 59616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59576
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59572
Source: unknown	Network traffic detected: HTTP traffic on port 59579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59571
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59573
Source: unknown	Network traffic detected: HTTP traffic on port 59571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59570
Source: unknown	Network traffic detected: HTTP traffic on port 59602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59612
Source: unknown	Network traffic detected: HTTP traffic on port 59619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59614
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59587
Source: unknown	Network traffic detected: HTTP traffic on port 59576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59586
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59582
Source: unknown	Network traffic detected: HTTP traffic on port 59582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59584
Source: unknown	Network traffic detected: HTTP traffic on port 59605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59581
Source: unknown	Network traffic detected: HTTP traffic on port 59622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59627
Source: unknown	Network traffic detected: HTTP traffic on port 59596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59626
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59596
Source: unknown	Network traffic detected: HTTP traffic on port 59573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59590
Source: unknown	Network traffic detected: HTTP traffic on port 59604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59591
Source: unknown	Network traffic detected: HTTP traffic on port 59621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59636
Source: unknown	Network traffic detected: HTTP traffic on port 59553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59644
Source: unknown	Network traffic detected: HTTP traffic on port 59584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59543
Source: unknown	Network traffic detected: HTTP traffic on port 59612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59544
Source: unknown	Network traffic detected: HTTP traffic on port 59572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59540
Source: unknown	Network traffic detected: HTTP traffic on port 59569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59609 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.164:443 -> 192.168.2.24:59540 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59544 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59543 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59594 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 57.128.99.126:443 -> 192.168.2.24:59593 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.24:59615 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.24:59614 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.132:443 -> 192.168.2.24:59616 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59622 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59621 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 207.211.211.26:443 -> 192.168.2.24:59623 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 169.150.255.183:443 -> 192.168.2.24:59624 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 212.102.56.178:443 -> 192.168.2.24:59626 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7956_1105734563

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7956_1105734563

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Window title found: save password for kangelaestate.co.mz?

Source: classification engine

Classification label: mal64.phis.troj.winDOCX@26/155@41/9

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\Desktop\~$LLING SUMMON DOCUMENT.docx

Jump to behavior

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{F0C52488-C37F-4998-8995-AF2D8282D66A} - OProcSessId.dat

Jump to behavior

Source: FILLING SUMMON DOCUMENT.docx

OLE indicator, Word Document stream: true

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE "C:\Program Files\Microsoft Office\Root\Office16\WINWORD.EXE" /Automation -Embedding
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14717041625160949595,12093668047587295034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2120 /prefetch:11
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kangelaestate.co.mz/Authpage/"
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,14717041625160949595,12093668047587295034,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2120 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

File opened: C:\Program Files\Microsoft Office\root\vfs\System\MSVCR100.dll

Jump to behavior

Source: FILLING SUMMON DOCUMENT.docx

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	1 File and Directory Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	1 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://kangelaestate.co.mz/feed/	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/libs/owl.carousel.js?ver=1741170075	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-includes/js/underscore.min.js?ver=1.13.7	0%	Avira URL Cloud	safe
https://capp.nicepage.com/d29e8cf1cf4d4fade598bc5c32341cd518073458/nicepage.css	0%	Avira URL Cloud	safe
https://api.seedprod.com/v4/	0%	Avira URL Cloud	safe
https://www.froala.com/wysiwyg-editor)	0%	Avira URL Cloud	safe
http://stereopsis.com/stopping/	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maiso	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/carousel.js?ver=1741170075	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/magni	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-100x100.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-admin/admin-ajax.php	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/#website	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elemen	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/sp-scripts.min.j	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layou	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/classie.js?ver=1741170075	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-32x32.png	0%	Avira URL Cloud	safe
https://capp.nicepage.com/assets/jquery-3.5.1.min.js	0%	Avira URL Cloud	safe
https://usersharepoint.nicepage.io/index.css	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/maisonco-core/assets/js/libs/jquery.magnific-popup.min.js?ver=0f1096306518dd6bf6820293c7b564a7	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/pub	0%	Avira URL Cloud	safe
http://gilmoreorless.mit-license.org/	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/?page_id=5823#primaryimage	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.1	0%	Avira URL Cloud	safe
https://www.themepunch.com/links/slider_revolution_wordpre	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-7.css?ver=1742156475	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.1	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fkangelaestate.co.mz%2Fauthpag	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/comments/feed/	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-150x150.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-sh	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/bcf-fonts/local-fonts.css?ver=1742156475	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1536x600.png	0%	Avira URL Cloud	safe
https://service.nicepagesrv.com/site-search/v1/site-search	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-includes/css/dist/block-library/style.min.css?ver=0f1096306518dd6bf68	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-180x180.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/?page_id=5823	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6	0%	Avira URL Cloud	safe
https://usersharepoint.nicepage.io/favicon.ico	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/endpoint.php	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7.5	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.css?ver=6.18.14	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/revslider/public/css/sr7.css?v	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/xmlrpc.php?rsd	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-400x156.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2024/10/cropped-Logo_3-KANGELA-1.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layout.js?ver=1741170075	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue.png	0%	Avira URL Cloud	safe
https://assets.nicepagecdn.com/eeff2eae/6366116/images/SharePoint-Symbol.webp	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.cs	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maisonco-custom.css?ver=1742156475	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.1	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-132.css?ver=1742156475	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elementor/frontend.js?ver=1741170075	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1024x400.png	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/	0%	Avira URL Cloud	safe
https://usersharepoint.nicepage.io/Userportal.html?version=85c318ef-cf50-59b0-e164-cf5b864ad8df	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	0%	Avira URL Cloud	safe
https://usersharepoint.nicepage.io/nicepage-site.css	0%	Avira URL Cloud	safe
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/tsparticles.min.	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
svc.ms-acdc-teams.office.com	52.123.243.89	true	false	high
1071178158.rsc.cdn77.org	169.150.255.183	true	false	unknown
j.sni.global.fastly.net	151.101.2.132	true	false	high
kangelaestate.co.mz	57.128.99.126	true	false	high
a726.dscd.akamai.net	2.16.168.122	true	false	high
www.google.com	142.250.185.164	true	false	high
1156509985.rsc.cdn77.org	207.211.211.26	true	false	unknown
api.staticforms.xyz	104.21.16.1	true	false	high
capp.nicepage.com	unknown	unknown	false	unknown
usersharepoint.nicepage.io	unknown	unknown	false	unknown
assets.nicepagecdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://capp.nicepage.com/d29e8cf1cf4d4fade598bc5c32341cd518073458/nicepage.css	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.6	false	Avira URL Cloud: safe	unknown
https://usersharepoint.nicepage.io/	false		unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/libs/owl.carousel.js?ver=1741170075	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/Authpage/	true		unknown
https://kangelaestate.co.mz/wp-includes/js/underscore.min.js?ver=1.13.7	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/carousel.js?ver=1741170075	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/classie.js?ver=1741170075	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-32x32.png	false	Avira URL Cloud: safe	unknown
https://capp.nicepage.com/assets/jquery-3.5.1.min.js	false	Avira URL Cloud: safe	unknown
https://usersharepoint.nicepage.io/index.css	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/maisonco-core/assets/js/libs/jquery.magnific-popup.min.js?ver=0f1096306518dd6bf6820293c7b564a7	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.25.1	false	Avira URL Cloud: safe	unknown
https://browser.events.data.msn.cn/OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1742897447053&w=0&anoncknm=al_app_anon&NoResponseBody=true	false		high
https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-7.css?ver=1742156475	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.25.1	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/bcf-fonts/local-fonts.css?ver=1742156475	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.27.6	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/endpoint.php	false	Avira URL Cloud: safe	unknown
https://usersharepoint.nicepage.io/favicon.ico	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7.5	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.css?ver=6.18.14	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layout.js?ver=1741170075	false	Avira URL Cloud: safe	unknown
https://assets.nicepagecdn.com/eeff2eae/6366116/images/SharePoint-Symbol.webp	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maisonco-custom.css?ver=1742156475	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/elementor/css/post-132.css?ver=1742156475	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elementor/frontend.js?ver=1741170075	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.25.1	false	Avira URL Cloud: safe	unknown
https://usersharepoint.nicepage.io/nicepage-site.css	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogp.me/ns#	chromecache_174.15.dr	false		high
http://codepen.io/dimsemenov/pen/yyBWoR	chromecache_161.15.dr	false		high
http://photoswipe.com	chromecache_145.15.dr	false		high
https://gsap.com	chromecache_203.15.dr	false		high
https://kangelaestate.co.mz/feed/	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
http://www.smartmenus.org/	chromecache_209.15.dr	false		high
https://api.seedprod.com/v4/	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
http://stereopsis.com/stopping/	chromecache_213.15.dr	false	Avira URL Cloud: safe	unknown
https://www.froala.com/wysiwyg-editor)	chromecache_161.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/burst-statistics/helpers/timeme/timeme.min.js?ver=1.7	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/magni	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-100x100.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://fontawesome.com	chromecache_204.15.dr	false		high
https://kangelaestate.co.mz/#website	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://wp-rocket.me	chromecache_174.15.dr	false		high
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/css/maiso	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-admin/admin-ajax.php	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/sticky-layou	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/sp-scripts.min.j	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/elemen	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://www.themepunch.com/support-center	chromecache_147.15.dr	false		high
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/pub	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
http://gilmoreorless.mit-license.org/	chromecache_145.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/?page_id=5823#primaryimage	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
http://github.com/cferdinandi/gumshoe	chromecache_145.15.dr	false		high
https://www.themepunch.com/links/slider_revolution_wordpre	chromecache_147.15.dr	false	Avira URL Cloud: safe	unknown
https://github.com/nickpettit/glide	chromecache_161.15.dr	false		high
https://www.themepunch.com/links/slider_revolution_wordpress_regular_license	chromecache_177.15.dr	false		high
https://api.jqueryui.com/position/	chromecache_220.15.dr	false		high
https://kangelaestate.co.mz/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fkangelaestate.co.mz%2Fauthpag	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
http://dimsemenov.com/plugins/magnific-popup/	chromecache_206.15.dr	false		high
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-150x150.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/comments/feed/	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-sh	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1536x600.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://service.nicepagesrv.com/site-search/v1/site-search	chromecache_145.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-includes/css/dist/block-library/style.min.css?ver=0f1096306518dd6bf68	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-180x180.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_174.15.dr	false		high
https://kangelaestate.co.mz/?page_id=5823	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://nicepage.com	chromecache_183.15.dr	false		high
https://kangelaestate.co.mz/authpage/	chromecache_174.15.dr	true		unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.27.	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/revslider/public/css/sr7.css?v	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://nicepage.com/Editor/Contact	chromecache_183.15.dr	false		high
https://github.com/Prinzhorn/skrollr	chromecache_145.15.dr	false		high
https://github.com/ded/bonzo	chromecache_160.15.dr	false		high
http://www.smoothscroll.net/	chromecache_213.15.dr	false		high
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-400x156.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2024/10/cropped-Logo_3-KANGELA-1.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://nicepage.com/Content/Images/logo-w.png	chromecache_183.15.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_145.15.dr	false		high
https://froala.com/wysiwyg-editor/terms/	chromecache_161.15.dr	false		high
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.cs	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/xmlrpc.php?rsd	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1024x400.png	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://gsap.com/standard-license	chromecache_203.15.dr	false		high
https://jqueryui.com	chromecache_220.15.dr	false		high
https://kangelaestate.co.mz/	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown
https://usersharepoint.nicepage.io/Userportal.html?version=85c318ef-cf50-59b0-e164-cf5b864ad8df	chromecache_200.15.dr	false	Avira URL Cloud: safe	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_174.15.dr	false		high
https://kangelaestate.co.mz/wp-content/plugins/seedprod-coming-soon-pro-5/public/js/tsparticles.min.	chromecache_174.15.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
104.21.16.1	api.staticforms.xyz	United States	13335	CLOUDFLARENETUS	false
57.128.99.126	kangelaestate.co.mz	Belgium	2686	ATGS-MMD-ASUS	false
212.102.56.178	unknown	Italy	60068	CDN77GB	false
169.150.255.183	1071178158.rsc.cdn77.org	United States	2711	SPIRITTEL-ASUS	false
151.101.2.132	j.sni.global.fastly.net	United States	54113	FASTLYUS	false
207.211.211.26	1156509985.rsc.cdn77.org	United States	14135	NAVISITE-EAST-2US	false

Private

IP
192.168.2.24
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647886
Start date and time:	2025-03-25 11:09:58 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	FILLING SUMMON DOCUMENT.docx
Detection:	MAL
Classification:	mal64.phis.troj.winDOCX@26/155@41/9
Cookbook Comments:	Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://kangelaestate.co.mz/Authpage/ Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, sppsvc.exe, SystemSettingsBroker.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.109.76.144, 20.189.173.23, 52.109.32.47, 52.109.32.46, 52.109.32.39, 52.109.32.38, 2.19.120.68, 2.19.120.69, 199.232.210.172, 52.109.76.243, 142.250.184.195, 142.250.185.174, 142.250.185.206, 66.102.1.84, 172.217.16.206, 142.250.186.110, 216.58.206.46, 142.250.185.170, 216.58.206.35, 172.217.18.8, 142.250.186.170, 142.250.186.74, 142.250.186.106, 142.250.185.106, 142.250.184.202, 216.58.206.42, 172.217.18.10, 172.217.16.202, 142.250.186.138, 142.250.74.202, 216.58.206.74, 216.58.212.170, 142.250.186.42, 142.250.185.74, 172.217.16.138, 142.250.184.234, 142.250.181.234, 142.250.185.234, 142.250.185.202, 142.250.185.138, 142.250.186.174, 172.217.16.142, 172.217.18.14, 142.250.185.163, 172.217.18.106, 172.217.23.106, 142.250.185.99, 172.217.23.110, 216.58.206.67, 142.250.186.78, 216.58.206.78, 142.250.185.78, 52.123.243.89, 2.16.168.122, 20.190.160.65, 172.202.163.200, 2.19.11.98
Excluded domains from analysis (whitelisted): odc.officeapps.live.com, slscr.update.microsoft.com, res-1.cdn.office.net, clientservices.googleapis.com, mobile.events.data.microsoft.com, clients2.google.com, login.live.com, update.googleapis.com, officeclient.microsoft.com, templatesmetadata.office.net, ukw-azsc-config.officeapps.live.com, osiprod-neu-bronze-azsc-000.northeurope.cloudapp.azure.com, ecs.office.com, fonts.googleapis.com, content-autofill.googleapis.com, uci.cdn.office.net, prod.roaming1.live.com.akadns.net, www.googleapis.com, res-stls-prod.edgesuite.net, nleditor.osi.office.net, edgedl.me.gvt1.com, res-prod.trafficmanager.net, osiprod-neu-buff-azsc-000.northeurope.cloudapp.azure.com, metadata.templates.cdn.office.net, ecs.office.trafficmanager.net, clients.l.google.com, passwordsleakcheck-pa.googleapis.com, europe.configsvc1.live.com.akadns.net, mobile.events.data.trafficmanager.net, mira.config.skype.com, neu-azsc-000.odc.officeapps.live.com, europe.odcsm1.live.com.akadns.net, templatesmetadat
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.16.1	2023-20-03-5910184618-5910184618-fs#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	www.dramavietsub.net/rcu7/
	http://104.21.16.1	Get hash	malicious	Unknown	Browse	104.21.16.1/favicon.ico
	https://t.co/6BJID9q49h	Get hash	malicious	HTMLPhisher	Browse	tcerfw.wittnng.sbs/favicon.ico
	J8bamK92a3.exe	Get hash	malicious	FormBook	Browse	www.play-vanguard-nirvana.xyz/egs9/?9r=2m/uVQwqKH2EIWlawszTKzvIepBfVH/HI19qzylF05nDLsWuBLn1pb4DiFDKEzYOkwPMwL8bVA==&vZR=H2MpG0p
	0t7MXNEfCg.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/2dxw/
	g1V10ssekg.exe	Get hash	malicious	FormBook	Browse	www.sigaque.today/n61y/?UPV=BOlfS7N9ZWkGRIMRgNC6B6+WUTyM673eSjZAzliNIDKZHnAeT7/5dfTbZtimq+dx8K4CQjPcymznAMXPWSrBBYPYz0JSQDMkWzhvpNbFnW2/OcjAWw==&YrV=FlsDgRMx
	0IrTeguWM7.exe	Get hash	malicious	FormBook	Browse	www.tumbetgirislinki.fit/ftbq/
	Shipping Document.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/6m32/
	Payment Record.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/sccc/five/fre.php
	Invoice Remittance ref27022558.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/a669/
212.102.56.178	https://xaitonium.com	Get hash	malicious	Unknown	Browse
	https://ouo.io/wqM4Oz	Get hash	malicious	Unknown	Browse
	http://allstarteventsmiami.com	Get hash	malicious	Unknown	Browse
	http://pqpqpyj.sbs/av/avr08/index.php?lpkey=174043cdcee2702426549f3edfdcca41a099969599&trkd=omokeh.org&lpkey1=cuun8cujn1oc7393lv6g&language=de&scanid=cuun8cujn1oc7393lv6g&ip=147.161.235.77&t1=133&t2=%7Bt1%7D&t3=%7Bt2%7D&t4=49&t5=174123395189&dm=1&pbid=4598&uid=Tev3Ewws7LqtzrNjCqkamFhqO8Mhj2&t10=4833	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	http://webdefence.global.blackspider.com/urlwrap/?q=AXicLc3JTcUwFEbh-xpKPOeChEDsEIge7N_2S5TBKHYY1rRBb7TCuP6OdE4nel-JPl6I9uVNirGr-3O3-mlB2dpelg5lJSvvHh5vX--lscyGAN_STU049qO2hHErSzlPqf7GY2tP9bLvZz93tRxbTLUt0zb_YI_Uo3dDMNFCWoUklBIIKrBy8g-CuxCQzAqcoDPLwP_AeoDnaJ0LUnlpcr6u03nz7djTleEIaJHgvIjaRmuizM4OTopgRVQWzGIYPAIy5--zh9YBwrM1SRhFRJ8g-gI_SFND&Z	Get hash	malicious	Unknown	Browse
	https://us.content.exclaimer.net/?url=https%3A%2F%2Fuko.soundestlink.com%2Fce%2Fc%2F67adf53ecbacb19e984732a8%2F67b4cd820c1882c8ec3f815c%2F67b4cd9d849a0e3726b6b250%3Fsignature%3Dd605de3efc5cdcf983efc0edbb745c76a4d1f62a1feaef825200640b97b07e9b&tenantid=ky73_-4KEe-QywAiSCk5gQ&templateid=39604a4f24eeef1190cb002248293981&excomponentid=nFEX-f7jNWeTfOzn2CEZDBNyzTqFqptsBHQZrvkNPgE&excomponenttype=Link&signature=wuwsKUlA0Qa_M7end_1sXoTkbMhUmYEk8Iik7Hii_8TRk-WhEpiDoe9vPAGxkkvoNBQ1q7YkL02Bhr8oy9hm5edALe2pRR-9MNgIELL7KuXHKA_o7AKDxc87Re_5y1_8a9nibX4HmXlAffEMsolbIv6Dtz6-T_Y0doxawEVp79R0KX4KxKJbWXgXDxOeYPIC87y0CGD6PSnj4mXCunuqJ8Jtp2J33VGyxCkN9GDRJxT38VBAxDy3OerXM3Jxb37EloPa6ZGfvadsDyYXaS7hlZ_lLsJs5w_vyfaNpGsa7ksFAUKhSoOxXarHc1OzKToL87KC2UXhrT0TkjM_2vW34Q&v=1&imprintMessageId=3faaeacc-4577-4c8f-96b1-57225d156c87	Get hash	malicious	Unknown	Browse
	https://nym.soundestlink.com/ce/c/67adc2f4cbacb19e98462cdd/67ae226bb01a74d93bb6d55f/67ae2284aee8336f666f9e65?signature=40125cc8131c5afb5d642232ecf31621728f3431d899a5b8eda468a603596613	Get hash	malicious	HTMLPhisher	Browse
	http://sympronixmedia.com/wp-admin/user/ft/madeinchina/madeinchina/index.html	Get hash	malicious	Unknown	Browse
	http://waatchme.com/	Get hash	malicious	Unknown	Browse
169.150.255.183	https://xaitonium.com	Get hash	malicious	Unknown	Browse
	http://must.com.py/vhnm/	Get hash	malicious	HTMLPhisher	Browse
	FW_ ABC NEWS_ Inside the gold bar scam that#U2019s defrauding Americans.msg	Get hash	malicious	Unknown	Browse
	https://gkq.soundestlink.com/ce/c/67bef427de06c30aeb085804/67bef4d94c5d631c24ae2eba/67bef4f247b1d331dcdb3b37?signature=bbeaa7f2656f41600d8b1041675ff610b82e4d46573c43684b09f33bce298ffb	Get hash	malicious	HtmlDropper	Browse
	https://www.google.com/url?q=https%3A%2F%2Fus.content.exclaimer.net%2F%3Furl%3Dhttps%253A%252F%252F3x20r.r.sp1-brevo.net%252Fmk%252Fcl%252Ff%252Fsh%252F1t6Af4OiGsE8LW2I0PUT7QXsMWGieI%252F-xw8La-ebgZX%26tenantid%3Dky73_-4KEe-QywAiSCk5gQ%26templateid%3De201feacc3efef1190cb002248293981%26excomponentid%3DnFEX-f7jNWeTfOzn2CEZDBNyzTqFqptsBHQZrvkNPgE%26excomponenttype%3DLink%26signature%3DiM2LfAlPpPRmP0prRCJs6TAFoQMLZnqULNwSXA_47D1HdEQJ8-sfJfdWSvX6gPAMgqrVzm2Cy_xwedsxqBT0yYKa96o8saBFp4BFBzLpFiUVWx4ongob_w6SSCcP3UjkYYmXWt77SKYYzQQ67Ep1OhLigx87PnA_L4nyIL_Yt39daiJK-uGZtZXFyORM_HFANryMO_BfrldLb5pqd7gnCBJm5v3X82mo50ET4PICEJ9P-7e9fp1iy1BZGbF_g_vJXQVtDlF_V3Uods5Nfdv8AZoFgH5AskFS8J7ItPXscy7BZFpt6b_ye4vXfEU5uxVdPdjDe2fDLHRg16tpYtNoww%26v%3D1%26imprintMessageId%3D4a68531e-ad34-4aad-a29b-5bf493c5ec36&sa=D&sntz=1&usg=AOvVaw0yDfPTMkSG67FTLe5horH_	Get hash	malicious	Unknown	Browse
	http://myprepaidblance.com	Get hash	malicious	Unknown	Browse
	https://x-invest.org	Get hash	malicious	Unknown	Browse
	https://vc.ru/u/4322747-sasha-v-it/1715355-aktivaciya-windows-10-i-11-cherez-komandnuyu-stroku	Get hash	malicious	Unknown	Browse
	http://hoyoskitchen.com	Get hash	malicious	CAPTCHA Scam ClickFix	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a726.dscd.akamai.net	New Order.docx	Get hash	malicious	Unknown	Browse	23.219.36.134
	Ordersheet_NanshaGA-012.docx	Get hash	malicious	Unknown	Browse	23.219.36.134
	BL 248436935 CNTR MRKU9180226.docx.doc	Get hash	malicious	Unknown	Browse	23.219.36.135
	PURCHASE ORDER 5172025.xla.xlsx	Get hash	malicious	Unknown	Browse	23.219.36.135
	SecuriteInfo.com.Other.Malware-gen.24773.2907.xlsx	Get hash	malicious	Unknown	Browse	23.219.36.135
	original (2).eml	Get hash	malicious	Unknown	Browse	23.200.0.200
	memebers.doc	Get hash	malicious	Unknown	Browse	23.40.179.68
	CMR ReF 15200477813.docx.doc	Get hash	malicious	Unknown	Browse	23.40.179.57
	memebers.doc	Get hash	malicious	Unknown	Browse	23.200.0.32
	https://postureshift-my.sharepoint.com/:f:/p/securedocument/EtRlfSUr3KtLjXgAbIYheZQBZ7nG7Jc2JIN2pqruKYsodA?e=SjlcA6	Get hash	malicious	Unknown	Browse	23.219.161.144
svc.ms-acdc-teams.office.com	https://waimao-north-star-mail.qiye.163.com/api/j/html?c=https%3A%2F%2F1drv.ms%2Fo%2Fs!AjlMaeoI5pi7f_GXm50IY_RD-sw%3Fe%3DEsmwj4%3Fcid%3Dsite_nqmm3LQS7c9jn-2FWvVcVpMl0NsyUA8yUApYElnaeUm2Ly_xlUzBpbEuL	Get hash	malicious	Unknown	Browse	52.123.251.3
	ui.exe	Get hash	malicious	XWorm	Browse	52.123.247.93
	Receipt.docm	Get hash	malicious	Unknown	Browse	52.123.251.28
	deyesfor.doc	Get hash	malicious	Unknown	Browse	52.123.247.79
	2298633922.svg	Get hash	malicious	HTMLPhisher	Browse	52.123.251.32
	BGL-17-2025, Packing List ... . 2073799 07 [S-29-40].xls	Get hash	malicious	Unknown	Browse	52.123.247.58
	doc12777920250311100101.docx	Get hash	malicious	Unknown	Browse	52.123.243.212
	#U0437#U0430#U043a#U0430#U0437#U0430_03M4138.docx.doc	Get hash	malicious	Unknown	Browse	52.123.243.202
	[EXTERNAL]Fax_ Payment ID_ #e890269ae2933d6648f91073751dc66afd979007-3_11_2025.eml	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	52.123.224.74
	32c560c4.msg	Get hash	malicious	Unknown	Browse	52.123.243.203
1071178158.rsc.cdn77.org	Legal_Notice_Presentation.pptx	Get hash	malicious	HTMLPhisher	Browse	79.127.206.207
1071178158.rsc.cdn77.org	https://app.jetadmin.io/public/ssw2evf3h0dnz648cv2yppi5ic4rr7md	Get hash	malicious	Unknown	Browse	138.199.20.249
j.sni.global.fastly.net	Legal_Notice_Presentation.pptx	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132
	http://pnay.883559.sravana.me/rd/4nYUAh5780Fukz463mpxganbsrg299LLSCJHSTUYUGFRY16077BOBH40813O12	Get hash	malicious	Unknown	Browse	151.101.2.132
	http://mvvx.364055.infolifestyleku.com/rd/4jCxrf5801vTpm700nbgngwwdyb7063ADZCSOTQLCDWSON63806GPPL40170Q13	Get hash	malicious	Unknown	Browse	151.101.130.132
	#U25b6#Ufe0fPLAY-VOICMAIL(2).svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.132
	http://clyy.981169.mdduel.com/rd/4tdTZC5863sQaD697esgeamuxmo320SZLLRUMDGAWEOWN3075INMB39155M12	Get hash	malicious	Unknown	Browse	151.101.2.132
	https://techresearchs.benchurl.com/c/l?u=12450653&e=199143A&c=163607&&t=0&l=12689B51E&email=VHWZIWwomIKWc0sY%2B8V5agif8GG0Zxj9&seq=1	Get hash	malicious	Unknown	Browse	151.101.2.132
	https://madisonoffice.carrd.co/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132
	http://girouardelectricien.ca	Get hash	malicious	Unknown	Browse	151.101.130.132
	http://pub-a5c199e46db94f72884285a0394a65f2.r2.dev/green-table-top.html	Get hash	malicious	HTMLPhisher	Browse	151.101.2.132

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CDN77GB	https://genee088.activehosted.com/box.php?nl=3&c=5&m=7&s=8d2d537642fe0bc0e87378e9173bb2b4&funcml=unsub2&luha=1	Get hash	malicious	HTMLPhisher	Browse	185.93.1.250
	https://aivptjn.top/hwujk	Get hash	malicious	Unknown	Browse	89.187.163.18
	https://xaitonium.com	Get hash	malicious	Unknown	Browse	212.102.56.178
	https://stetherdao.net	Get hash	malicious	Unknown	Browse	195.181.175.41
	https://ouo.io/wqM4Oz	Get hash	malicious	Unknown	Browse	195.181.170.18
	http://allstarteventsmiami.com	Get hash	malicious	Unknown	Browse	212.102.56.178
	https://zatp6ncab.cc.rs6.net/tn.jsp?f=001cxnICqQ2JvPHh68sPy67JcA12wTozyZ6tUXkt2fZXwkdUYMtwupLT-S4xl9B8jrFTN2ypT6neP3NkCtT6T7jkLznqRZuYP8GDL9GeN2eBUzFDN-0RDFO77xH2Hs1dfopzmnxZo5nnmpQ5j86V7OAlkc5LTVsDC46&c=fACjGJy843O2qLhy_EDw1tXsObaS44Oax9jWi5hSnXgO6cOpWOdvvQ==&ch=uDRbqb-h-hxGIaPgl5mPd8lWnKQdGcMqD3sNOjiafZx2mj0NMDi8Mw==	Get hash	malicious	Unknown	Browse	195.181.175.40
	http://lploverar.best	Get hash	malicious	Unknown	Browse	212.102.56.179
	https://securefile395.outgrow.us/securefile395-9	Get hash	malicious	HTMLPhisher	Browse	195.181.170.19
SPIRITTEL-ASUS	Z0avmyWNpj.exe	Get hash	malicious	Nanocore	Browse	169.150.202.83
	https://flarenetdrops.com	Get hash	malicious	Unknown	Browse	169.150.255.184
	https://xaitonium.com	Get hash	malicious	Unknown	Browse	169.150.255.181
	https://stetherdao.net	Get hash	malicious	Unknown	Browse	169.150.255.180
	https://trezzerwalletse.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	169.150.247.36
	https://w-si.link/LLddh9rL23sraRLUz	Get hash	malicious	HTMLPhisher	Browse	169.150.247.39
	https://www.mrbuggs.com	Get hash	malicious	Unknown	Browse	169.150.247.37
	https://www.moneyaisle.com/can-an-llc-go-public/	Get hash	malicious	Unknown	Browse	169.150.247.37
	http://172.67.183.22	Get hash	malicious	Unknown	Browse	169.150.247.37
CLOUDFLARENETUS	https://events.trustifi.com/api/o/v1/click/67e1c733234184b4ce4f8e2f/fff2f3/37054a/3dc20b/bc3eb8/514a43/16c432/a397cb/c8b81b/e8666a/ef542d/85972d/627493/9a11d6/1f4096/1d247f/d2da7c/c26086/829bf6/bead54/704ec1/98daf0/f14b01/f75b40/3bddbc/f38244/49df71/6488f7/9fe5a2/9316cf/d42000/8a1965/9f3267/7b0314/ff3404/33714b/38592e/663c1b/a68c06/81bdb9/55f3ba/3227ca/c52e0b/b3d81e/bc87ef/3e01c3/c02f2b/c10126/2c2594/5e440a/f959ff/c57b2f/efcd67/374391/8b178d/48abaa/b08791/050386/50fe70/daf655/c76e6a/ff2019/597b28/f8c802/04d13e/1f0114/53ccda/d5b926/2701b7/b4e6e7/2cab45/4bd167/f78947/7376ee/dc5bca/d9ca29/561603/a2a34e/11b832/fcbef7/b19b1a/892ca4/7858a9/b64a88/dce9cf/4973dc/0ae7f4/73fc3d/a09197/497515/4c6a00/0d458a#khalid.alyahya@almosafer.com	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.17.25.14
	Statement-2025-03-24_3574____.html	Get hash	malicious	Unknown	Browse	1.1.1.1
	https://protect.checkpoint.com/v2/r01/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJz0ZOA1YpCSoGOfZu2gE3yRpN701JyRpOm4ZZyRp4q0YpC41S1h5KD47KphMiO0J/ARo394ZuDi6WW41uA0ZCGZsV/hKq4hn5DVqi1SpSG0Iiq0YiNiZC33pyAQYOLfD5DVoOH4EWH45yy38iYhrWx0YiVg5yOT0VyRpOmZ1K2gpqsW5R/g5c81YGRQYOLV8umhLS2X6OG02WJ48S4XrSZhspDQYOHj0O/ZZO4YYpEY0i64ZCT0KSvgIWoXKR8hZi9SJ6HZ1WSYoWD07KS1LZBgs09XESu4KOBh0WJ1r02gq3CTL/54pS~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~08WYXMSmg1q6Z1l5Z00~Y1WChJ0t0Ii6hES8XImMiM0QYryZ4EWO1KqsSZ0K00WfX5WS11C636i63Ep80qSYjo4mWE4111p6Y5tyRp4Y45c43py9fEqOV5351KGy1Km/R0S40H5DWqZC0JyGW1iAYIqCgMG7gZS~003CX1yMV0GDfsZyRp38f54wZJuS00O7R5cE1ol6jJ6XhMpD1p0vj0uXi0uZf6JyRp4GRZ6IgpC/0puyW0itV0JyR5VyR5V=dJ9a86J/5GGJ6/HFH867JHa95G57Ja897H65~G65b9/b7c9/a8J6JI56758~GFFJI?h=6&fru;n=6&fru;ithx=6___.YzJ1OnNlcXVhbGNvcnA6YzpvOjVjN2U0MGNlMGRhNDNkZDEwYjk3ODU0ZTRhMGNmYTFjOjc6MDQyMTpiZDMwNmQ3NDgyNWUwNmM1NzVmMTk0YTFiN2ZjZDQ3NWZjMzIzMTMzNjg2ZmY0ZTMyY2VmMDdmYWRhZDI0MTJjOmg6VDpU	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.18.20.227
	DR7i2oPQmFBvGac.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.48.1
	Sales Order 911002259.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	https://ramp-com.chilipiper.com/book/me/udit-patel?k_is=opl&q_mailing_7TUwnLRio5bqoBbU1vuPzGZXCYyTNekKfvuJH=RoogEjnKYW4CjwdLKbYJ6MVnoJaR8G3pAbgmNDL3Vu3htcYomMjbucuV2&utm_id=YXNpYS5tY2xhaW5AbWFyeWxhbmQuZ292	Get hash	malicious	Unknown	Browse	104.21.16.1
	Technical Data Sheet.html	Get hash	malicious	HTMLPhisher	Browse	172.64.41.3
	PO - TC 3151.scr.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.48.1
	iOzX8kgVMP.exe	Get hash	malicious	Python Stealer, BLX Stealer	Browse	104.26.13.205
ATGS-MMD-ASUS	https://protect.checkpoint.com/v2/r01/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJz0ZOA1YpCSoGOfZu2gE3yRpN701JyRpOm4ZZyRp4q0YpC41S1h5KD47KphMiO0J/ARo394ZuDi6WW41uA0ZCGZsV/hKq4hn5DVqi1SpSG0Iiq0YiNiZC33pyAQYOLfD5DVoOH4EWH45yy38iYhrWx0YiVg5yOT0VyRpOmZ1K2gpqsW5R/g5c81YGRQYOLV8umhLS2X6OG02WJ48S4XrSZhspDQYOHj0O/ZZO4YYpEY0i64ZCT0KSvgIWoXKR8hZi9SJ6HZ1WSYoWD07KS1LZBgs09XESu4KOBh0WJ1r02gq3CTL/54pS~WrB7gMqXfMGfR6WVW7iZWpyq45mYQYOHgoWvY6KEf1qKh5OXS2us02tyRp4vTYGnVYGm0Y4HX7SK0ZRyRpOuiEm/SKGC0si/irc90Z63XL9yRp36Z5KZYLlyRpOSWqSIQYOHXLW8X64mhKKzhEGBf0tBX24yV1utSEWG0ISpR7WMR0JDZ80OXrmQYsZyRp4G1suTX1tCYruxfYGJXr6O40SD056PXZOrREqxjZyAjpW7X1yrgYGuiJOUXJcUi50ORqOKTJ4LgJmWWrmJYJKJ0sSZVZuy08uNXK4G1LW5WEGWRYOST1SrY7KI400ERquY06iU32JCgLcxTZSX3EmVV0uCR8iWW2O9QYOHi8mrYLcRg5mPg5i9S0p5iqOo12G6i0ZyRp44TMh7RIqnV2iJX7/G4pK6j1BBWLC5R5qSg00pZJO2YqmTXZC2Zr/0310008uSX005S6Kt100zTKKDS2W2f0RBX7K/jolDfqqQWqSN31mHZr/4Ro4NXqm54p/VgLi01MKBTY3yRp35gLiTY76rW8OMZ5Z8j1uJWp6wR7uNi6GnjrOE4LuRRoRESZ4XjX5DVsqPW7/sfJi5V7c23pu3S1BCYZ/WYr0EV7J6h0mE1J4vV0WsQYSJQYSJWo0kXKb5hLqtXMqsYqSHRMN/Zr42RLV5SJcPfKS6WrmuZrCXiK4Rh2m~08WYXMSmg1q6Z1l5Z00~Y1WChJ0t0Ii6hES8XImMiM0QYryZ4EWO1KqsSZ0K00WfX5WS11C636i63Ep80qSYjo4mWE4111p6Y5tyRp4Y45c43py9fEqOV5351KGy1Km/R0S40H5DWqZC0JyGW1iAYIqCgMG7gZS~003CX1yMV0GDfsZyRp38f54wZJuS00O7R5cE1ol6jJ6XhMpD1p0vj0uXi0uZf6JyRp4GRZ6IgpC/0puyW0itV0JyR5VyR5V=dJ9a86J/5GGJ6/HFH867JHa95G57Ja897H65~G65b9/b7c9/a8J6JI56758~GFFJI?h=6&fru;n=6&fru;ithx=6___.YzJ1OnNlcXVhbGNvcnA6YzpvOjVjN2U0MGNlMGRhNDNkZDEwYjk3ODU0ZTRhMGNmYTFjOjc6MDQyMTpiZDMwNmQ3NDgyNWUwNmM1NzVmMTk0YTFiN2ZjZDQ3NWZjMzIzMTMzNjg2ZmY0ZTMyY2VmMDdmYWRhZDI0MTJjOmg6VDpU	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	34.149.73.226
	https://zilianmy.com/catalog/	Get hash	malicious	Unknown	Browse	34.49.229.81
	https://zilianmy.com/catalog/	Get hash	malicious	Unknown	Browse	34.149.206.255
	https://wetransfer.com/downloads/c8bc27df5dfd7191ef8f37cb3c6ac00d20250224065100/d32c95a77eed5b4a4b71cf1d195e388b20250224065134/2b0e6a?t_exp=1740984660&t_lsid=1b177f95-6705-4fde-b25f-deb1d43f0838&t_network=email&t_rid=ZW1haWx8Njc1NDBjYWZiNjM1NTFjNmY2NTBhM2Rl&t_s=download_link&t_ts=1740379894&utm_campaign=TRN_TDL_01&utm_source=sendgrid&utm_medium=email&trk=TRN_TDL_01	Get hash	malicious	Unknown	Browse	34.49.212.111
	#U25b6#Ufe0fPLAY-VOICMAIL(2).svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	57.144.180.1
	http://gamma.app	Get hash	malicious	Unknown	Browse	34.49.241.189
	Acgsys#receipt0191.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	34.160.144.191
	https://8tf7eelab.cc.rs6.net	Get hash	malicious	Unknown	Browse	34.54.30.30
	Brave.exe	Get hash	malicious	Unknown	Browse	34.160.144.191

Process:	C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1854
Entropy (8bit):	2.6965135492373604
Encrypted:	false
SSDEEP:	48:m8/WKGjo/xsidpeXy4MwtnEE5Ko5ARgppIgkyTz27:beidmjnEGoRua
MD5:	ED50C3AD992B9271F3D4F25BF04C289A
SHA1:	2816F87ED9A70E7535D4EF403C4273FDD277EAFA
SHA-256:	AB9C926F204EC17034AEB90585535BBD38C9FB7A636BBFB5C5F619868FE9930D
SHA-512:	9D8905921107C6E945FF0C4E349E664F402E3C24D3C9843B4AF00825956927424802AD40AC7B242084A4F469C8A7BCCC0F6BB4471EA6F104CB1B1C8E9B8722DC
Malicious:	false
Reputation:	low
Preview:	1.0.7.,.3.7.4.6.3.7.6.,.1.2.3.,.7.7.8.7.0.2.2.2.4.,.6.3.6.4.3.3.4.,.1.4.6.1.9.5.4.,.2.6.0.1.,.1.1.9.,.3.7.4.6.3.7.2.,.1.5.6.1.9.5.8.,.3.7.4.6.2.5.9.,.1.1.9.6.3.7.8.,.3.7.4.6.3.6.8.,.4.2.1.4.2.1.7.,.3.7.4.6.3.6.9.,.6.3.6.4.3.3.1.,.1.2.5.,.1.9.8.4.4.3.5.,.1.5.6.1.9.5.5.,.7.7.8.7.0.2.2.2.5.,.4.8.0.9.1.5.7.6.3.,.3.7.4.6.3.7.3.,.4.8.0.9.1.5.7.6.5.,.7.7.8.7.0.2.2.3.4.,.1.2.2.3.4.3.4.,.5.2.1.6.4.2.,.1.2.2.0.7.7.9.,.4.8.0.9.1.5.7.6.4.,.7.2.9.1.8.1.0.4.3.,.1.4.6.1.9.5.5.,.6.3.6.4.3.3.2.,.1.2.8.,.1.0.0.,.1.0.1.,.1.0.3.,.1.0.4.,.1.0.5.,.1.0.6.,.1.0.8.,.1.0.9.,.1.1.2.,.1.1.4.,.1.1.8.,.1.2.0.,.1.2.1.,.1.2.2.,.5.4.5.6.5.4.3.,.1.2.4.,.6.5.4.2.1.8.5.1.,.1.2.6.,.3.7.4.6.2.6.5.,.6.7.0.4.1.0.9.,.;.1.0.3.4.5.0.2.0.,.3.,.1.0.6.9.5.5.3.,.1.6.5.7.4.5.3.,.1.2.7.,.1.6.5.7.4.5.2.,.7.4.5.3.4.5.9.,.2.3.7.1.6.5.1.,.6.5.4.0.2.1.5.,.3.2.9.4.5.8.7.9.9.,.2.6.9.5.0.9.3.5.1.,.3.0.1.2.3.4.6.6.,.3.1.4.1.5.9.1.5.,.3.0.1.5.3.7.2.1.,.2.7.1.5.3.4.9.7.,.3.7.4.6.3.7.9.,.1.0.3.4.5.0.2.1.,.1.0.6.9.5.3.3.,.3.4.4.1.3.9.5.3.,.6.3.6.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	376881
Entropy (8bit):	5.325708430126329
Encrypted:	false
SSDEEP:	3072:niV1sczRB7pNNp+xtRyxruY2iJsym8sEntooFAhoFd/71CipvCpbVASe3FhvFoK0:+ZRdNIx6xruziJsentrFAmNkiC+hvV0
MD5:	FCFC273847F3A8C6B64934C8284815FA
SHA1:	F7FE7559837D8162480E0405F6B4833331BF111A
SHA-256:	06DB532ADCD092FCABC25EF9EC4342D5EB273F823447DC83CB05BBD07A986778
SHA-512:	B051FE20BA5F784E93560FB67C3B27AD185D44010840B5877233F34BDBBA14D2A6251C56770C931B263C00C60EAA42B9899B797241B34958BE4BB9B4483830BB
Malicious:	false
Reputation:	low
URL:	https://capp.nicepage.com/d29e8cf1cf4d4fade598bc5c32341cd518073458/nicepage.js
Preview:	!function(t){function e(i){if(n[i])return n[i].exports;var o=n[i]={i:i,l:false,exports:{}};return t[i].call(o.exports,o,o.exports,e),o.l=true,o.exports}var n={};return e.m=t,e.c=n,e.d=function(t,n,getter){e.o(t,n)\|\|Object.defineProperty(t,n,{configurable:false,enumerable:true,get:getter})},e.n=function(t){var getter=t&&t.__esModule?function e(){return t.default}:function e(){return t};return e.d(getter,"a",getter),getter},e.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},e.p="/Content/BundledScripts/",e(e.s=13986)}({1096:function(t,e,n){"use strict";var i=n(1097),bootstrap={};bootstrap.Util=function(t){function e(t){return t&&"object"==typeof t&&"default"in t?t:{default:t}}function n(){if(window.QUnit)return false;var el=document.createElement("bootstrap");for(var t in h)if(void 0!==el.style[t])return h[t];return false}function i(t){return null==t?""+t:{}.toString.call(t).match(/\s([a-z]+)/i)[1].toLowerCase()}function o(){return{bindType:l,delegateType:l,handle:functi

File type:	Microsoft Word 2007+
Entropy (8bit):	7.966853710545347
TrID:	Word Microsoft Office Open XML Format document (49504/1) 58.23% Word Microsoft Office Open XML Format document (27504/1) 32.35% ZIP compressed archive (8000/1) 9.41%
File name:	FILLING SUMMON DOCUMENT.docx
File size:	32'619 bytes
MD5:	9a579e62103140d9c3abed8c4db790ce
SHA1:	8614c8739d2d88e0f366b6d078ce8fea9e1a9f14
SHA256:	b7c0e411f36a29451bf870e1aaa1672b2862707797e6cbdb304d5532086f66a4
SHA512:	e5294f226f33d0b77be726a42684215811bad54e31c59c0efd3baac158fb738e29b14e6dd5c3c1092fbfdf06789f12b86382c9335aa360262a25210d59aecf2b
SSDEEP:	768:49R9j795/H3LCU7hBAM48diPk1NK9azlddExre9t:CRJ/7CU9BAMDdimbz78rWt
TLSH:	43E2E13DFEEF69AED64316F8641EE746EA7D54208111A971A71C23A0B100395B33F78B
File Content Preview:	PK..........IJ..0.:...........docProps/app.xml...N.1.._.........1.p....um.0..K{A..\.H... ....]..z.O...>...&;.Q9[.QQR.V8....[l..(.....Y.h....)....<.T.I....-..0.E...".69...c...sM..,.......r.`.`%...........*.......C....d..k.......;%...A...$).`...........K...

Has Summary Info:
Application Name:
Encrypted Document:	False
Contains Word Document Stream:	True
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	False

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 11:10:55.602112055 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:10:56.353761911 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:10:57.103797913 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:11:22.497395992 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:11:23.259589911 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:11:24.010031939 CET	137	137	192.168.2.24	192.168.2.255
Mar 25, 2025 11:11:30.146513939 CET	53	65339	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:30.183996916 CET	53	52305	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:31.765985012 CET	53	58540	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:31.944005013 CET	53	54418	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:33.931634903 CET	62469	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:33.931761980 CET	61207	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:33.938827991 CET	53	61207	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:33.939073086 CET	53	62469	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:35.414904118 CET	61408	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:35.424299002 CET	59063	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:36.440808058 CET	56047	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:36.441005945 CET	64806	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:38.465775967 CET	50680	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:38.727809906 CET	53	56047	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:39.481317997 CET	50680	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:39.623195887 CET	53	61408	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:40.480576992 CET	50680	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:40.610574961 CET	53	64806	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:41.404380083 CET	53	59063	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:42.482999086 CET	50680	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:44.553546906 CET	53	50680	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:44.553566933 CET	53	50680	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:44.553586006 CET	53	50680	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:44.553669930 CET	53	50680	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:45.460792065 CET	53	49727	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:46.514183044 CET	53	58265	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:48.639362097 CET	57029	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:48.639631987 CET	63690	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:48.939080000 CET	53	56062	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:49.651602030 CET	65440	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:49.651693106 CET	51904	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:11:50.819739103 CET	53	57029	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:52.814013004 CET	53	63690	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:53.567157984 CET	53	64607	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:53.664114952 CET	53	51904	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:53.941576958 CET	53	65440	1.1.1.1	192.168.2.24
Mar 25, 2025 11:11:58.923897982 CET	53	57011	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:04.009721994 CET	58981	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:05.029154062 CET	58981	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:06.040580988 CET	58981	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:07.720343113 CET	53	63576	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:08.055994987 CET	58981	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:09.986099958 CET	53	58981	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:09.986114979 CET	53	58981	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:09.986124992 CET	53	58981	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:09.986135006 CET	53	58981	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:13.339747906 CET	50217	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:13.339879036 CET	49618	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:13.354850054 CET	53	49618	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:13.355257988 CET	53	50217	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:14.216532946 CET	58068	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:14.216685057 CET	62857	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:14.232065916 CET	53	62857	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:14.233252048 CET	53	58068	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:15.114517927 CET	65410	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:15.114517927 CET	60092	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:15.116142035 CET	64072	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:15.116280079 CET	51782	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:15.122421980 CET	53	52594	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:15.123816967 CET	53	60092	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:15.141087055 CET	53	51782	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:15.141896963 CET	53	65410	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:15.177627087 CET	53	64072	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:16.289237976 CET	64634	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:16.289343119 CET	52533	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:16.310869932 CET	53	64634	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:16.311732054 CET	53	52533	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:18.763250113 CET	53	53866	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:22.787377119 CET	59876	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:23.789984941 CET	59876	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:24.792610884 CET	59876	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:24.916610956 CET	53	59876	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:24.916637897 CET	53	59876	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:24.916655064 CET	53	59876	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:29.142422915 CET	53	65033	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:30.398703098 CET	53	56077	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:32.560070038 CET	53	58360	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:42.150913000 CET	62693	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:43.160559893 CET	62693	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:44.166788101 CET	62693	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:46.171329975 CET	62693	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:12:48.064449072 CET	53	62693	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:48.064496994 CET	53	62693	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:48.064526081 CET	53	62693	1.1.1.1	192.168.2.24
Mar 25, 2025 11:12:48.064552069 CET	53	62693	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:00.611882925 CET	53	61425	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:13.346792936 CET	138	138	192.168.2.24	192.168.2.255
Mar 25, 2025 11:13:15.666537046 CET	55007	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:16.674479008 CET	55007	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:17.678953886 CET	55007	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:19.640098095 CET	53	55007	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:19.640218019 CET	53	55007	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:19.640224934 CET	53	55007	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:47.281903982 CET	53	58917	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:54.212544918 CET	60462	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:55.214333057 CET	60462	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:56.225729942 CET	60462	53	192.168.2.24	1.1.1.1
Mar 25, 2025 11:13:56.362869978 CET	53	60462	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:56.362938881 CET	53	60462	1.1.1.1	192.168.2.24
Mar 25, 2025 11:13:56.362979889 CET	53	60462	1.1.1.1	192.168.2.24

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 11:11:38.727869987 CET	192.168.2.24	1.1.1.1	c20d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:11:40.610680103 CET	192.168.2.24	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:11:41.404445887 CET	192.168.2.24	1.1.1.1	c23d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:11:44.553797007 CET	192.168.2.24	1.1.1.1	c20d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:11:52.814097881 CET	192.168.2.24	1.1.1.1	c1fd	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:11:53.941652060 CET	192.168.2.24	1.1.1.1	c20d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 11:12:48.064723969 CET	192.168.2.24	1.1.1.1	c1fd	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 25, 2025 11:10:57.171533108 CET	1.1.1.1	192.168.2.24	0xb260	No error (0)	svc.ha-teams.office.com	svc.ms-acdc-teams.office.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:10:57.171533108 CET	1.1.1.1	192.168.2.24	0xb260	No error (0)	svc.ms-acdc-teams.office.com		52.123.243.89	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:10:57.171533108 CET	1.1.1.1	192.168.2.24	0xb260	No error (0)	svc.ms-acdc-teams.office.com		52.123.224.74	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:10:57.171533108 CET	1.1.1.1	192.168.2.24	0xb260	No error (0)	svc.ms-acdc-teams.office.com		52.123.224.68	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:10:58.955329895 CET	1.1.1.1	192.168.2.24	0x7759	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:10:58.955329895 CET	1.1.1.1	192.168.2.24	0x7759	No error (0)	a726.dscd.akamai.net		2.16.168.122	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:10:58.955329895 CET	1.1.1.1	192.168.2.24	0x7759	No error (0)	a726.dscd.akamai.net		2.16.168.112	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:14.167898893 CET	1.1.1.1	192.168.2.24	0x582	No error (0)	res-stls-prod.edgesuite.net.globalredir.akadns88.net	a726.dscd.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:11:14.167898893 CET	1.1.1.1	192.168.2.24	0x582	No error (0)	a726.dscd.akamai.net		2.19.11.98	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:14.167898893 CET	1.1.1.1	192.168.2.24	0x582	No error (0)	a726.dscd.akamai.net		2.19.11.111	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:33.938827991 CET	1.1.1.1	192.168.2.24	0x5437	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 25, 2025 11:11:33.939073086 CET	1.1.1.1	192.168.2.24	0xb056	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:38.727809906 CET	1.1.1.1	192.168.2.24	0xda71	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:39.623195887 CET	1.1.1.1	192.168.2.24	0xc464	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:44.553546906 CET	1.1.1.1	192.168.2.24	0xb91b	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:44.553566933 CET	1.1.1.1	192.168.2.24	0xb91b	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:44.553586006 CET	1.1.1.1	192.168.2.24	0xb91b	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:44.553669930 CET	1.1.1.1	192.168.2.24	0xb91b	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:50.819739103 CET	1.1.1.1	192.168.2.24	0x6784	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:11:52.814013004 CET	1.1.1.1	192.168.2.24	0x372d	Server failure (2)	kangelaestate.co.mz	none	none	65	IN (0x0001)	false
Mar 25, 2025 11:11:53.664114952 CET	1.1.1.1	192.168.2.24	0x501e	Server failure (2)	kangelaestate.co.mz	none	none	65	IN (0x0001)	false
Mar 25, 2025 11:11:53.941576958 CET	1.1.1.1	192.168.2.24	0xce50	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:09.986099958 CET	1.1.1.1	192.168.2.24	0xdb1f	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:09.986114979 CET	1.1.1.1	192.168.2.24	0xdb1f	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:09.986124992 CET	1.1.1.1	192.168.2.24	0xdb1f	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:09.986135006 CET	1.1.1.1	192.168.2.24	0xdb1f	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.354850054 CET	1.1.1.1	192.168.2.24	0x5fb3	No error (0)	api.staticforms.xyz			65	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.16.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.32.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.48.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.64.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.80.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.96.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:13.355257988 CET	1.1.1.1	192.168.2.24	0xc989	No error (0)	api.staticforms.xyz		104.21.112.1	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:14.232065916 CET	1.1.1.1	192.168.2.24	0xf254	No error (0)	usersharepoint.nicepage.io	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:14.233252048 CET	1.1.1.1	192.168.2.24	0x509d	No error (0)	usersharepoint.nicepage.io	j.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:14.233252048 CET	1.1.1.1	192.168.2.24	0x509d	No error (0)	j.sni.global.fastly.net		151.101.2.132	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:14.233252048 CET	1.1.1.1	192.168.2.24	0x509d	No error (0)	j.sni.global.fastly.net		151.101.66.132	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:14.233252048 CET	1.1.1.1	192.168.2.24	0x509d	No error (0)	j.sni.global.fastly.net		151.101.130.132	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:14.233252048 CET	1.1.1.1	192.168.2.24	0x509d	No error (0)	j.sni.global.fastly.net		151.101.194.132	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.123816967 CET	1.1.1.1	192.168.2.24	0xb358	No error (0)	capp.nicepage.com	1156509985.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141087055 CET	1.1.1.1	192.168.2.24	0xa119	No error (0)	assets.nicepagecdn.com	1071178158.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	capp.nicepage.com	1156509985.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.141896963 CET	1.1.1.1	192.168.2.24	0x381c	No error (0)	1156509985.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	assets.nicepagecdn.com	1071178158.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		169.150.255.181	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:15.177627087 CET	1.1.1.1	192.168.2.24	0xc3d4	No error (0)	1071178158.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	assets.nicepagecdn.com	1071178158.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.310869932 CET	1.1.1.1	192.168.2.24	0x42e6	No error (0)	1071178158.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:16.311732054 CET	1.1.1.1	192.168.2.24	0x68f4	No error (0)	assets.nicepagecdn.com	1071178158.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Mar 25, 2025 11:12:24.916610956 CET	1.1.1.1	192.168.2.24	0x428	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:24.916637897 CET	1.1.1.1	192.168.2.24	0x428	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:24.916655064 CET	1.1.1.1	192.168.2.24	0x428	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:48.064449072 CET	1.1.1.1	192.168.2.24	0x3f50	Server failure (2)	kangelaestate.co.mz	none	none	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:48.064496994 CET	1.1.1.1	192.168.2.24	0x3f50	Server failure (2)	kangelaestate.co.mz	none	none	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:48.064526081 CET	1.1.1.1	192.168.2.24	0x3f50	Server failure (2)	kangelaestate.co.mz	none	none	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:12:48.064552069 CET	1.1.1.1	192.168.2.24	0x3f50	Server failure (2)	kangelaestate.co.mz	none	none	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:19.640098095 CET	1.1.1.1	192.168.2.24	0x704c	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:19.640218019 CET	1.1.1.1	192.168.2.24	0x704c	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:19.640224934 CET	1.1.1.1	192.168.2.24	0x704c	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:56.362869978 CET	1.1.1.1	192.168.2.24	0xc1f9	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:56.362938881 CET	1.1.1.1	192.168.2.24	0xc1f9	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false
Mar 25, 2025 11:13:56.362979889 CET	1.1.1.1	192.168.2.24	0xc1f9	No error (0)	kangelaestate.co.mz		57.128.99.126	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Mar 25, 2025 11:11:41.010656118 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 11:11:41.623517990 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 09:55:05 GMT Expires: Tue, 25 Mar 2025 10:45:05 GMT Age: 996 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 25, 2025 11:11:41.629905939 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 11:11:41.808161974 CET	223	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 09:49:15 GMT Expires: Tue, 25 Mar 2025 10:39:15 GMT Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 1346
Mar 25, 2025 11:11:41.813237906 CET	200	OUT	GET /r/r1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 25, 2025 11:11:41.995734930 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 25 Mar 2025 09:59:46 GMT Expires: Tue, 25 Mar 2025 10:49:46 GMT Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 715

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:10:48 UTC	473	OUT	POST /OneCollector/1.0?cors=true&content-type=application%2Fx-json-stream&client-id=NO_AUTH&client-version=1DS-Web-JS-3.2.8&apikey=c498711f02654edca8a715ca6e1cb4d4-dc31da17-845c-4cca-84e5-547d05dad708-6945&upload-time=1742897447053&w=0&anoncknm=al_app_anon&NoResponseBody=true HTTP/1.1 Accept-Encoding: gzip, deflate Content-Length: 3656 Content-Type: application/json; charset=UTF-8 Host: browser.events.data.msn.cn Connection: Keep-Alive Cache-Control: no-cache
2025-03-25 10:10:48 UTC	3656	OUT	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 4d 53 2e 4e 65 77 73 2e 57 65 62 2e 53 65 72 76 65 72 4c 6f 67 22 2c 22 69 4b 65 79 22 3a 22 6f 3a 63 34 39 38 37 31 31 66 30 32 36 35 34 65 64 63 61 38 61 37 31 35 63 61 36 65 31 63 62 34 64 34 22 2c 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 33 2d 32 35 54 31 30 3a 31 30 3a 33 37 5a 22 2c 22 76 65 72 22 3a 22 34 2e 30 22 2c 22 64 61 74 61 22 3a 7b 22 70 61 67 65 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 65 6e 74 77 69 6e 64 6f 77 73 64 61 73 68 22 2c 22 61 70 70 54 79 70 65 22 3a 22 77 69 6e 57 69 64 67 65 74 73 22 2c 22 6e 61 6d 65 22 3a 22 77 69 6e 70 32 62 61 63 6b 69 6e 67 61 70 70 22 2c 22 69 73 4d 6f 63 6b 45 6e 76 22 3a 66 61 6c 73 65 2c 22 68 6f 73 74 56 65 72 22 3a 22 35 32 34 2e 33 30 35 30 32 2e 33 30 2e 30 22 2c 22 Data Ascii: {"name":"MS.News.Web.ServerLog","iKey":"o:c498711f02654edca8a715ca6e1cb4d4","time":"2025-03-25T10:10:37Z","ver":"4.0","data":{"page":{"product":"entwindowsdash","appType":"winWidgets","name":"winp2backingapp","isMockEnv":false,"hostVer":"524.30502.30.0","

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:45 UTC	678	OUT	GET /Authpage/ HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:45 UTC	316	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:45 GMT Server: Apache Vary: User-Agent,Accept-Encoding Accept-Ranges: bytes Content-Length: 61195 Cache-Control: max-age=0, public Expires: Tue, 25 Mar 2025 10:11:45 GMT X-Powered-By: WP Rocket/3.18.2 Connection: close Content-Type: text/html; charset=UTF-8
2025-03-25 10:11:45 UTC	7876	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 73 70 2d 68 74 6d 6c 20 0a 09 09 09 73 70 2d 73 65 65 64 70 72 6f 64 20 73 70 2d 68 2d 66 75 6c 6c 22 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 70 72 65 66 69 78 3d 22 6f 67 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 70 2e 6d 65 2f 6e 73 23 22 3e 0a 3c 68 65 61 64 3e 0a 09 09 09 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 3c 21 2d 2d 20 44 65 66 61 75 6c 74 20 43 53 53 20 2d 2d 3e 0a 3c 6c 69 6e 6b 20 72 65 Data Ascii: <!DOCTYPE html><html class="sp-html sp-seedprod sp-h-full" dir="ltr" lang="en-US" prefix="og: https://ogp.me/ns#"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">... Default CSS --><link re
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 44 72 69 76 65 2d 66 6f 72 42 69 7a 5f 72 67 62 5f 45 4e 5f 42 6c 75 65 2e 70 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 35 2f 30 33 2f 4f 6e 65 44 72 69 76 65 2d 66 6f 72 42 69 7a 5f 72 67 62 5f 45 4e 5f 42 6c 75 65 2e 70 6e 67 22 2c 22 77 69 64 74 68 22 3a 31 39 38 33 2c 22 68 65 69 67 68 74 22 3a 37 37 35 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 2f 3f 70 61 67 65 5f 69 64 3d 35 38 32 33 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 Data Ascii: Drive-forBiz_rgb_EN_Blue.png","contentUrl":"https://kangelaestate.co.mz/wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue.png","width":1983,"height":775},{"@type":"BreadcrumbList","@id":"https://kangelaestate.co.mz/?page_id=5823#breadcrumb","itemList
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 3a 72 6f 6f 74 7b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 73 71 75 61 72 65 3a 20 31 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 34 2d 33 3a 20 34 2f 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 33 2d 34 3a 20 33 2f 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 33 2d 32 3a 20 33 2f 32 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 32 2d 33 3a 20 32 2f 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 2d 2d 31 36 2d 39 3a 20 31 36 Data Ascii: line-css' type='text/css'>:root{--wp--preset--aspect-ratio--square: 1;--wp--preset--aspect-ratio--4-3: 4/3;--wp--preset--aspect-ratio--3-4: 3/4;--wp--preset--aspect-ratio--3-2: 3/2;--wp--preset--aspect-ratio--2-3: 2/3;--wp--preset--aspect-ratio--16-9: 16
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 6c 69 67 68 74 2d 70 75 72 70 6c 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 2d 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 Data Ascii: dient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.h
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 35 2f 30 32 2f 63 72 6f 70 70 65 64 2d 33 2d 33 32 78 33 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 33 32 78 33 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 75 70 6c 6f 61 64 73 2f 32 30 32 35 2f 30 32 2f 63 72 6f 70 70 65 64 2d 33 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 20 73 69 7a 65 73 3d 22 31 39 32 78 31 39 32 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 2f 77 70 2d 63 6f 6e 74 65 6e Data Ascii: -content/uploads/2025/02/cropped-3-32x32.png" sizes="32x32" /><link rel="icon" href="https://kangelaestate.co.mz/wp-content/uploads/2025/02/cropped-3-192x192.png" sizes="192x192" /><link rel="apple-touch-icon" href="https://kangelaestate.co.mz/wp-conten
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 74 74 69 6e 67 73 2e 73 69 7a 65 3f 2e 66 75 6c 6c 48 65 69 67 68 74 7d 2c 76 6f 69 64 20 30 21 3d 3d 74 2e 6f 66 66 26 26 28 74 2e 6f 66 66 3f 2e 74 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 6d 3f 3f 3d 7b 7d 29 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 6d 2e 74 3d 74 2e 6f 66 66 2e 74 29 2c 74 2e 6f 66 66 3f 2e 62 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 6d 3f 3f 3d 7b 7d 29 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 6d 2e 62 3d 74 2e 6f 66 66 2e 62 29 2c 74 2e 6f 66 66 3f 2e 6c 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 70 3f 3f 3d 7b 7d 29 26 26 28 65 2e 73 65 74 74 69 6e 67 73 2e 73 69 7a 65 2e 70 2e 6c 3d 74 2e 6f 66 66 2e 6c 29 2c 74 2e 6f 66 66 3f 2e 72 26 26 28 65 2e 73 65 Data Ascii: ttings.size?.fullHeight},void 0!==t.off&&(t.off?.t&&(e.settings.size.m??={})&&(e.settings.size.m.t=t.off.t),t.off?.b&&(e.settings.size.m??={})&&(e.settings.size.m.b=t.off.b),t.off?.l&&(e.settings.size.p??={})&&(e.settings.size.p.l=t.off.l),t.off?.r&&(e.se
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 66 69 67 75 72 65 3e 3c 64 69 76 20 69 64 3d 22 73 70 2d 70 6d 62 69 70 72 22 20 20 20 63 6c 61 73 73 3d 22 73 70 2d 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 33 32 70 78 3b 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 73 70 2d 74 38 68 66 38 6c 22 20 20 20 63 6c 61 73 73 3d 22 73 70 2d 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 36 30 70 78 3b 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 73 70 2d 66 78 79 70 61 77 22 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 70 2d 63 6f 64 65 2d 77 72 61 70 70 65 72 20 73 70 2d 65 6c 2d 62 6c 6f 63 6b 20 73 70 2d 63 75 73 74 6f 6d 2d 68 74 6d 6c 2d 62 6c 6f 63 6b 2d 66 78 79 70 61 77 22 20 73 74 79 6c 65 Data Ascii: ;</script></div></figure><div id="sp-pmbipr" class="sp-spacer" style="height: 32px;"></div><div id="sp-t8hf8l" class="sp-spacer" style="height: 60px;"></div><div id="sp-fxypaw" class="sp-code-wrapper sp-el-block sp-custom-html-block-fxypaw" style
2025-03-25 10:11:45 UTC	5319	IN	Data Raw: 6e 74 65 6e 64 2d 6a 73 2d 62 65 66 6f 72 65 22 3e 0a 2f 2a 20 3c 21 5b 43 44 41 54 41 5b 20 2a 2f 0a 76 61 72 20 45 6c 65 6d 65 6e 74 6f 72 50 72 6f 46 72 6f 6e 74 65 6e 64 43 6f 6e 66 69 67 20 3d 20 7b 22 61 6a 61 78 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 5c 2f 77 70 2d 61 64 6d 69 6e 5c 2f 61 64 6d 69 6e 2d 61 6a 61 78 2e 70 68 70 22 2c 22 6e 6f 6e 63 65 22 3a 22 32 37 34 63 34 62 66 64 34 38 22 2c 22 75 72 6c 73 22 3a 7b 22 61 73 73 65 74 73 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 5c 2f 77 70 2d 63 6f 6e 74 65 6e 74 5c 2f 70 6c 75 67 69 6e 73 5c 2f 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 5c 2f 61 73 73 65 74 73 5c 2f 22 2c 22 72 65 Data Ascii: ntend-js-before">/* <![CDATA[ */var ElementorProFrontendConfig = {"ajaxurl":"https:\/\/kangelaestate.co.mz\/wp-admin\/admin-ajax.php","nonce":"274c4bfd48","urls":{"assets":"https:\/\/kangelaestate.co.mz\/wp-content\/plugins\/elementor-pro\/assets\/","re

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:45 UTC	638	OUT	GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/css/tailwind.min.css?ver=6.18.14 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:45 UTC	325	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:45 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 17:46:26 GMT Accept-Ranges: bytes Content-Length: 66794 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:45 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:45 UTC	7867	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 38 2e 30 2e 31 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 0a 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 0a 6d 61 69 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 0a 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 0a 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 0a 70 72 65 7b 66 Data Ascii: /! normalize.css v8.0.1 \| MIT License \| github.com/necolas/normalize.css /html{line-height:1.15;-webkit-text-size-adjust:100%}body{margin:0}main{display:block}h1{font-size:2em;margin:.67em 0}hr{box-sizing:content-box;height:0;overflow:visible}pre{f
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 65 66 74 3a 2e 37 35 72 65 6d 7d 0a 2e 73 70 2d 6d 74 2d 34 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 7d 0a 2e 73 70 2d 6d 72 2d 34 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 0a 2e 73 70 2d 6d 62 2d 34 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 0a 2e 73 70 2d 6d 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 7d 0a 2e 73 70 2d 6d 72 2d 36 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 2e 35 72 65 6d 7d 0a 2e 73 70 2d 6d 62 2d 36 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 0a 2e 73 70 2d 6d 6c 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 0a 2e 73 70 2d 6d 74 2d 38 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 72 65 6d 7d 0a 2e 73 70 2d 6f 62 6a 65 63 74 2d 63 6f 76 65 72 7b Data Ascii: eft:.75rem}.sp-mt-4{margin-top:1rem}.sp-mr-4{margin-right:1rem}.sp-mb-4{margin-bottom:1rem}.sp-ml-4{margin-left:1rem}.sp-mr-6{margin-right:1.5rem}.sp-mb-6{margin-bottom:1.5rem}.sp-ml-6{margin-left:1.5rem}.sp-mt-8{margin-top:2rem}.sp-object-cover{
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 31 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 0a 2e 73 70 2d 73 74 61 72 72 61 74 69 6e 67 20 69 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 73 75 6d 6d 61 72 79 3a 3a 2d 77 65 62 6b 69 74 2d 64 65 74 61 69 6c 73 2d 6d 61 72 6b 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 64 65 74 61 69 6c 73 3e 73 75 6d 6d 61 72 79 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 0a 64 65 74 61 69 6c 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 0a 64 65 74 61 69 6c 73 20 2e 73 70 2d 61 63 63 2d 6f 70 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 64 65 74 61 69 6c 73 5b 6f Data Ascii: 14px;font-size:20px}.sp-starrating i:last-of-type{padding-right:0 !important}summary::-webkit-details-marker{display:none}details>summary:first-of-type{list-style-type:none}details{display:block;width:100%}details .sp-acc-open{display:none}details[o
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 6e 74 7d 0a 2e 73 70 2d 66 65 61 74 75 72 65 2d 77 72 61 70 70 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 73 70 2d 66 65 61 74 75 72 65 2d 77 72 61 70 70 65 72 20 69 6d 67 2c 2e 73 70 2d 66 65 61 74 75 72 65 2d 77 72 61 70 70 65 72 20 69 7b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 73 70 2d 77 63 63 75 73 74 6f 6d 70 72 6f 64 75 63 74 73 67 72 69 64 2d 77 72 61 70 70 65 72 20 6c 69 2e 70 72 6f 64 75 63 74 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 7d 23 63 73 70 69 6f 2d 62 79 70 61 73 73 2d Data Ascii: nt}.sp-feature-wrapper{text-align:center !important}.sp-feature-wrapper img,.sp-feature-wrapper i{margin:0 !important;margin-bottom:16px !important}.sp-wccustomproductsgrid-wrapper li.product{float:none !important;width:100% !important}}#cspio-bypass-
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 2c 31 66 72 29 29 7d 0a 2e 73 70 2d 63 75 73 74 6f 6d 2d 63 6f 6c 2d 73 70 61 6e 2d 31 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 31 20 2f 20 73 70 61 6e 20 31 7d 0a 2e 73 70 2d 63 75 73 74 6f 6d 2d 63 6f 6c 2d 73 70 61 6e 2d 32 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 32 20 2f 20 73 70 61 6e 20 32 7d 0a 2e 73 70 2d 63 75 73 74 6f 6d 2d 63 6f 6c 2d 73 70 61 6e 2d 33 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 33 20 2f 20 73 70 61 6e 20 33 7d 0a 2e 73 70 2d 63 75 73 74 6f 6d 2d 63 6f 6c 2d 73 70 61 6e 2d 34 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 34 20 2f 20 73 70 61 6e 20 34 7d 0a 2e 73 70 2d 63 75 73 74 6f 6d 2d 63 6f 6c 2d 73 70 61 6e 2d 35 7b 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 73 70 61 6e 20 35 20 2f 20 Data Ascii: ,1fr))}.sp-custom-col-span-1{grid-column:span 1 / span 1}.sp-custom-col-span-2{grid-column:span 2 / span 2}.sp-custom-col-span-3{grid-column:span 3 / span 3}.sp-custom-col-span-4{grid-column:span 4 / span 4}.sp-custom-col-span-5{grid-column:span 5 /
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 3a 72 65 6c 61 74 69 76 65 7d 0a 2e 73 70 2d 73 65 63 74 69 6f 6e 2d 73 68 61 70 65 2c 2e 73 70 2d 72 6f 77 2d 73 68 61 70 65 2c 2e 73 70 2d 63 6f 6c 2d 73 68 61 70 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 0a 2e 73 70 2d 73 65 63 74 69 6f 6e 2d 74 6f 70 2c 2e 73 70 2d 72 6f 77 2d 74 6f 70 2c 2e 73 70 2d 63 6f 6c 2d 74 6f 70 7b 74 6f 70 3a 30 7d 0a 2e 73 70 2d 73 65 63 74 69 6f 6e 2d 62 6f 74 74 6f 6d 2c 2e 73 70 2d 72 6f 77 2d 62 6f 74 74 6f 6d 2c 2e 73 70 2d 63 6f 6c 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 7d 0a 2e 73 70 2d 73 65 63 74 69 6f 6e Data Ascii: :relative}.sp-section-shape,.sp-row-shape,.sp-col-shape{overflow:hidden;position:absolute;left:0;width:100%;line-height:0;direction:ltr}.sp-section-top,.sp-row-top,.sp-col-top{top:0}.sp-section-bottom,.sp-row-bottom,.sp-col-bottom{bottom:0}.sp-section
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 4f 46 46 22 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 0a 2e 73 70 2d 63 6f 6e 74 65 6e 74 2d 74 6f 67 67 6c 65 2d 61 72 65 61 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 3a 63 68 65 63 6b 65 64 3a 3a 62 65 66 6f 72 65 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 0a 2e 73 70 2d 63 6f 6e 74 65 6e 74 2d 74 6f 67 67 6c 65 2d 61 72 65 61 20 69 Data Ascii: e{border-radius:0;content:"OFF";display:flex;justify-content:center;align-items:center}.sp-content-toggle-area input[type="checkbox"]:checked::before{-webkit-transform:translateX(100%);transform:translateX(100%);background:#fff}.sp-content-toggle-area i
2025-03-25 10:11:45 UTC	8000	IN	Data Raw: 64 2d 63 61 72 74 2d 77 72 61 70 70 65 72 20 6c 69 2e 65 64 64 2d 63 61 72 74 2d 69 74 65 6d 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 65 6e 64 7d 0a 2e 73 70 2d 65 64 64 2d 63 61 72 74 2d 77 72 61 70 70 65 72 20 6c 69 20 73 70 61 6e 2e 65 64 64 2d 63 61 72 74 2d 69 74 65 6d 2d 74 69 74 6c 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 0a 2e 73 70 2d 65 64 64 2d 63 61 72 74 2d 77 72 61 70 70 65 72 20 2e 65 64 64 2d 63 61 72 74 2d 69 74 65 6d 20 2e 65 64 64 2d 63 61 72 74 2d 69 74 65 6d 2d 73 65 70 61 72 61 74 6f 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 73 70 2d 65 64 64 2d 63 61 72 74 2d 77 72 61 70 70 65 72 20 6c 69 2e 65 64 64 2d 63 61 72 74 2d 6d 65 74 61 2e 65 64 64 5f 74 6f 74 61 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f Data Ascii: d-cart-wrapper li.edd-cart-item{text-align:end}.sp-edd-cart-wrapper li span.edd-cart-item-title{float:left}.sp-edd-cart-wrapper .edd-cart-item .edd-cart-item-separator{display:none !important}.sp-edd-cart-wrapper li.edd-cart-meta.edd_total{margin-botto
2025-03-25 10:11:45 UTC	2927	IN	Data Raw: 63 61 72 6f 75 73 65 6c 2d 70 6f 73 74 2d 62 6c 6f 63 6b 20 2e 73 70 2d 70 6f 73 74 73 2d 73 69 6e 67 6c 65 2d 62 6c 6f 63 6b 2e 73 70 2d 63 61 72 64 2d 70 6f 73 74 73 2c 2e 73 70 2d 73 6b 69 6e 2d 6d 69 6e 69 6d 61 6c 20 2e 73 65 65 64 70 72 6f 64 2d 63 61 72 6f 75 73 65 6c 2d 70 6f 73 74 2d 62 6c 6f 63 6b 20 2e 73 70 2d 70 6f 73 74 73 2d 73 69 6e 67 6c 65 2d 62 6c 6f 63 6b 2e 73 70 2d 6d 69 6e 69 6d 61 6c 2d 70 6f 73 74 73 7b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 7d 0a 2e 73 65 65 64 70 72 6f 64 2d 63 61 72 6f 75 73 65 6c 2d 70 6f 73 74 2d 62 6c 6f 63 6b 20 2e 73 70 2d 70 6f 73 74 73 2d 73 69 6e 67 6c 65 2d 62 6c 6f 63 6b 7b 6d 61 72 67 69 6e 3a 30 20 31 30 70 78 7d 0a 2e 73 70 2d 6c 61 79 6f 75 74 2d 67 72 69 64 6c 61 79 6f 75 74 2e 73 70 2d 73 6b 69 Data Ascii: carousel-post-block .sp-posts-single-block.sp-card-posts,.sp-skin-minimal .seedprod-carousel-post-block .sp-posts-single-block.sp-minimal-posts{margin:0 10px}.seedprod-carousel-post-block .sp-posts-single-block{margin:0 10px}.sp-layout-gridlayout.sp-ski

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:46 UTC	671	OUT	GET /wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:46 UTC	325	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:46 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 20:21:15 GMT Accept-Ranges: bytes Content-Length: 98065 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:46 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:46 UTC	7867	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 36 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 2d 66 61 6d 69 6c Data Ascii: /! Font Awesome Free 6.6.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2024 Fonticons, Inc. */.fa{font-family:var(--fa-style-famil
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 35 66 22 7d 2e 66 61 2d 61 72 72 6f 77 73 2d 75 70 2d 74 6f 2d 6c 69 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 34 63 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 64 22 7d 2e 66 61 2d 63 69 72 63 6c 65 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 69 6e 75 73 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 36 22 7d 2e 66 61 2d 64 6f 6f 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 62 22 7d 2e 66 61 2d 72 69 67 68 74 2d 66 72 6f 6d 2d 62 72 61 63 6b 65 74 3a 62 65 Data Ascii: ll:before{content:"\f45f"}.fa-arrows-up-to-line:before{content:"\e4c2"}.fa-sort-desc:before,.fa-sort-down:before{content:"\f0dd"}.fa-circle-minus:before,.fa-minus-circle:before{content:"\f056"}.fa-door-open:before{content:"\f52b"}.fa-right-from-bracket:be
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 61 2d 70 61 69 6e 74 2d 62 72 75 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 61 69 6e 74 62 72 75 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 63 22 7d 2e 66 61 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 33 22 7d 2e 66 61 2d 67 61 73 2d 70 75 6d 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 32 66 22 7d 2e 66 61 2d 68 6f 74 2d 74 75 62 2d 70 65 72 73 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 6f 74 2d 74 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 39 33 22 7d 2e 66 61 2d 6d 61 70 2d 6c 6f 63 61 74 69 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 39 66 22 7d 2e 66 61 2d 68 Data Ascii: a-paint-brush:before,.fa-paintbrush:before{content:"\f1fc"}.fa-lock:before{content:"\f023"}.fa-gas-pump:before{content:"\f52f"}.fa-hot-tub-person:before,.fa-hot-tub:before{content:"\f593"}.fa-map-location:before,.fa-map-marked:before{content:"\f59f"}.fa-h
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 37 22 7d 2e 66 61 2d 73 68 75 74 74 6c 65 2d 73 70 61 63 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 70 61 63 65 2d 73 68 75 74 74 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 37 22 7d 2e 66 61 2d 66 61 63 65 2d 6c 61 75 67 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 61 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 39 39 22 7d 2e 66 61 2d 66 6f 6c 64 65 72 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 63 22 7d 2e 66 61 2d 68 65 61 72 74 2d 63 69 72 63 6c 65 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 30 30 22 7d 2e 66 61 2d 63 6f 64 65 2d 66 6f 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 Data Ascii: :before{content:"\f487"}.fa-shuttle-space:before,.fa-space-shuttle:before{content:"\f197"}.fa-face-laugh:before,.fa-laugh:before{content:"\f599"}.fa-folder-open:before{content:"\f07c"}.fa-heart-circle-plus:before{content:"\e500"}.fa-code-fork:before{conte
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 2d 6c 61 72 67 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 66 61 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 70 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 62 36 22 7d 2e 66 61 2d 68 61 6e 64 73 68 61 6b 65 2d 61 6c 74 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 68 61 6e 64 73 68 61 6b 65 2d 73 69 6d 70 6c 65 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 35 66 22 7d 2e 66 61 2d 6d 61 74 74 72 65 73 73 2d 70 69 6c 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 32 35 22 7d 2e 66 61 2d 67 75 61 72 61 6e 69 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: lt-slash:before,.fa-user-large-slash:before{content:"\f4fa"}.fa-envelope-open:before{content:"\f2b6"}.fa-handshake-alt-slash:before,.fa-handshake-simple-slash:before{content:"\e05f"}.fa-mattress-pillow:before{content:"\e525"}.fa-guarani-sign:before{conten
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 30 22 7d 2e 66 61 2d 68 6f 75 73 65 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 32 22 7d 2e 66 61 2d 62 61 72 73 2d 70 72 6f 67 72 65 73 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 61 73 6b 73 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 32 38 22 7d 2e 66 61 2d 66 61 75 63 65 74 2d 64 72 69 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 36 22 7d 2e 66 61 2d 63 61 72 74 2d 66 6c 61 74 62 65 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 64 6f 6c 6c 79 2d 66 6c 61 74 62 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 34 22 7d 2e 66 61 2d 62 61 6e 2d 73 6d 6f 6b 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6d Data Ascii: ore{content:"\f540"}.fa-house-signal:before{content:"\e012"}.fa-bars-progress:before,.fa-tasks-alt:before{content:"\f828"}.fa-faucet-drip:before{content:"\e006"}.fa-cart-flatbed:before,.fa-dolly-flatbed:before{content:"\f474"}.fa-ban-smoking:before,.fa-sm
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 6e 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 62 63 22 7d 2e 66 61 2d 63 72 6f 70 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 72 6f 70 2d 73 69 6d 70 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 36 35 22 7d 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 2d 31 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6d 6f 6e 65 79 2d 62 69 6c 6c 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 64 31 22 7d 2e 66 61 2d 6c 65 66 74 2d 6c 6f 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6c 6f 6e 67 2d 61 72 72 6f 77 2d 61 6c 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 30 61 22 7d 2e 66 61 2d 64 6e 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: :before,.fa-inr:before{content:"\e1bc"}.fa-crop-alt:before,.fa-crop-simple:before{content:"\f565"}.fa-money-bill-1:before,.fa-money-bill-alt:before{content:"\f3d1"}.fa-left-long:before,.fa-long-arrow-alt-left:before{content:"\f30a"}.fa-dna:before{content:
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 61 2d 70 6f 64 63 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 65 22 7d 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 34 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 65 6d 70 65 72 61 74 75 72 65 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 34 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 68 65 72 6d 6f 6d 65 74 65 72 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 63 37 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 73 75 70 65 72 73 63 72 69 70 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 62 22 7d 2e 66 61 2d 70 6c 75 67 2d 63 69 72 63 6c 65 2d 78 6d 61 72 6b 3a 62 65 66 6f 72 65 7b Data Ascii: a-podcast:before{content:"\f2ce"}.fa-temperature-4:before,.fa-temperature-full:before,.fa-thermometer-4:before,.fa-thermometer-full:before{content:"\f2c7"}.fa-bell:before{content:"\f0f3"}.fa-superscript:before{content:"\f12b"}.fa-plug-circle-xmark:before{
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 72 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 38 33 22 7d 2e 66 61 2d 68 61 6d 6d 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 65 33 22 7d 2e 66 61 2d 68 61 6e 64 2d 70 65 61 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 62 22 7d 2e 66 61 2d 72 6f 74 61 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 79 6e 63 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 66 31 22 7d 2e 66 61 2d 73 70 69 6e 6e 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 31 30 22 7d 2e 66 61 2d 72 6f 62 6f 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 34 22 7d 2e 66 61 2d 70 65 61 63 65 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: ng:before,.fa-pray:before{content:"\f683"}.fa-hammer:before{content:"\f6e3"}.fa-hand-peace:before{content:"\f25b"}.fa-rotate:before,.fa-sync-alt:before{content:"\f2f1"}.fa-spinner:before{content:"\f110"}.fa-robot:before{content:"\f544"}.fa-peace:before{co
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 31 30 22 7d 2e 66 61 2d 72 75 6c 65 72 2d 76 65 72 74 69 63 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 35 34 38 22 7d 2e 66 61 2d 75 73 65 72 2d 61 6c 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 75 73 65 72 2d 6c 61 72 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 30 36 22 7d 2e 66 61 2d 74 72 61 69 6e 2d 74 72 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 35 62 34 22 7d 2e 66 61 2d 75 73 65 72 2d 6e 75 72 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 38 32 66 22 7d 2e 66 61 2d 73 79 72 69 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 38 65 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 73 75 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 36 63 34 22 7d 2e 66 61 Data Ascii: 10"}.fa-ruler-vertical:before{content:"\f548"}.fa-user-alt:before,.fa-user-large:before{content:"\f406"}.fa-train-tram:before{content:"\e5b4"}.fa-user-nurse:before{content:"\f82f"}.fa-syringe:before{content:"\f48e"}.fa-cloud-sun:before{content:"\f6c4"}.fa

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:46 UTC	620	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.27.6 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:46 UTC	325	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:46 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 06:46:19 GMT Accept-Ranges: bytes Content-Length: 53269 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:46 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:46 UTC	7867	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 37 2e 30 20 2d 20 31 38 2d 30 32 2d 32 30 32 35 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 63 72 65 65 6e 2d 6f 6e 6c 79 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 70 61 6e 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 Data Ascii: /! elementor - v3.27.0 - 18-02-2025 /.elementor-hidden{display:none}.elementor-visibility-hidden{visibility:hidden}.elementor-screen-only,.screen-reader-text,.screen-reader-text span,.ui-helper-hidden-accessible{height:1px;margin:-1px;overflow:hidden;p
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 62 6f 78 65 64 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 Data Ascii: flex;margin-left:auto;margin-right:auto;position:relative}@media (max-width:1024px){.elementor-section .elementor-container{flex-wrap:wrap}}.elementor-section.elementor-section-boxed>.elementor-container{max-width:1140px}.elementor-section.elementor-secti
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 68 69 6c 64 28 38 29 7b 6f 72 64 65 72 3a 33 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 2d 31 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 66 69 72 73 74 2d 63 68 69 6c Data Ascii: hild(8){order:3}.elementor-reverse-laptop>.elementor-container>:nth-child(9){order:2}.elementor-reverse-laptop>.elementor-container>:nth-child(10){order:1}}@media (min-width:-1) and (max-width:-1){.elementor-reverse-laptop>.elementor-container>:first-chil
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 36 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 37 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 38 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 Data Ascii: te-columns:repeat(6,1fr)}.elementor-grid-widescreen-7 .elementor-grid{grid-template-columns:repeat(7,1fr)}.elementor-grid-widescreen-8 .elementor-grid{grid-template-columns:repeat(8,1fr)}.elementor-grid-widescreen-9 .elementor-grid{grid-template-columns:r
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 72 69 67 68 74 2c 31 30 70 78 29 3b 2d 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 2c 31 30 70 78 29 3b 2d 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 2c 31 30 70 78 29 3b 2d 2d 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 2d 7a 2d 69 6e 64 65 78 3a 72 65 76 65 72 74 3b 2d 2d 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 2d 2d 67 61 70 3a 76 61 72 28 2d 2d 77 69 64 67 65 74 73 2d 73 70 61 63 Data Ascii: ding-right:var(--container-default-padding-right,10px);--padding-bottom:var(--container-default-padding-bottom,10px);--padding-left:var(--container-default-padding-left,10px);--position:relative;--z-index:revert;--overflow:visible;--gap:var(--widgets-spac
2025-03-25 10:11:46 UTC	8000	IN	Data Raw: 61 6e 63 65 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 32 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 Data Ascii: ance:none;color:inherit;flex-basis:100%;font-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;padding-inline-end:20px;text-transform:inherit}.elementor-field-group .elementor-select-wrapper
2025-03-25 10:11:46 UTC	5402	IN	Data Raw: 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 73 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 6d 64 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 37 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 39 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d Data Ascii: x}.elementor-form .elementor-button.elementor-size-sm{min-height:40px}.elementor-form .elementor-button.elementor-size-md{min-height:47px}.elementor-form .elementor-button.elementor-size-lg{min-height:59px}.elementor-form .elementor-button.elementor-size-

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:46 UTC	613	OUT	GET /wp-content/uploads/elementor/css/post-132.css?ver=1742156475 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:46 UTC	325	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:46 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 20:21:15 GMT Accept-Ranges: bytes Content-Length: 12379 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:46 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:46 UTC	7867	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 33 32 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 63 63 62 65 30 64 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6c 75 6d 6e 20 3e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 77 72 61 70 7b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 31 33 32 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 38 63 63 62 65 30 64 3a 6e 6f 74 28 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 6f 74 69 6f 6e 2d 65 66 66 65 Data Ascii: .elementor-132 .elementor-element.elementor-element-8ccbe0d > .elementor-container > .elementor-column > .elementor-widget-wrap{align-content:center;align-items:center;}.elementor-132 .elementor-element.elementor-element-8ccbe0d:not(.elementor-motion-effe
2025-03-25 10:11:46 UTC	4512	IN	Data Raw: 2d 65 6c 65 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 2d 30 64 63 38 32 30 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 20 2c 23 6e 61 76 2d 70 6f 70 75 70 2d 30 64 63 38 32 30 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6d 61 69 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 2c 20 23 6e 61 76 2d 70 6f 70 75 70 2d 30 64 63 38 32 30 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 63 6f 6e 74 61 69 6e 65 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 7b 62 6f 78 2d Data Ascii: -element.elementor-element-0dc8207 .elementor-nav-menu__container.elementor-nav-menu--dropdown ,#nav-popup-0dc8207 .elementor-nav-menu--main .elementor-nav-menu--dropdown, #nav-popup-0dc8207 .elementor-nav-menu__container.elementor-nav-menu--dropdown{box-

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:46 UTC	630	OUT	GET /wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.27.6 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:47 UTC	323	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:47 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 06:46:19 GMT Accept-Ranges: bytes Content-Length: 704 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:47 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:47 UTC	704	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 37 2e 30 20 2d 20 31 38 2d 30 32 2d 32 30 32 35 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 65 64 69 74 6f 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 64 72 6f 70 2d 63 61 70 2d 76 69 65 77 2d 73 74 61 63 6b 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 64 72 6f 70 2d 63 61 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 36 39 37 32 37 64 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 77 69 64 67 65 74 2d 74 65 78 74 2d 65 64 69 74 6f 72 2e 65 6c 65 6d 65 6e 74 6f 72 2d 64 72 6f 70 2d 63 61 70 2d 76 69 65 77 2d 66 72 61 6d 65 64 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 64 72 6f 70 2d 63 61 70 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 Data Ascii: /! elementor - v3.27.0 - 18-02-2025 /.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{background-color

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	638	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:47 UTC	326	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:47 GMT Server: Apache Last-Modified: Thu, 14 Nov 2024 06:30:36 GMT Accept-Ranges: bytes Content-Length: 114706 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:47 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:47 UTC	7866	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 75 72 6c 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 Data Ascii: ents .comment-form-url label{display:block;margin-bottom:.25em}.wp-block-post-comments .comment-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 Data Ascii: s-background-dim.has-background-dim-80 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-80:not(.has-background-gradi
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e Data Ascii: nt-position.is-position-bottom-left .wp-block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.has-custom-content-position.is-position-bottom-right .wp-block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 69 6d 65 2d 6c 6f 63 61 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 Data Ascii: ime-local],.wp-block-form-input__input[type=datetime],.wp-block-form-input__input[type=email],.wp-block-form-input__input[type=month],.wp-block-form-input__input[type=number],.wp-block-form-input__input[type=password],.wp-block-form-input__input[type=sear
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 32 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 33 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 33 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 6e 29 2c 2e 77 70 Data Ascii: y:not(.has-nested-images).columns-2 .blocks-gallery-item:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images).columns-3 .blocks-gallery-image:nth-of-type(3n),.wp-block-gallery:not(.has-nested-images).columns-3 .blocks-gallery-item:nth-of-type(3n),.wp
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6e 74 68 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 Data Ascii: idual-image):first-child:nth-last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-block-gallery.has-nested-images.columns-default figure.wp-block-image:not(#individual-image):firs
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 74 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 31 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 39 39 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f Data Ascii: t{0%{transform:translate(-50%,-50%) scale(1);visibility:visible}99%{visibility:visible}to{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-po
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 73 74 72 6f 6b 65 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 30 37 35 65 6d 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e Data Ascii: inline-block;stroke:currentColor;height:inherit;margin-top:.075em;width:inherit}.wp-block-navigation.is-vertical{--navigation-layout-direction:column;--navigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--n
2025-03-25 10:11:47 UTC	8000	IN	Data Raw: 73 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 2c 69 6e 69 74 69 61 6c 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 2c 69 6e 69 74 69 61 6c 29 3b 66 6c 65 78 2d 77 72 61 70 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: s:var(--navigation-layout-align,initial);display:flex;flex-direction:var(--navigation-layout-direction,initial);flex-wrap:var(--navigation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-containe

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	627	OUT	GET /wp-content/cache/min/1/wp-content/bcf-fonts/local-fonts.css?ver=1742156475 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:47 UTC	323	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:47 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 20:21:15 GMT Accept-Ranges: bytes Content-Length: 582 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:47 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:47 UTC	582	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 77 6f 72 6b 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6b 61 6e 67 65 6c 61 65 73 74 61 74 65 2e 63 6f 2e 6d 7a 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 62 63 66 2d 66 6f 6e 74 73 2f 57 6f 72 6b 20 53 61 6e 73 2f 77 6f 72 6b 2d 73 61 6e 73 2d 33 30 30 2d 6e 6f 72 6d 61 6c 30 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 73 61 6e 73 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 33 30 30 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 77 6f 72 6b 27 3b 73 72 63 3a 75 72 6c 28 27 68 74 74 70 Data Ascii: @font-face{font-display:swap;font-family:'work';src:url('https://kangelaestate.co.mz/wp-content/bcf-fonts/Work Sans/work-sans-300-normal0.woff2') format('woff2');font-weight:sans;font-style:300}@font-face{font-display:swap;font-family:'work';src:url('http

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	634	OUT	GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1741157166 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:47 UTC	324	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:47 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 06:46:06 GMT Accept-Ranges: bytes Content-Length: 2782 Cache-Control: max-age=31536000, public Expires: Wed, 25 Mar 2026 10:11:47 GMT Vary: Accept-Encoding Connection: close Content-Type: text/css; charset=utf-8
2025-03-25 10:11:47 UTC	2782	IN	Data Raw: 2e 63 6d 70 6c 7a 2d 76 69 64 65 6f 2e 63 6d 70 6c 7a 2d 69 66 72 61 6d 65 2d 73 74 79 6c 65 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 63 6d 70 6c 7a 2d 76 69 64 65 6f 2e 63 6d 70 6c 7a 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 63 6d 70 6c 7a 2d 62 6c 6f 63 6b 65 64 2d 63 6f 6e 74 65 6e 74 2d 6e 6f 74 69 63 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 6d 70 6c 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 70 61 72 65 6e 74 7b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 63 6d 70 6c 7a 2d 6f 70 74 69 6e 20 2e 63 6d 70 6c 7a 2d 62 6c 6f 63 6b 65 64 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 6d 70 6c 7a 2d 62 Data Ascii: .cmplz-video.cmplz-iframe-styles{background-color:transparent}.cmplz-video.cmplz-hidden{visibility:hidden !important}.cmplz-blocked-content-notice{display:none}.cmplz-placeholder-parent{height:inherit}.cmplz-optin .cmplz-blocked-content-container .cmplz-b

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	641	OUT	GET /wp-content/uploads/2025/03/download-1.jpeg HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:48 UTC	312	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:48 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 19:40:20 GMT Accept-Ranges: bytes Content-Length: 48305 Cache-Control: max-age=10368000, public Expires: Wed, 23 Jul 2025 10:11:48 GMT Vary: Accept-Encoding Connection: close Content-Type: image/jpeg
2025-03-25 10:11:48 UTC	7880	IN	Data Raw: ff d8 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c2 00 11 08 03 20 04 2e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 08 09 ff c4 00 18 01 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 fd 36 97 94 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CC .6
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 0a 45 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 97 80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 52 00 52 00 00 00 00 50 08 04 50 00 a0 00 85 20 00 00 50 21 50 02 c4 a0 00 00 00 05 04 00 00 00 00 00 00 00 00 50 08 00 28 0a 05 e0 00 06 00 00 00 00 06 00 06 41 80 00 00 c8 00 00 01 83 20 18 32 00 00 00 60 0a cc 00 ac 00 00 00 19 8c 50 cc 60 19 00 56 00 8c 80 62 b3 18 a4 0c 98 32 0c 19 30 64 18 02 90 00 00 00 00 c8 00 00 60 03 20 00 62 80 f0 f3 36 80 0a 4c 1a eb 3c af 46 2a f4 cc b4 08 10 06 40 ac c6 05 00 8c 8a 05 00 80 64 20 05 c8 32 b8 42 29 28 00 61 72 80 00 a4 14 80 8a 40 00 2d 09 41 32 20 ab 30 8a 28 19 cc c9 Data Ascii: E(RRPP P!PP(A 2`P`Vb20d` b6L<F*@d 2B)(ar@-A2 0(
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 20 4c ab 5c 79 15 8b 4e 08 b2 64 9f 25 26 b1 e4 cd 43 78 8d 14 ee c0 59 22 62 9f 22 6a 9d d3 33 85 f5 0f 85 7f 6f d5 5b d3 41 38 d1 0c 72 39 54 11 62 86 37 71 86 35 c2 08 66 08 d8 8a 33 5c 61 ab 8c 69 c2 3d 60 61 70 92 20 62 68 40 d4 94 c1 94 2c 11 a9 18 24 5c 71 b3 18 06 b1 d6 12 69 23 01 4d 1c 6e a2 ae 02 a6 68 cd 70 46 cc f1 06 a1 38 46 b5 03 77 00 75 c0 09 e1 8d 95 68 81 4e 22 8d 81 47 54 49 8a b4 69 a1 05 13 00 31 b0 48 f2 d6 11 41 b1 14 f1 b0 8f 1c 85 c1 1b 38 c8 02 3c 41 2a 96 11 17 08 40 93 d1 14 51 c6 28 76 33 c5 64 45 a7 e3 95 3d 70 74 55 c7 51 8c 54 75 c6 35 2b 89 b4 15 85 49 18 0a d9 1a db 1a e2 8d 18 86 a1 04 7a 08 46 8a 11 d9 67 6e ea f5 c5 d5 77 08 d4 b0 0c cd c4 00 9a 38 d7 20 08 9c 81 ab 71 92 18 a3 75 1d 31 76 b3 08 c4 9d c1 46 00 ee c1 Data Ascii: L\yNd%&CxY"b"j3o[A8r9Tb7q5f3\ai=`ap bh@,$\qi#MnhpF8FwuhN"GTIi1HA8<A*@Q(v3dE=ptUQTu5+IzFgnw8 qu1vF
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 26 69 a1 bc 15 e4 47 37 83 fa 2f 96 12 87 6c 96 bd cb f4 36 90 b6 d6 11 9b 05 c9 45 23 53 57 f5 27 ba f8 6c 4e b8 e4 ab f4 b3 08 36 f0 56 a8 ee 3e d1 29 fb 61 38 e8 c2 61 b9 ec 30 2e bd 36 32 28 6d 09 48 ff 00 4b 11 19 49 97 ce 2b 81 8d 61 74 c7 a6 a3 8d 9b 01 a2 21 de d8 d0 5b 99 c9 31 c9 d0 dc e6 b8 43 fa c8 7a 6c e8 70 32 1d cc fb 18 a6 3f a2 f8 5b 64 49 47 b2 7c b1 c5 da c8 dc ba f9 62 e9 3b 46 36 ad 0f 14 72 be ba 4c e8 e4 28 e4 5d a6 3b a0 8b 64 a5 7b 52 7b ce 29 bf ff 00 19 37 21 db 11 74 de 82 cc 5a 0c 74 ed 45 dd b6 13 63 38 ad 19 26 02 9a 1d 96 1d 3f b5 69 fb 9a b4 38 09 92 b2 3b 34 59 a6 0e ab 4f 59 7d b1 4f dc 88 25 da 1d 39 21 38 32 4a aa ee cc f9 ba 85 e4 5c 19 e8 18 62 25 21 93 03 66 54 04 08 73 9c 80 71 5a fc 8b 77 3f c9 4c 23 6b 67 f5 5f Data Ascii: &iG7/l6E#SW'lN6V>)a8a0.62(mHKI+at![1Czlp2?[dIG\|b;F6rL(];d{R{)7!tZtEc8&?i8;4YOY}O%9!82J\b%!fTsqZw?L#kg_
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 00 92 49 24 92 49 24 92 49 24 12 00 20 80 48 04 10 08 04 92 40 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 40 24 92 49 24 92 49 24 92 49 04 92 08 20 12 01 24 02 48 24 90 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 90 09 24 92 49 24 92 49 24 92 48 00 02 01 04 82 48 04 90 09 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 82 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 20 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 92 49 24 Data Ascii: I$I$I$I$I$I$I$II$I$I$ H@$I$I$I$I$I$I$I$I$I$@$I$I$I $H$I$I$I$I$I$I$I$I$I$I$$I$I$HH$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I I$I$I$I$I$I$I$I$I$I$
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 2c 0b 22 42 c4 8e 0b c1 03 a1 b4 44 74 21 41 b8 66 95 eb 5f da 0c df e6 5d 20 ae d2 27 c6 78 83 9d 84 62 81 2c 90 87 60 2d 61 1c aa a2 fa 7f 31 40 32 71 1d a0 62 08 64 16 0d 15 62 75 04 74 42 b1 35 00 32 d1 0c 44 d3 f6 4b a2 6e 65 c5 4a a2 7d a5 e6 73 a4 16 83 5a 82 52 5f 11 1b 42 9c 0a 65 e0 57 da 26 97 a8 1c 04 14 7f 68 33 7f 99 74 80 82 e5 9a a9 41 44 c4 01 47 da 1a 83 69 ab 02 05 86 41 1e 42 c7 12 e9 52 ee d0 99 ca c9 17 83 d8 82 60 cb 82 c0 8c 8d 5a d6 35 29 cc 45 b4 cc b0 71 c4 57 24 cb 8e a3 d2 d7 5b 43 94 68 72 c4 7b 5a fd 35 fd a1 f6 70 df e6 b4 d5 c6 ee b0 d3 04 01 b4 a3 c4 e2 94 45 76 4c 75 4a 80 e8 09 5a d0 95 f1 1d 50 60 4d 82 52 aa ae 29 b1 d4 e3 4e 34 e3 75 2f d4 3e d1 5b 6a 5a 00 30 2b fb 5b 9b ff 00 81 99 bf f8 19 9b fc d1 16 a8 82 35 5e Data Ascii: ,"BDt!Af_] 'xb,`-a1@2qbdbutB52DKneJ}sZR_BeW&h3tADGiABR`Z5)EqW$[Chr{Z5pEvLuJZP`MR)N4u/>[jZ0+[5^
2025-03-25 10:11:48 UTC	425	IN	Data Raw: a7 19 ef 3f 3d 28 74 ce 2c fc 94 1b 67 71 2d 9d c3 ff 00 6a 71 3b 9f 92 9f 9a 9c 4e e3 e2 77 38 dd c1 76 77 38 5d cf cf 4f cf 4f cf 4f cf 4f cf 4f cf 4f c9 41 36 77 3f 39 3f 3d 07 ff 00 b4 fc b4 fc b4 e1 7b 33 85 dc e1 77 38 5d ce 17 71 a7 47 73 ce 48 78 33 06 9e e7 e6 23 ff 00 a1 3f 35 3f 2d 38 df 02 e0 4a f3 64 52 ff 00 d4 b7 97 71 34 b7 71 ae ee e0 97 0b b8 a3 77 73 31 8c b7 30 ae 63 ba bb 98 e4 7d d2 9f fd cc 7f 09 fe 16 7f 0b 07 f8 5f f1 33 f8 58 84 5b f3 9c 8e e5 db fb 9c 9e e6 3d 5d c3 91 ef 28 dd dc 13 77 72 ad ef bc e4 47 cd ef e0 58 bf ea 5e 63 ef 9c fe e7 3f b8 f9 5d c0 37 f7 2d d1 77 0b 75 fb b0 63 4b b8 8e ab b9 c9 ee 78 94 e6 4b 78 3d 23 e6 be f3 9b dc ab 7f 73 9a 4e 6f ad cb 35 72 e6 f6 5b ce 5f ca 2f ca 5b ca 0b c9 9c ce e7 27 b9 cc ee 7e Data Ascii: ?=(t,gq-jq;Nw8vw8]OOOOOOA6w?9?={3w8]qGsHx3#?5?-8JdRq4qws10c}_3X[=](wrGX^c?]7-wucKxKx=#sNo5r[_/['~

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	584	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:48 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:48 GMT Server: Apache Last-Modified: Mon, 28 Aug 2023 20:44:24 GMT Accept-Ranges: bytes Content-Length: 87553 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:48 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:48 UTC	7861	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 Data Ascii: !1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function z(t){return function(e){return"for
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 Data Ascii: (e){return e.parentNode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},inpu
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 64 64 28 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e Data Ascii: (e){return this.add(null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return d(e,"parentNode")},parentsUntil:function(e,t,n){return d(e,"parentNode",n
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 29 29 3f 74 3a 76 6f 69 64 20 30 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 Data Ascii: ))?t:void 0;this.each(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Ar
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 6e 53 74 6f 70 70 65 64 28 29 29 7b 75 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 6f 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 28 75 2e 68 61 6e 64 6c 65 4f 62 6a 3d 6f 2c 75 2e 64 61 74 61 3d 6f 2e 64 61 74 61 2c 76 6f 69 64 20 30 21 3d 3d 28 72 3d 28 28 63 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 6f 2e 68 61 Data Ascii: nStopped()){u.currentTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)\|\|(u.handleObj=o,u.data=o.data,void 0!==(r=((ce.event.special[o.origType]\|\|{}).handle\|\|o.ha
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d Data Ascii: rn $e(this,arguments,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)}
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 2c 74 68 69 73 2e 75 6e 69 74 3d 6f 7c 7c 28 63 65 2e 63 73 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 74 3d 63 65 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e Data Ascii: ,this.unit=o\|\|(ce.cssNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(this)},run:function(e){var t,n=at.propHooks[this.prop];return this.options.duration?this.pos=t=ce.easing[this.easin
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 74 74 72 69 62 75 74 65 3f 63 65 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 63 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d Data Ascii: ttribute?ce.prop(e,t,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n?void ce.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!=
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 74 65 73 74 28 65 29 26 26 28 74 68 69 73 2e 63 68 65 63 6b 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 65 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 3b 76 61 72 20 4d 74 3d 2f 25 32 30 2f 67 2c 52 74 3d 2f Data Ascii: test(e)&&(this.checked\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){return{name:t.name,value:e.replace(Lt,"\r\n")}}):{name:t.name,value:n.replace(Lt,"\r\n")}}).get()}});var Mt=/%20/g,Rt=/

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:47 UTC	592	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:48 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:48 GMT Server: Apache Last-Modified: Fri, 09 Jun 2023 09:19:24 GMT Accept-Ranges: bytes Content-Length: 13577 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:48 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:48 UTC	7861	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2025-03-25 10:11:48 UTC	5716	IN	Data Raw: 2d 74 79 70 65 64 20 76 61 6c 75 65 73 20 61 72 65 20 64 65 70 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 20 69 6e 20 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 45 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6f Data Ascii: -typed values are deprecated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",function(e,t,r){var n,o,a;if(t&&"object"==typeof t&&2===arguments.length){for(a in n=s.hasData(e)&&E.call(this,e),o

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report FILLING SUMMON DOCUMENT.docx

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\F4B28446.tmp

C:\Users\user\Desktop\~$LLING SUMMON DOCUMENT.docx

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Windows Analysis Report
FILLING SUMMON DOCUMENT.docx

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:48 UTC	634	OUT	GET /wp-content/cache/min/1/wp-content/themes/maisonco/assets/js/libs/owl.carousel.js?ver=1741170075 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:48 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:48 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 10:21:15 GMT Accept-Ranges: bytes Content-Length: 53325 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:48 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:48 UTC	7861	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 31 2e 36 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 Data Ascii: /** * Owl carousel * @version 2.1.6 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 73 65 74 74 69 6e 67 73 7d 7d 29 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 70 74 69 6f 6e 73 4c 6f 67 69 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 57 69 64 74 68 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 50 61 64 64 69 6e 67 3d 21 31 3b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6d 65 72 67 65 3d 21 31 7d 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 65 70 61 72 65 3d 66 75 6e 63 74 69 6f 6e 28 69 74 65 6d 29 7b 76 61 72 20 65 76 65 6e 74 3d 74 68 69 73 2e 74 72 69 67 67 65 72 28 27 70 72 65 70 61 72 65 27 2c 7b 63 6f 6e 74 65 6e 74 3a 69 74 65 6d 7d 29 3b 69 66 28 21 65 76 65 6e 74 2e 64 61 74 61 29 7b 65 76 65 6e 74 2e 64 61 74 61 3d 24 28 27 3c 27 2b 74 68 Data Ascii: settings}})};Owl.prototype.optionsLogic=function(){if(this.settings.autoWidth){this.settings.stagePadding=!1;this.settings.merge=!1}};Owl.prototype.prepare=function(item){var event=this.trigger('prepare',{content:item});if(!event.data){event.data=$('<'+th
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 73 57 69 64 74 68 2c 65 6c 65 6d 65 6e 74 57 69 64 74 68 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 6c 6f 6f 70 29 7b 6d 61 78 69 6d 75 6d 3d 74 68 69 73 2e 5f 63 6c 6f 6e 65 73 2e 6c 65 6e 67 74 68 2f 32 2b 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7d 65 6c 73 65 20 69 66 28 73 65 74 74 69 6e 67 73 2e 61 75 74 6f 57 69 64 74 68 7c 7c 73 65 74 74 69 6e 67 73 2e 6d 65 72 67 65 29 7b 69 74 65 72 61 74 6f 72 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 3b 72 65 63 69 70 72 6f 63 61 6c 49 74 65 6d 73 57 69 64 74 68 3d 74 68 69 73 2e 5f 69 74 65 6d 73 5b 2d 2d 69 74 65 72 61 74 6f 72 5d 2e 77 69 64 74 68 28 29 3b 65 6c 65 6d 65 6e 74 57 69 64 74 68 3d 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 77 69 64 74 68 28 29 3b 77 68 69 6c 65 28 Data Ascii: sWidth,elementWidth;if(settings.loop){maximum=this._clones.length/2+this._items.length-1}else if(settings.autoWidth\|\|settings.merge){iterator=this._items.length;reciprocalItemsWidth=this._items[--iterator].width();elementWidth=this.$element.width();while(
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 74 68 69 73 2e 72 65 67 69 73 74 65 72 28 7b 74 79 70 65 3a 4f 77 6c 2e 54 79 70 65 2e 45 76 65 6e 74 2c 6e 61 6d 65 3a 6e 61 6d 65 7d 29 3b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 74 72 69 67 67 65 72 28 65 76 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 73 65 74 74 69 6e 67 73 26 26 74 79 70 65 6f 66 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 5b 68 61 6e 64 6c 65 72 5d 3d 3d 3d 27 66 75 6e 63 74 69 6f 6e 27 29 7b 74 68 69 73 2e 73 65 74 74 69 6e 67 73 5b 68 61 6e 64 6c 65 72 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 65 76 65 6e 74 29 7d 7d 0a 72 65 74 75 72 6e 20 65 76 65 6e 74 7d 3b 4f 77 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 24 2e 65 61 63 68 28 5b 6e 61 6d 65 5d 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e Data Ascii: this.register({type:Owl.Type.Event,name:name});this.$element.trigger(event);if(this.settings&&typeof this.settings[handler]==='function'){this.settings[handler].call(this,event)}}return event};Owl.prototype.enter=function(name){$.each([name].concat(this.
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 61 75 74 6f 48 65 69 67 68 74 43 6c 61 73 73 29 7d 3b 41 75 74 6f 48 65 69 67 68 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 6e 64 6c 65 72 2c 70 72 6f 70 65 72 74 79 3b 66 6f 72 28 68 61 6e 64 6c 65 72 20 69 6e 20 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 29 7b 74 68 69 73 2e 5f 63 6f 72 65 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 68 61 6e 64 6c 65 72 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 72 73 5b 68 61 6e 64 6c 65 72 5d 29 7d 0a 66 6f 72 28 70 72 6f 70 65 72 74 79 20 69 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 74 68 69 73 29 29 7b 74 79 70 65 6f 66 20 74 68 69 73 5b 70 72 6f 70 65 72 74 79 5d 21 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 28 74 Data Ascii: autoHeightClass)};AutoHeight.prototype.destroy=function(){var handler,property;for(handler in this._handlers){this._core.$element.off(handler,this._handlers[handler])}for(property in Object.getOwnPropertyNames(this)){typeof this[property]!='function'&&(t
2025-03-25 10:11:48 UTC	8000	IN	Data Raw: 64 6c 65 72 2c 70 72 6f 70 65 72 74 79 3b 66 6f 72 28 68 61 6e 64 6c 65 72 20 69 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 29 7b 74 68 69 73 2e 63 6f 72 65 2e 24 65 6c 65 6d 65 6e 74 2e 6f 66 66 28 68 61 6e 64 6c 65 72 2c 74 68 69 73 2e 68 61 6e 64 6c 65 72 73 5b 68 61 6e 64 6c 65 72 5d 29 7d 0a 66 6f 72 28 70 72 6f 70 65 72 74 79 20 69 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 74 68 69 73 29 29 7b 74 79 70 65 6f 66 20 74 68 69 73 5b 70 72 6f 70 65 72 74 79 5d 21 3d 27 66 75 6e 63 74 69 6f 6e 27 26 26 28 74 68 69 73 5b 70 72 6f 70 65 72 74 79 5d 3d 6e 75 6c 6c 29 7d 7d 3b 24 2e 66 6e 2e 6f 77 6c 43 61 72 6f 75 73 65 6c 2e 43 6f 6e 73 74 72 75 63 74 6f 72 2e 50 6c 75 67 69 6e 73 2e 41 6e 69 6d 61 74 65 3d 41 Data Ascii: dler,property;for(handler in this.handlers){this.core.$element.off(handler,this.handlers[handler])}for(property in Object.getOwnPropertyNames(this)){typeof this[property]!='function'&&(this[property]=null)}};$.fn.owlCarousel.Constructor.Plugins.Animate=A
2025-03-25 10:11:48 UTC	5464	IN	Data Raw: 6e 67 74 68 3b 69 66 28 73 65 74 74 69 6e 67 73 2e 64 6f 74 73 44 61 74 61 26 26 64 69 66 66 65 72 65 6e 63 65 21 3d 3d 30 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 68 74 6d 6c 28 74 68 69 73 2e 5f 74 65 6d 70 6c 61 74 65 73 2e 6a 6f 69 6e 28 27 27 29 29 7d 65 6c 73 65 20 69 66 28 64 69 66 66 65 72 65 6e 63 65 3e 30 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 61 70 70 65 6e 64 28 6e 65 77 20 41 72 72 61 79 28 64 69 66 66 65 72 65 6e 63 65 2b 31 29 2e 6a 6f 69 6e 28 74 68 69 73 2e 5f 74 65 6d 70 6c 61 74 65 73 5b 30 5d 29 29 7d 65 6c 73 65 20 69 66 28 64 69 66 66 65 72 65 6e 63 65 3c 30 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 72 6f 6c 73 2e 24 61 62 73 6f 6c 75 74 65 2e 63 68 69 6c 64 Data Ascii: ngth;if(settings.dotsData&&difference!==0){this._controls.$absolute.html(this._templates.join(''))}else if(difference>0){this._controls.$absolute.append(new Array(difference+1).join(this._templates[0]))}else if(difference<0){this._controls.$absolute.child

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:49 UTC	772	OUT	GET /wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive Origin: https://kangelaestate.co.mz sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://kangelaestate.co.mz/wp-content/cache/min/1/wp-content/plugins/seedprod-coming-soon-pro-5/public/fontawesome/css/all.min.css?ver=1742156475 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:49 UTC	305	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:49 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 17:46:26 GMT Accept-Ranges: bytes Content-Length: 157192 Cache-Control: max-age=10368000 Expires: Wed, 23 Jul 2025 10:11:49 GMT Vary: Accept-Encoding Connection: close Content-Type: font/woff2
2025-03-25 10:11:49 UTC	7887	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 66 08 00 0a 00 00 00 06 29 11 00 02 65 bc 03 06 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 36 02 24 04 20 06 60 03 ab 50 00 81 91 66 ca 96 df 20 cb ab 54 05 87 6d 07 20 25 88 14 93 94 01 4c 98 1e 00 00 aa f9 79 18 91 a2 d9 c3 53 41 f4 a4 f5 e2 01 50 55 55 55 55 35 29 21 e0 31 db 76 00 aa aa 2a f8 d1 4f 7e f6 8b 5f fd e6 77 7f f8 d3 5f fe e6 ef fe e1 9f fe e5 df fe e3 bf fe e7 ff fe 53 60 30 ee fe 81 30 2d db 71 b9 3d 5e 9f df f0 ef ff 7e 9f fb 64 88 de 94 f0 96 85 e7 8c 2a 2b 94 ad ea f2 65 99 82 1b 27 aa 58 65 d5 7e 61 aa 2b 14 e0 fb 14 0b 6d e9 48 77 6f 00 94 5e 7f b3 76 c2 1d 42 05 cc 0e 91 42 3d 02 b4 4e 97 32 35 00 58 18 57 e1 44 f0 09 29 9d 49 16 ac ea 13 16 e9 aa 39 3d 01 ae e6 c1 36 0d 7a b6 Data Ascii: wOF2f)e6$ `Pf Tm %LySAPUUUU5)!1vO~_w_S`00-q=^~d+e'Xe~a+mHwo^vBB=N25XWD)I9=6z
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 3a d2 5f c4 57 c4 8f e3 bf 6d 44 10 bf 92 2d 45 fc 06 f2 e5 88 df 91 9d 4d fc e1 61 64 76 2b f1 27 f1 3f d9 f2 34 68 7a cf 81 f3 a6 0f 11 f9 76 34 7d 69 fa 93 ad 47 33 40 05 d9 26 34 03 69 06 cd 6f bb 34 43 68 86 92 6d 4c 33 0c c9 f7 a6 19 21 a9 a1 19 19 91 7e a6 19 43 33 81 6c 53 9a 89 92 74 3d cd a4 88 6c 2b 9a 29 34 33 90 6d 4d 33 a3 22 d2 df 34 33 d1 b4 c8 b6 a3 99 55 62 04 cd 6c 92 ed 44 33 fb 75 f7 68 d0 c3 66 0e 9a b9 c9 76 a6 87 e4 59 c9 73 91 b6 27 cf 43 9e 9f b4 2b 79 21 f2 c2 e3 ef 2e 79 51 f2 d2 a4 bd c9 cb 2c 25 d3 81 e4 65 c9 2b 93 0e 22 af 4a 5e 93 74 24 79 2d 15 08 f2 da e4 f5 e6 ed bb e4 0d c8 1b b7 f3 1e e6 4d c9 5b 91 4e 23 ef 45 de 97 74 0e f9 70 f2 11 a4 0b c8 47 91 8f 9d cb e5 f9 64 23 b1 1e f9 d4 88 58 97 7c 1a f9 0c d2 65 e4 b3 24 Data Ascii: :_WmD-EMadv+'?4hzv4}iG3@&4io4ChmL3!~C3lSt=l+)43mM3"43UblD3uhfvYs'C+y!.yQ,%e+"J^t$y-M[N#EtpGd#X\|e$
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: fd 8c 42 84 14 84 76 b6 f1 08 c6 68 16 ad a2 fd e8 04 ba 02 dd 8c ee 41 4f 66 74 fa ac 24 07 49 a5 5c 9a 97 80 fc 4c 33 47 dc d4 4b fa 59 d0 9a dc c3 0f bc a4 13 05 3d af 57 d6 f1 dd 84 4c 3a f1 92 e3 5e cf bb df e2 07 90 13 8f 7a f9 08 89 8a e7 56 b3 7e da 6d 5b 7b 58 a4 de 98 9f 6f d4 c9 f7 c2 79 9d 53 80 5e 86 3c 34 c0 32 c0 18 2a 0a 18 06 28 ca 00 0c 03 0c 6b d3 00 30 0c 00 63 73 72 17 03 8a 33 8b 25 df 2f 2d 3e 7a 16 e1 ba 60 0c 3a 77 77 90 cb 75 98 ab 54 01 aa 95 b9 05 a2 b3 6d f2 d6 8d c7 29 7b d6 80 11 bc d1 00 30 de 08 ce e3 8f 3f 6e 00 18 cf 32 fa 0c 18 13 03 26 c6 cd c9 a4 b8 0b 18 c5 16 c4 33 33 31 7c c4 9b fb bb 75 4e 29 22 3b c5 ce cb f8 cd f0 4d f4 51 f4 69 f4 75 f4 1d b8 01 36 e1 71 84 a0 43 08 5a 41 7c 98 d3 08 82 a4 e4 cc b9 e5 6e 22 7b Data Ascii: BvhAOft$I\L3GKY=WL:^zV~m[{XoyS^<42*(k0csr3%/->z`:wwuTm){0?n2&331\|uN)";MQiu6qCZA\|n"{
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: d9 1c cc 92 88 f9 22 58 af 97 02 96 dd 56 f3 53 83 45 ea 49 54 f5 d4 5e 36 0b 63 d3 ac 6a a8 d6 6e 77 7c ca b4 62 6e cb e0 53 b7 59 68 16 21 a9 d9 84 74 c6 7a 49 93 5a 35 ed 34 9b 4d 4b d4 f8 8e 02 29 05 35 4d 8a 11 8c 0a 3d 6d 8d 35 43 73 b9 af d3 34 0a 1d 47 35 e5 b5 a8 61 8a b6 9d 9b 28 6f eb 92 72 59 e7 67 c4 a0 53 9a 3f 86 8f ae e3 25 6d 93 87 8c 3a f5 94 b5 64 7a c0 29 bd 4d 71 ae 32 2a 07 bb a3 66 2b 07 5b 9f 69 6c cc d8 63 2c e6 ce 24 2b 07 f3 4f a7 1d 3d ff 04 ed 46 47 d0 e0 98 33 21 29 72 74 c6 3f 87 e2 2a 96 2b 2c 52 1d 20 b7 4f 2c 13 99 4c 20 95 e4 c8 c2 22 9e 50 69 95 08 07 0b d5 b9 3d 94 f2 10 4f 69 ca af a2 a5 72 0b ad 0d ff 7d ab f5 74 f5 18 a7 f4 2a 5a a2 aa aa 33 75 56 8b 38 a5 6f 81 53 96 fc f2 aa ab ae 6a 95 4b 94 0f 02 2c ad b1 1f 9d Data Ascii: "XVSEIT^6cjnw\|bnSYh!tzIZ54MK)5M=m5Cs4G5a(orYgS?%m:dz)Mq2f+[ilc,$+O=FG3!)rt?+,R O,L "Pi=Oir}t*Z3uV8oSjK,
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 4a 2b 99 32 70 00 02 c9 a9 19 00 a0 a1 ad ec 51 d8 95 25 d1 e9 0f 34 e1 ee 60 a2 e4 07 ad 7c df 0f e6 3a 11 19 6f c4 cf 94 b4 16 a8 56 67 9f 99 f3 24 23 5b 5a b5 ab 91 d2 3c da 6f 4f 9f 69 bd 1d d4 21 71 fc 07 12 4b 27 5d 4e 03 21 71 e7 17 b8 a6 e4 34 ea 31 f0 c4 4f f4 1c 48 15 91 bc 39 2d 04 24 c9 71 50 b5 d1 7b 9c 44 e6 48 ce b2 a6 08 8d d8 bc 4e 27 6a 9b ae a0 36 44 bf 6a 94 07 2b cf 58 3e 79 13 f6 22 17 95 85 d2 8a 45 32 85 07 7a 83 c1 62 52 8e a3 e7 9a 5c 5d b6 d2 c2 11 c2 e2 a3 0d 76 90 54 4c b6 9f 9a ad 56 41 6e 51 b8 e9 e0 85 49 0f 94 3e 17 9c 76 9a cd e6 0c 30 6e 82 f4 23 62 60 9a 22 11 08 0b a5 ad 24 e7 cf be 25 c9 73 a2 30 86 23 dc e2 2a 8b a9 20 30 44 19 1e 12 88 23 9e ad d0 5c 30 c6 fd d6 91 0a 3a 97 3d 57 5b 11 76 40 28 48 7e 26 4e 2f ee 44 Data Ascii: J+2pQ%4`\|:oVg$#[Z<oOi!qK']N!q41OH9-$qP{DHN'j6Dj+X>y"E2zbR\]vTLVAnQI>v0n#b`"$%s0#* 0D#\0:=W[v@(H~&N/D
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: b7 44 06 54 bd d2 c4 eb 2d 90 5c 3d 88 d3 74 ec 6d 8b 6f dd dc 46 02 2f 76 64 0d 5d 87 21 c7 f1 c9 30 6b 25 51 62 cd fa 34 81 dc 39 9d 26 49 a2 89 68 a3 7c 9a c8 25 46 0a 5d 31 22 e2 68 96 63 9a 32 5c 03 7f f6 d5 9a 53 ca ff e8 1d ef 78 07 14 af 70 4a 43 5f 21 e6 b6 e7 f5 5e 1a 9a 1c f4 bc 6f d1 18 19 50 4c 20 1f 73 4a 67 ee bb ef be e2 63 94 f2 09 b8 1e 9f 98 e6 29 71 66 e0 ae b4 41 6a 37 4a 77 3e b9 11 bd d5 47 a3 cc f6 14 e3 64 22 f5 cc 4a e0 cf 65 6a 2b 69 e0 d9 ec e3 6d b5 43 fc f3 02 7e 37 16 51 bc ad ce cf 64 cf 4b 56 3c ad 4f 15 a2 d5 c6 82 86 07 c5 e1 ee 9a 5f 63 b7 9a f3 e5 00 61 eb 81 b2 ac 87 d3 27 d7 f7 60 68 b7 0f ba 3e e4 09 b9 ac 91 fa d3 74 cc aa 65 41 b9 dc f6 2c c6 98 2c 4b 22 ab 47 7b e7 fe 5b 07 8c a7 1a c1 5b bf 04 2b 0a 00 1b 3a ce Data Ascii: DT-\=tmoF/vd]!0k%Qb49&Ih\|%F]1"hc2\SxpJC_!^oPL sJgc)qfAj7Jw>Gd"Jej+imC~7QdKV<O_ca'`h>teA,,K"G{[[+:
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 9c 1a 7e 36 85 ae ef a8 87 de 3a 18 9f b6 93 d4 dc 10 87 c3 4f 78 6c ef 2c 15 bb 9e d9 49 69 f1 ca ca e5 76 f9 f7 94 37 a2 37 7d cd 10 db 76 e5 9b a4 4c 0d 1c 86 a0 b3 94 5c ab 22 c2 59 ea 31 fe 8e ba e7 ad 23 71 71 57 be 25 e6 f2 00 b9 77 45 2b 94 fd 91 46 af 1f 97 b7 b7 bc 65 c6 d3 5d f9 4e 31 3d b0 ee dd d1 14 33 85 d9 fd 91 a6 ef f2 e0 cc af fc 80 93 9d a1 bd 1b a8 bc 0c 18 f3 ae cd c9 b3 cd a0 03 e8 2a 74 2f 42 06 22 31 31 cd 76 35 f7 ef e9 91 c5 a2 25 7b 20 e8 26 b9 c7 e8 da de 24 10 5b 2f 03 5c 57 2a 95 04 22 8b a5 55 82 b1 d4 a1 20 49 64 79 99 48 12 ed 48 02 26 ab d7 51 59 58 d1 92 ed 8b 08 73 bf cb a6 7e eb c0 db bb dd ae 2c 77 15 90 89 d4 ee 11 51 14 ca 25 41 14 c9 6a 5b 92 09 28 7f 18 91 21 e4 25 2b ec ce 4a fa 47 e0 2b 33 53 19 8e a5 d5 36 83 Data Ascii: ~6:Oxl,Iiv77}vL\"Y1#qqW%wE+Fe]N1=3t/B"11v5%{ &$[/\W"U IdyHH&QYXs~,wQ%Aj[(!%+JG+3S6
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 6a 10 e3 94 81 a1 d3 2b 81 ef e9 42 63 8b 0a a3 01 7e 74 2f bd 8d c7 96 83 61 de 53 0c 29 6d cf 52 2e 26 78 28 8b be e7 f2 00 9b 9f 74 cc 29 1d d9 71 6e c6 88 ed 4c e0 ff 61 c3 a9 5f df 92 a7 9a 5c 3b a0 f5 c0 00 45 2d 4e fa 4c d4 12 b1 3a 76 bb 89 a7 ca 28 53 50 40 2a b9 62 a6 82 fb 4c ea cd 13 79 f8 d2 07 3f 78 a4 ef 5a 38 2b aa 0b 18 2f a8 22 a1 92 ca 54 be e6 96 98 68 b8 be ef 71 91 95 dc 35 ae ea 54 a2 64 ca 9f 9b ea e7 55 45 4a ce 2e fa 8d fc be 06 65 ae ce 30 5d 67 33 2a b7 2d c5 34 34 d1 36 e9 6e 2e 88 a2 c0 77 53 d3 16 35 c3 54 2c cb 50 63 fd f5 5e 75 d7 4f ee 52 07 ec e7 c5 c4 5c 2c 5a 07 af 40 f8 8a 3b e4 96 91 a8 95 15 a2 57 1d 32 5e ec 07 cb 4c f1 e5 a8 94 f8 04 72 71 4a 65 e6 d7 0d 18 37 4b 09 5c 4c 02 62 d0 f4 82 a3 a2 68 32 08 83 e8 b2 06 Data Ascii: j+Bc~t/aS)mR.&x(t)qnLa_\;E-NL:v(SP@bLy?xZ8+/"Thq5TdUEJ.e0]g3-446n.wS5T,Pc^uOR\,Z@;W2^LrqJe7K\Lbh2
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 7a 3b ed 22 ba 7c f5 5e 22 4c 36 00 58 3a 89 34 e3 3b ce f0 02 1d bb 65 4e 31 93 a3 ae 96 f4 05 f2 99 40 25 a9 11 c4 0c 1c 4a 19 25 13 6d d4 ce 9c e1 7d 94 5e a3 c9 fd 52 e5 87 42 25 c3 5b 0c 3b 09 00 54 73 18 a3 d4 a7 fd 89 25 d6 ee 09 6f 60 aa 88 8a 61 cc 5a 16 03 a0 a8 80 14 b9 fb e5 3e 47 ea a1 86 dc 76 4d d9 32 3d 9b e3 c5 c5 43 e7 1c 58 d6 da f7 5d 74 92 7c 83 3c fa 78 6a 6b 0d d7 85 f2 f5 61 f5 8e 66 a1 50 17 b3 3f 76 c3 f4 ea e0 4f 32 bc 40 67 19 2f d0 ae fc 0c 2f 26 a3 0e 3d 4a de 1b 9d 88 c8 29 2b 2b 2c 5c d1 e2 fd 5f 27 ad f3 23 96 f8 f3 bc ff c4 ab a4 ce 24 a5 bd 10 2c 53 57 97 8d f1 be ce f5 e6 42 54 43 2f 58 44 7a 5e cf 4f 57 32 88 96 23 d2 0b a1 28 13 51 47 72 b9 8b 70 c4 5a 3f 93 84 79 97 9d bd 84 67 ed 2e fc d4 32 94 6d 14 a8 dd c7 f5 b3 Data Ascii: z;"\|^"L6X:4;eN1@%J%m}^RB%[;Ts%o`aZ>GvM2=CX]t\|<xjkafP?vO2@g//&=J)++,\_'#$,SWBTC/XDz^OW2#(QGrpZ?yg.2m
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: c4 7e fc 86 09 62 93 ac ae 9c 9e 45 6e 95 b9 f9 1e e0 05 a0 50 5c f0 f1 e5 9f 81 d2 ee aa b7 f9 18 ca e5 95 95 43 3e c6 fe e9 95 d5 bc a9 3e cf fc dc 7e 1f 63 7f a1 58 00 ec 3f b8 1f 1e df ab 7b 28 5e a4 b7 e8 d6 bf 45 4c a2 08 dc 81 d7 66 6c 04 bf d0 5f 36 0c d3 d8 d6 f5 6d c3 6c 00 af fa 62 ca 2f 72 4a e8 59 6a 9a ea 59 42 e4 e4 10 9e 2a 59 44 fb e6 4c 99 d4 52 32 ae cb 7b 9f 01 46 25 ce 33 b2 56 1b 84 32 d5 5e cc ca 0e 51 73 8a c6 d3 11 52 81 8f e0 59 30 2f 62 5c e4 18 f7 e3 2d 6d 9a 0d 06 60 01 5a 23 99 4d 2d fe 5c d1 51 43 da f8 99 5d ff 04 ae e8 95 8a ae f0 8f 32 b0 f4 c8 d6 78 3c 3d 38 8c 25 07 43 04 16 29 18 3e d3 3e ae b2 81 83 03 12 2b 8b 93 cc fd 67 b7 43 17 9d 81 0c 33 f7 1d a8 1d d3 14 d0 fc 42 d8 d1 43 28 81 d9 80 d6 c8 a3 27 2b ab 93 e1 c1 Data Ascii: ~bEnP\C>>~cX?{(^ELfl_6mlb/rJYjYB*YDLR2{F%3V2^QsRY0/b\-m`Z#M-\QC]2x<=8%C)>>+gC3BC('+

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:49 UTC	666	OUT	GET /wp-content/uploads/2025/03/OneDrive-forBiz_rgb_EN_Blue-1400x700.png HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:49 UTC	311	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:49 GMT Server: Apache Last-Modified: Sun, 16 Mar 2025 19:37:48 GMT Accept-Ranges: bytes Content-Length: 56475 Cache-Control: max-age=10368000, public Expires: Wed, 23 Jul 2025 10:11:49 GMT Vary: Accept-Encoding Connection: close Content-Type: image/png
2025-03-25 10:11:49 UTC	7881	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 78 00 00 02 bc 08 06 00 00 00 55 d5 d7 1b 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec dd 7f 90 1d e5 79 e0 fb 6f 66 27 53 d3 73 15 95 56 ab e8 2a 5a 5d 45 57 57 96 65 59 ab 68 89 42 08 21 04 13 07 e3 0e 6e 63 62 13 20 18 e3 1f d8 c1 8e ed 78 1d 2f 71 28 96 22 2c e1 72 29 42 88 63 63 87 f8 f7 af 38 26 c6 ee d8 1d 8c 09 c6 98 10 42 14 85 60 45 51 64 45 ab d2 d5 b2 2a 45 d1 55 b4 53 3a aa b9 53 73 ef 1f cf 3b d6 20 eb c7 cc e8 f4 e9 f3 e3 fb a9 3a 35 92 d0 9c 7e c5 f4 e9 ee f7 79 9f f7 79 40 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 92 24 49 Data Ascii: PNGIHDRxUpHYs+ IDATxyof'SsVZ]EWWeYhB!ncb x/q(",r)Bcc8&B`EQdEEUS:Ss; :5~yy@$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I$I
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: fa 76 c2 18 70 67 6a ce 27 49 52 57 6a 55 c5 53 c0 eb 88 c4 ac e7 88 79 60 53 2e 20 16 d6 57 a6 4c 63 49 52 17 18 02 de da f4 20 34 2f 07 80 cf 01 37 a6 1b fe 59 cb f2 92 2c 2f 17 66 79 b9 99 d8 2e 7b 27 f0 e9 f4 f5 12 8e d7 ce ed 55 23 44 49 89 bb 88 40 ef ed c0 6b b3 bc dc 90 4a 4f 9c b5 56 55 1c 22 b2 78 6f 23 4a 65 74 ab 25 b8 b0 a3 1e 97 9a aa 5d 01 5c 4a 67 4b a3 ec 05 3e 04 dc d1 aa 8a 83 1d 3c 6e df 9b 11 e4 7d b4 83 87 5d 03 dc 92 9a db 48 92 d4 95 5a 55 71 b4 55 15 1f 03 de 4c f4 d2 68 ea 19 64 84 e3 bb 25 bd 77 4a 52 97 18 22 b6 6b ab b7 ec 22 32 69 df db aa 8a b6 64 8a 66 79 b9 08 28 80 f7 11 5b 64 ef 25 6a 3d ad a4 ff ca 77 0c 11 ff ae 37 01 1f 20 9a d2 fd 6a 96 97 9b da f1 e6 29 93 fa 63 44 a0 f7 e9 76 bc 67 0d 96 00 2f 6d 7a 10 d2 7c a5 d2 Data Ascii: vpgj'IRWjUSy`S. WLcIR 4/7Y,/fy.{'U#DI@kJOVU"xo#Jet%]\JgK><n}]HZUqULhd%wJR"k"2idfy([d%j=w7 j)cDvg/mz\|
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 13 47 dd 07 dc 4a 3c 97 95 b3 09 ee 82 01 de 76 7a 92 b4 3a 36 07 cb 88 da 70 92 66 67 88 a8 1f f5 8e 2c 2f eb ea c4 a9 ce 5a 42 7d 8b 5c e3 c0 3f d5 f4 de ea 01 a9 de e6 74 a3 a5 ba f4 4b 80 77 04 78 0d 91 d1 33 df e7 c3 4f 10 01 bb c7 bb 30 6b 75 0f ff 3f 7b f7 1f dd c7 5d df 7b fe 59 ad 56 ab d1 ea 78 bd 5a d5 57 eb ba ae ea 6b 8c eb 1a d7 b8 c6 84 d4 0d 21 a4 fc 18 c2 24 4d 03 81 f0 bb 94 5f e5 52 6e 9a 4d 39 9c 6c 36 27 9b 93 9b 9b a5 5c 0a 34 0d 01 42 f8 15 20 89 09 61 08 93 60 42 30 26 04 d7 75 5d d7 b8 ae 6b 84 af ae ae ea 2b 7c 7d 75 b4 5a 1d 8d 56 ab a3 b3 7f bc e7 8b 9d d4 76 f4 fd 6a de 33 f3 9d ef eb 71 ce f7 c8 04 eb 33 63 e9 fb 9d f9 cc fb f3 fe bc df f0 71 6c b2 5c 54 90 77 00 ab c1 57 f9 f7 47 10 c6 c3 58 50 a1 88 6c ae 39 e0 13 c0 eb a8 Data Ascii: GJ<vz:6pfg,/ZB}\?tKwx3O0ku?{]{YVxZWk!$M_RnM9l6'\4B a`B0&u]k+\|}uZVvj3q3cql\TwWGXPl9
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 3b 08 97 c4 3b c0 7b 02 18 6d e1 82 be 13 df 1b 8d 88 88 87 55 c0 07 b1 20 af 1a af 35 ef 10 cd ef f8 68 56 48 fe db a6 a4 5a ae c0 6f ab e9 34 f0 d7 69 12 cd 39 8d 2f 92 87 39 fc ea bf 69 07 84 48 7d 74 03 ef c7 77 d1 e6 bb a8 66 bd 74 96 11 e0 69 87 71 d7 e2 5b 2b 9b 20 8c b7 90 6f 10 79 1a f8 7a 9a 44 55 aa 21 bf 80 d5 ca f5 30 40 c9 3d c4 bc 03 bc 47 68 ad d6 c6 cb 29 a6 7c 84 88 48 de 06 80 0f 03 af 50 29 80 a6 cd 60 85 e9 3d 0d 01 57 04 61 dc eb 7c 1c 29 41 10 c6 2b 81 17 e1 37 b9 9a c2 ea ab 89 88 88 b4 bb 08 df a4 aa e3 d8 bc 4e e5 19 a4 63 64 c9 8d 5f 72 18 7a 25 f0 c2 20 8c 3d 03 88 6f 22 df 85 dc 53 58 c9 8a 2a 59 c4 6f 11 bc 8b 92 e3 98 9e 07 5f c4 9a 90 8c 37 f3 4d 59 5d af ab 7d 4e 49 44 a4 10 7d c0 bd c0 0e d5 2a 6c ca 2c f0 00 f9 6f 6b 7a Data Ascii: ;;{mU 5hVHZo4i9/9iH}twftiq[+ oyzDU!0@=Gh)\|HP)`=Wa\|)A+7Ncd_rz% =o"SXYo_7MY]}NID}l,okz
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 5b 11 7f 80 05 7a 2f c7 9a 8b 88 d9 87 35 8a fe 2e 70 50 d7 ba 8e d4 68 94 76 18 f8 1b ec f3 32 02 4c a8 1f 83 88 2c c1 2c b6 c3 ed 1a 7c 03 84 4f 51 7c bd df 5a 4b 93 68 3a 08 e3 cf 61 0b 79 af c1 7e 87 9b 3c 8f 59 56 80 74 2d f0 ae 20 8c 0f a7 49 34 dd cc 37 66 3f a4 3b b0 52 0d 9b 5d ce 4e 44 24 7f 63 c0 37 34 99 af 8f b3 02 bd 47 b1 49 d1 26 ac 74 43 88 d5 8b 97 67 1a c7 9a c6 7c 1f cb 66 1f 53 c6 92 48 7b cb ca a9 9c 0a c2 38 c6 1e 60 2e c5 32 55 2e a6 80 4c 95 8a 9a c7 82 79 f7 03 7b 80 51 35 c8 ea 28 33 58 90 e4 08 f0 13 ec 7e 37 81 d5 b6 3c a5 5d 5c 22 d2 a4 05 ec 9e 72 04 4b 2a f1 f2 10 6a a0 9a bb 34 89 16 b2 c5 f0 e3 d8 ae c5 2b b1 b2 0d 2e 3d 0c ca 0a f0 f6 62 13 c0 2b 80 af 34 fb cd 69 12 8d 06 61 7c 3d b6 92 a1 6d b1 22 52 75 73 58 00 f0 e9 Data Ascii: [z/5.pPhv2L,,\|OQ\|ZKh:ay~<YVt- I47f?;R]ND$c74GI&tCg\|fSH{8`.2U.Ly{Q5(3X~7<]\"rK*j4+.=b+4ia\|=m"RusX
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: bc 1d 1b c0 0e 62 03 c8 56 1c d2 d1 eb 5f e3 fa c4 65 47 81 7d 45 9e 4e b7 e0 75 da ca 1f 34 b3 1c f8 20 cd 07 f6 a7 b1 f7 77 72 d6 bf 37 f4 60 d7 ae f1 cf c6 bf 4b cd f8 2c ef 1b 81 cf 06 36 75 1c f8 78 91 a7 87 c3 7b 25 dd c6 6f ed fe 38 96 a9 18 6b 9e 39 89 4d b0 f7 02 0f 01 cf 15 79 ba af 89 be 2d c5 02 45 bf 05 5c 88 dd 53 e7 61 01 24 dd f7 4a e6 df 9f 2f 72 ee 99 79 d3 d8 67 e4 38 16 d0 fd 3e b0 0d d8 5b e4 e9 d4 99 7e 71 d6 6b f7 60 cf da 4d c0 a5 58 a0 af 55 e3 95 01 e0 de c4 65 ef 9c 6b ff da c1 5f 83 0d c0 7d c4 1f 6b 4e 63 63 cc 71 ac b6 fb 0f b0 ef f1 9e 73 ec e3 42 ec de f2 4e ec 3d 5a 40 dc c0 68 2f 70 31 70 53 e2 b2 2d 45 9e 4e 46 6c fb 54 e6 03 f7 10 f7 6f 18 c7 02 e7 2f 01 df c6 ae f3 f1 73 69 c0 27 16 ac c6 76 02 bd c9 ff 73 88 d6 7d 27 Data Ascii: bV_eG}ENu4 wr7`K,6ux{%o8k9My-E\Sa$J/ryg8>[~qk`MXUek_}kNccqsBN=Z@h/p1pS-ENFlTo/si'vs}'
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 7a b0 72 0d d7 27 2e 5b 90 b8 2c 6a c3 22 22 22 d2 3e d3 84 9d 6c dc 03 ac 48 5c d6 ed 75 f4 d7 07 fe fe 28 71 0e 21 11 a9 b3 69 54 a6 44 6a c2 67 a9 8d 15 79 fa 39 e0 37 b1 c9 f8 5e 6c e1 b4 55 9f e3 5e 60 1d f0 99 c4 65 ca 66 94 5a f0 bb 93 42 c7 38 4b 69 6f 8d 52 89 c4 07 2f c7 8b 3c 7d b9 c8 d3 0f 02 6f 02 1e c1 12 4c 5a f9 cc ef c3 b2 62 57 b4 a2 fc 40 2b 14 79 fa d3 d2 40 45 9e de 04 bc 0e f8 63 6c 11 31 64 be 76 36 3d c0 c7 b0 cc e7 68 d7 aa 16 17 5d 44 44 a4 83 1c 07 0e 04 b6 d1 8b ca 34 84 4e 3a c6 50 80 57 a4 07 cd 07 ea a0 bf ec 0e 54 cd ac 40 ef 3b 81 2f 63 81 de 56 4d c6 07 b0 c3 de 36 b4 a8 7d 91 56 d8 4f 58 96 7b 1f 36 de 94 9a 2b f2 74 17 f0 41 e0 43 58 69 82 56 ee 80 18 c2 ca e9 d4 f2 f0 d5 22 4f 0f 03 9f 01 de 8a 05 c5 0f d2 da 40 ef cd Data Ascii: zr'.[,j""">lH\u(q!iTDjgy97^lU^`efZB8KioR/<}oLZbW@+y@Ecl1dv6=h]DD4N:PWT@;/cVM6}VOX{6+tACXiV"O@
2025-03-25 10:11:49 UTC	594	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:49 UTC	628	OUT	GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:49 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:49 GMT Server: Apache Last-Modified: Sun, 03 Nov 2024 07:31:10 GMT Accept-Ranges: bytes Content-Length: 24109 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:49 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:49 UTC	7861	IN	Data Raw: 2f 2a 21 20 53 6d 61 72 74 4d 65 6e 75 73 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 32 2e 31 20 2d 20 4e 6f 76 65 6d 62 65 72 20 33 2c 20 32 30 32 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 6d 65 6e 75 73 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 56 61 73 69 6c 20 44 69 6e 6b 6f 76 2c 20 56 61 64 69 6b 6f 6d 20 57 65 62 20 4c 74 64 2e 20 68 74 74 70 3a 2f 2f 76 61 64 69 6b 6f 6d 2e 63 6f 6d 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! SmartMenus jQuery Plugin - v1.2.1 - November 3, 2022 http://www.smartmenus.org/ * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 6f 72 74 28 29 7d 2c 67 65 74 57 69 64 74 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 4f 66 66 73 65 74 28 61 29 7d 2c 68 61 6e 64 6c 65 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 69 73 43 53 53 4f 6e 28 29 7d 2c 68 61 6e 64 6c 65 49 74 65 6d 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 45 76 65 6e 74 73 28 29 26 26 21 74 68 69 73 2e 69 73 4c 69 6e 6b 49 6e 4d 65 67 61 4d 65 6e 75 28 61 29 7d 2c 69 73 43 6f 6c 6c 61 70 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 61 74 69 63 22 3d 3d 74 68 69 73 2e 24 66 69 72 73 74 53 75 62 Data Ascii: ort()},getWidth:function(a){return this.getOffset(a)},handleEvents:function(){return!this.disabled&&this.isCSSOn()},handleItemEvents:function(a){return this.handleEvents()&&!this.isLinkInMegaMenu(a)},isCollapsible:function(){return"static"==this.$firstSub
2025-03-25 10:11:49 UTC	8000	IN	Data Raw: 28 64 28 45 2c 44 29 29 7d 7d 7d 62 2e 63 73 73 28 7b 74 6f 70 3a 22 61 75 74 6f 22 2c 6c 65 66 74 3a 22 30 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 63 2c 6d 61 72 67 69 6e 54 6f 70 3a 65 2d 71 7d 29 7d 2c 6d 65 6e 75 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 61 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 22 29 2c 67 3d 61 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2c 68 3d 65 2e 75 70 3f 65 2e 75 70 45 6e 64 3a 65 2e 64 6f 77 6e 45 6e 64 3b 69 66 28 21 62 26 26 65 2e 6d 6f 6d 65 6e 74 75 6d 29 7b 69 66 28 65 2e 6d 6f 6d 65 6e 74 75 6d 2a 3d 2e 39 32 2c 64 3d 65 2e 6d 6f 6d 65 6e 74 75 6d 2c 64 3c 2e 35 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 6d 65 6e 75 53 63 72 Data Ascii: (d(E,D))}}}b.css({top:"auto",left:"0",marginLeft:c,marginTop:e-q})},menuScroll:function(a,b,c){var d,e=a.dataSM("scroll"),g=a.dataSM("scroll-arrows"),h=e.up?e.upEnd:e.downEnd;if(!b&&e.momentum){if(e.momentum*=.92,d=e.momentum,d<.5)return void this.menuScr
2025-03-25 10:11:49 UTC	248	IN	Data Raw: 65 48 69 64 65 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 73 6c 69 64 65 55 70 28 32 30 30 2c 62 29 7d 2c 73 68 6f 77 4f 6e 43 6c 69 63 6b 3a 21 31 2c 68 69 64 65 4f 6e 43 6c 69 63 6b 3a 21 30 2c 6e 6f 4d 6f 75 73 65 4f 76 65 72 3a 21 31 2c 6b 65 65 70 49 6e 56 69 65 77 70 6f 72 74 3a 21 30 2c 6b 65 65 70 48 69 67 68 6c 69 67 68 74 65 64 3a 21 30 2c 6d 61 72 6b 43 75 72 72 65 6e 74 49 74 65 6d 3a 21 31 2c 6d 61 72 6b 43 75 72 72 65 6e 74 54 72 65 65 3a 21 30 2c 72 69 67 68 74 54 6f 4c 65 66 74 53 75 62 4d 65 6e 75 73 3a 21 31 2c 62 6f 74 74 6f 6d 54 6f 54 6f 70 53 75 62 4d 65 6e 75 73 3a 21 31 2c 63 6f 6c 6c 61 70 73 69 62 6c 65 42 65 68 61 76 69 6f 72 3a 22 64 65 66 61 75 6c 74 22 7d 2c 61 7d 29 3b 0a Data Ascii: eHideFunction:function(a,b){a.slideUp(200,b)},showOnClick:!1,hideOnClick:!0,noMouseOver:!1,keepInViewport:!0,keepHighlighted:!0,markCurrentItem:!1,markCurrentTree:!0,rightToLeftSubMenus:!1,bottomToTopSubMenus:!1,collapsibleBehavior:"default"},a});

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:50 UTC	638	OUT	GET /wp-content/cache/min/1/wp-content/plugins/maisonco-core/assets/js/libs/mlpushmenu.js?ver=1741170075 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:50 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:50 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 10:21:15 GMT Accept-Ranges: bytes Content-Length: 6578 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:50 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:50 UTC	6578	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 65 78 74 65 6e 64 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 62 29 7b 69 66 28 62 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 29 7b 61 5b 6b 65 79 5d 3d 62 5b 6b 65 79 5d 7d 7d 0a 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 73 50 61 72 65 6e 74 28 65 2c 69 64 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 6c 3d 65 2e 74 61 72 67 65 74 7c 7c 65 2e 73 72 63 45 6c 65 6d 65 6e 74 7c 7c 65 7c 7c 21 31 3b 77 68 69 6c 65 28 65 6c 26 26 65 6c 2e 69 64 21 3d 69 64 29 7b 65 6c 3d 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 21 31 7d 0a 72 65 74 75 72 6e 28 65 6c 21 3d 3d 21 Data Ascii: (function(window){'use strict';function extend(a,b){for(var key in b){if(b.hasOwnProperty(key)){a[key]=b[key]}}return a}function hasParent(e,id){if(!e)return!1;var el=e.target\|\|e.srcElement\|\|e\|\|!1;while(el&&el.id!=id){el=el.parentNode\|\|!1}return(el!==!

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:50 UTC	582	OUT	GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:50 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:50 GMT Server: Apache Last-Modified: Thu, 14 Nov 2024 06:30:36 GMT Accept-Ranges: bytes Content-Length: 18878 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:50 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:50 UTC	7861	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 2c 65 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 74 29 3a 28 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 6e 7c 7c 73 65 6c 66 2c 72 3d 6e 2e 5f 2c 28 65 3d 6e 2e Data Ascii: /! This file is auto-generated /!function(n,t){var r,e;"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define("underscore",t):(n="undefined"!=typeof globalThis?globalThis:n\|\|self,r=n._,(e=n.
2025-03-25 10:11:50 UTC	8000	IN	Data Raw: 29 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 42 69 6e 64 20 6d 75 73 74 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 29 29 2c 45 3d 6c 6e 28 67 29 3b 66 75 6e 63 74 69 6f 6e 20 42 28 6e 2c 74 2c 72 2c 65 29 7b 69 66 28 65 3d 65 7c 7c 5b 5d 2c 74 7c 7c 30 3d 3d 3d 74 29 7b 69 66 28 74 3c 3d 30 29 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 29 7d 65 6c 73 65 20 74 3d 31 2f 30 3b 66 6f 72 28 76 61 72 20 75 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 30 2c 69 3d 67 28 6e 29 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 5d 3b 69 66 28 45 28 61 29 26 26 28 76 28 61 29 7c 7c 61 6e 28 61 29 29 29 69 66 28 31 3c 74 29 42 28 61 2c 74 2d 31 2c 72 2c 65 29 2c 75 3d 65 2e 6c 65 6e 67 74 68 3b 65 6c Data Ascii: );throw new TypeError("Bind must be called on a function")})),E=ln(g);function B(n,t,r,e){if(e=e\|\|[],t\|\|0===t){if(t<=0)return e.concat(n)}else t=1/0;for(var u=e.length,o=0,i=g(n);o<i;o++){var a=n[o];if(E(a)&&(v(a)\|\|an(a)))if(1<t)B(a,t-1,r,e),u=e.length;el
2025-03-25 10:11:50 UTC	3017	IN	Data Raw: 72 65 74 75 72 6e 20 6f 2e 63 61 63 68 65 3d 7b 7d 2c 6f 7d 2c 64 65 6c 61 79 3a 51 6e 2c 64 65 66 65 72 3a 58 6e 2c 74 68 72 6f 74 74 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 65 2c 75 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 6c 3d 21 31 3d 3d 3d 75 2e 6c 65 61 64 69 6e 67 3f 30 3a 4f 28 29 2c 69 3d 6e 75 6c 6c 2c 63 3d 72 2e 61 70 70 6c 79 28 61 2c 66 29 2c 69 7c 7c 28 61 3d 66 3d 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 76 61 72 20 6e 3d 4f 28 29 2c 74 3d 28 6c 7c 7c 21 31 21 3d 3d 75 2e 6c 65 61 64 69 6e 67 7c 7c 28 6c 3d 6e 29 2c 65 2d 28 6e 2d 6c 29 29 3b 72 65 74 75 72 6e 20 61 3d 74 68 69 73 2c 66 3d 61 72 67 75 6d 65 6e 74 73 2c 74 3c 3d 30 7c 7c 65 3c 74 3f 28 69 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 29 2c 69 3d Data Ascii: return o.cache={},o},delay:Qn,defer:Xn,throttle:function(r,e,u){function o(){l=!1===u.leading?0:O(),i=null,c=r.apply(a,f),i\|\|(a=f=null)}function n(){var n=O(),t=(l\|\|!1!==u.leading\|\|(l=n),e-(n-l));return a=this,f=arguments,t<=0\|\|e<t?(i&&(clearTimeout(i),i=

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:50 UTC	605	OUT	GET /wp-includes/js/wp-util.min.js?ver=0f1096306518dd6bf6820293c7b564a7 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:50 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:50 GMT Server: Apache Last-Modified: Tue, 20 Sep 2022 07:22:10 GMT Accept-Ranges: bytes Content-Length: 1426 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:50 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:50 UTC	1426	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 77 69 6e 64 6f 77 2e 77 70 3d 77 69 6e 64 6f 77 2e 77 70 7c 7c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 3f 7b 7d 3a 5f 77 70 55 74 69 6c 53 65 74 74 69 6e 67 73 3b 77 70 2e 74 65 6d 70 6c 61 74 65 3d 5f 2e 6d 65 6d 6f 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 61 3d 7b 65 76 61 6c 75 61 74 65 3a 2f 3c 23 28 5b 5c 73 5c 53 5d 2b 3f 29 23 3e 2f 67 2c 69 6e 74 65 72 70 6f 6c 61 74 65 3a 2f 5c 7b 5c 7b 5c 7b 28 5b 5c 73 5c 53 5d 2b 3f 29 5c 7d 5c 7d 5c 7d 2f 67 2c 65 73 63 61 70 65 3a 2f 5c 7b 5c 7b 28 5b 5e Data Ascii: /! This file is auto-generated /window.wp=window.wp\|\|{},function(s){var t="undefined"==typeof _wpUtilSettings?{}:_wpUtilSettings;wp.template=_.memoize(function(e){var n,a={evaluate:/<#([\s\S]+?)#>/g,interpolate:/\{\{\{([\s\S]+?)\}\}\}/g,escape:/\{\{([^

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:51 UTC	611	OUT	GET /wp-content/plugins/maisonco-core/assets/js/SmoothScroll.min.js?ver=1.4.8 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:51 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:51 GMT Server: Apache Last-Modified: Wed, 05 Mar 2025 06:46:29 GMT Accept-Ranges: bytes Content-Length: 25450 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:51 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:51 UTC	7861	IN	Data Raw: 2f 2f 0a 2f 2f 20 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 20 66 6f 72 20 77 65 62 73 69 74 65 73 20 76 31 2e 34 2e 39 20 28 42 61 6c 61 7a 73 20 47 61 6c 61 6d 62 6f 73 69 29 0a 2f 2f 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 2e 6e 65 74 2f 0a 2f 2f 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 2f 2f 0a 2f 2f 20 59 6f 75 20 6d 61 79 20 75 73 65 20 69 74 20 69 6e 20 79 6f 75 72 20 74 68 65 6d 65 20 69 66 20 79 6f 75 20 63 72 65 64 69 74 20 6d 65 2e 0a 2f 2f 20 49 74 20 69 73 20 61 6c 73 6f 20 66 72 65 65 20 74 6f 20 75 73 65 20 6f 6e 20 61 6e 79 20 69 6e 64 69 76 69 64 75 61 6c 20 77 65 62 73 69 74 65 2e 0a 2f 2f 0a 2f 2f 20 45 78 Data Ascii: //// SmoothScroll for websites v1.4.9 (Balazs Galambosi)// http://www.smoothscroll.net///// Licensed under the terms of the MIT license.//// You may use it in your theme if you credit me.// It is also free to use on any individual website.//// Ex
2025-03-25 10:11:51 UTC	8000	IN	Data Raw: 28 66 69 6e 69 73 68 65 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 71 75 65 2e 73 70 6c 69 63 65 28 69 2c 20 31 29 3b 20 69 2d 2d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 73 63 72 6f 6c 6c 20 6c 65 66 74 20 61 6e 64 20 74 6f 70 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 73 57 69 6e 64 6f 77 53 63 72 6f 6c 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 42 79 28 73 63 72 6f 6c 6c 58 2c 20 73 63 72 6f 6c 6c 59 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: (finished) { que.splice(i, 1); i--; } } // scroll left and top if (isWindowScroll) { window.scrollBy(scrollX, scrollY); } else {
2025-03-25 10:11:51 UTC	8000	IN	Data Raw: 68 42 65 68 61 76 69 6f 72 46 6f 72 45 6c 65 6d 65 6e 74 20 3d 20 7b 7d 3b 0a 0a 2f 2f 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 63 61 63 68 65 20 3d 20 7b 7d 3b 20 7d 2c 20 31 30 20 2a 20 31 30 30 30 29 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 63 68 65 64 75 6c 65 43 6c 65 61 72 43 61 63 68 65 28 29 20 7b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 63 6c 65 61 72 43 61 63 68 65 54 69 6d 65 72 29 3b 0a 20 20 20 20 20 20 20 20 63 6c 65 61 72 43 61 63 68 65 54 69 6d 65 72 20 3d 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 63 68 65 58 20 3d 20 63 61 63 68 65 59 20 3d 20 73 6d 6f 6f 74 68 42 65 68 61 76 69 6f 72 46 Data Ascii: hBehaviorForElement = {};//setInterval(function () { cache = {}; }, 10 * 1000); function scheduleClearCache() { clearTimeout(clearCacheTimer); clearCacheTimer = setInterval(function () { cacheX = cacheY = smoothBehaviorF
2025-03-25 10:11:51 UTC	1589	IN	Data Raw: 20 3d 20 2f 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 75 73 65 72 41 67 65 6e 74 29 3b 0a 20 20 20 20 76 61 72 20 69 73 49 45 57 69 6e 37 20 20 3d 20 2f 57 69 6e 64 6f 77 73 20 4e 54 20 36 2e 31 2f 69 2e 74 65 73 74 28 75 73 65 72 41 67 65 6e 74 29 20 26 26 20 2f 72 76 3a 31 31 2f 69 2e 74 65 73 74 28 75 73 65 72 41 67 65 6e 74 29 3b 0a 20 20 20 20 76 61 72 20 69 73 4f 6c 64 53 61 66 61 72 69 20 3d 20 69 73 53 61 66 61 72 69 20 26 26 20 28 2f 56 65 72 73 69 6f 6e 5c 2f 38 2f 69 2e 74 65 73 74 28 75 73 65 72 41 67 65 6e 74 29 20 7c 7c 20 2f 56 65 72 73 69 6f 6e 5c 2f 39 2f 69 2e 74 65 73 74 28 75 73 65 72 41 67 65 6e 74 29 29 3b 0a 20 20 20 20 76 61 72 20 69 73 45 6e 61 62 6c 65 64 46 6f 72 42 72 6f 77 73 65 72 20 3d 20 28 69 73 43 68 72 6f 6d 65 20 7c 7c Data Ascii: = /mobile/i.test(userAgent); var isIEWin7 = /Windows NT 6.1/i.test(userAgent) && /rv:11/i.test(userAgent); var isOldSafari = isSafari && (/Version\/8/i.test(userAgent) \|\| /Version\/9/i.test(userAgent)); var isEnabledForBrowser = (isChrome \|\|

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:51 UTC	596	OUT	GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:51 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:51 GMT Server: Apache Last-Modified: Thu, 14 Nov 2024 06:30:34 GMT Accept-Ranges: bytes Content-Length: 4776 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:51 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:51 UTC	4776	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 72 29 26 26 21 74 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: /! This file is auto-generated /(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toS

Timestamp	Bytes transferred	Direction	Data
2025-03-25 10:11:51 UTC	595	OUT	GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1 Host: kangelaestate.co.mz Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://kangelaestate.co.mz/Authpage/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 10:11:51 UTC	330	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 10:11:51 GMT Server: Apache Last-Modified: Thu, 15 Feb 2024 20:23:16 GMT Accept-Ranges: bytes Content-Length: 9141 Cache-Control: max-age=2592000, public Expires: Thu, 24 Apr 2025 10:11:51 GMT Vary: Accept-Encoding Connection: close Content-Type: text/javascript; charset=utf-8
2025-03-25 10:11:51 UTC	7862	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 30 35 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 6e 6f 74 5f 73 74 72 69 6e 67 3a 2f 5b 5e 73 5d 2f 2c 6e 6f 74 5f 62 6f 6f 6c 3a 2f 5b 5e 74 5d 2f 2c 6e 6f 74 5f 74 79 70 65 3a 2f 5b 5e 54 5d 2f 2c 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 3a 2f 5b 5e 76 5d 2f 2c 6e 75 6d 62 65 72 3a 2f 5b 64 69 65 66 67 5d 2f 2c 6e 75 6d 65 72 69 63 5f 61 72 67 3a 2f 5b 62 63 64 69 65 66 67 75 78 58 5d 2f 2c 6a 73 6f 6e 3a 2f 5b 6a 5d 2f 2c 6e 6f 74 5f 6a 73 6f 6e 3a 2f 5b 5e 6a 5d 2f 2c 74 65 78 74 3a 2f 5e 5b 5e 5c 78 32 Data Ascii: /! This file is auto-generated /(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/^[^\x2
2025-03-25 10:11:51 UTC	1279	IN	Data Raw: 28 74 3d 22 64 65 66 61 75 6c 74 22 29 3d 3e 6e 2e 64 61 74 61 5b 74 5d 2c 73 65 74 4c 6f 63 61 6c 65 44 61 74 61 3a 73 2c 61 64 64 4c 6f 63 61 6c 65 44 61 74 61 3a 28 74 2c 65 3d 22 64 65 66 61 75 6c 74 22 29 3d 3e 7b 6e 2e 64 61 74 61 5b 65 5d 3d 7b 2e 2e 2e 6e 2e 64 61 74 61 5b 65 5d 2c 2e 2e 2e 74 2c 22 22 3a 7b 2e 2e 2e 68 2c 2e 2e 2e 6e 2e 64 61 74 61 5b 65 5d 3f 2e 5b 22 22 5d 2c 2e 2e 2e 74 3f 2e 5b 22 22 5d 7d 7d 2c 64 65 6c 65 74 65 20 6e 2e 70 6c 75 72 61 6c 46 6f 72 6d 73 5b 65 5d 2c 61 28 29 7d 2c 72 65 73 65 74 4c 6f 63 61 6c 65 44 61 74 61 3a 28 74 2c 65 29 3d 3e 7b 6e 2e 64 61 74 61 3d 7b 7d 2c 6e 2e 70 6c 75 72 61 6c 46 6f 72 6d 73 3d 7b 7d 2c 73 28 74 2c 65 29 7d 2c 73 75 62 73 63 72 69 62 65 3a 74 3d 3e 28 69 2e 61 64 64 28 74 29 2c 28 Data Ascii: (t="default")=>n.data[t],setLocaleData:s,addLocaleData:(t,e="default")=>{n.data[e]={...n.data[e],...t,"":{...h,...n.data[e]?.[""],...t?.[""]}},delete n.pluralForms[e],a()},resetLocaleData:(t,e)=>{n.data={},n.pluralForms={},s(t,e)},subscribe:t=>(i.add(t),(