Edit tour

Windows Analysis Report
https://comylubmexicana.com.mx/award

Overview

General Information

Sample URL:	https://comylubmexicana.com.mx/award
Analysis ID:	1647958
Infos:

Detection

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6872 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,715131233456307002,15237712328903227501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://comylubmexicana.com.mx/award" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://9ebac82d.dry-tooth-5302.workers.dev/favicon.ico

Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://comylubmexicana.com.mx/offer/box.html	Joe Sandbox AI: Score: 7 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The legitimate domain for Box is 'box.com'., The provided URL 'comylubmexicana.com.mx' does not match the legitimate domain for Box., The URL does not contain any recognizable elements related to the brand 'Box'., The domain 'comylubmexicana.com.mx' appears unrelated to the brand 'Box' and could be a phishing attempt., The presence of an input field asking for a business email is a common tactic used in phishing sites to collect sensitive information. DOM: 1.1.pages.csv
Source: https://comylubmexicana.com.mx/offer/box.html	Joe Sandbox AI: Score: 7 Reasons: The brand 'Box' is a well-known cloud content management and file sharing service., The legitimate domain for Box is 'box.com'., The provided URL 'comylubmexicana.com.mx' does not match the legitimate domain for Box., The URL does not contain any recognizable elements related to the brand 'Box'., The domain 'comylubmexicana.com.mx' appears unrelated to the brand and could be a phishing attempt., The presence of an input field asking for a business email is a common tactic used in phishing sites to collect sensitive information. DOM: 1.3.pages.csv

AI detected suspicious Javascript

Source: 0.0..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://comylubmexicana.com.mx/award/... This script demonstrates several high-risk behaviors, including disabling right-click and various keyboard shortcuts, preventing the use of debugging tools, and redirecting users to a potentially malicious website. The script also includes obfuscated code and attempts to detect and redirect bots, which are strong indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.

Source: https://comylubmexicana.com.mx/offer/box.html

HTTP Parser: Number of links: 0

Source: https://comylubmexicana.com.mx/offer/box.html

HTTP Parser: Base64 decoded: {"typ":"JWT","alg":"HS256"}

Source: https://comylubmexicana.com.mx/offer/box.html

HTTP Parser: Title: Construction Bid Invitation - Secure Access does not match URL

Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=checkbox&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=challenge&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=checkbox&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=challenge&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=checkbox&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: Iframe src: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html#frame=challenge&id=0mk2p86fcjx&host=comylubmexicana.com.mx&sentry=true&reportapi=https%3A%2F%2Faccounts.hcaptcha.com&recaptchacompat=true&custom=false&hl=en&tplinks=on&pstissuer=https%3A%2F%2Fpst-issuer.hcaptcha.com&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&theme=light&origin=https%3A%2F%2Fcomylubmexicana.com.mx

Source: https://comylubmexicana.com.mx/award/	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.ca	HTTP Parser: No favicon
Source: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.ca	HTTP Parser: No favicon

Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="author".. found
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="author".. found
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="author".. found

Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="copyright".. found
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="copyright".. found
Source: https://comylubmexicana.com.mx/offer/box.html	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.68:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49783 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.227
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.22
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.22
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /award HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /award/ HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://comylubmexicana.com.mx/award/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offer/box.html HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://comylubmexicana.com.mx/award/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://comylubmexicana.com.mx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://comylubmexicana.com.mx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bNn6VR8f/box.jpg HTTP/1.1Host: i.postimg.ccConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://comylubmexicana.com.mx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=acf13793a23ece2b1c4e6b83f9be250b7baf3696&host=comylubmexicana.com.mx&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/challenge/image_label_area_select/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/17796e3422048d395ba93eafd6f1bcda8d70c8da481ed12059c9523169ab9cb6/c7b2143adacff28112abcd1f9929fc22650cd45a163fd652c7f33ced6378909b.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/6d18569700b316d157a0f53740515baf305a2df540e1b5beb3913fbe92011142/d43d28d4cd4ea93b6ed28ca1909786c460d7756c640b0a468ed67784ed02a07c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/390530c47119f9bf4170756bf47045d8eff1fd9f9eb976b09c79b7add37ed2c3/a6a3016ce8938edd51637bbe2c164c899f896a136aca5b06fa1978d50ef83688.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ed27536817dfa4395b67ce00044609ae7f450f0cdf8a26361a87ff65339cff22/c3fb8249f125b9a5b17549c984157fd31f6c6cb696578637c14cd44993f1219d.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/17796e3422048d395ba93eafd6f1bcda8d70c8da481ed12059c9523169ab9cb6/c7b2143adacff28112abcd1f9929fc22650cd45a163fd652c7f33ced6378909b.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/6d18569700b316d157a0f53740515baf305a2df540e1b5beb3913fbe92011142/d43d28d4cd4ea93b6ed28ca1909786c460d7756c640b0a468ed67784ed02a07c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/390530c47119f9bf4170756bf47045d8eff1fd9f9eb976b09c79b7add37ed2c3/a6a3016ce8938edd51637bbe2c164c899f896a136aca5b06fa1978d50ef83688.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ed27536817dfa4395b67ce00044609ae7f450f0cdf8a26361a87ff65339cff22/c3fb8249f125b9a5b17549c984157fd31f6c6cb696578637c14cd44993f1219d.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://comylubmexicana.com.mx/offer/box.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a06bc93c6a44267f0a11d9430fa47ba94b9d245b0ad24270aa8aeb3e9b3bac77/5fa06c7115494af9a6acae7aee657b2e9913ce7d99e3495e2c3a22ef7a3f616e.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a06bc93c6a44267f0a11d9430fa47ba94b9d245b0ad24270aa8aeb3e9b3bac77/5fa06c7115494af9a6acae7aee657b2e9913ce7d99e3495e2c3a22ef7a3f616e.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://comylubmexicana.com.mx/offer/box.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSjAxTWd3ODRlQnJBdU9RbU9CbElsTGRpVExrMHVGWlZhanl0UlZYVkEvYkxKZWV5ZU05N2liTk1ybE03bytRcVpJTVhMYnU4MDJGQU4ySzdWczBSLzY1VXBNcUlzOUd0cUR4SjhYT3F5L1NTMnFwRUxFZkJMQkhPVWdxVUxOclMzSWNkcjErZTk0ZjNxeStxL294VGZrUzRFSmFXWFlweXdEY1l5RXNvNmRlaEp0cklCeGwxdEFtaEFpQVoxOTRMS1FWN0RJZ1pUdnVXZDkxeTlqdW1oNHdXRHd3cFZnNlhNaVkwSmVuYkxPNG4zLy9rRy9xcDZGZitkbjdZYUVFK0twcmc2Zz09RGVPdWVraVFISGRtWGExRyIsImV4cCI6MTc0MjkwMzM3Miwia3IiOiIxNTkwNmY4OSJ9.BZbTzTxEoNkqY2MKmhbWLVPNwfKwVh7j0wZS_E2T1Eg HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /offer/validate-captcha.php HTTP/1.1Host: comylubmexicana.com.mxConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=d6a6fc9b3ec26231b93239c00b6fbdac
Source: global traffic	HTTP traffic detected: GET /?ref=bob@outlook.ca HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://comylubmexicana.com.mx/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://9ebac82d.dry-tooth-5302.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://9ebac82d.dry-tooth-5302.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://9ebac82d.dry-tooth-5302.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://9ebac82d.dry-tooth-5302.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e2dcc1ce988c3&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.caAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e2dcc1ce988c3/c1Xhcd3YyMkWJKpmYTtoEZD0wAghcJMzqPQV4HF.hYg-1742903303-1.1.1.1-DyH3Ohbbs8GjHRPpaSdaiX6zzvLt1QB.UuPWH2LcL79aolJcUfxVDIj8anwCin6A HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925e2dcc1ce988c3/1742903304246/b8a7ecf1bf6cf09715c00b35222d723a54a74292a4dea4fb0c00cc1cb4561c0e/5kED9B1X0G2JDDE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e2dcc1ce988c3/1742903304250/md2iG8j5UtCPc46 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e2dcc1ce988c3/1742903304250/md2iG8j5UtCPc46 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e2dcc1ce988c3/c1Xhcd3YyMkWJKpmYTtoEZD0wAghcJMzqPQV4HF.hYg-1742903303-1.1.1.1-DyH3Ohbbs8GjHRPpaSdaiX6zzvLt1QB.UuPWH2LcL79aolJcUfxVDIj8anwCin6A HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e2dcc1ce988c3/c1Xhcd3YyMkWJKpmYTtoEZD0wAghcJMzqPQV4HF.hYg-1742903303-1.1.1.1-DyH3Ohbbs8GjHRPpaSdaiX6zzvLt1QB.UuPWH2LcL79aolJcUfxVDIj8anwCin6A HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.caAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ref=bob@ottawa.ca HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/b5o93/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://9ebac82d.dry-tooth-5302.workers.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e2eb4de5ac42a&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/b5o93/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.caAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/101194990:1742902313:48uWFHcp-HA4Kf4wGzuwX0RiZl_UgDVc-_2fCg2Xuf0/925e2eb4de5ac42a/ngDYX_3tDsSF7lm_PnfoV8Y4ruBNZ_au5FizI40.Ut4-1742903340-1.1.1.1-gRhUSmRiwZ1XaUIBPRSO88mMnwgdlK4HM_4WIOP1lMZcs7eArw3Oofs4B8P6XY8f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e2eb4de5ac42a/1742903341521/P6kc5NDVx7ytkNP HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/b5o93/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/925e2eb4de5ac42a/1742903341521/P6kc5NDVx7ytkNP HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/925e2eb4de5ac42a/1742903341527/30fffbb3324bf8c108d9fd3624233f0796e110adeaf160929a9c91c519945b3d/JAVdS9JXoKB7qn6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/b5o93/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/101194990:1742902313:48uWFHcp-HA4Kf4wGzuwX0RiZl_UgDVc-_2fCg2Xuf0/925e2eb4de5ac42a/ngDYX_3tDsSF7lm_PnfoV8Y4ruBNZ_au5FizI40.Ut4-1742903340-1.1.1.1-gRhUSmRiwZ1XaUIBPRSO88mMnwgdlK4HM_4WIOP1lMZcs7eArw3Oofs4B8P6XY8f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/101194990:1742902313:48uWFHcp-HA4Kf4wGzuwX0RiZl_UgDVc-_2fCg2Xuf0/925e2eb4de5ac42a/ngDYX_3tDsSF7lm_PnfoV8Y4ruBNZ_au5FizI40.Ut4-1742903340-1.1.1.1-gRhUSmRiwZ1XaUIBPRSO88mMnwgdlK4HM_4WIOP1lMZcs7eArw3Oofs4B8P6XY8f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.caAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 9ebac82d.dry-tooth-5302.workers.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: comylubmexicana.com.mx
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: i.postimg.cc
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: imgs3.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: 9ebac82d.dry-tooth-5302.workers.dev
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=acf13793a23ece2b1c4e6b83f9be250b7baf3696&host=comylubmexicana.com.mx&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&sc=1&swa=1&spst=1 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plainsec-ch-ua-mobile: ?0Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_86.1.dr, chromecache_79.1.dr, chromecache_93.1.dr, chromecache_71.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito
Source: chromecache_86.1.dr, chromecache_79.1.dr, chromecache_93.1.dr, chromecache_71.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_90.1.dr	String found in binary or memory: https://github.com/Joe12387/detectIncognito
Source: chromecache_74.1.dr	String found in binary or memory: https://google.com
Source: chromecache_89.1.dr, chromecache_85.1.dr, chromecache_99.1.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_77.1.dr	String found in binary or memory: https://i.postimg.cc/bNn6VR8f/box.jpg
Source: chromecache_77.1.dr	String found in binary or memory: https://i.postimg.cc/zGhnTT6t/image-1.png
Source: chromecache_77.1.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js
Source: chromecache_81.1.dr, chromecache_78.1.dr	String found in binary or memory: https://sharedinvite.artdecor.co.ke/?xcymphxh&ref=bob

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.68:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.249.168.129:443 -> 192.168.2.16:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 67.23.228.162:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.16:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.16:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49783 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6376_1962733084

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6376_1962733084

Jump to behavior

Source: classification engine

Classification label: mal60.phis.win@26/68@36/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,715131233456307002,15237712328903227501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://comylubmexicana.com.mx/award"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,715131233456307002,15237712328903227501,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://comylubmexicana.com.mx/award	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://comylubmexicana.com.mx/favicon.ico	0%	Avira URL Cloud	safe
https://comylubmexicana.com.mx/wp-includes/images/w-logo-blue-white-bg.png	0%	Avira URL Cloud	safe
https://9ebac82d.dry-tooth-5302.workers.dev/favicon.ico	100%	Avira URL Cloud	phishing
https://sharedinvite.artdecor.co.ke/?xcymphxh&ref=bob	0%	Avira URL Cloud	safe
https://comylubmexicana.com.mx/offer/validate-captcha.php	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
comylubmexicana.com.mx	67.23.228.162	true	false	high
js.hcaptcha.com	104.19.229.21	true	false	high
api.hcaptcha.com	104.19.229.21	true	false	high
9ebac82d.dry-tooth-5302.workers.dev	104.21.48.1	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
i.postimg.cc	162.249.168.129	true	false	high
www.google.com	142.250.80.68	true	false	high
imgs3.hcaptcha.com	104.19.229.21	true	false	high
newassets.hcaptcha.com	104.19.230.21	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://comylubmexicana.com.mx/award/	true		unknown
https://imgs3.hcaptcha.com/tip/17796e3422048d395ba93eafd6f1bcda8d70c8da481ed12059c9523169ab9cb6/c7b2143adacff28112abcd1f9929fc22650cd45a163fd652c7f33ced6378909b.jpeg	false		high
https://comylubmexicana.com.mx/offer/box.html	true		unknown
https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html	false		high
https://imgs3.hcaptcha.com/tip/390530c47119f9bf4170756bf47045d8eff1fd9f9eb976b09c79b7add37ed2c3/a6a3016ce8938edd51637bbe2c164c899f896a136aca5b06fa1978d50ef83688.jpeg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/925e2eb4de5ac42a/1742903341521/P6kc5NDVx7ytkNP	false		high
https://newassets.hcaptcha.com/c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js	false		high
https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@outlook.ca	false		unknown
https://comylubmexicana.com.mx/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/b5o93/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/	false		high
https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/challenge/image_label_area_select/challenge.js	false		high
https://comylubmexicana.com.mx/wp-includes/images/w-logo-blue-white-bg.png	false	Avira URL Cloud: safe	unknown
https://imgs3.hcaptcha.com/tip/ed27536817dfa4395b67ce00044609ae7f450f0cdf8a26361a87ff65339cff22/c3fb8249f125b9a5b17549c984157fd31f6c6cb696578637c14cd44993f1219d.jpg	false		high
https://imgs3.hcaptcha.com/tip/6d18569700b316d157a0f53740515baf305a2df540e1b5beb3913fbe92011142/d43d28d4cd4ea93b6ed28ca1909786c460d7756c640b0a468ed67784ed02a07c.jpeg	false		high
https://9ebac82d.dry-tooth-5302.workers.dev/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://comylubmexicana.com.mx/offer/validate-captcha.php	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/101194990:1742902313:48uWFHcp-HA4Kf4wGzuwX0RiZl_UgDVc-_2fCg2Xuf0/925e2eb4de5ac42a/ngDYX_3tDsSF7lm_PnfoV8Y4ruBNZ_au5FizI40.Ut4-1742903340-1.1.1.1-gRhUSmRiwZ1XaUIBPRSO88mMnwgdlK4HM_4WIOP1lMZcs7eArw3Oofs4B8P6XY8f	false		high
https://i.postimg.cc/bNn6VR8f/box.jpg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/925e2dcc1ce988c3/1742903304250/md2iG8j5UtCPc46	false		high
https://api.hcaptcha.com/checksiteconfig?v=acf13793a23ece2b1c4e6b83f9be250b7baf3696&host=comylubmexicana.com.mx&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&sc=1&swa=1&spst=1	false		high
https://comylubmexicana.com.mx/award	true		unknown
https://js.hcaptcha.com/1/api.js	false		high
https://a.nel.cloudflare.com/report/v4?s=4%2BPajqHZGGszl9GWyNuUEI%2Bool4OfqcY%2FCnHQyKWxEeBibs3t5xxsWdmG1zlUsXfcnFUslx6XQhNmTNvYr%2BbUBSa3pSPH%2FP6nuVf25vmKvA3%2BSWiRXhgQKXBDQFSxE%2FTCfZBURzceJHQ8mPT8uJrztXZLLxv%2Fg%3D%3D	false		high
https://api.hcaptcha.com/getcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6	false		high
https://imgs3.hcaptcha.com/tip/a06bc93c6a44267f0a11d9430fa47ba94b9d245b0ad24270aa8aeb3e9b3bac77/5fa06c7115494af9a6acae7aee657b2e9913ce7d99e3495e2c3a22ef7a3f616e.jpg	false		high
https://9ebac82d.dry-tooth-5302.workers.dev/?ref=bob@ottawa.ca	false		unknown
https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito@main/dist/es5/detectIncognito.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e2dcc1ce988c3&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/239012505:1742902261:JYaZA8qyLerkQgvfJRy3Aoq_-8mNiZYGNQykUIppkpU/925e2dcc1ce988c3/c1Xhcd3YyMkWJKpmYTtoEZD0wAghcJMzqPQV4HF.hYg-1742903303-1.1.1.1-DyH3Ohbbs8GjHRPpaSdaiX6zzvLt1QB.UuPWH2LcL79aolJcUfxVDIj8anwCin6A	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925e2dcc1ce988c3/1742903304246/b8a7ecf1bf6cf09715c00b35222d723a54a74292a4dea4fb0c00cc1cb4561c0e/5kED9B1X0G2JDDE	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=925e2eb4de5ac42a&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/925e2eb4de5ac42a/1742903341527/30fffbb3324bf8c108d9fd3624233f0796e110adeaf160929a9c91c519945b3d/JAVdS9JXoKB7qn6	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/p3b1o/0x4AAAAAABCQWOzwva6siei8/auto/fbE/new/normal/auto/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://hcaptcha.com/license	chromecache_89.1.dr, chromecache_85.1.dr, chromecache_99.1.dr	false		high
https://i.postimg.cc/zGhnTT6t/image-1.png	chromecache_77.1.dr	false		high
https://sharedinvite.artdecor.co.ke/?xcymphxh&ref=bob	chromecache_81.1.dr, chromecache_78.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/Joe12387/detectIncognito	chromecache_90.1.dr	false		high
https://cdn.jsdelivr.net/gh/Joe12387/detectIncognito	chromecache_86.1.dr, chromecache_79.1.dr, chromecache_93.1.dr, chromecache_71.1.dr	false		high
https://google.com	chromecache_74.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.68	www.google.com	United States	15169	GOOGLEUS	false
104.21.48.1	9ebac82d.dry-tooth-5302.workers.dev	United States	13335	CLOUDFLARENETUS	false
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.249.168.129	i.postimg.cc	United States	26548	PUREVOLTAGE-INCUS	false
104.19.229.21	js.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
104.19.230.21	newassets.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
67.23.228.162	comylubmexicana.com.mx	United States	33182	DIMENOCUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647958
Start date and time:	2025-03-25 12:46:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://comylubmexicana.com.mx/award
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@26/68@36/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.238, 142.251.35.163, 142.250.65.238, 142.251.16.84, 142.250.80.46, 142.250.65.174, 142.250.65.234, 142.251.40.110, 142.250.81.227, 142.251.32.106, 142.251.40.202, 142.250.65.202, 142.250.80.106, 142.250.65.170, 142.251.35.170, 142.250.80.42, 142.250.80.74, 142.250.72.106, 142.251.41.10, 142.250.64.106, 142.250.81.234, 142.251.40.234, 142.250.176.202, 172.217.165.138, 142.251.35.174, 142.250.65.206, 142.251.32.110, 142.250.80.14, 142.251.40.131, 142.250.64.67, 142.250.80.78, 184.31.69.3, 4.245.163.56
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://comylubmexicana.com.mx/award

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 384x256, components 3
Category:	downloaded
Size (bytes):	94371
Entropy (8bit):	7.943782845851004
Encrypted:	false
SSDEEP:	1536:OnT2ITP3fPmNHx4czZwfX6e2vntRFEpXgguGkMiyVF4nD8GG0S55PhSGTHHfeX:wT2ITPmHxVzZwfXYn/F8Sd94GG0SXPho
MD5:	A2857F752B331E872F9A58920A1EC183
SHA1:	F248AAB08E889A9503B007BC5A6B8E2C69D5D69F
SHA-256:	10A0D2559BA6623FC50E947BCAFA62A4BECF6DF036A13CE853245A0E32FD0269
SHA-512:	B7F2B49154311FE097F5DF79BDE959A3204015CB976FF63EFFD975E5DB5C251A51C15695AEF16B53D62E3A7021194C8E8E11684288EEDD61D01A43489207B991
Malicious:	false
Reputation:	low
URL:	https://imgs3.hcaptcha.com/tip/a06bc93c6a44267f0a11d9430fa47ba94b9d245b0ad24270aa8aeb3e9b3bac77/5fa06c7115494af9a6acae7aee657b2e9913ce7d99e3495e2c3a22ef7a3f616e.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................................................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..`..Fx..X``..=.A..F.c.F:b..:..........u%^M.9O..;p....]..m...4..<..TJ3.......{.....O_?.^..G#....lH..q.D.....q..{S~..O+..pO..&'.dcy..H...2.x..b<.{.^.-Yt..O.......w.+0.3.&.d.r3.`.:g..#..T.J..._....{...7...X..1../.f.......oB.T.>{.m.z..]o..r.%.v...La.FBc....S<D...M.y...E.......Wzy...s.Y..z_.....^....i.E....I..N..Y..?..8..+...X.Dh&.5....g......]O.f......^m..c.M.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 25, 2025 12:47:38.640882969 CET	53	53758	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:38.670205116 CET	53	65134	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:39.412820101 CET	53	61930	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:39.524308920 CET	63969	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:39.524525881 CET	51575	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:39.737335920 CET	53	63969	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:39.737816095 CET	53	51575	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.026340008 CET	59685	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.026587009 CET	52105	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.028163910 CET	51026	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.028362989 CET	63747	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.127082109 CET	53	52105	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.127120018 CET	53	59685	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.127167940 CET	53	50250	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.129709005 CET	53	63747	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.129755974 CET	53	51026	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.511619091 CET	53864	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.512021065 CET	63881	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.609021902 CET	53	63881	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.609575987 CET	53	53864	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.678814888 CET	53	60503	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.828279018 CET	53024	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.828392029 CET	51069	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:42.932007074 CET	53	53024	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:42.967806101 CET	53	51069	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:43.315465927 CET	61286	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:43.315665960 CET	56943	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:43.418618917 CET	53	61286	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:43.419663906 CET	53	56943	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:43.873569012 CET	60161	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:43.873672009 CET	59176	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:43.973639011 CET	53	60161	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:43.974230051 CET	53	59176	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:44.463783026 CET	51522	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:44.463992119 CET	50084	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:47:44.566344023 CET	53	50084	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:44.568245888 CET	53	51522	1.1.1.1	192.168.2.16
Mar 25, 2025 12:47:56.418875933 CET	53	52145	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:00.212287903 CET	53	60096	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:03.394069910 CET	55952	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:03.394196987 CET	58581	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:03.495115995 CET	53	55952	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:03.536726952 CET	53	58581	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:03.970288992 CET	55547	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:03.970441103 CET	54948	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:04.070856094 CET	53	55547	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:04.072302103 CET	53	54948	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:14.750777960 CET	62178	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:14.750839949 CET	62352	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:14.985991955 CET	53	62178	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:15.025975943 CET	53	62352	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:15.383867025 CET	53	63935	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:20.967322111 CET	57768	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:20.967641115 CET	57727	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:21.072107077 CET	53	57768	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:21.074493885 CET	53	57727	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:21.550272942 CET	65115	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:21.550882101 CET	65042	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:21.553505898 CET	57469	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:21.553652048 CET	65219	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:21.649298906 CET	53	65042	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:21.650444984 CET	53	65115	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:21.651026011 CET	53	57469	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:21.654697895 CET	53	65219	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:22.582015991 CET	51509	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:22.582206964 CET	58620	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:22.680958033 CET	53	58620	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:22.681988955 CET	53	51509	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:23.626559973 CET	54134	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:23.626805067 CET	53273	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:23.723993063 CET	53	54134	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:23.724272013 CET	53	53273	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:23.858958960 CET	53902	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:23.859039068 CET	59791	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:23.963085890 CET	53	53902	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:23.963615894 CET	53	59791	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:29.205316067 CET	138	138	192.168.2.16	192.168.2.255
Mar 25, 2025 12:48:37.682384014 CET	53	58515	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:38.595334053 CET	53	60230	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:41.728375912 CET	53	51925	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:43.453828096 CET	62756	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:43.453973055 CET	55675	53	192.168.2.16	1.1.1.1
Mar 25, 2025 12:48:43.552463055 CET	53	62756	1.1.1.1	192.168.2.16
Mar 25, 2025 12:48:43.553558111 CET	53	55675	1.1.1.1	192.168.2.16
Mar 25, 2025 12:49:07.992207050 CET	53	51990	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 25, 2025 12:47:42.967936039 CET	192.168.2.16	1.1.1.1	c21d	(Port unreachable)	Destination Unreachable
Mar 25, 2025 12:48:03.536823034 CET	192.168.2.16	1.1.1.1	c219	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:39 UTC	677	OUT	GET /award HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:40 UTC	221	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 25 Mar 2025 11:47:40 GMT Server: Apache Location: https://comylubmexicana.com.mx/award/ Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-25 11:47:40 UTC	245	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 6d 79 6c 75 62 6d 65 78 69 63 61 6e 61 2e 63 6f 6d 2e 6d 78 2f 61 77 61 72 64 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://comylubmexicana.com.mx/award/">here</a>.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:40 UTC	678	OUT	GET /award/ HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:40 UTC	159	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:40 GMT Server: Apache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-25 11:47:40 UTC	4274	IN	Data Raw: 31 30 61 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 42 75 73 69 6e 65 73 73 20 53 6f 6c 75 74 69 6f 6e 73 20 2d 20 53 65 63 75 72 65 20 42 69 64 64 69 6e 67 20 50 72 6f 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: 10aa<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Business Solutions - Secure Bidding Process</title> <style> body {
2025-03-25 11:47:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:40 UTC	613	OUT	GET /favicon.ico HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://comylubmexicana.com.mx/award/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:42 UTC	349	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 11:47:40 GMT Server: Apache Link: <https://comylubmexicana.com.mx/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://comylubmexicana.com.mx/wp-includes/images/w-logo-blue-white-bg.png Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:41 UTC	721	OUT	GET /offer/box.html HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://comylubmexicana.com.mx/award/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:42 UTC	241	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:41 GMT Server: Apache Last-Modified: Mon, 24 Mar 2025 06:35:12 GMT ETag: "aa019b-16e1-63110ce6b82c6" Accept-Ranges: bytes Content-Length: 5857 Connection: close Content-Type: text/html
2025-03-25 11:47:42 UTC	5857	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6e 73 74 72 75 63 74 69 6f 6e 20 42 69 64 20 49 6e 76 69 74 61 74 69 6f 6e 20 2d 20 53 65 63 75 72 65 20 41 63 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 31 2f 61 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Construction Bid Invitation - Secure Access</title> <script src="https://js.hcaptcha.com/1/a

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:42 UTC	635	OUT	GET /bNn6VR8f/box.jpg HTTP/1.1 Host: i.postimg.cc Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://comylubmexicana.com.mx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:42 UTC	379	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 25 Mar 2025 11:47:42 GMT Content-Type: image/jpeg Content-Length: 5278 Connection: close Last-Modified: Sun, 23 Mar 2025 04:52:26 GMT Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 Cache-Control: public Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Accept-Ranges: bytes
2025-03-25 11:47:42 UTC	3717	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0e 0f 0d 0d 0d 0d 0f 0d 0e 0d 0d 15 11 17 17 15 11 15 15 18 1e 28 22 18 1a 27 1e 15 15 2d 31 21 25 2e 2d 2e 2e 2e 17 20 33 38 35 2c 38 28 2d 2f 2b 01 0a 0a 0a 0e 0d 0e 1a 10 10 17 2d 25 20 20 2b 2e 37 2b 2b 2e 2d 2d 2b 2d 2b 2b 2b 2b 2d 2b 2d 2d 2b 2d 2d 2d 2b 2e 2d 2d 2d 2b 2d 2d 2d 2b 2d 2d 2d 2b 2d 2b 2d 2d 2d 2d 2d 2d 2d 2b 2e 2d 2d 2d ff c0 00 11 08 00 e1 00 e1 03 01 11 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 05 07 06 02 04 03 ff c4 00 45 10 00 02 02 01 01 03 08 05 07 0a 04 07 00 00 00 00 00 01 02 03 11 04 05 06 41 07 12 13 21 22 31 51 61 42 71 81 91 a1 14 23 32 33 62 73 b1 15 24 35 Data Ascii: JFIF("'-1!%.-... 385,8(-/+-% +.7++.--+-++++-+--+---+.---+---+---+-+-------+.---EA!"1QaBq#23bs$5
2025-03-25 11:47:42 UTC	1561	IN	Data Raw: fd f8 fe 04 ff 00 4c dc d3 b9 1f 14 3f 45 d1 fb a7 e0 e8 76 0e e8 e8 f4 0d 4e aa e5 65 cb fd eb 9a 9c d7 ab a9 28 fb 11 0b 23 3e f5 f8 d2 a9 d2 3a 42 55 9c 4b 56 b8 c4 71 eb 2b 9d 4e a2 14 d7 2b 6d 9c 6b ae 09 ca 73 93 c4 62 88 b4 d3 35 cc 53 4c 6b 32 91 55 51 4c 6b 3c 99 75 fc a0 cf f2 9a d4 41 49 e8 62 ba 2e 87 ba 53 a9 be bb 71 fa f9 49 af 25 8e 2c d0 53 b2 e9 fc 3e e4 f7 b9 eb ed e9 e4 a5 ab 68 4f 6d bd 1d de 9f 36 9f a2 d5 d7 a8 ae 17 53 38 d9 5c d6 63 38 bc a7 fd 7c 8a 0a ed d5 45 53 4d 51 a4 c2 e6 8a e9 ae 37 a9 9d 61 57 b7 b7 57 47 b4 3b 57 56 e3 6e 30 ae a9 f3 2c c7 9b ee 97 b5 32 46 3e 6d eb 1c 29 9e 1d 27 93 c6 f6 2d bb dc 6a 8e 3d 5c df f9 5d 46 7f d5 df cd f0 e6 57 9c 7a ff 00 a1 3b d3 37 34 ee 47 c5 13 d1 74 7e e9 f8 3a 5d 83 ba da 4d 9f da Data Ascii: L?EvNe(#>:BUKVq+N+mksb5SLk2UQLk<uAIb.SqI%,S>hOm6S8\c8\|ESMQ7aWWG;WVn0,2F>m)'-j=\]FWz;74Gt~:]M

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:42 UTC	570	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://comylubmexicana.com.mx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:42 UTC	507	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:42 GMT Content-Type: application/javascript Content-Length: 208416 Connection: close CF-Ray: 925e2ccebc18729e-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: max-age=300 ETag: W/"44c7c117cb8c61bd58eb42ee7dbcc76b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin alt-svc: h3=":443"; ma=86400 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare
2025-03-25 11:47:42 UTC	862	IN	Data Raw: 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 31 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 59 43 49 51 43 62 6e 50 74 37 62 67 37 58 37 6d 52 53 2f 54 50 56 55 38 69 73 52 74 51 33 31 44 6e 43 51 4c 71 72 4d 4e 59 43 2f 66 6c 44 69 67 49 68 41 4b 59 75 76 37 59 71 50 72 4e 4d 4e 73 37 2b 4f 49 73 78 73 71 56 4d 66 59 30 46 63 53 62 2f 59 33 46 57 2f 6a 4d 64 68 70 59 4d 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f Data Ascii: /* { "version": "1", "hash": "MEYCIQCbnPt7bg7X7mRS/TPVU8isRtQ31DnCQLqrMNYC/flDigIhAKYuv7YqPrNMNs7+OIsxsqVMfY0FcSb/Y3FW/jMdhpYM" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((functio
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 29 29 7d 72 5b 65 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 Data Ascii: ))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d Data Ascii: eferreds=null}function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function p(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 72 6e 28 22 50 6f 73 73 69 62 6c 65 20 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: rn("Possible Unhandled Promise Rejection:",e)};var d=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function f
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6b 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 54 2c 45 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 65 29 7d 7d 2c 78 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4f 28 65 29 7d 7d 2c 56 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 Data Ascii: nction(e){e.labels.forEach((function(t){k[t]=e}))}))}));var T,E={"UTF-8":function(e){return new U(e)}},x={"UTF-8":function(e){return new O(e)}},V="utf-8";function S(e,t){if(!(this instanceof S))throw TypeError("Called as a function. Did you forget 'new'?"
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 79 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 79 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 66 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 66 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c Data Ascii: Object.defineProperty\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function O(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===y&&0!==i)return i=0,b(t);if(s===y)return w;if(0===i){if(f(s,0,127))return s;if(f(s,194,223))i=1,
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 78 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d Data Ascii: s._do_not_flush\|\|(this._decoder=x[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===y)break;if((r=this._decoder.handler(i,a))===w)break;null!=
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 37 33 34 33 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 79 29 62 72 65 61 6b 3b 69 66 28 28 6e Data Ascii: 7343)i.push(65533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===y)break;if((n
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 22 75 6e 77 72 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 Data Ascii: reak;case"unwrapKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.lengt
2025-03-25 11:47:42 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 Data Ascii: ction(e){return"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:43 UTC	804	OUT	GET /captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://comylubmexicana.com.mx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:43 UTC	572	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:43 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 925e2cd3e93f41b4-EWR
2025-03-25 11:47:43 UTC	797	IN	Data Raw: 37 64 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 61 63 66 31 33 37 39 33 61 32 33 65 63 65 32 62 31 63 34 65 36 62 38 33 66 39 62 65 32 35 30 62 37 62 61 66 33 36 39 36 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 7d58<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-acf13793a23ece2b1c4e6b83f9be250b7baf3696"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 Data Ascii: n:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selecti
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 69 66 28 21 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 69 29 7b 69 66 28 69 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: if(!t\|\|"undefined"==typeof t.length)return i(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var n=Array.prototype.slice.call(t);if(0===n.length)return e([]);var o=n.length;function r(t,i){if(i&&("object"==t
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 68 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 6e 3d 69 2c 6f 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 63 61 74 63 68 28 72 29 7b 63 28 74 2c 72 29 7d 76 61 72 20 6e 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 Data Ascii: instanceof s)return t._state=3,t._value=e,void h(t);if("function"==typeof i)return void f((n=i,o=e,function(){n.apply(o,arguments)}),t)}t._state=1,t._value=e,h(t)}catch(r){c(t,r)}var n,o}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._sta
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 3d 3d 3d 73 3f 74 3a 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 73 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 28 74 29 7d 29 29 7d 2c 73 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 21 6f 28 74 29 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 6e 5d 29 2e 74 68 Data Ascii: ===s?t:new s((function(e){e(t)}))},s.reject=function(t){return new s((function(e,i){i(t)}))},s.race=function(t){return new s((function(e,i){if(!o(t))return i(new TypeError("Promise.race accepts an array"));for(var n=0,r=t.length;n<r;n++)s.resolve(t[n]).th
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 65 2e 73 68 69 66 74 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 74 29 7d 7d 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 69 66 28 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 36 35 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: rray(t))for(var e=t;e.length;)this.tokens.unshift(e.shift());else this.tokens.unshift(t)}};var v=-1;function w(t,e){if(t)throw TypeError("Decoder error");return e\|\|65533}function k(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 22 29 3b 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 2c 74 68 69 73 2e 5f 66 61 74 61 6c 3d 65 2e 66 61 74 61 6c 3f 22 66 61 74 61 6c 22 3a 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3b 76 61 72 20 69 3d 74 68 69 73 3b 69 66 28 65 2e 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 61 6c 6c 6f 77 4c 65 67 61 63 79 45 6e 63 6f 64 69 6e 67 29 7b 76 61 72 20 6e 3d 6b 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 56 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 6e 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e Data Ascii: ");e=y(e),this._encoding=null,this._encoder=null,this._do_not_flush=!1,this._fatal=e.fatal?"fatal":"replacement";var i=this;if(e.NONSTANDARD_allowLegacyEncoding){var n=k(t=t!==undefined?String(t):V);if(null===n\|\|"replacement"===n.name)throw RangeError("Un
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 74 61 6c 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 67 6e 6f 72 65 42 4f 4d 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 Data Ascii: t.defineProperty(S.prototype,"fatal",{get:function(){return"fatal"===this._error_mode}}),Object.defineProperty(S.prototype,"ignoreBOM",{get:function(){return this._ignoreBOM}})),S.prototype.decode=function(t,e){var i;i="object"==typeof t&&t instanceof Arr
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 54 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 22 22 3a 53 74 72 69 6e 67 28 74 29 2c 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c Data Ascii: prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),T.prototype.encode=function(t,e){t=t===undefined?"":String(t),e=y(e),this._do_not_flush\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_fl
2025-03-25 11:47:43 UTC	1369	IN	Data Raw: 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 7d 2c 63 3d 7b 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 3a 22 4b 6f 5a 49 68 76 63 4e 41 51 45 42 22 7d 3b 69 66 28 5b 22 67 65 6e 65 72 61 74 65 4b 65 79 22 2c 22 69 6d 70 6f 72 74 4b 65 79 22 2c 22 75 6e 77 72 61 70 4b 65 79 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 64 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 6f 29 2c 68 3d 72 2c 75 3d 6c 3b 62 Data Ascii: IhvcNAQEB:"1.2.840.113549.1.1.1"},c={"1.2.840.113549.1.1.1":"KoZIhvcNAQEB"};if(["generateKey","importKey","unwrapKey"].forEach((function(t){var n=i[t];i[t]=function(o,r,l){var c,h,u,d,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(o),h=r,u=l;b

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:44 UTC	806	OUT	POST /checksiteconfig?v=acf13793a23ece2b1c4e6b83f9be250b7baf3696&host=comylubmexicana.com.mx&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:44 UTC	587	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:44 GMT Content-Type: application/json Content-Length: 796 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2cda4aa2f3ba-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 11:47:44 UTC	782	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 71 64 6b 56 54 61 6d 31 68 4f 54 56 50 52 6c 64 6c 55 6a 4e 77 63 6d 74 45 4e 33 67 30 54 30 56 69 61 43 74 52 51 58 45 35 4b 32 77 79 59 32 46 72 51 6a 56 73 56 44 64 50 63 47 67 34 62 6d 70 43 53 6c 6c 59 65 47 4d 31 57 6e 42 55 59 57 52 79 4e 30 31 44 57 6d 70 75 51 55 31 4f 56 58 56 59 4f 47 31 34 55 46 42 56 Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJqdkVTam1hOTVPRldlUjNwcmtEN3g0T0ViaCtRQXE5K2wyY2FrQjVsVDdPcGg4bmpCSllYeGM1WnBUYWRyN01DWmpuQU1OVXVYOG14UFBV
2025-03-25 11:47:44 UTC	14	IN	Data Raw: 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d Data Ascii: },"pass":true}

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:44 UTC	715	OUT	GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:44 UTC	462	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"7bd876c8f9f3642a65f0c04e462ef689" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2cdd6905c472-EWR
2025-03-25 11:47:44 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 4b 58 61 4b 59 6d 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 72 3d 66 75 6e 63 74 69 6f 6e 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 72 3f 28 74 68 69 73 2e 72 65 6d 61 69 6e 64 65 72 3d 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 65 3f 44 77 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 2c 63 47 29 3a 76 6f 69 64 20 30 3d 3d 3d 63 47 3f 44 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 29 3a 76 6f 69 64 20 42 77 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 3a 6e 65 77 20 64 72 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7d 2c 44 4a 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: 7dc6var hsw=function KXaKYm(){"use strict";var dr=function(de,cG,rg,tZ){return this instanceof dr?(this.remainder=null,"string"==typeof de?Dw.call(this,de,cG):void 0===cG?DJ.call(this,de):void Bw.apply(this,arguments)):new dr(de,cG,rg,tZ)},DJ=function(d
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 2e 75 62 5b 64 77 28 32 33 35 29 5d 7c 7c 28 56 4a 3d 6a 78 28 49 6e 74 33 32 41 72 72 61 79 2c 79 43 2e 75 62 5b 64 77 28 64 72 29 5d 29 29 2c 56 4a 7d 2c 70 5a 3d 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 2c 64 65 29 7b 79 43 2e 4f 62 28 64 72 2c 44 4a 2c 44 76 28 64 65 29 29 7d 3b 76 61 72 20 76 4c 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 66 6f 72 28 44 4a 3d 55 63 2c 64 65 3d 6e 65 77 20 41 72 72 61 79 28 64 72 5b 44 4a 28 33 35 33 29 5d 29 2c 63 47 3d 30 2c 72 67 3d 64 72 5b 44 4a 28 33 35 33 29 5d 2c 76 6f 69 64 20 30 3b 63 47 3c 72 67 3b 63 47 2b 2b 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3b 76 61 72 20 72 67 3b 64 65 5b 63 47 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 72 5b 63 47 5d 29 7d 72 65 Data Ascii: .ub[dw(235)]\|\|(VJ=jx(Int32Array,yC.ub[dw(dr)])),VJ},pZ=function(dr,DJ,de){yC.Ob(dr,DJ,Dv(de))};var vL=function(dr){for(DJ=Uc,de=new Array(dr[DJ(353)]),cG=0,rg=dr[DJ(353)],void 0;cG<rg;cG++){var DJ;var de;var cG;var rg;de[cG]=String.fromCharCode(dr[cG])}re
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 65 6a 35 73 77 71 22 2c 22 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 61 22 2c 22 44 67 39 65 79 78 72 48 76 76 6a 6d 22 2c 22 7a 67 66 30 79 71 22 2c 22 42 33 6a 50 7a 32 4c 55 22 2c 22 43 67 58 31 7a 32 4c 55 43 57 22 2c 22 43 67 58 48 44 67 7a 56 43 4d 30 22 2c 22 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 22 2c 22 42 67 66 55 7a 33 76 48 7a 32 75 22 2c 22 7a 32 76 30 72 77 35 30 43 4d 4c 4c 43 30 6a 35 76 68 4c 57 7a 71 22 2c 22 41 77 35 50 44 67 4c 48 44 67 39 59 76 68 4c 57 7a 71 22 2c 22 79 78 7a 48 41 77 58 78 41 77 72 30 41 61 22 2c 22 79 78 7a 48 41 77 58 69 7a 77 4c 4e 41 68 71 22 2c 22 44 32 4c 4b 44 67 47 22 2c 22 41 67 76 50 7a 32 48 30 22 2c 22 79 32 39 53 42 33 6a 65 7a 78 Data Ascii: XLBwvUDej5swq","AgfZqxr0CMLIDxrL","z2v0q29UDgv4Da","Dg9eyxrHvvjm","zgf0yq","B3jPz2LU","CgX1z2LUCW","CgXHDgzVCM0","DxnLCKfNzw50","BgfUz3vHz2u","z2v0rw50CMLLC0j5vhLWzq","Aw5PDgLHDg9YvhLWzq","yxzHAwXxAwr0Aa","yxzHAwXizwLNAhq","D2LKDgG","AgvPz2H0","y29SB3jezx
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 4a 29 7b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3d 43 4b 3b 76 61 72 20 72 67 3d 64 72 5b 63 47 28 70 63 29 5d 28 44 4a 29 3b 69 66 28 72 67 29 7b 76 61 72 20 74 5a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 67 29 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 3b 69 66 28 74 5a 3f 28 47 58 5b 63 47 28 37 34 32 29 5d 5b 63 47 28 38 36 39 29 5d 28 47 58 2c 72 67 29 2c 68 68 5b 63 47 28 44 6b 29 5d 28 64 4a 28 5b 5d 2c 72 67 2c 21 30 29 29 29 3a 28 63 47 28 35 37 39 29 3d 3d 74 79 70 65 6f 66 20 72 67 26 26 47 58 5b 63 47 28 37 34 32 29 5d 28 72 67 29 2c 68 68 5b 63 47 28 37 34 32 29 5d 28 72 67 29 29 2c 21 47 6c 29 72 65 74 75 72 6e 3b 76 Data Ascii: J){var de;var cG=CK;var rg=dr[cG(pc)](DJ);if(rg){var tZ=Array.isArray(rg)\|\|rg instanceof Int32Array\|\|rg instanceof Float32Array;if(tZ?(GX[cG(742)][cG(869)](GX,rg),hh[cG(Dk)](dJ([],rg,!0))):(cG(579)==typeof rg&&GX[cG(742)](rg),hh[cG(742)](rg)),!Gl)return;v
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 3d 3d 64 77 28 32 35 34 29 29 7b 76 61 72 20 44 24 3d 64 72 5b 64 77 28 32 35 35 29 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 44 24 3f 64 77 28 64 65 29 3a 64 77 28 63 47 29 2b 44 24 2b 22 29 22 7d 69 66 28 44 6b 3d 3d 64 77 28 72 67 29 29 7b 76 61 72 20 4c 74 3d 64 72 5b 64 77 28 32 35 39 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 4c 74 3d 3d 64 77 28 32 35 33 29 26 26 4c 74 5b 64 77 28 32 34 36 29 5d 3e 30 3f 64 77 28 32 36 30 29 2b 4c 74 2b 22 29 22 3a 64 77 28 32 36 31 29 7d 69 66 28 41 72 72 61 79 5b 64 77 28 74 5a 29 5d 28 64 72 29 29 7b 76 61 72 20 5f 75 3d 64 72 5b 64 77 28 70 5a 29 5d 3b 76 61 72 20 43 55 3d 22 5b 22 3b 5f 75 3e 30 26 26 28 43 55 2b 3d 70 63 28 64 72 5b 30 5d 29 29 3b 66 6f 72 28 76 61 72 20 6c 65 3d 31 3b 6c 65 3c 5f Data Ascii: ==dw(254)){var D$=dr[dw(255)];return null==D$?dw(de):dw(cG)+D$+")"}if(Dk==dw(rg)){var Lt=dr[dw(259)];return typeof Lt==dw(253)&&Lt[dw(246)]>0?dw(260)+Lt+")":dw(261)}if(Array[dw(tZ)](dr)){var _u=dr[dw(pZ)];var CU="[";_u>0&&(CU+=pc(dr[0]));for(var le=1;le<_
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 6c 65 28 70 63 29 3b 69 66 28 70 5a 3d 5b 5d 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 5b 6c 65 28 44 6b 29 5d 2e 74 6f 53 74 72 69 6e 67 5b 6c 65 28 44 24 29 5d 28 66 67 29 29 7b 66 6f 72 28 74 5a 3d 66 67 5b 6c 65 28 4c 74 29 5d 2c 64 65 3d 30 3b 64 65 3c 74 5a 3b 64 65 2b 3d 31 29 70 5a 5b 64 65 5d 3d 5f 75 28 64 65 2c 66 67 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 72 67 3d 30 3d 3d 3d 70 5a 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 70 5a 5b 6c 65 28 33 33 30 29 5d 28 22 2c 22 29 2b 22 5d 22 7d 66 6f 72 28 63 47 20 69 6e 20 66 67 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 65 28 36 37 39 29 5d 2e 63 61 6c 6c 28 66 67 2c 63 47 29 26 26 28 72 67 3d 5f 75 28 63 47 Data Ascii: )return le(pc);if(pZ=[],"[object Array]"===Object[le(Dk)].toString[le(D$)](fg)){for(tZ=fg[le(Lt)],de=0;de<tZ;de+=1)pZ[de]=_u(de,fg)\|\|"null";return rg=0===pZ.length?"[]":"["+pZ[le(330)](",")+"]"}for(cG in fg)Object.prototype[le(679)].call(fg,cG)&&(rg=_u(cG
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 36 34 41 72 72 61 79 7d 2c 68 3a 66 67 3d 3d 74 72 75 65 3f 22 5f 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 Data Ascii: y\|\|dr instanceof Uint8Array\|\|dr instanceof Uint8ClampedArray\|\|dr instanceof Int16Array\|\|dr instanceof Uint16Array\|\|dr instanceof Int32Array\|\|dr instanceof Uint32Array\|\|dr instanceof Float32Array\|\|dr instanceof Float64Array},h:fg==true?"_":function(){var d
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 71 65 2c 71 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 61 4c 28 38 39 30 29 5d 28 71 65 29 3b 74 72 79 7b 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6f 70 65 6e 44 61 74 61 62 61 73 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 43 59 28 21 31 29 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 77 69 6e 64 6f 77 5b 61 4c 28 35 36 32 29 5d 5b 61 4c 28 33 32 38 29 5d 28 71 65 2c 31 29 5b 61 4c 28 64 65 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3d 61 4c 3b 76 61 72 20 76 4c 3d 6e 75 6c 6c 3d 3d 3d 28 44 4a 3d 64 72 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 Data Ascii: orage.setItem(qe,qe),localStorage[aL(890)](qe);try{"openDatabase"in window&&openDatabase(null,null,null,null),CY(!1)}catch(dr){CY(!0)}}catch(dr){CY(!0)}window[aL(562)][aL(328)](qe,1)[aL(de)]=function(dr){var DJ;var de=aL;var vL=null===(DJ=dr.target)\|\|void
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 44 4a 29 5d 28 29 5b 63 47 28 64 65 29 5d 29 7d 63 61 74 63 68 28 64 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 21 44 6b 3f 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 72 65 74 75 72 6e 20 35 37 7c 64 72 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 72 3d 55 63 3b 72 65 74 75 72 6e 20 64 72 28 37 33 37 29 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 64 72 28 33 32 32 29 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 3f 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 28 29 3a 44 61 74 65 5b 64 72 28 38 38 37 29 5d 28 29 7d 2c 21 70 7a 3f 66 61 6c 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 76 61 72 20 64 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: DJ)]()[cG(de)])}catch(dr){return null}},!Dk?function(dr,DJ){return 57\|dr}:function(){var dr=Uc;return dr(737)!=typeof performance&&dr(322)==typeof performance[dr(887)]?performance[dr(887)]():Date[dr(887)]()},!pz?false:function(dr,DJ){var de;try{return nul
2025-03-25 11:47:44 UTC	1369	IN	Data Raw: 67 29 5d 2c 71 65 5b 76 4c 28 74 5a 29 5d 5d 2c 43 59 26 26 5b 43 59 5b 76 4c 28 33 32 30 29 5d 2c 43 59 2e 72 61 6e 67 65 4d 61 78 2c 43 59 5b 76 4c 28 70 5a 29 5d 5d 2c 61 4c 26 26 5b 61 4c 5b 76 4c 28 33 32 30 29 5d 2c 61 4c 5b 76 4c 28 36 33 37 29 5d 2c 61 4c 5b 76 4c 28 38 32 39 29 5d 5d 2c 43 4c 26 26 5b 43 4c 2e 70 72 65 63 69 73 69 6f 6e 2c 43 4c 2e 72 61 6e 67 65 4d 61 78 2c 43 4c 2e 72 61 6e 67 65 4d 69 6e 5d 5d 7d 2c 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3d 37 33 32 3b 76 61 72 20 64 65 3d 36 32 30 3b 76 61 72 20 63 47 3d 38 36 36 3b 76 61 72 20 72 67 3d 55 63 3b 72 65 74 75 72 6e 20 50 55 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 50 55 5b 72 67 28 33 34 37 29 5d 28 64 72 29 3f 22 5c 22 22 2b 64 72 5b 72 67 28 34 34 35 Data Ascii: g)],qe[vL(tZ)]],CY&&[CY[vL(320)],CY.rangeMax,CY[vL(pZ)]],aL&&[aL[vL(320)],aL[vL(637)],aL[vL(829)]],CL&&[CL.precision,CL.rangeMax,CL.rangeMin]]},Gn=function(dr){var DJ=732;var de=620;var cG=866;var rg=Uc;return PU.lastIndex=0,PU[rg(347)](dr)?"\""+dr[rg(445

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:47:44 UTC	529	OUT	GET /checksiteconfig?v=acf13793a23ece2b1c4e6b83f9be250b7baf3696&host=comylubmexicana.com.mx&sitekey=f116b812-c988-4136-9ce4-5a14d2944cd6&sc=1&swa=1&spst=1 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:47:45 UTC	526	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:47:44 GMT Content-Type: application/json Content-Length: 796 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2cdde8910f3b-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 11:47:45 UTC	796	IN	Data Raw: 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 74 68 65 6d 65 22 3a 74 72 75 65 2c 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 6c 56 44 4d 78 4e 30 70 43 56 33 42 42 4d 45 6c 70 54 48 68 59 4d 32 31 76 52 31 49 31 65 57 55 32 65 45 31 69 53 30 4a 34 4e 47 70 76 55 48 42 4a 57 58 42 36 54 6e 6c 6c 55 6b 70 4e 54 43 73 31 52 33 6c 43 63 45 68 45 57 48 6c 42 62 6b 30 30 53 55 64 30 65 6b 68 71 64 30 6c 47 4e 32 55 77 61 33 46 33 62 33 52 6e Data Ascii: {"features":{"custom_theme":true,"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJlVDMxN0pCV3BBMElpTHhYM21vR1I1eWU2eE1iS0J4NGpvUHBJWXB6TnllUkpNTCs1R3lCcEhEWHlBbk00SUd0ekhqd0lGN2Uwa3F3b3Rn

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:01 UTC	567	OUT	OPTIONS /getcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:02 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:02 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2d493a2819cf-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:02 UTC	748	OUT	POST /getcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 31037 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: application/json, application/octet-stream sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/octet-stream sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:02 UTC	16384	OUT	Data Raw: 92 da 02 d6 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 71 64 6b 56 54 61 6d 31 68 4f 54 56 50 52 6c 64 6c 55 6a 4e 77 63 6d 74 45 4e 33 67 30 54 30 56 69 61 43 74 52 51 58 45 35 4b 32 77 79 59 32 46 72 51 6a 56 73 56 44 64 50 63 47 67 34 62 6d 70 43 53 6c 6c 59 65 47 4d 31 57 6e 42 55 59 57 52 79 4e 30 31 44 57 6d 70 75 51 55 31 4f 56 58 56 59 4f 47 31 34 55 46 42 56 5a 47 78 55 52 54 67 76 57 55 30 79 62 79 39 76 63 55 68 45 53 54 42 6f 4e 45 6c 78 52 6e 46 4c 4d 6c 68 4f 53 53 73 33 57 46 45 76 51 6b 46 6a 56 7a 52 77 4f Data Ascii: {"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJqdkVTam1hOTVPRldlUjNwcmtEN3g0T0ViaCtRQXE5K2wyY2FrQjVsVDdPcGg4bmpCSllYeGM1WnBUYWRyN01DWmpuQU1OVXVYOG14UFBVZGxURTgvWU0yby9vcUhESTBoNElxRnFLMlhOSSs3WFEvQkFjVzRwO
2025-03-25 11:48:02 UTC	14653	OUT	Data Raw: 68 a1 4b 45 3b 07 bc 78 9f 8d 75 aa 30 43 aa 65 19 1c 7d a8 87 9a 4e 7c 56 02 f3 ea 2f 7f 02 a0 1d 40 c9 2a 40 08 ec fd 30 f9 d9 fa 73 43 1e 73 14 1c 5d bf 20 1e 03 b2 f7 f3 82 61 96 d5 01 e3 54 61 08 00 dc 9b 43 40 06 0b fb 78 83 1c 6a 70 26 dc bc ae 78 9d 4d 56 34 0a 04 f5 85 da 55 ea c1 04 e2 be 1a 24 61 93 5e 3d 91 12 f2 e1 87 e2 f5 4e ea 70 76 4d ea 62 d0 c0 6b 88 69 87 3e f4 73 2c 8a f6 0c 89 d0 78 eb 65 7e 50 8c df f3 7c 7e a1 81 2b ff a5 7b 56 82 b8 25 90 6d 69 ac d0 09 cd 8d 3f fa c0 10 8b a1 1d a0 67 4d 58 2c 3f 45 83 e8 69 f4 48 5f 60 84 f4 19 4f 63 cd 8d 23 80 77 df 1c 3e 6c 99 56 fa 55 7c fd 22 19 c6 bf ed 93 1b 45 7a 03 8d ef aa 9d 41 f5 79 a9 47 f0 cd e0 46 ba c4 59 fb 5a 96 2d 0c eb ee f1 2b 3c b1 a4 97 13 72 b0 9e 49 dd a3 5d f3 4c f9 4d Data Ascii: hKE;xu0Ce}N\|V/@*@0sCs] aTaC@xjp&xMV4U$a^=NpvMbki>s,xe~P\|~+{V%mi?gMX,?EiH_`Oc#w>lVU\|"EzAyGFYZ-+<rI]LM
2025-03-25 11:48:02 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:02 GMT Content-Type: application/octet-stream Content-Length: 3067 Connection: close CF-Ray: 925e2d4b3a0943dc-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2csouGSziQFM7; SameSite=Lax; path=/; expires=Tue, 25-Mar-25 12:18:02 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 11:48:02 UTC	772	IN	Data Raw: e0 16 a2 09 48 43 b3 b2 0e 99 0a 8e f0 94 ff 6d f3 e0 f8 1f 64 49 ff 7a 53 d2 e0 2f 07 5f bb bd d2 31 4b 38 82 b6 04 92 4e a2 dc b6 2c 5e a2 ae cd 79 32 ec 22 47 cb 0e 87 ad 16 32 80 fb d5 c4 a3 7e 1e fb 75 38 b9 25 01 9c c7 0f 70 8c 9a 02 68 fd aa 1a 31 53 7a d9 0c 18 cd 7d e5 45 7a 4f 79 d0 6e 73 a3 51 37 2f 7e 98 08 5c ff 71 f5 57 4a a7 26 1f 18 22 04 40 aa da 37 6f bf 6c c1 f2 3a 8d fb 01 48 46 8c 10 d9 f3 b9 aa 6f fb 43 f2 88 2c 93 d9 f1 ee e6 1e 3f 37 c6 f2 88 99 3f 37 a4 8e d3 8c 59 9a 7f b0 29 b4 28 f5 d8 04 eb 7c 97 7d 1c 4c 66 ab 80 b5 1c 2d 4e 74 9d cf 00 b5 f5 36 f6 6d 12 bf 39 de 6a cb 97 e1 d3 3d e2 09 e6 12 dd de c2 9b 75 dd c0 b1 54 fa 91 4a 46 1a 06 b7 2e 4e 4e d2 28 b7 ff 3d e3 f3 1f 23 54 a6 fa 07 be b8 4a 05 42 7a 12 fb a3 0e af 7a 85 Data Ascii: HCmdIzS/_1K8N,^y2"G2~u8%ph1Sz}EzOynsQ7/~\qWJ&"@7ol:HFoC,?7?7Y)(\|}Lf-Nt6m9j=uTJF.NN(=#TJBzz
2025-03-25 11:48:02 UTC	1369	IN	Data Raw: 1e de 47 ee 81 19 f8 80 10 cd ec 89 f7 e3 75 48 a1 01 e1 05 5c d9 83 06 3c cf e2 4e d5 1f 33 43 25 f8 9f 55 86 e7 62 bc c8 d8 f2 21 89 99 b5 4b 0a bd 1d c0 0f 59 a9 cb fc fe 5b ae 4c 74 88 69 fb 12 ff 13 26 7c 6c 63 35 09 a4 c5 80 e4 10 d6 ac 57 bb 5e 85 0c 3e 3e 3f eb 24 bd df 19 b2 d3 ba 4b d6 5a a3 72 de a4 e8 0a fe 5c 58 fc fa d8 f5 60 e4 8d 2c d8 fd 30 73 11 af c3 27 f8 0e fe a3 07 aa 59 d6 4e 03 d9 17 5d bf 2f 6d 48 10 cd b9 d3 e6 8c fc f6 11 e0 24 dc 73 61 e0 80 90 8f d3 c1 15 74 9d dd 52 5e 0b 94 aa 3d 52 0a e5 42 c0 ad 75 23 cf 21 1b ac 06 04 90 74 ad ef 61 1b 88 7d 59 d5 90 fd 47 b4 2c 12 2e 35 4e 8a b9 c7 68 28 81 d2 2d 0d 83 3b 33 33 6e cc ac 79 86 15 88 08 93 ac 6a 08 07 a8 56 05 5d 20 c8 76 cc 0a 21 d2 99 db cc a2 6b d1 0b ff c2 20 16 41 88 Data Ascii: GuH\<N3C%Ub!KY[Lti&\|lc5W^>>?$KZr\X`,0s'YN]/mH$satR^=RBu#!ta}YG,.5Nh(-;33nyjV] v!k A
2025-03-25 11:48:02 UTC	926	IN	Data Raw: f6 5b 47 76 7f 2b 3c a0 d8 e5 0f bb fb 65 53 c7 e0 1e 19 a8 7d c7 d6 19 1b 86 e2 f3 73 fd d5 69 49 d5 4d 5a aa 6f ed a7 d2 98 60 b8 87 64 d1 dc 51 af 1b fe 11 e7 44 f0 ef 2d 94 13 1e b7 7a a1 34 1d b3 5f e7 d5 51 8e ff be 98 f0 af 09 ba 07 7d c5 1e 69 0d 89 dc 1d 1d 43 20 b3 37 f8 ba a8 e7 c2 4f df 73 7f 84 b1 38 6b 5e 11 8b c1 b6 02 f4 f5 82 11 90 73 55 1a e6 14 70 0a b3 f1 e7 9f f0 a7 d6 d1 80 ee e9 ec b4 2a b1 04 ba 14 59 0c fd 22 ef b6 f8 91 e1 f1 c7 a2 c0 52 d0 e4 4c ad 66 e3 9d 79 8f 6b 1b 80 0e 24 42 00 d1 ef 5d f4 e3 37 12 ab e1 75 03 6f b4 d7 25 67 67 82 3b d9 e5 21 eb a5 a1 18 77 07 d2 19 b8 10 61 ea 33 bf e3 2e 2e 45 89 38 b5 05 04 3d af 98 9e 04 70 c8 da ee 13 d8 e0 60 7f 88 da 08 83 a0 a8 47 d8 b1 42 8a 00 2a 74 cc de aa 96 f6 79 fa d5 1f 16 Data Ascii: [Gv+<eS}siIMZo`dQD-z4_Q}iC 7Os8k^sUpY"RLfyk$B]7uo%gg;!wa3..E8=p`GBty

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	740	OUT	GET /captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/challenge/image_label_area_select/challenge.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/acf13793a23ece2b1c4e6b83f9be250b7baf3696/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:03 UTC	429	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:03 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close etag: W/"ed6da2e0a3112945dafa62721db01560" Cache-Control: max-age=3600 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2d4fee7041ec-EWR
2025-03-25 11:48:03 UTC	940	IN	Data Raw: 37 64 65 37 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 61 72 65 61 5f 73 65 6c 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 73 2c 6f 2c 6e 2c 68 2c 61 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 3d 73 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 22 64 65 66 61 75 6c 74 22 29 3f 73 5b 22 64 65 66 61 75 6c 74 22 5d 3a 73 2c 6e 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 22 64 65 66 61 75 6c 74 22 29 3f 6e 5b 22 64 65 66 61 75 6c 74 22 5d 3a 6e 3b 66 75 6e 63 74 Data Ascii: 7de7/* https://hcaptcha.com/license */var image_label_area_select=function(t,i,e,s,o,n,h,a,r){"use strict";s=s&&Object.prototype.hasOwnProperty.call(s,"default")?s["default"]:s,n=n&&Object.prototype.hasOwnProperty.call(n,"default")?n["default"]:n;funct
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 3a 30 2c 70 6f 73 69 74 69 6f 6e 3a 22 61 62 73 6f 6c 75 74 65 22 2c 6f 76 65 72 66 6c 6f 77 3a 22 68 69 64 64 65 6e 22 7d 29 2c 74 68 69 73 2e 24 69 6d 61 67 65 2e 63 73 73 28 7b 6f 70 61 63 69 74 79 3a 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3f 31 3a 30 7d 29 2c 6e 75 6c 6c 21 3d 3d 74 68 69 73 2e 5f 69 6d 61 67 65 26 26 74 68 69 73 2e 24 69 6d 61 67 65 2e 62 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 28 74 68 69 73 2e 5f 69 6d 61 67 65 2c 74 2c 69 2c 7b 63 6f 76 65 72 3a 21 30 2c 63 65 6e 74 65 72 3a 21 30 7d 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 74 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 69 7d 2c 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 69 2e 4c 6f 61 64 Data Ascii: :0,position:"absolute",overflow:"hidden"}),this.$image.css({opacity:this._visible?1:0}),null!==this._image&&this.$image.backgroundImage(this._image,t,i,{cover:!0,center:!0}),this.width=t,this.height=i},l.prototype.load=function(t){var e=this;return i.Load
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 5f 76 69 73 69 62 6c 65 3d 74 2c 74 68 69 73 2e 63 73 73 28 7b 64 69 73 70 6c 61 79 3a 74 68 69 73 2e 68 61 73 45 78 61 6d 70 6c 65 73 28 29 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 2c 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 74 3f 22 23 66 66 66 22 3a 22 23 65 36 65 36 65 36 22 7d 29 3b 66 6f 72 28 76 61 72 20 69 3d 2d 31 3b 2b 2b 69 3c 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 69 5d 2e 64 69 73 70 6c 61 79 28 74 29 7d 2c 70 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 2c 69 3d 2d 31 3b 69 66 28 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 Data Ascii: display=function(t){this._visible=t,this.css({display:this.hasExamples()?"block":"none",backgroundColor:t?"#fff":"#e6e6e6"});for(var i=-1;++i<this.children.length;)this.children[i].display(t)},p.prototype.clear=function(){var t,i=-1;if(this.children.lengt
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 3a 7b 6d 61 69 6e 3a 7b 66 69 6c 6c 3a 22 23 36 61 36 61 36 61 22 7d 7d 7d 7d 29 3b 76 61 72 20 64 3d 6e 65 77 20 49 6d 61 67 65 28 32 30 30 2c 32 30 30 29 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 69 2e 45 78 74 65 6e 64 2e 73 65 6c 66 28 74 68 69 73 2c 69 2e 44 6f 6d 43 6f 6d 70 6f 6e 65 6e 74 2c 22 6c 6f 61 64 69 6e 67 2d 69 6e 64 69 63 61 74 6f 72 22 29 2c 74 68 69 73 2e 24 69 63 6f 6e 3d 74 68 69 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 2e 69 63 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 69 2e 45 78 74 65 6e 64 2e 73 65 6c 66 28 74 68 69 73 2c 69 2e 44 6f 6d 43 6f 6d 70 6f 6e 65 6e 74 2c 22 69 6d 61 67 65 22 29 2c 74 68 69 73 2e 77 69 64 74 68 3d 30 2c 74 68 69 73 2e 68 65 69 67 68 74 3d 30 2c 74 68 69 73 2e 73 74 61 74 65 3d 7b Data Ascii: :{main:{fill:"#6a6a6a"}}}});var d=new Image(200,200);function y(){i.Extend.self(this,i.DomComponent,"loading-indicator"),this.$icon=this.createElement(".icon")}function g(){i.Extend.self(this,i.DomComponent,"image"),this.width=0,this.height=0,this.state={
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 59 58 67 74 62 6e 4d 6a 49 6a 34 67 50 48 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 69 42 79 5a 47 59 36 59 57 4a 76 64 58 51 39 49 69 49 67 65 47 31 73 62 6e 4d 36 65 47 31 77 50 53 4a 6f 64 48 52 77 4f 69 38 76 62 6e 4d 75 59 57 52 76 59 6d 55 75 59 32 39 74 4c 33 68 68 63 43 38 78 4c 6a 41 76 49 69 42 34 62 57 78 75 63 7a 70 34 62 58 42 4e 54 54 30 69 61 48 52 30 63 44 6f 76 4c 32 35 7a 4c 6d 46 6b 62 32 4a 6c 4c 6d 4e 76 62 53 39 34 59 58 41 76 4d 53 34 77 4c 32 31 74 4c 79 49 67 65 47 31 73 62 6e 4d 36 63 33 52 53 5a 57 59 39 49 6d 68 30 64 48 41 36 4c 79 39 75 63 79 35 68 5a 47 39 Data Ascii: PSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50YXgtbnMjIj4gPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 71 65 6f 71 61 71 72 72 4b 32 75 72 37 43 78 73 72 4f 30 74 62 61 33 75 4c 6d 36 75 37 79 39 76 72 2f 41 77 63 4c 44 78 4d 58 47 78 38 6a 4a 79 73 76 4d 7a 63 37 50 30 4e 48 53 30 39 53 70 42 68 4d 51 32 64 64 67 43 64 33 65 33 4e 38 4c 55 67 41 56 47 4f 62 6e 35 77 41 43 57 64 66 61 37 74 6f 45 37 41 58 76 37 2f 46 4c 42 67 66 6f 2b 76 73 47 56 52 4c 30 41 4f 46 52 2b 52 65 51 6e 72 30 6a 44 76 59 70 33 49 63 67 43 6f 4f 43 45 43 30 34 68 46 68 51 59 70 46 79 43 7a 4f 65 36 2b 5a 6b 48 73 57 4b 54 7a 78 2b 42 4e 68 51 43 44 36 4e 4b 4d 33 2f 39 62 73 6e 63 69 54 4a 4a 69 31 64 31 68 4f 53 73 69 59 47 6a 6b 6c 69 79 70 79 70 52 4f 64 4f 67 54 38 77 32 6b 52 5a 45 75 48 50 69 44 6d 50 67 75 79 52 63 47 68 4e 4a 41 2b 56 4c 69 30 53 56 65 72 4c 48 53 65 64 Data Ascii: qeoqaqrrK2ur7CxsrO0tba3uLm6u7y9vr/AwcLDxMXGx8jJysvMzc7P0NHS09SpBhMQ2ddgCd3e3N8LUgAVGObn5wACWdfa7toE7AXv7/FLBgfo+vsGVRL0AOFR+ReQnr0jDvYp3IcgCoOCEC04hFhQYpFyCzOe6+ZkHsWKTzx+BNhQCD6NKM3/9bsnciTJJi1d1hOSsiYGjkliypypROdOgT8w2kRZEuHPiDmPguyRcGhNJA+VLi0SVerLHSed
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 59 75 30 45 42 44 65 43 35 32 6d 65 38 37 75 49 30 67 62 50 75 4a 42 48 70 6a 64 49 52 50 4b 33 69 49 65 59 49 75 66 34 31 47 69 79 77 49 68 5a 4e 4e 43 43 6d 4a 6d 42 57 51 4b 6e 79 4f 6e 6f 47 62 4b 5a 53 55 4b 70 6d 4a 6f 56 5a 39 6e 6f 35 76 71 43 52 72 6f 36 51 6c 5a 4b 61 59 72 71 2b 72 6e 72 63 7a 73 62 32 7a 74 62 61 33 43 72 6d 35 57 36 36 39 76 69 54 41 77 63 66 45 75 63 4c 49 79 51 44 4c 6d 62 66 4f 7a 38 33 52 6f 79 49 34 31 49 6b 2b 71 4e 65 72 32 64 72 62 4f 64 36 6e 6f 61 72 69 6a 65 48 6c 73 64 50 6f 36 5a 76 73 34 2b 72 76 6f 77 76 79 38 35 44 31 75 76 66 34 52 75 33 44 34 38 37 66 6e 34 49 42 4a 77 32 38 67 39 41 67 6d 31 42 58 45 69 70 63 57 4b 61 68 51 79 77 51 4a 55 36 6b 65 41 62 67 78 53 77 57 4e 59 4c 68 32 4a 48 65 78 34 63 65 52 Data Ascii: Yu0EBDeC52me87uI0gbPuJBHpjdIRPK3iIeYIuf41GiywIhZNNCCmJmBWQKnyOnoGbKZSUKpmJoVZ9no5vqCRro6QlZKaYrq+rnrczsb2ztba3Crm5W669viTAwcfEucLIyQDLmbfOz83RoyI41Ik+qNer2drbOd6noarijeHlsdPo6Zvs4+rvowvy85D1uvf4Ru3D487fn4IBJw28g9Agm1BXEipcWKahQywQJU6keAbgxSwWNYLh2JHex4ceR
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 78 36 7a 4b 4d 53 55 46 55 41 4a 65 77 34 2b 64 45 6d 71 36 45 65 49 34 4e 5a 4f 41 50 48 73 52 44 45 34 45 41 51 30 55 71 49 61 57 4a 46 56 4c 54 35 66 73 34 4d 4b 54 46 6b 53 54 62 4e 52 49 48 79 6f 79 36 6c 76 56 4d 7a 4e 6b 52 53 4e 6b 34 5a 59 6e 4d 78 5a 6b 78 4d 78 73 31 64 4e 2f 30 48 4b 77 6a 79 43 63 7a 6f 47 32 51 6d 53 51 6d 4b 36 53 72 4d 45 53 57 52 69 49 6e 31 52 62 50 6f 53 2b 6b 49 6a 6d 6a 56 63 4f 35 4a 74 45 51 68 4f 31 4b 6c 67 63 4b 45 68 45 41 41 43 48 35 42 41 55 44 41 41 55 41 4c 41 77 41 55 67 43 77 41 43 51 41 41 41 58 2f 59 43 47 4f 5a 46 6b 77 55 6d 71 75 62 4f 75 2b 73 4a 67 59 63 68 4c 66 65 46 35 61 74 61 79 33 6b 4d 68 68 53 43 52 43 66 73 69 6b 59 67 4a 34 4f 4a 39 51 52 58 4b 4b 57 79 77 4e 32 4b 78 32 4d 59 55 57 76 30 Data Ascii: x6zKMSUFUAJew4+dEmq6EeI4NZOAPHsRDE4EAQ0UqIaWJFVLT5fs4MKTFkSTbNRIHyoy6lvVMzNkRSNk4ZYnMxZkxMxs1dN/0HKwjyCczoG2QmSQmK6SrMESWRiIn1RbPoS+kIjmjVcO5JtEQhO1KlgcKEhEAACH5BAUDAAUALAwAUgCwACQAAAX/YCGOZFkwUmqubOu+sJgYchLfeF5atay3kMhhSCRCfsikYgJ4OJ9QRXKKWywN2Kx2MYUWv0
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 4f 35 32 4e 51 78 2f 7a 66 4e 45 2b 34 39 4c 38 4c 48 53 43 64 58 77 77 56 33 6d 49 67 49 57 4c 4b 34 4f 4f 51 6f 77 73 50 6f 69 55 65 35 47 58 49 35 53 50 51 5a 67 6b 65 4a 71 49 6e 53 4f 4b 52 6f 70 6e 6d 35 75 69 41 61 43 55 71 6f 79 48 71 49 2b 6b 64 71 79 61 72 6f 56 59 73 61 6d 59 74 61 32 33 63 5a 4f 36 73 70 65 39 74 72 39 79 77 71 69 52 53 63 57 68 72 33 78 56 71 38 6d 37 69 35 2f 4e 65 63 76 51 49 74 50 55 75 4e 66 4f 78 31 36 77 33 49 4b 7a 5a 4e 2f 67 32 6f 55 33 35 49 37 4c 36 48 50 68 35 2b 32 43 37 2f 42 74 7a 2b 76 53 39 47 6e 32 39 32 44 35 74 50 47 6a 34 2b 2f 66 45 6e 6e 69 42 71 59 78 4e 38 5a 67 6d 49 42 32 32 43 6c 55 77 38 67 68 51 49 52 64 4c 42 4b 71 70 76 48 4e 49 6f 5a 57 74 6b 33 63 36 4b 31 6a 45 34 68 72 6f 6d 41 46 47 32 6d Data Ascii: O52NQx/zfNE+49L8LHSCdXwwV3mIgIWLK4OOQowsPoiUe5GXI5SPQZgkeJqInSOKRopnm5uiAaCUqoyHqI+kdqyaroVYsamYta23cZO6spe9tr9ywqiRScWhr3xVq8m7i5/NecvQItPUuNfOx16w3IKzZN/g2oU35I7L6HPh5+2C7/Btz+vS9Gn292D5tPGj4+/fEnniBqYxN8ZgmIB22ClUw8ghQIRdLBKqpvHNIoZWtk3c6K1jE4hromAFG2m
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 58 55 73 43 30 4f 33 61 41 77 49 77 44 4e 33 79 58 41 33 4b 4a 6d 75 49 7a 72 73 57 6c 37 4f 67 66 73 50 66 42 31 32 64 6e 31 42 59 49 46 43 66 33 47 49 46 59 4f 44 47 6c 47 47 6a 42 4f 4b 69 70 4d 58 6a 6f 2b 58 66 4a 57 56 6b 33 53 5a 68 4a 52 58 50 34 69 64 6c 6f 78 4b 6f 61 4b 62 59 61 65 65 69 4b 75 61 72 61 53 76 66 36 6d 79 64 62 53 75 74 6e 36 78 75 61 79 37 4e 67 53 39 69 69 4e 79 77 4d 48 43 65 73 57 2b 66 4d 6d 36 79 30 44 4e 7a 6d 34 70 30 4e 46 6d 4f 32 37 55 69 38 6a 59 61 63 69 63 33 57 4f 42 34 46 76 53 30 2b 52 56 7a 2b 66 6f 36 56 50 72 52 4f 62 75 53 2f 41 76 78 50 4a 45 78 39 62 31 54 66 66 78 39 41 47 69 35 77 38 48 77 49 44 36 63 42 55 38 69 46 43 65 51 6e 38 55 53 68 6d 52 4f 43 37 68 77 33 6f 4d 47 33 62 37 56 50 42 4f 78 43 4f 52 Data Ascii: XUsC0O3aAwIwDN3yXA3KJmuIzrsWl7OgfsPfB12dn1BYIFCf3GIFYODGlGGjBOKipMXjo+XfJWVk3SZhJRXP4idloxKoaKbYaeeiKuaraSvf6mydbSutn6xuay7NgS9iiNywMHCesW+fMm6y0DNzm4p0NFmO27Ui8jYacic3WOB4FvS0+RVz+fo6VPrRObuS/AvxPJEx9b1Tffx9AGi5w8HwID6cBU8iFCeQn8UShmROC7hw3oMG3b7VPBOxCOR

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	427	OUT	GET /getcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:03 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 25 Mar 2025 11:48:03 GMT Content-Type: text/plain Content-Length: 18 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2d546b48d954-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 11:48:03 UTC	18	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 Data Ascii: Method Not Allowed

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	762	OUT	GET /tip/17796e3422048d395ba93eafd6f1bcda8d70c8da481ed12059c9523169ab9cb6/c7b2143adacff28112abcd1f9929fc22650cd45a163fd652c7f33ced6378909b.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:03 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:03 GMT Content-Type: image/jpeg Content-Length: 2722 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 26 Mar 2025 11:48:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925e2d545bc61016-EWR
2025-03-25 11:48:03 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222dd"}!1AQa"q2
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 00 5e 8c a8 04 fc f8 1e ff 00 fd 7a 4f 2d ff 00 bd fa 9a 69 ce d7 07 b0 3f c9 87 f4 a4 9a 61 a1 15 db b4 72 28 56 60 36 fa fb 9a 29 b7 df eb 97 fd df ea 68 a7 a1 2f 72 d0 e8 3f de 5f fd 96 91 0e 08 38 24 63 b0 cf 65 a7 00 4a f1 d4 10 7f 45 35 5a fa ea 0d 36 c2 7b db c7 48 ed e0 42 f2 3b 76 50 3f dd a5 6b a2 ba 13 48 f1 c5 09 66 3b 11 70 59 9f 80 06 47 24 9e 9d 2b 89 d4 be 2d f8 37 48 97 ca 7d 4c dc ca 83 95 b5 8c c9 cf 1d fa 7e b5 e2 1e 3f f8 91 a8 78 c2 f5 e0 81 9e db 48 46 fd d4 0b c1 7f f6 9f 03 9f a7 41 5c 2e 0e 46 01 fd 7d bd bd a8 f3 26 f6 d1 1f 4c da fc 70 f0 75 d0 75 92 5b cb 6e 30 0c 90 1c 1f bd cf 19 c5 5c b8 f8 c5 e0 98 26 2b fd a7 24 b8 3d 62 b7 76 1f c5 ed 5f 2c 2f dc fc 3f f8 aa 77 53 d3 f4 ff 00 eb 53 0b 9d af c5 4f 13 5a 78 b3 c6 06 fb 4d Data Ascii: ^zO-i?ar(V`6)h/r?_8$ceJE5Z6{HB;vP?kHf;pYG$+-7H}L~?xHFA\.F}&Lpuu[n0\&+$=bv_,/?wSSOZxM
2025-03-25 11:48:03 UTC	476	IN	Data Raw: f7 7f a9 a2 81 32 d0 e8 3f de 5f fd 96 88 fe f8 fa 7f 45 a0 7d dc fa 32 ff 00 ec b4 dc 0c 0f f0 f6 03 fa 52 6a ea c5 74 3c 67 e3 2f c3 99 6e 8b 78 ab 4a 87 74 a8 07 db 61 41 f7 94 11 fb c1 f4 ef f9 d7 82 8f e1 fa 0f e4 b5 f6 f9 54 60 43 00 41 ea 08 c8 35 e2 be 3f f8 2e d7 13 c9 aa 78 55 17 7b 12 d2 d8 9e 06 78 c9 43 d0 7f bb f9 53 25 a3 c2 17 ee 7e 07 ff 00 66 a9 1b be 3d 7f a9 ad bf f8 41 fc 54 b2 98 0f 87 b5 2f 30 03 c0 b7 63 fd ee f5 3b 78 07 c5 be 66 c3 e1 cd 47 27 90 3c 83 8f e5 42 11 cc 85 23 b7 d3 8f fe b5 3f b8 ff 00 3e 95 d6 4b f0 cb c5 f0 e9 92 5f c9 a0 ce b1 47 cb 26 14 c9 8f 5d 80 66 b9 71 04 c6 40 82 29 0b e7 1b 42 1c e7 3e 98 a7 70 64 2b fd 7f a0 ad 1d 1f 47 bd d7 b5 48 34 cd 3e 13 2d cc e7 6a 81 d0 75 c9 3e 80 56 ff 00 86 7e 18 f8 a3 c4 b3 Data Ascii: 2?_E}2Rjt<g/nxJtaAT`CA5?.xU{xCS%~f=AT/0c;xfG'<B#?>K_G&]fq@)B>pd+GH4>-ju>V~

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	762	OUT	GET /tip/6d18569700b316d157a0f53740515baf305a2df540e1b5beb3913fbe92011142/d43d28d4cd4ea93b6ed28ca1909786c460d7756c640b0a468ed67784ed02a07c.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:03 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:03 GMT Content-Type: image/jpeg Content-Length: 3066 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 26 Mar 2025 11:48:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925e2d545a3842a1-EWR
2025-03-25 11:48:03 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222dd"}!1AQa"q2
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 1d 33 c0 c7 7f f3 db b5 34 fa 9e 49 fc 7f cf f5 fa 52 f5 12 8d 83 19 3c 91 bb fc fe 7f cc f5 a7 29 ce 78 e7 b8 ff 00 3f e4 fd 69 36 64 75 e7 ae 33 fe 7f 3a 4e 4f b3 0f 6f f3 fe 79 14 5d 31 ee 2b 2a 13 93 8e 7f da 23 f9 51 48 5c 67 97 65 3d c0 93 1f fe bf ad 14 ef 2e e4 7b 31 48 38 cf 5c f5 1d 7f fd 7f d6 90 1d a7 20 e4 1f f3 fe 4f e0 69 e3 e6 1e 87 a7 3f e7 fc f5 15 15 c4 b1 db 41 24 f3 3a a4 51 a9 69 0b 74 03 19 27 f2 fc fe b4 b7 d1 94 9a 61 2c f1 c1 13 48 ee b1 c6 a0 b3 3b 1d a1 40 f7 3d 31 eb da bc df c4 3f 1b 3c 37 a3 97 87 4f f3 75 2b 95 38 3e 48 db 1e 47 6d c7 fa 03 8e a6 bc 9f e2 2f c4 8b df 17 6a 12 da da 4c f0 e8 b1 b6 22 89 5b fd 76 3a 3b 9e fe a0 1e 00 e4 f3 5c 01 39 ff 00 3f e7 ff 00 af d4 d3 48 57 e8 8f 54 d4 3e 3c f8 92 e2 52 6c 2d 6c 6c e3 Data Ascii: 34IR<)x?i6du3:NOoy]1+*#QH\ge=.{1H8\ Oi?A$:Qit'a,H;@=1?<7Ou+8>HGm/jL"[v:;\9?HWT><Rl-ll
2025-03-25 11:48:03 UTC	820	IN	Data Raw: fa ff 00 cf f9 e2 9e 06 3f cf f9 ff 00 eb 74 1c d0 36 c4 23 af 3c f7 cf f5 ff 00 3c 1e b4 d3 c7 5f d7 f5 ff 00 eb ff 00 85 3f be 07 51 fe 7a 76 ff 00 20 d2 11 f8 7e 9f e7 fa 7d 29 89 68 26 78 e7 f5 ff 00 3f 9f 6a 40 0e 7b e7 fc ff 00 9f a7 5a 5c 73 d3 9f a7 f9 ff 00 01 d6 9c 07 40 06 73 d0 01 9f f3 fd 7a 9a 43 6c e8 3c 11 e1 d9 7c 4f e2 db 0d 35 17 31 b3 87 99 80 3f 2c 6b c9 3f 97 03 b9 cd 7d 83 18 44 45 54 00 20 00 2e de c3 b7 ff 00 5a bc d3 e1 07 82 4f 87 3c 3e 75 5b d8 8a ea 57 eb b8 86 eb 1c 5d 40 fc 7a 93 d7 a7 a5 7a 48 38 e4 0e 3b 8f f3 fe 4f 51 4b 71 a5 a0 92 28 dd ca c6 78 e3 72 93 fc a8 a7 17 23 18 20 83 ce 4c 98 ff 00 f5 fd 68 aa bc bb 11 c8 c4 ef 93 ce 7a 1e bf 87 f5 f7 a1 48 0d f3 7f 3f f3 d7 d7 f0 a7 e0 11 d3 20 f5 1f e7 fc f7 14 c2 39 c1 fc Data Ascii: ?t6#<<_?Qzv ~})h&x?j@{Z\s@szCl<\|O51?,k?}DET .ZO<>u[W]@zzH8;OQKq(xr# LhzH? 9

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	762	OUT	GET /tip/390530c47119f9bf4170756bf47045d8eff1fd9f9eb976b09c79b7add37ed2c3/a6a3016ce8938edd51637bbe2c164c899f896a136aca5b06fa1978d50ef83688.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:03 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:03 GMT Content-Type: image/jpeg Content-Length: 3133 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 26 Mar 2025 11:48:03 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925e2d545d614334-EWR
2025-03-25 11:48:03 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 64 00 64 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222dd"}!1AQa"q2
2025-03-25 11:48:03 UTC	1369	IN	Data Raw: 88 18 e1 c4 6a a0 fb f2 7f fd 55 d6 78 4f e2 06 89 e3 37 96 3d 2d 6e 84 90 a8 69 12 58 76 ed c9 e0 67 a6 7d 07 e2 6b e4 6c 7f 9f f3 fc bb 57 d3 1f 06 3c 39 26 87 e0 df b6 5c 47 b6 e3 52 61 30 07 39 11 e3 0a 31 ef c9 f7 cf 3c 53 64 a4 ae 7a 46 32 79 23 77 f9 fc ff 00 99 eb 4e 53 9c f1 cf 71 fe 7f c9 fa d2 6c c8 eb cf 5c 67 fc fe 74 9c 9f 66 1e df e7 fc f2 29 5d 32 f7 15 95 09 c9 c7 3f ed 11 fc a8 a4 2e 33 cb b2 9e e0 49 8f ff 00 5f d6 8a 77 97 72 3d 98 a4 1c 67 ae 7a 8e bf fe bf eb 48 0e d3 90 72 0f f9 ff 00 27 f0 34 f1 f3 0f 43 d3 9f f3 fe 7a 8a 86 e6 68 ad 60 92 e2 79 16 38 63 52 d2 33 9e 14 77 3f e7 af d6 96 fa 32 93 4c 74 92 a4 68 58 b2 a2 28 25 98 9c 00 07 5e 4f 4c 7a f6 af 2b f1 5f c6 fd 2b 47 9a 5b 3d 16 dc ea 37 28 76 99 b3 b6 25 23 d3 b9 c7 e4 3a Data Ascii: jUxO7=-niXvg}klW<9&\GRa091<SdzF2y#wNSql\gtf)]2?.3I_wr=gzHr'4Czh`y8cR3w?2LthX(%^OLz+_+G[=7(v%#:
2025-03-25 11:48:03 UTC	887	IN	Data Raw: 78 5e 7f 09 78 a2 eb 4e 91 49 83 26 4b 77 27 21 e3 3c 8e 7b e3 b8 f6 c8 ae 6c 8c fd 7f 3f f3 fd 7e b4 c4 9d 98 87 db e9 c0 fc bf fa d4 01 fe 7f cf f9 cf 4a 4e bf fe bf f3 fe 78 a7 81 8f f3 fe 7f fa dd 07 34 0d b1 08 eb cf 3d f3 fd 7f cf 07 ad 34 f1 d7 f5 fd 7f fa ff 00 e1 4f ef 81 d4 7f 9e 9d bf c8 34 84 7e 1f a7 f9 fe 9f 4a 62 5a 09 9e 39 fd 7f cf e7 da 90 03 9e f9 ff 00 3f e7 e9 d6 97 1c f4 e7 e9 fe 7f c0 75 a7 01 fe 71 fe 7f fa fd 4d 21 b6 20 19 f9 47 53 d3 00 e7 f0 ff 00 39 c5 7d 67 f0 bf c3 6d e1 8f 03 d9 db 4c bb 6e 6e 3f d2 26 c7 66 6e 83 f0 18 15 e2 9f 09 3c 11 27 88 f5 f4 d5 2e e1 27 4b b1 7d ec 5b a4 b2 0e 42 fb 8e e4 fb 57 d3 00 e3 90 38 ee 3f cf f9 3d 45 2d c1 21 24 51 bb 95 8c f1 c6 e5 27 f9 51 4e 2e 46 30 41 07 9c 99 31 ff 00 eb fa d1 55 79 Data Ascii: x^xNI&Kw'!<{l?~JNx4=4O4~JbZ9?uqM! GS9}gmLnn?&fn<'.'K}[BW8?=E-!$Q'QN.F0A1Uy

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:03 UTC	764	OUT	GET /tip/ed27536817dfa4395b67ce00044609ae7f450f0cdf8a26361a87ff65339cff22/c3fb8249f125b9a5b17549c984157fd31f6c6cb696578637c14cd44993f1219d.jpg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive Origin: https://newassets.hcaptcha.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:04 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:04 GMT Content-Type: image/jpeg Content-Length: 84206 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Wed, 26 Mar 2025 11:48:04 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925e2d546f3e7cf4-EWR
2025-03-25 11:48:04 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 00 01 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC}!1AQa"q2
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: 39 df 8a bf 14 2d be 16 7c 3e d4 fc 7f 7c ef 75 16 9b 0a c8 f0 45 7b 6e ac c0 ba a7 07 61 c7 de ad 28 60 b0 b5 6a a8 5d 2b f9 1e 76 6b 8b a7 96 e0 67 88 8b 72 e5 e8 97 7d 0f 9b ef bf e0 ae bf 0c 34 c9 5a 2b df 05 6a e8 14 9c b2 ea 56 cc 0f e5 1d 7d ce 0b c3 8c 46 3e ac 61 4a 69 df af 2f fc 13 e5 31 9c 61 43 09 4e 32 94 1b 6d 2d 3f a9 09 67 ff 00 05 72 f8 77 a9 40 6e b4 cf 87 fa b5 c4 43 8d eb aa db 0e 7d c1 8b 8f c6 ba 31 9e 18 d7 c1 d6 e4 ab 55 2f fb 73 fe 09 e4 47 c4 9c 13 c4 aa 33 a4 e3 e6 da b7 fe 94 17 9f f0 56 3f 07 5b dc db 25 ff 00 c1 ef 11 a6 5a 4e 24 bb b7 60 1c 27 18 da a3 27 e6 cd 79 54 78 26 75 31 71 a3 4e 6a cf af 2e eb ef 3d a7 c6 38 69 53 e7 a4 bd a7 f8 64 bf cd 99 ef ff 00 05 8e f0 05 bd b4 33 dd 7c 28 f1 12 09 23 56 2f 2d fd b2 02 4a 83 Data Ascii: 9-\|>\|uE{na(`j]+vkgr}4Z+jV}F>aJi/1aCN2m-?grw@nC}1U/sG3V?[%ZN$`''yTx&u1qNj.=8iSd3\|(#V/-J
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: fb 6d 78 63 4b bd b8 b3 8b 4a b8 9d 6d e7 68 9d e2 d4 ad 8f ce a7 04 63 66 7f 9d 7e 83 83 f0 ce a6 2a 2b 96 b4 55 d2 7a c3 a3 d6 db 9f 27 5b 8b 28 53 c5 ba 32 56 b3 7a e9 b2 f9 91 c5 fb 71 78 7a 6d 36 7b e1 e1 dd 42 3f 2e 36 28 1a e6 06 05 94 03 8c 88 fd c7 1e f5 cd 2f 0e eb 46 b4 a9 d3 a8 9b 5f dd f5 26 af 19 e5 94 6a c6 0e 77 6d f7 ff 00 87 23 3f b6 e6 8b 63 72 74 f7 f0 95 fa c7 18 8a 38 dd 2e a1 da 3e 4c 92 4b 21 c7 4c fe 35 ea 61 3c 28 c5 e2 f0 8e bc ab c5 59 5e ce 2c c7 2e e3 4a 39 8d 7a b0 85 37 15 4d 37 76 ef 7f 96 85 99 3f 6d 5d 06 32 15 b4 4b 9c b6 7a ea 36 c3 9f 4f f5 7c 7b 7a d4 50 f0 a7 15 88 a2 ea 46 ac 74 e9 c8 61 5b 8f 72 ea 6e 5c d7 d3 fa ee 47 73 fb 6e f8 72 ca 05 b9 d4 34 a9 6d 91 e4 08 af 36 b1 6a a0 b9 e8 a0 94 e4 d6 b1 f0 a2 71 a2 a7 Data Ascii: mxcKJmhcf~*+Uz'[(S2Vzqxzm6{B?.6(/F_&jwm#?crt8.>LK!L5a<(Y^,.J9z7M7v?m]2Kz6O\|{zPFta[rn\Gsnr4m6jq
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: 18 48 d6 ab 51 c6 6f c9 fe 86 5d f7 c2 9f 16 7f 68 2d cc fb 50 ae dc 23 de c1 b5 b1 81 d3 6e 79 c8 fc eb 18 71 5e 41 ec 64 d4 1d fe 67 0f d5 b0 98 de 68 3c 63 57 fe ec 99 e7 31 0f 8a df 14 75 ad 57 c2 9f b3 47 85 f4 2f 13 ea 3a 3f 9d f6 e6 d4 bc 63 63 63 6e d2 46 01 78 e1 0e 54 dc 32 ee 4c ed 23 05 80 cf 5a f8 ae 21 f1 2f 2b 8e 07 ea b4 12 f6 8d ed 67 7f bc fd 23 87 f8 32 58 8c a3 9a 95 66 d2 4a fa 35 ff 00 0d f3 48 f0 6d 5f f6 be f8 a3 f0 e3 e2 76 ab f0 cf f6 8b f8 15 7b e1 99 2d ae 64 5b 81 0c 4e 93 5a 6e 89 7e 73 1b fd e4 ce 4e 54 9e 2b c4 e1 9f 13 2a e1 30 af 0b 88 a4 db 97 5b 6c 6d 99 f0 56 1e 79 5c a2 aa a7 fe 67 d1 7a 6f 82 74 27 89 f5 dd 12 fa 1d 42 1d 42 c6 09 20 bd b6 f9 e3 7c db 31 c0 23 a9 19 fc f8 af d6 b2 3e 28 79 ae 0a 74 79 bd e6 95 97 96 Data Ascii: HQo]h-P#nyq^Adgh<cW1uWG/:?cccnFxT2L#Z!/+g#2XfJ5Hm_v{-d[NZn~sNT+*0[lmVy\gzot'BB \|1#>(yty
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: dd 6a df af a9 f2 52 78 88 e2 25 4a aa 7b 6f 63 0f c6 3a cd dd a0 bd d4 66 b8 50 fa 55 9c 5e 4c 73 dd 40 cb e6 4b 28 dd b9 4a f5 f2 d7 1e b8 27 d6 b0 c2 aa 18 ac c9 50 e4 8b 4f d7 fc cf bf e1 8c 1b a3 85 94 95 57 19 7a 48 a7 1e a5 a3 ea 5e 19 17 5a 25 c6 a5 39 74 cb 59 2d f4 26 3b 3c 0c ba 96 08 72 07 f0 fa 8f a1 ae 7c 4e 5b 8f c2 66 3a 28 a5 d3 7d be f3 ea 70 15 72 39 49 62 71 37 bc 74 7a 3d 5f 70 d6 74 58 df 51 b4 7b 8d 46 33 0c 16 d3 2f 9f 70 c3 20 79 6a d8 e0 00 7e f5 7d 1e 0a bd 48 51 5a 5d ca cf 4f 57 fe 46 18 4e 36 c0 d1 c4 35 42 95 e5 26 ad e9 7e e3 21 8e c2 c2 6b 8b b9 11 ca c7 ab 4a 23 7e e4 18 1d 41 c7 a1 c8 39 f6 af 22 b4 71 58 cc c6 34 e2 ac ac 9b 7f 36 6b 89 cd 29 e6 18 27 79 5a a3 7f 0f 95 ce 5a 4b 7b ab fb 9b cb b5 88 a3 b1 8b 33 2a 82 fb Data Ascii: jRx%J{oc:fPU^Ls@K(J'POWzH^Z%9tY-&;<r\|N[f:(}pr9Ibq7tz=_ptXQ{F3/p yj~}HQZ]OWFN65B&~!kJ#~A9"qX46k)'yZZK{3*
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: 4d 57 4c d3 92 f9 5a ef 4b 91 a5 86 5e 50 fd 99 6e 15 77 3c 01 54 6c 38 e7 24 0a fa e8 cf 0f 4e ce 6b be de ac f1 a8 d3 c6 25 27 3b d8 f7 bf f8 24 cd f4 be 26 fd 93 af 34 c9 1c ba e9 1a b4 a9 00 91 c6 e8 d2 48 5e 50 b8 e7 0a a5 b8 1e 99 ae cc 9b 32 9c 31 50 8f 33 4a cb d7 74 7e 65 c5 38 4a 98 cc 64 e3 4e 37 f4 f5 5a fa 9f 44 78 07 c3 b6 33 78 ef 40 d0 ef b5 88 2d a6 93 59 b3 91 dd cf 00 2c 61 bf 33 8c 0a fd c7 33 cc d6 1b 2e 83 51 e6 bc 24 be f4 cd 29 f0 dc ea ce 8e 1e 9d 2e 57 18 c5 bd 7c cf d2 2f 8d 1a ef fc 23 df 07 7c 49 ae 4f 2d d0 5b 5f 0d de 4a 56 da 6d a4 04 b3 2f c7 07 9e 0e 2b f9 97 ea f1 c4 d1 a9 19 ca ca d6 7f 35 6f d4 fd 43 35 9b fe cc ab 08 45 36 e1 3f 5d 9e 9f 81 f8 db a2 fe de 96 fe 02 f1 0a 78 9a ce 78 b5 0d 62 e3 4f 94 db ac d7 3b 3e cb Data Ascii: MWLZK^Pnw<Tl8$Nk%';$&4H^P21P3Jt~e8JdN7ZDx3x@-Y,a33.Q$).W\|/#\|IO-[_JVm/+5oC5E6?]xxbO;>
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: f8 b6 24 8f 5a ba 73 a4 5d 24 3b 8c 3f b9 2a f2 15 da 36 e0 c8 a0 0e 7e 61 91 5a 51 ab 5a 3e c5 5f 65 af 9e ac f0 b0 aa 9a a8 e6 a2 b4 76 5b 6c 9d bf 13 65 3c 17 06 85 04 f0 6a c6 50 87 52 73 25 ec 9c ab 11 0b 0c ff 00 bd c7 dd e7 af 35 d9 4f 1d 08 54 72 5b a4 bf 36 7c cd 48 67 33 cc a2 e8 ad 2e 73 1a 15 a5 8b eb cb 6a ba 32 5b c1 79 6a 6e 34 f9 9a 4d f7 07 64 0c a4 bb 64 ed 0e 09 f9 47 4c 0f 7a ba 59 8d 7c 4e 3a ad f5 56 ff 00 db bf af c4 f6 33 dc 3c f0 dc b3 ad 2b 3e 6e fe 65 eb 8b 69 6c 6e ae 64 49 e4 54 4b 61 23 24 3f 29 3b 60 27 69 3e f8 e6 ba 71 b0 86 2a 85 18 4b ac ac 77 70 65 59 2c bf 15 52 aa bf bf 17 f8 b5 73 ec 1f d9 8b 51 92 ff 00 f6 7a f0 f5 d2 4a 42 c9 a6 4e ad 1a cb b9 38 32 11 8e 05 7f 33 78 8d 41 61 b8 d7 13 08 b6 d5 d6 ff 00 e0 89 fb 5e Data Ascii: $Zs]$;?6~aZQZ>_ev[le<jPRs%5OTr[6\|Hg3.sj2[yjn4MddGLzY\|N:V3<+>neilndITKa#$?);`'i>qKwpeY,RsQzJBN823xAa^
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: 9f e2 7e 93 e2 dd 42 c3 e2 36 a3 aa e9 47 50 78 af da 61 33 8f 2d 3f 7a 1b 3f 29 56 24 fa 64 57 df 71 27 17 63 72 ec 25 28 cf 4b c5 a5 f3 4d 7e af f1 36 c3 e5 b4 b1 9c 4d 56 8c 1f bc a2 ed d3 53 f5 03 f6 89 bf 92 db f6 7f f1 c8 b7 bd 86 06 8b c1 da 99 f3 16 79 40 ca d9 cb c9 1b 71 da be 0f 19 05 3c 2d 48 c5 b4 dc 64 bc b6 6b b0 b1 70 c5 c3 03 29 38 a6 b9 5f 45 7e eb af 7f 53 f9 ad d1 fe 18 7c 4d fd a9 fe 20 a7 c3 cf 83 17 5a 69 6b 1b 09 e6 f1 07 88 ef 67 91 6d 2c 61 62 f9 79 1c a0 00 1d c0 2a 02 4b 1e 14 70 6b 9f 01 29 65 dc 3d 18 d4 ed d6 f7 db b9 f2 5c 1d 90 e3 f3 0c 63 af 56 9b b2 7b 69 dc fb f7 f6 59 ff 00 82 53 7e c5 1e 12 31 f8 87 e3 4f 8a f5 8f 1d ea 31 c2 d7 1a cc 6d 73 f6 1d 3c 1f 26 32 0e 42 89 55 70 54 00 5f 27 1f 77 1d 62 b7 10 ca 31 c3 c6 30 Data Ascii: ~B6GPxa3-?z?)V$dWq'cr%(KM~6MVSy@q<-Hdkp)8_E~S\|M Zikgm,aby*Kpk)e=\cV{iYS~1O1ms<&2BUpT_'wb10
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: a7 59 d5 b5 b4 d4 a4 9b ec b2 46 b1 41 3a 2c 24 97 8c b1 c0 8f 23 07 1d 4f 6a e5 a9 08 d5 6d 3d 22 ad eb bb 35 c3 e6 11 a3 4a f1 5a ff 00 c1 d8 6c cb 71 a8 f8 cf 4d d5 6f e0 86 0b 8b 8d 18 cc 60 b7 53 b2 28 cd be 63 07 3c ee c1 c9 3d c9 35 eb e5 b4 a9 d1 c3 d6 71 f2 ff 00 d2 97 fc 13 c0 e2 8a 93 ab 45 4e 6f ed 7e a5 ab 8b 5d 3e 49 66 63 71 19 2d 6a 71 ba 69 23 28 7c b0 87 18 53 c9 e7 bf 7a cf 34 c7 cf 0d 86 8b 5d 18 70 9d 4c da 15 a5 08 47 dc 6f 5d bb dc fa ab f6 71 db 07 c0 8f 0f d9 31 88 11 a7 c8 89 be 79 4e cd cf 20 38 1b 3d eb f9 b3 8c 31 2b 13 c4 98 8a b2 7a b6 bf f4 88 9f d1 19 55 0c 52 cb a1 08 a4 a3 af 45 7f 89 f5 b9 dc 6a 32 c7 33 09 22 7d cb e5 ce 01 c1 e7 10 28 ef 5e 2d 29 29 51 aa d7 91 d3 3a 73 a3 08 42 5b a5 fa b2 d5 df fc 87 ed 3f df 97 ff Data Ascii: YFA:,$#Ojm="5JZlqMo`S(c<=5qENo~]>Ifcq-jqi#(\|Sz4]pLGo]q1yN 8=1+zUREj23"}(^-))Q:sB[?
2025-03-25 11:48:04 UTC	1369	IN	Data Raw: 5f 8e 7f 67 ef d9 ef 44 d1 bc 43 a4 4b a5 d8 6b d2 1d 73 50 b6 f3 27 51 3c b7 0d b2 df cc 28 06 e0 91 47 f2 8e 8b bd fa e7 35 f1 f9 fe 23 39 c3 e1 23 87 f6 f0 76 df 67 a7 de bf af 43 e9 fc 3b c0 2a 38 2a 98 b7 59 25 6d 2f 6e bf 8f 5e ec fa a3 e1 e5 94 1e 3b 93 c3 9f 0f b5 4d 52 28 ed 5b 5d ba ba d7 cc 13 4a ee 6d 52 de 10 37 12 3f 89 32 8a 3b 66 b7 e1 e8 cf 3c 95 3a 72 6b f7 7d ac 95 bb 23 c7 cd 6b e3 ea ce a4 29 eb 16 fb ab 3d 4f b4 ff 00 68 6f da 36 e8 7c 13 f0 27 8c 3e 0b f8 d2 6d 2f c0 7e 26 91 2d 16 7b 6b 55 74 b0 b4 30 b4 71 dc 49 10 e5 95 18 16 31 f7 eb dc d7 ea 99 3e 02 8d 3a b3 95 38 a7 28 db d7 4b ea 79 4a 35 f0 f8 3a 71 71 d1 fe 87 cf 9f b4 bf 89 bf 67 5f d9 a2 e3 c3 7f 0b be 0e 7c 4e d3 ad 74 5f f8 4a 6d ee 3c 53 e2 6b b9 1d 4e a1 a8 22 06 b8 Data Ascii: _gDCKksP'Q<(G5#9#vgC;8Y%m/n^;MR([]JmR7?2;f<:rk}#k)=Oho6\|'>m/~&-{kUt0qI1>:8(KyJ5:qqg_\|Nt_Jm<SkN"

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://comylubmexicana.com.mx/award

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Windows Analysis Report
https://comylubmexicana.com.mx/award

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:12 UTC	621	OUT	GET /favicon.ico HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://comylubmexicana.com.mx/offer/box.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:14 UTC	349	IN	HTTP/1.1 302 Found Date: Tue, 25 Mar 2025 11:48:13 GMT Server: Apache Link: <https://comylubmexicana.com.mx/wp-json/>; rel="https://api.w.org/" X-Redirect-By: WordPress Location: https://comylubmexicana.com.mx/wp-includes/images/w-logo-blue-white-bg.png Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:12 UTC	764	OUT	GET /tip/a06bc93c6a44267f0a11d9430fa47ba94b9d245b0ad24270aa8aeb3e9b3bac77/5fa06c7115494af9a6acae7aee657b2e9913ce7d99e3495e2c3a22ef7a3f616e.jpg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive Origin: https://newassets.hcaptcha.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:13 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:13 GMT Content-Type: image/jpeg Content-Length: 94371 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Wed, 26 Mar 2025 11:48:13 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 925e2d8dfe1c43ed-EWR
2025-03-25 11:48:13 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 00 01 80 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCC}!1AQa"q2
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: 58 b1 b3 31 ca ab 9f 2f c9 66 f9 db bf 94 1b fb 83 a9 6f 42 05 54 e8 a5 3e 7b e9 6d fa 7a ff 00 5d 6f d6 e3 72 97 25 ba 76 1c c7 05 4c 61 9a 46 42 63 f2 94 02 17 1d 53 3c 44 9f ed 1e 4d 2e 79 cd f2 c7 45 f8 bf eb fc 85 ca 93 bb 57 7a 79 ff 00 c3 9e 73 fb 59 fe d0 7a 5f ec 9b f0 03 c4 bf b4 5e b9 a1 be a5 69 e1 9b 45 b8 9a c6 cd a3 49 2e 03 4e 91 05 59 e7 cf 3f bc 07 38 c6 06 2b a3 03 82 58 ec 44 68 26 97 35 f7 f4 bf e4 67 8a 9c b0 b4 dc e4 be 5d 4f 82 66 ff 00 83 9a be 0f 5e 6d 07 f6 63 f1 4d c6 39 5d ba b5 93 80 3f ef de 73 ed 5e e6 13 85 67 5e 6e 2a a4 57 ca d7 fb 9a 3c e8 66 d4 aa 51 73 51 b5 89 5f fe 0e 59 f8 31 0b a5 a5 d7 ec c3 e2 98 c9 60 20 41 ae c2 c2 36 c7 0a 18 c7 ba 37 c8 1c 74 ce 3a f4 1e d5 2e 02 c7 3a 3e d2 15 53 f2 b3 b3 fc 74 eb a9 e5 c7 Data Ascii: X1/foBT>{mz]or%vLaFBcS<DM.yEWzysYz_^iEI.NY?8+XDh&5g]Of^mcM9]?s^g^n*W<fQsQ_Y1` A67t:.:>St
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: 31 96 75 3b b2 54 29 7e 01 3d 4e d4 1e dd f3 4a bf 85 79 96 1e b2 a7 0a d1 bb ea e2 f4 fe bf a4 18 9e 32 c2 e1 28 29 4e 93 69 ad 2d 25 ff 00 0e 49 6f fb 6a 78 62 fb 3e 6f 82 35 34 09 10 21 ae bc b6 68 f8 e0 18 fe e4 43 03 bf 3e fe 99 54 f0 ab 1d 4e aa 8f d6 a2 dd f7 b3 fb f7 e9 76 61 53 8f 30 b4 e7 18 ca 8b 5c de 6a df 95 df c8 f6 ad 2b 5a 8b 55 d2 2d ef 56 f7 6c 77 36 c9 22 21 9e dc e0 32 82 06 31 8e fe b5 f9 86 2f 05 47 09 88 9d 2d 1c a2 da d1 75 4e c7 df 51 94 2b e1 e3 51 4b 56 93 b5 9f 53 c7 be 30 7e d7 b6 3f 07 bc 54 de 1f 93 e1 c5 fd fd 97 da 04 09 a9 5b dc c5 6e 27 90 a9 3f ea 1b 72 b8 ce 40 e4 6e 1c 83 eb f0 6b 8c e9 d7 ad 28 e1 28 4a 52 4e da 4a d7 b6 96 bb 5a 3f c2 fe a6 2a a4 9d 3e 79 a5 cb ea b6 e9 f8 9c dd 87 fc 14 93 e0 d5 e7 88 d7 46 1a 75 Data Ascii: 1u;T)~=NJy2()Ni-%Iojxb>o54!hC>TNvaS0\j+ZU-Vlw6"!21/G-uNQ+QKVS0~?T[n'?r@nk((JRNJZ?*>yFu
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: c3 12 56 3e 07 95 9c 7f 13 9d bf 45 a9 93 76 f6 4b bd ff 00 cb fa 4f 46 66 da e6 73 7f d7 f5 e9 dc 74 a9 2c 31 98 9a 55 32 bb 16 9e 52 85 81 da 3e 67 3c 72 ab d1 57 a1 35 5a 5e d1 5f f0 3f af 33 45 2f 63 1d 3e 27 f8 27 fa 9f 34 7f c1 60 6d e6 7f f8 27 17 c5 86 48 a4 69 a4 d0 60 2f b8 02 ff 00 f1 fb 6e 57 73 1e 23 ff 00 74 0e 9f 85 7b 59 04 d5 0c e6 93 49 4d a7 f2 d9 ff 00 5f 23 cd c7 c5 7d 52 4e 6e c9 f5 3f 9e a1 a2 8b f5 8d a5 ba 69 d8 61 4b b4 69 2a af 07 86 f2 c0 75 3d 39 1e b5 fb 8e 41 1a 15 b9 fd ad 0b 59 6a d7 ad fa 9f 9c 62 6a d5 c3 b9 d3 53 57 d5 db 6d 36 d3 a1 b1 65 a2 b0 d5 45 b4 96 3e 7a c8 db 1e 19 26 cb 12 54 9f 2d 89 e1 95 b9 2a c3 90 4d 7d 37 f6 7c ea 60 ed 4f 44 fa 9e 1d 2c c2 54 f0 af 9e 56 57 fb bf af c4 e9 7c 2f f0 eb 5a d5 ec e6 5b 7d Data Ascii: V>EvKOFfst,1U2R>g<rW5Z^_?3E/c>''4`m'Hi`/nWs#t{YIM_#}RNn?iaKiu=9AYjbjSWm6eE>z&T-M}7\|`OD,TVW\|/Z[}
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: e3 17 6d 7b 2f eb fa b1 f9 35 a4 7c 72 f8 5f fb 47 df f8 b2 c3 c1 de 27 d2 ef 61 d3 7c 45 73 f6 dd 1a e3 54 92 ce f6 ca e6 29 5c 19 23 8a 72 36 33 10 00 11 16 46 e3 90 4e 2b e2 a7 93 e2 2a d7 e5 a1 4f 95 bb fc 2b fa bf 7d 8f 1e be 59 4f 05 0e 4c 57 33 6d b7 a3 d1 a6 df de 7b 3e 9d f0 e3 4d bb 86 c6 59 b5 96 d7 6e ef a2 31 5c dc 68 ba 8c 26 38 e4 65 0d 19 75 72 40 cb 2b 23 70 7b 54 63 f8 67 89 23 4e 34 e3 cd 6b df 57 af a7 9a 3b b0 d8 7c a6 54 17 2c 36 e8 fb f9 1e 57 f0 db 45 f8 bd 75 af f8 d7 c2 3f 10 a0 d5 f5 bd 1f 46 f1 13 db f8 7f 56 48 6d 4c 31 ce 62 47 30 ab c8 54 ab b3 1d a6 41 c6 d2 57 d3 11 9c e4 95 e7 83 e6 72 e6 9d fd d5 bd bb bd 3f 4f 5d ca c6 e7 74 f0 11 a3 41 2b 49 b3 d4 fc 53 f0 07 c7 93 fc 34 1f f0 96 7c 16 d6 62 6d 0c 3c f1 5d 5d 5d c3 01 Data Ascii: m{/5\|r_G'a\|EsT)\#r63FN+*O+}YOLW3m{>MYn1\h&8eur@+#p{Tcg#N4kW;\|T,6WEu?FVHmL1bG0TAWr?O]tA+IS4\|bm<]]]
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: fe 68 d4 33 65 ae 60 91 9b dc 9e 00 eb c0 35 ea 70 ec 9d 2c de 84 d5 be 24 79 1c 45 52 51 c0 d7 95 af cb 6b 2f fb 7b a7 dd 7d 2d d0 fc 26 d3 fc 03 ac dd c1 0d dc 00 86 41 24 91 b6 dc bc 6c a0 36 33 81 f2 9c ed 20 f7 1c 57 f4 ee 1e 85 4c 1e 61 ec ed 75 38 ad 7c ec 7e 4f 98 d3 96 3a a5 79 bf 75 a4 be 6b b7 e6 fe 7b 1d f7 81 7e 09 4f a9 6b 0f 1c 11 31 11 79 c4 c8 18 e0 6d 29 22 ee ff 00 77 24 7e 35 e8 e2 1c 69 65 b3 8c 5e a9 af e9 1f 25 98 63 70 b1 ca 92 9d d4 a4 ba e9 df a1 eb 1a b7 c2 08 2d fc 63 e1 cf 0e 5a 5c bd 9b c8 f7 ac b2 c1 f7 a2 98 2a 34 2c 7d 46 f2 cb cf f7 ab e2 31 d8 a5 52 bc 61 55 fb be ef e3 bd ce 7e 1d c1 d6 fa bb aa ee ee bf 24 ce df 40 d3 fc 49 e1 fb 3b 2f 0f eb 5e 0b b4 fb 7c 42 29 6e 2e 9e 51 e5 44 aa 8d 21 96 45 50 4f 2d ce 3b 9c 62 bc Data Ascii: h3e`5p,$yERQk/{}-&A$l63 WLau8\|~O:yuk{~Ok1ym)"w$~5ie^%cp-cZ\*4,}F1RaU~$@I;/^\|B)n.QD!EPO-;b
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: 54 6f a4 63 16 be 69 75 f9 af b8 ef 3f 62 ff 00 da 9f e2 b7 c2 4f 14 4f a8 ea 7a 3d 8e a9 a6 5a c6 f2 c7 6f 79 3f 93 2a 91 b6 73 e5 49 92 aa c7 71 00 30 20 64 8e 2b f5 7c d3 17 84 9e 09 f3 bf 79 68 9e de 5a 7d c7 c6 4b 1b 52 85 1a b1 a6 b9 9a 6b cf b9 fb 53 ff 00 04 b5 d6 7e 09 fe d5 be 05 bf d7 ed 3c 57 05 c6 b7 26 ab 75 71 ad 68 4f 20 09 66 f2 c6 c1 43 c2 d9 07 0a b1 ae e0 4a b6 3d 85 7e 79 8a ca 60 b0 f1 c4 68 d3 d7 d3 cf ef fb cf 92 cf 71 55 ab 66 94 65 51 5b dd d3 d4 ef e5 f0 2f 88 34 ed 4b 51 d2 bc 5a 97 91 d9 68 6e a2 4d 2e 65 1f 65 8b 6c 61 c4 8c 5d 80 8a 27 27 70 c9 c7 ca 72 3a 55 e7 3f 55 c2 64 90 94 3e 29 5e ff 00 d7 f5 b9 96 5f 4a ae 23 35 9c e3 0b d9 7a 7f 56 fc 8f 05 fd a9 ff 00 68 ef 84 be 20 f1 3c 7e 32 d3 7e 28 f8 47 53 9a ea db ec 72 ea Data Ascii: Tociu?bOOz=Zoy?*sIq0 d+\|yhZ}KRkS~<W&uqhO fCJ=~y`hqUfeQ[/4KQZhnM.eela]''pr:U?Ud>)^_J#5zVh <~2~(GSr
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: f0 0a 08 34 b0 8f 65 e5 06 52 1e 50 a0 13 1e e0 cf 31 c2 e7 0d 80 aa 0f 5a 58 dc d1 46 ad a7 ab dd ff 00 97 f4 8f c8 f3 35 5f 34 af 1a 6a 36 d6 c9 79 17 ef fe 0e c7 7b a3 cd e2 eb dd 12 59 da fa 63 08 16 a9 99 2c e0 2c 48 65 fe f8 38 e4 75 ce 39 1c 57 e7 99 86 60 f1 b8 e6 a1 2d ba 5f b3 bf dc 7e 9d 97 65 9f 50 cb 61 14 f4 b6 ff 00 81 f3 c7 ed f7 e2 5d 57 f6 57 f8 36 da 9e 95 e5 ea 3a fe b1 77 06 9b a3 41 14 44 34 f2 44 0b c7 b8 f5 31 f9 45 89 39 e4 a8 19 ae 7c d3 17 5f 07 46 35 21 3f 85 dc f6 72 9c ae 9e 39 b8 cf a6 bf d7 dc 7c 8b fb 38 7f c1 48 bf 6c bb 8f 8a 5a 27 87 3c 29 e3 b8 3c 45 69 ac 34 71 69 fa 45 f5 b4 70 3c ee 0e d1 0c 32 00 5d 26 52 4a 8e 5b 23 1f 4a f0 71 9c 51 28 4d 62 b9 79 b6 e9 b3 ff 00 2f eb 73 ec b0 3c 2f 97 57 a7 ec a6 f9 3c dd ff 00 Data Ascii: 4eRP1ZXF5_4j6y{Yc,,He8u9W`-_~ePa]WW6:wAD4D1E9\|_F5!?r9\|8HlZ'<)<Ei4qiEp<2]&RJ[#JqQ(Mby/s</W<
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: 82 68 cc 40 6d f5 c9 c5 7c 66 41 87 fe cf c7 cb 13 19 5b 57 65 e7 77 fa af 4f c5 1f ae f1 0e 6b 82 e2 1a 14 68 50 a7 66 a1 ac bb e9 f7 fd e7 39 f1 1f f6 7e d7 7c 35 e3 2f 08 f8 36 d3 57 b4 86 2d 67 4a 6d 5a e2 29 6d fe 49 16 49 79 49 09 e8 3c a8 88 dc 31 b7 de bd 0c 66 77 5b 3b ab 52 97 37 c3 d3 5e 8b cb fa d8 f3 b8 67 83 70 d8 7c 8a ad 6a ba c9 bd 7b d9 6d f9 ea 7d 97 fb 28 db 7c 2a f8 66 9a 2f 8f f4 63 ac f8 37 c4 5a 46 87 bb 53 bf d1 26 50 e2 56 3b bc b7 c8 2b 32 c9 11 07 69 07 35 f2 98 5c f7 88 b0 b3 54 62 db a6 9f 2e a9 db fa ec fc 8e fc d7 c3 ee 16 c7 e5 d0 c4 4e 76 a9 d2 dd 6e 8e 27 e2 07 ed 77 f1 13 f6 8f f1 fe be bf 1a af b5 bf 17 f8 2a c9 4e 9b 30 b5 9e 48 37 db a3 ed 4b a9 61 8b 64 73 a9 dc 50 ee 52 53 23 8c 75 f3 b8 97 1f 9e ca 92 74 6b d9 ae Data Ascii: h@m\|fA[WewOkhPf9~\|5/6W-gJmZ)mIIyI<1fw[;R7^gp\|j{m}(\|f/c7ZFS&PV;+2i5\Tb.Nvn'wN0H7KadsPRS#utk
2025-03-25 11:48:13 UTC	1369	IN	Data Raw: 66 ba 7f 5f d7 cb 52 e2 ed 1b 49 5e 2f fa ba f3 3c 8f f6 ed 83 c7 6d fb 24 f8 da e3 e1 4e 80 fa c6 b1 6d a3 89 74 fb 24 87 ce dc b1 cc 92 48 aa c8 ca c7 f7 41 f0 a7 9f 4c 9c 03 d1 42 73 a5 5a 32 8c 92 b3 5b ed e6 73 e2 68 4a ad 16 a9 4b 56 b4 e8 ef e6 8f cc 6f d9 2b f6 df d0 fe 2a fc 48 d2 fe 13 f8 ff 00 e1 7c ba 56 a5 ac 6a 70 da e9 57 b6 3b ee a3 59 59 b0 bb 96 62 02 f2 57 27 27 19 ef 8a fd eb 13 0c 6d 1c ae 96 2b 0f 5a 32 49 2b eb ff 00 04 f8 2c ef 34 8b 82 85 56 a5 ca b9 75 ef e7 63 f4 7b c4 5f 0b 23 f8 6d a0 6a 36 3a 9d 9a c3 3d b5 b9 0e ee 4c 80 b6 cc 21 2f 8f de 31 27 e5 51 c6 6b e0 f1 19 c4 2b 45 fe f3 5d 4f 90 c0 e5 10 ad 8b 5c ab 5d dd f7 d7 b2 fe bc 8f 28 ff 00 85 ef f0 3f c3 be 29 bc fd 92 7c 4b ab c1 a4 f8 be c7 4d 1f d9 b2 ea c3 65 9d fa 32 Data Ascii: f_RI^/<m$Nmt$HALBsZ2[shJKVo+*H\|VjpW;YYbW''m+Z2I+,4Vuc{_#mj6:=L!/1'Qk+E]O\](?)\|KMe2

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:14 UTC	653	OUT	GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://comylubmexicana.com.mx/offer/box.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:14 UTC	242	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:14 GMT Server: Apache Last-Modified: Tue, 27 Oct 2020 17:21:05 GMT ETag: "13e16bc-1017-5b2aa45931b98" Accept-Ranges: bytes Content-Length: 4119 Connection: close Content-Type: image/png
2025-03-25 11:48:14 UTC	4119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 0f de 49 44 41 54 78 da e5 5d 09 78 55 c5 15 0e 5b c1 c8 56 10 d1 2a 29 9b 4b 6b ad c5 da 56 ad 6b b5 1b 4a 5d 6a 4b 45 6c 3f f5 ab b5 74 b7 04 12 21 09 7b 14 2c a0 a2 11 45 83 d9 13 b2 90 90 1d 92 40 c0 b0 84 b0 46 90 25 04 08 81 10 12 42 16 12 b2 4e e7 bf 79 93 cc 9d 77 97 b9 f7 bd 87 49 7b be 6f be f0 de 9b 3b cb b9 73 e6 9c f3 9f 33 83 97 d7 57 48 d7 cf 8b 1b ff ad a5 c9 2f d3 b2 7a 42 70 d2 96 6f 2c 58 57 f2 f5 80 98 9a 81 b3 23 5a bd 66 86 11 be 7c 6d 76 44 f3 d0 39 d1 17 46 06 c6 1c a2 cf a5 8d 08 8c 79 ab 9f 6f f8 b3 f4 b7 31 5e ff 37 34 33 6c d8 d8 c5 09 af de f9 76 ca e7 23 03 63 1b 45 26 f1 65 d8 dc 68 55 31 aa 7b 8d 7f e4 05 ca e0 08 fa ef Data Ascii: PNGIHDRPPIDATx]xU[V*)KkVkJ]jKEl?t!{,E@F%BNywI{o;s3WH/zBpo,XW#Zf\|mvD9Fyo1^743lv#cE&ehU1{

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:15 UTC	429	OUT	GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:15 UTC	242	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:15 GMT Server: Apache Last-Modified: Tue, 27 Oct 2020 17:21:05 GMT ETag: "13e16bc-1017-5b2aa45931b98" Accept-Ranges: bytes Content-Length: 4119 Connection: close Content-Type: image/png
2025-03-25 11:48:15 UTC	4119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 0f de 49 44 41 54 78 da e5 5d 09 78 55 c5 15 0e 5b c1 c8 56 10 d1 2a 29 9b 4b 6b ad c5 da 56 ad 6b b5 1b 4a 5d 6a 4b 45 6c 3f f5 ab b5 74 b7 04 12 21 09 7b 14 2c a0 a2 11 45 83 d9 13 b2 90 90 1d 92 40 c0 b0 84 b0 46 90 25 04 08 81 10 12 42 16 12 b2 4e e7 bf 79 93 cc 9d 77 97 b9 f7 bd 87 49 7b be 6f be f0 de 9b 3b cb b9 73 e6 9c f3 9f 33 83 97 d7 57 48 d7 cf 8b 1b ff ad a5 c9 2f d3 b2 7a 42 70 d2 96 6f 2c 58 57 f2 f5 80 98 9a 81 b3 23 5a bd 66 86 11 be 7c 6d 76 44 f3 d0 39 d1 17 46 06 c6 1c a2 cf a5 8d 08 8c 79 ab 9f 6f f8 b3 f4 b7 31 5e ff 37 34 33 6c d8 d8 c5 09 af de f9 76 ca e7 23 03 63 1b 45 26 f1 65 d8 dc 68 55 31 aa 7b 8d 7f e4 05 ca e0 08 fa ef Data Ascii: PNGIHDRPPIDATx]xU[V*)KkVkJ]jKEl?t!{,E@F%BNywI{o;s3WH/zBpo,XW#Zf\|mvD9Fyo1^743lv#cE&ehU1{

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:17 UTC	1086	OUT	OPTIONS /checkcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSjAxTWd3ODRlQnJBdU9RbU9CbElsTGRpVExrMHVGWlZhanl0UlZYVkEvYkxKZWV5ZU05N2liTk1ybE03bytRcVpJTVhMYnU4MDJGQU4ySzdWczBSLzY1VXBNcUlzOUd0cUR4SjhYT3F5L1NTMnFwRUxFZkJMQkhPVWdxVUxOclMzSWNkcjErZTk0ZjNxeStxL294VGZrUzRFSmFXWFlweXdEY1l5RXNvNmRlaEp0cklCeGwxdEFtaEFpQVoxOTRMS1FWN0RJZ1pUdnVXZDkxeTlqdW1oNHdXRHd3cFZnNlhNaVkwSmVuYkxPNG4zLy9rRy9xcDZGZitkbjdZYUVFK0twcmc2Zz09RGVPdWVraVFISGRtWGExRyIsImV4cCI6MTc0MjkwMzM3Miwia3IiOiIxNTkwNmY4OSJ9.BZbTzTxEoNkqY2MKmhbWLVPNwfKwVh7j0wZS_E2T1Eg HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:17 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:17 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2daa7a6ebdbc-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:17 UTC	1234	OUT	POST /checkcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSjAxTWd3ODRlQnJBdU9RbU9CbElsTGRpVExrMHVGWlZhanl0UlZYVkEvYkxKZWV5ZU05N2liTk1ybE03bytRcVpJTVhMYnU4MDJGQU4ySzdWczBSLzY1VXBNcUlzOUd0cUR4SjhYT3F5L1NTMnFwRUxFZkJMQkhPVWdxVUxOclMzSWNkcjErZTk0ZjNxeStxL294VGZrUzRFSmFXWFlweXdEY1l5RXNvNmRlaEp0cklCeGwxdEFtaEFpQVoxOTRMS1FWN0RJZ1pUdnVXZDkxeTlqdW1oNHdXRHd3cFZnNlhNaVkwSmVuYkxPNG4zLy9rRy9xcDZGZitkbjdZYUVFK0twcmc2Zz09RGVPdWVraVFISGRtWGExRyIsImV4cCI6MTc0MjkwMzM3Miwia3IiOiIxNTkwNmY4OSJ9.BZbTzTxEoNkqY2MKmhbWLVPNwfKwVh7j0wZS_E2T1Eg HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 30171 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-type: application/json;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:17 UTC	16384	OUT	Data Raw: 7b 22 76 22 3a 22 61 63 66 31 33 37 39 33 61 32 33 65 63 65 32 62 31 63 34 65 36 62 38 33 66 39 62 65 32 35 30 62 37 62 61 66 33 36 39 36 22 2c 22 6a 6f 62 5f 6d 6f 64 65 22 3a 22 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 61 72 65 61 5f 73 65 6c 65 63 74 22 2c 22 61 6e 73 77 65 72 73 22 3a 7b 22 61 64 63 33 66 32 34 62 2d 38 61 66 30 2d 34 34 66 35 2d 38 65 34 34 2d 36 31 36 35 36 65 34 30 62 63 62 32 22 3a 5b 7b 22 65 6e 74 69 74 79 5f 6e 61 6d 65 22 3a 30 2c 22 65 6e 74 69 74 79 5f 74 79 70 65 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 65 6e 74 69 74 79 5f 63 6f 6f 72 64 73 22 3a 5b 31 31 36 2c 31 32 36 5d 7d 5d 2c 22 38 35 64 63 33 38 31 31 2d 33 66 37 35 2d 34 62 39 64 2d 39 30 30 37 2d 36 32 36 61 34 62 36 38 62 61 62 39 22 3a 5b 7b 22 65 6e 74 69 74 79 5f 6e Data Ascii: {"v":"acf13793a23ece2b1c4e6b83f9be250b7baf3696","job_mode":"image_label_area_select","answers":{"adc3f24b-8af0-44f5-8e44-61656e40bcb2":[{"entity_name":0,"entity_type":"default","entity_coords":[116,126]}],"85dc3811-3f75-4b9d-9007-626a4b68bab9":[{"entity_n
2025-03-25 11:48:17 UTC	13787	OUT	Data Raw: 39 55 71 2b 47 5a 38 34 65 4d 72 71 2f 51 51 50 56 64 70 48 74 71 69 44 69 62 77 71 73 31 42 4e 61 53 34 4b 49 71 4b 2f 59 57 64 72 70 38 4b 62 51 4e 53 53 48 2f 65 70 78 32 72 72 57 72 79 45 70 43 36 66 66 57 49 4c 56 50 51 6e 69 50 76 46 37 75 4e 41 75 78 55 4e 34 4a 6c 39 69 79 35 4f 36 46 6e 64 64 6f 67 79 4b 53 70 78 38 71 53 44 67 59 61 78 48 63 79 35 37 53 6a 6a 53 79 6f 76 69 57 37 58 69 41 68 65 6b 68 70 48 50 68 43 31 69 46 4f 62 39 52 41 44 50 46 78 57 43 30 41 68 58 74 7a 61 4d 44 6b 57 55 48 77 4e 71 37 6b 33 49 74 5a 62 54 79 48 66 6f 5a 49 4f 58 45 6a 33 54 47 72 4f 39 43 46 57 4c 68 5a 49 52 4b 2b 52 43 55 59 63 31 7a 30 4e 34 69 59 77 43 72 62 58 78 78 73 59 5a 6a 6b 4a 71 74 59 79 67 59 39 52 6e 6b 72 6c 55 4d 52 44 55 31 68 45 79 50 71 Data Ascii: 9Uq+GZ84eMrq/QQPVdpHtqiDibwqs1BNaS4KIqK/YWdrp8KbQNSSH/epx2rrWryEpC6ffWILVPQniPvF7uNAuxUN4Jl9iy5O6FnddogyKSpx8qSDgYaxHcy57SjjSyoviW7XiAhekhpHPhC1iFOb9RADPFxWC0AhXtzaMDkWUHwNq7k3ItZbTyHfoZIOXEj3TGrO9CFWLhZIRK+RCUYc1z0N4iYwCrbXxxsYZjkJqtYygY9RnkrlUMRDU1hEyPq
2025-03-25 11:48:18 UTC	589	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:18 GMT Content-Type: application/json Content-Length: 3797 Connection: close CF-Ray: 925e2dac6f485e76-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cZ5Q8NTUz4Y5; SameSite=Lax; path=/; expires=Tue, 25-Mar-25 12:18:18 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-25 11:48:18 UTC	1369	IN	Data Raw: 7b 22 70 61 73 73 22 3a 74 72 75 65 2c 22 67 65 6e 65 72 61 74 65 64 5f 70 61 73 73 5f 55 55 49 44 22 3a 22 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 77 59 58 4e 7a 61 32 56 35 49 6a 6f 69 63 6b 4a 57 4f 58 42 4a 59 30 70 5a 52 7a 68 36 4e 55 6c 6a 61 30 56 6c 56 58 52 44 52 57 52 79 53 57 6c 77 63 6a 46 4a 62 54 5a 4e 62 6d 34 34 55 58 68 73 64 31 67 7a 4b 79 74 49 53 56 4d 30 57 47 39 6b 63 46 4a 36 4e 6d 4e 6c 51 6b 38 30 59 6b 35 47 55 6a 5a 43 64 44 4e 53 63 58 64 6e 52 47 74 48 62 6c 4a 45 52 58 46 4a 61 44 64 57 64 30 78 56 5a 32 38 76 62 30 4e 71 51 6d 77 34 55 6c 49 7a 63 30 4a 76 54 6d 4e 7a 55 44 51 33 65 58 42 4c 62 30 51 34 63 6a 42 54 65 55 4d 78 63 55 78 Data Ascii: {"pass":true,"generated_pass_UUID":"P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwYXNza2V5IjoickJWOXBJY0pZRzh6NUlja0VlVXRDRWRySWlwcjFJbTZNbm44UXhsd1gzKytISVM0WG9kcFJ6NmNlQk80Yk5GUjZCdDNScXdnRGtHblJERXFJaDdWd0xVZ28vb0NqQmw4UlIzc0JvTmNzUDQ3eXBLb0Q4cjBTeUMxcUx
2025-03-25 11:48:18 UTC	1369	IN	Data Raw: 44 42 79 4d 48 52 4b 61 6c 6c 46 57 58 4e 42 52 47 35 57 52 31 4a 70 56 47 78 6d 54 56 42 7a 4e 47 39 75 61 6c 70 5a 64 6e 5a 31 63 33 64 53 61 30 68 4f 65 6b 34 34 65 57 46 57 4c 32 56 6c 53 56 63 76 4e 32 77 77 54 6e 4d 34 62 6e 56 4d 65 6b 78 48 61 33 41 79 64 55 68 7a 4f 57 52 36 4e 6b 4a 58 62 56 68 7a 52 6a 68 78 59 33 45 72 65 55 77 79 64 6c 56 70 57 47 5a 6e 65 47 31 34 53 45 46 31 63 6d 74 7a 4e 45 78 4a 54 56 64 30 64 44 42 54 61 46 59 31 62 31 4d 76 54 32 34 35 51 6b 6f 77 4c 7a 59 33 64 56 4e 58 62 48 52 79 56 55 68 6c 63 58 68 6f 52 46 55 72 63 7a 46 44 4b 30 52 31 4e 31 68 44 51 30 56 49 57 6b 64 78 65 46 4a 73 65 48 5a 54 55 6b 68 69 59 30 4e 72 52 56 6c 57 53 55 4e 54 64 32 31 68 51 55 6c 52 59 57 56 6a 5a 58 70 6a 62 56 6f 7a 63 56 46 4b Data Ascii: DByMHRKallFWXNBRG5WR1JpVGxmTVBzNG9ualpZdnZ1c3dSa0hOek44eWFWL2VlSVcvN2wwTnM4bnVMekxHa3AydUhzOWR6NkJXbVhzRjhxY3EreUwydlVpWGZneG14SEF1cmtzNExJTVd0dDBTaFY1b1MvT245QkowLzY3dVNXbHRyVUhlcXhoRFUrczFDK0R1N1hDQ0VIWkdxeFJseHZTUkhiY0NrRVlWSUNTd21hQUlRYWVjZXpjbVozcVFK
2025-03-25 11:48:18 UTC	1059	IN	Data Raw: 52 78 53 44 51 34 54 43 39 72 64 55 78 47 64 56 6b 77 52 32 31 56 63 46 42 6e 53 44 55 72 4b 32 39 6e 52 6e 56 6c 65 6a 6c 45 53 31 4a 68 4d 6a 56 4e 4f 55 39 5a 61 6b 78 79 64 6b 52 49 62 47 31 49 54 58 70 44 56 56 46 6b 63 6a 56 4e 63 6d 64 68 62 30 31 44 53 44 52 32 54 46 42 6b 53 45 74 68 53 57 49 78 4b 30 56 69 54 6e 46 4f 63 55 31 59 4e 44 6c 77 55 30 30 34 54 6d 74 52 4c 30 64 73 52 45 73 7a 57 45 64 36 53 6a 56 58 59 58 70 42 5a 6d 31 33 62 6a 52 50 56 30 52 6d 52 45 78 74 61 48 6c 52 51 6c 42 74 62 45 4d 34 54 57 56 42 50 54 30 69 4c 43 4a 6c 65 48 41 69 4f 6a 45 33 4e 44 49 35 4d 44 4d 30 4d 54 67 73 49 6e 4e 6f 59 58 4a 6b 58 32 6c 6b 49 6a 6f 34 4d 7a 4d 30 4e 44 41 34 4f 54 63 73 49 6d 74 79 49 6a 6f 69 4d 32 59 34 59 32 55 7a 4f 44 4d 69 4c Data Ascii: RxSDQ4TC9rdUxGdVkwR21VcFBnSDUrK29nRnVlejlES1JhMjVNOU9ZakxydkRIbG1ITXpDVVFkcjVNcmdhb01DSDR2TFBkSEthSWIxK0ViTnFOcU1YNDlwU004TmtRL0dsREszWEd6SjVXYXpBZm13bjRPV0RmRExtaHlRQlBtbEM4TWVBPT0iLCJleHAiOjE3NDI5MDM0MTgsInNoYXJkX2lkIjo4MzM0NDA4OTcsImtyIjoiM2Y4Y2UzODMiL

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:18 UTC	946	OUT	GET /checkcaptcha/f116b812-c988-4136-9ce4-5a14d2944cd6/E0_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJkYXRhIjoiSjAxTWd3ODRlQnJBdU9RbU9CbElsTGRpVExrMHVGWlZhanl0UlZYVkEvYkxKZWV5ZU05N2liTk1ybE03bytRcVpJTVhMYnU4MDJGQU4ySzdWczBSLzY1VXBNcUlzOUd0cUR4SjhYT3F5L1NTMnFwRUxFZkJMQkhPVWdxVUxOclMzSWNkcjErZTk0ZjNxeStxL294VGZrUzRFSmFXWFlweXdEY1l5RXNvNmRlaEp0cklCeGwxdEFtaEFpQVoxOTRMS1FWN0RJZ1pUdnVXZDkxeTlqdW1oNHdXRHd3cFZnNlhNaVkwSmVuYkxPNG4zLy9rRy9xcDZGZitkbjdZYUVFK0twcmc2Zz09RGVPdWVraVFISGRtWGExRyIsImV4cCI6MTc0MjkwMzM3Miwia3IiOiIxNTkwNmY4OSJ9.BZbTzTxEoNkqY2MKmhbWLVPNwfKwVh7j0wZS_E2T1Eg HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:19 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 25 Mar 2025 11:48:19 GMT Content-Type: text/plain Content-Length: 14 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 925e2db2cc08f791-EWR alt-svc: h3=":443"; ma=86400
2025-03-25 11:48:19 UTC	14	IN	Data Raw: 49 6e 76 61 6c 69 64 20 4d 65 74 68 6f 64 Data Ascii: Invalid Method

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:20 UTC	701	OUT	POST /offer/validate-captcha.php HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive Content-Length: 3058 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://comylubmexicana.com.mx Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://comylubmexicana.com.mx/offer/box.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:20 UTC	3058	OUT	Data Raw: 7b 22 65 6d 61 69 6c 22 3a 22 62 6f 62 40 6f 75 74 6c 6f 6f 6b 2e 63 61 22 2c 22 63 61 70 74 63 68 61 52 65 73 70 6f 6e 73 65 22 3a 22 50 31 5f 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 77 59 58 4e 7a 61 32 56 35 49 6a 6f 69 63 6b 4a 57 4f 58 42 4a 59 30 70 5a 52 7a 68 36 4e 55 6c 6a 61 30 56 6c 56 58 52 44 52 57 52 79 53 57 6c 77 63 6a 46 4a 62 54 5a 4e 62 6d 34 34 55 58 68 73 64 31 67 7a 4b 79 74 49 53 56 4d 30 57 47 39 6b 63 46 4a 36 4e 6d 4e 6c 51 6b 38 30 59 6b 35 47 55 6a 5a 43 64 44 4e 53 63 58 64 6e 52 47 74 48 62 6c 4a 45 52 58 46 4a 61 44 64 57 64 30 78 56 5a 32 38 76 62 30 4e 71 51 6d 77 34 55 6c 49 7a 63 30 4a 76 54 6d 4e 7a 55 44 51 33 65 58 42 4c 62 30 51 34 63 6a Data Ascii: {"email":"bob@outlook.ca","captchaResponse":"P1_eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJwYXNza2V5IjoickJWOXBJY0pZRzh6NUlja0VlVXRDRWRySWlwcjFJbTZNbm44UXhsd1gzKytISVM0WG9kcFJ6NmNlQk80Yk5GUjZCdDNScXdnRGtHblJERXFJaDdWd0xVZ28vb0NqQmw4UlIzc0JvTmNzUDQ3eXBLb0Q4cj
2025-03-25 11:48:20 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:20 GMT Server: Apache Access-Control-Allow-Origin: https://login.procore.com/ Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, X-Requested-With X-Content-Type-Options: nosniff X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=(), interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains; preload List-Unsubscribe: <mailto:support@procore.com> X-SES-Campaign-ID: campaign_2025_bid_invite X-Campaign: Construction_Bid_Invite_2025 X-Mailer: PHP/7.3.33 X-Sender: support@procore.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=d6a6fc9b3ec26231b93239c00b6fbdac; path=/ Connection: close Transfer-Encoding: chunked Content-Type: application/json; charset=UTF-8
2025-03-25 11:48:20 UTC	84	IN	Data Raw: 34 65 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 39 65 62 61 63 38 32 64 2e 64 72 79 2d 74 6f 6f 74 68 2d 35 33 30 32 2e 77 6f 72 6b 65 72 73 2e 64 65 76 22 7d 0d 0a Data Ascii: 4e{"success":true,"redirectUrl":"https:\/\/9ebac82d.dry-tooth-5302.workers.dev"}
2025-03-25 11:48:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:21 UTC	464	OUT	GET /offer/validate-captcha.php HTTP/1.1 Host: comylubmexicana.com.mx Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=d6a6fc9b3ec26231b93239c00b6fbdac
2025-03-25 11:48:21 UTC	905	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 25 Mar 2025 11:48:21 GMT Server: Apache Access-Control-Allow-Origin: https://login.procore.com/ Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, X-Requested-With X-Content-Type-Options: nosniff X-Frame-Options: DENY Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: geolocation=(), microphone=(), camera=(), interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains; preload List-Unsubscribe: <mailto:support@procore.com> X-SES-Campaign-ID: campaign_2025_bid_invite X-Campaign: Construction_Bid_Invite_2025 X-Mailer: PHP/7.3.33 X-Sender: support@procore.com Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Connection: close Transfer-Encoding: chunked Content-Type: application/json; charset=UTF-8
2025-03-25 11:48:21 UTC	52	IN	Data Raw: 32 65 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 65 72 72 6f 72 22 3a 22 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 22 7d 0d 0a Data Ascii: 2e{"success":false,"error":"Method Not Allowed"}
2025-03-25 11:48:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-25 11:48:21 UTC	752	OUT	GET /?ref=bob@outlook.ca HTTP/1.1 Host: 9ebac82d.dry-tooth-5302.workers.dev Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://comylubmexicana.com.mx/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-25 11:48:21 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 25 Mar 2025 11:48:21 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w7V5atrcptx7TlfSdOaHi90z4U4%2BQ3HFOxQtzSyUt7lsQ3%2FJ00MdL9hFGAHPsFgAZtKwvRR3HIoA41mbXXcaiWsYAS0Vsau%2FFOrnQEaY8ZptSmRshJnGmUAp%2Fu1%2B8PN7SA4y07MA9kyYKtdNOI0vJQCyoNIpTw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 925e2dc21850cd7f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98419&min_rtt=96906&rtt_var=21997&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2866&recv_bytes=1324&delivery_rate=38424&cwnd=249&unsent_bytes=0&cid=11bb89031c755b9d&ts=252&x=0"
2025-03-25 11:48:21 UTC	1369	IN	Data Raw: 39 34 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4f 6e 65 20 6d 6f 72 65 20 73 74 65 70 20 62 65 66 6f 72 65 20 79 6f 75 20 70 72 6f 63 65 65 64 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 4a 6f 65 31 32 33 38 Data Ascii: 941<!doctype html><html lang="en-US"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>One more step before you proceed...</title> <script src="https://cdn.jsdelivr.net/gh/Joe1238
2025-03-25 11:48:21 UTC	1007	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 27 53 65 67 6f 65 20 55 49 27 2c 20 52 6f 62 6f 74 6f 2c 20 4f 78 79 67 65 6e 2c 20 55 62 75 6e 74 75 2c 20 43 61 6e 74 61 72 65 6c 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 30 66 32 66 35 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 Data Ascii: nt-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen, Ubuntu, Cantarell, sans-serif; background: #f0f2f5; margin: 0; padding: 20px; display: flex; justify-content: center;
2025-03-25 11:48:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0