Create Interactive Tour

Windows Analysis Report
https://maltese.com.br/share-sensitive-files-securely/

Overview

General Information

Sample URL:	https://maltese.com.br/share-sensitive-files-securely/
Analysis ID:	1653983
Infos:

Detection

HTMLPhisher

Score:	52
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected HtmlPhish10

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1848 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://maltese.com.br/share-sensitive-files-securely/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_191	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
dropped/chromecache_193	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

HTML

Source	Rule	Description	Author
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.13.pages.csv	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.6.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.9.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_191, type: DROPPED

Yara detected JavaScript embedded in SVG

Source: Yara match	File source: 2.13.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_193, type: DROPPED

Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon
Source: https://maltese.com.br/share-sensitive-files-securely/	HTTP Parser: No favicon

Source: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=en	HTTP Parser: No <meta name="author".. found
Source: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2	HTTP Parser: No <meta name="author".. found

Source: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=en	HTTP Parser: No <meta name="copyright".. found
Source: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.192.112:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.192.112:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49860 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.152.19
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14

Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239385875221_117D6BR0FMTM7OD16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239385875216_1P4KL3FZIJKZ633OT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402415503_1IET5OVL073FDA0RX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239402415504_17DDWI2WCHUD2N4TB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388097_1IIZAECWS2U02B4A4&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /th?id=OADD2.10239339388098_106XX0NZPAHGUY7Q1&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1Accept: /Accept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: tse1.mm.bing.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/ HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/public/css/JF8zRQjce615.css HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://maltese.com.br/share-sensitive-files-securely/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/public/css/Sf4B2jjwrxct.css HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://maltese.com.br/share-sensitive-files-securely/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/public/js/ntzywRxzsLHk.js HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://maltese.com.br/share-sensitive-files-securely/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/public/js/I4stSzoXPoPB.js HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://maltese.com.br/share-sensitive-files-securely/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /1/api.js HTTP/1.1Host: js.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://maltese.com.br/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /share-sensitive-files-securely/public/js/BsP36uWAF5Ds.js HTTP/1.1Host: maltese.com.brConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://maltese.com.br/share-sensitive-files-securely/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.html HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://maltese.com.br/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft.com HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://maltese.com.br/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft.com HTTP/1.1Host: logo.clearbit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checksiteconfig?v=c1e11bfffe54019b36ca486d59d75ea65128f510&host=maltese.com.br&sitekey=e7483410-5a58-493c-9fd0-cce66dae9bf2&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2ctfb6LYHRPW5
Source: global traffic	HTTP traffic detected: GET /captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/challenge/image_label_area_select/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/e454c21f7daa31f58076a121c61ae2da8d3eb1d8e5613c26e750940cd7321432/aa8937ecb6cea3590bf50a9d81c08c2c0de662e52eb2a5670815c528fca9127f.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveOrigin: https://newassets.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/e454c21f7daa31f58076a121c61ae2da8d3eb1d8e5613c26e750940cd7321432/aa8937ecb6cea3590bf50a9d81c08c2c0de662e52eb2a5670815c528fca9127f.jpg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/challenge/image_label_binary/challenge.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/092adf806d6542bb2fd163453464038bed6e5e0c581b9f5c07df587dc7605b35/60bb357eaeb397d50413365196a5a8f5248c389346ace5028a80e509d6d3bb8e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ba451f8ceb6d100c019a671fffc7318f874d1f2da95bf55b05f80598efd68bd0/9c37acd6434cb46ea8433c150cd3ca436e1a8de9f426493d7a78f2635a6bd20c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/d549a4e5ea5ba910c85098bd20ebf4a3a12925e0e4f5150cc7039bd99b03ce06/a339558978aecbd402f7a8d03f34f2167333fe166213c5ba1af12d5ea4153a85.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/414aeea672c1aeed4f056a99f572cde2e065360b088fa45609aad48a1d32d31b/d499c50f2146dc4d78e452aa769064f7330a42e3777ccbd4e70076fa876806ea.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/0c9e4dc02ee64ebd883bf00e79ea0cf0b51f8c6980423abd538b5f9d6c819451/18a6156ed8373d8bac8e7f0a19a816603f8821377705aa3e5179ad193a39f00a.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a9f72bd9ad2cd7aeff8c9e24e12d344b9cd45c80109d9f7a24083d3603d91bcb/871a4353105f8779e2a39adfbacee1b0bc6cf88d409c288404df5b286facf94c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/76c18bd908061d4c0946b078cc7992d6bb04c1d632db3b6ab53942ef70dd4a11/e9f387fe117bdfdb603480fb68d5585dc5bb62ef4f9b9eae835ecf9d3c46607d.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ec5f614cf3c97c71a0d73a06948ae6acdc07c81146ec95b2b9eede18b2c6b3dd/ea246dddfd769ec309b876b5f2ef5119ab4d20ffdc43138d5e04cf96cd04e61e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/d183a372acb12f5a753bc5e4c0bb534866e1edcfd8784a26df78cf5dce27cb37/a2737397d9433d4a51f2be42861e5f9ad2aaa13188e51b2fb52b4b018723c396.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/03cb6432e700dd7f88e92791f16d72e7b62448241bbcb19e6a983c0384e447c0/cb77ed9d0f1b2eb41245ce190941f9f49bef18f416219dd46dc02bacf5445a1e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/7a11a802f9900c8249f30e0e6f703e072ba45874115867a9f1f2656de54a665c/979f312d1f70fce7037880251dac3f68a5592371df3206bb9004bf020eda27f6.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a167fa521c4165d8e789e7f54f673a652cf6cce87f70eff72f6e3618c840a346/4a816a27ee9013eeb46aa854c08f4e1f7fd0b3e7e290eac5fe9635710e2256e8.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/1ab0a2dc5c26f4ab92e66deb2559220870aa5616062c564d0836cfce535c1244/fc54c5169b27ef3d9f4fa9c4df034c564aa59a1e0eaa15e4b2df6c532b3e1ae0.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/878b529a90e82ecc0d3d35a43148d548089ca0b1706731b57f04c8405686cbc4/3e302153e5e4dd6e28ffadf0a2884902efcfafc7fb5f80a6e3e9e5d963b8f7f5.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/3815527ce9429a283d295ab403474377752d7cd41e1195ad4b8b73c5fbf1a50f/e279a633952f656f331c5ba06792c371b86b9b14a443b9d207bb81a67b94b19e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/092adf806d6542bb2fd163453464038bed6e5e0c581b9f5c07df587dc7605b35/60bb357eaeb397d50413365196a5a8f5248c389346ace5028a80e509d6d3bb8e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/d549a4e5ea5ba910c85098bd20ebf4a3a12925e0e4f5150cc7039bd99b03ce06/a339558978aecbd402f7a8d03f34f2167333fe166213c5ba1af12d5ea4153a85.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ba451f8ceb6d100c019a671fffc7318f874d1f2da95bf55b05f80598efd68bd0/9c37acd6434cb46ea8433c150cd3ca436e1a8de9f426493d7a78f2635a6bd20c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/414aeea672c1aeed4f056a99f572cde2e065360b088fa45609aad48a1d32d31b/d499c50f2146dc4d78e452aa769064f7330a42e3777ccbd4e70076fa876806ea.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a9f72bd9ad2cd7aeff8c9e24e12d344b9cd45c80109d9f7a24083d3603d91bcb/871a4353105f8779e2a39adfbacee1b0bc6cf88d409c288404df5b286facf94c.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/eddf7feb5d7ca167b949ec6c1496c1f5a76e4050e5a7d3231380f31d5e404023/1067014d6b45ced0a81ece7a3504be2811b03053cbd11deacc72f6077bf4cfa7.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/818dea1de0b010c7a6700006f350ad141af4ed53c497d04022d331eec8af81b1/69504fd4def79417fd4bad4860281ee3f5de7757357b023c60589e7dc67b91d2.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/76c18bd908061d4c0946b078cc7992d6bb04c1d632db3b6ab53942ef70dd4a11/e9f387fe117bdfdb603480fb68d5585dc5bb62ef4f9b9eae835ecf9d3c46607d.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/5d977a0ea41309dc4606ace68d5bae38706b647a28e1ed93a0f32c4c974860ea/3b5170497b46591163f08bfd2a41002bf819ed0a5688fe433387d9cde00a74af.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/dd20bab9369ed3c93458daa68f66729136ba071ddf381da780a61a324051c0a9/867131d9bb0d07c3c9975c929e77c544e6e0b8ba440a6582214107fda5626ee7.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/d183a372acb12f5a753bc5e4c0bb534866e1edcfd8784a26df78cf5dce27cb37/a2737397d9433d4a51f2be42861e5f9ad2aaa13188e51b2fb52b4b018723c396.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/0c9e4dc02ee64ebd883bf00e79ea0cf0b51f8c6980423abd538b5f9d6c819451/18a6156ed8373d8bac8e7f0a19a816603f8821377705aa3e5179ad193a39f00a.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/ec5f614cf3c97c71a0d73a06948ae6acdc07c81146ec95b2b9eede18b2c6b3dd/ea246dddfd769ec309b876b5f2ef5119ab4d20ffdc43138d5e04cf96cd04e61e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/7a11a802f9900c8249f30e0e6f703e072ba45874115867a9f1f2656de54a665c/979f312d1f70fce7037880251dac3f68a5592371df3206bb9004bf020eda27f6.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/03cb6432e700dd7f88e92791f16d72e7b62448241bbcb19e6a983c0384e447c0/cb77ed9d0f1b2eb41245ce190941f9f49bef18f416219dd46dc02bacf5445a1e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/3815527ce9429a283d295ab403474377752d7cd41e1195ad4b8b73c5fbf1a50f/e279a633952f656f331c5ba06792c371b86b9b14a443b9d207bb81a67b94b19e.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/1ab0a2dc5c26f4ab92e66deb2559220870aa5616062c564d0836cfce535c1244/fc54c5169b27ef3d9f4fa9c4df034c564aa59a1e0eaa15e4b2df6c532b3e1ae0.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/a167fa521c4165d8e789e7f54f673a652cf6cce87f70eff72f6e3618c840a346/4a816a27ee9013eeb46aa854c08f4e1f7fd0b3e7e290eac5fe9635710e2256e8.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1Host: api.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/eddf7feb5d7ca167b949ec6c1496c1f5a76e4050e5a7d3231380f31d5e404023/1067014d6b45ced0a81ece7a3504be2811b03053cbd11deacc72f6077bf4cfa7.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/878b529a90e82ecc0d3d35a43148d548089ca0b1706731b57f04c8405686cbc4/3e302153e5e4dd6e28ffadf0a2884902efcfafc7fb5f80a6e3e9e5d963b8f7f5.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/818dea1de0b010c7a6700006f350ad141af4ed53c497d04022d331eec8af81b1/69504fd4def79417fd4bad4860281ee3f5de7757357b023c60589e7dc67b91d2.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/dd20bab9369ed3c93458daa68f66729136ba071ddf381da780a61a324051c0a9/867131d9bb0d07c3c9975c929e77c544e6e0b8ba440a6582214107fda5626ee7.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tip/5d977a0ea41309dc4606ace68d5bae38706b647a28e1ed93a0f32c4c974860ea/3b5170497b46591163f08bfd2a41002bf819ed0a5688fe433387d9cde00a74af.jpeg HTTP/1.1Host: imgs3.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=en HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/be66d6135f8fab9e18a904d21746ebe23a01b6e32acb334f74d1414f98e9da66.css HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278925e_are-u-human.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/p.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveOrigin: https://www.hcaptcha.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/aff77b72ce1ec36a2781aa1aa2269e412d4e896bf6a12093fdb8fc8cf7b34f1b.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/98474ee93ddf5a629539080e820b51cd4bf0db151ef16103b303aa4872d431d6.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278917f_noun_Close_1217839_ffffff.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278925e_are-u-human.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278925f_hcaptcha-logo-hand.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/css/be66d6135f8fab9e18a904d21746ebe23a01b6e32acb334f74d1414f98e9da66.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/67a6199f88432c9cfcc598f0_ai_agents.jpg HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278932e_hCatpcha%20Vs%20reCaptcha%20%281%29.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278931b_Card%20Testing%20-%20Blog%20Image.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278903b_Asset%208.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/css/be66d6135f8fab9e18a904d21746ebe23a01b6e32acb334f74d1414f98e9da66.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278917f_noun_Close_1217839_ffffff.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/65fad841d06ee71558eca7af_widget.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278925f_hcaptcha-logo-hand.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64de50b1a39c3ff44ccf16bc_box-img-wcag.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/67a6199f88432c9cfcc598f0_ai_agents.jpg HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/65fad841d06ee71558eca7af_widget.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278932e_hCatpcha%20Vs%20reCaptcha%20%281%29.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278926d_favicon%25403x.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b1278903b_Asset%208.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64de50b1a39c3ff44ccf16bc_box-img-wcag.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278931b_Card%20Testing%20-%20Blog%20Image.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/64da82f6bf67de1b1278926d_favicon%25403x.png HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signup-interstitial.html?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=enAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/be66d6135f8fab9e18a904d21746ebe23a01b6e32acb334f74d1414f98e9da66.css HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"If-None-Match: W/"816a01e35c3ff09ac843550a64691c94"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/p.js HTTP/1.1Host: newassets.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"If-None-Match: W/"de6e620e78966171c767023b5649b539"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveOrigin: https://www.hcaptcha.comsec-ch-ua-platform: "Windows"If-None-Match: W/"0d2f10dc66fa6608db7885d7d7595be7"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/aff77b72ce1ec36a2781aa1aa2269e412d4e896bf6a12093fdb8fc8cf7b34f1b.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"If-None-Match: W/"c6d4ec19a9a657d2595f0b78f99f95da"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/98474ee93ddf5a629539080e820b51cd4bf0db151ef16103b303aa4872d431d6.js HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"If-None-Match: W/"e61fb4a9ee6a8a10f49d7027b7f94ad7"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b12789237_checkmark.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/64da82f6bf67de1b12789237_checkmark.svg HTTP/1.1Host: www.hcaptcha.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_167.1.dr, chromecache_193.1.dr

String found in binary or memory: </a></div></div><div id="social-fb" class="social-icon margin-left"><a rel="noopener" href="https://www.facebook.com/hcaptcha" target="_blank" class="invisible-link w-inline-block"></a><div bind="d109ca64-ce48-07d7-4b5d-71f01999d535" class="icon-facebook w-embed"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 400"> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: c.pki.goog
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: maltese.com.br
Source: global traffic	DNS traffic detected: DNS query: js.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: newassets.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: api2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com
Source: global traffic	DNS traffic detected: DNS query: api.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: imgs3.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: www.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: a2.hcaptcha.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinsights.com

Source: unknown

HTTP traffic detected: POST /checksiteconfig?v=c1e11bfffe54019b36ca486d59d75ea65128f510&host=maltese.com.br&sitekey=e7483410-5a58-493c-9fd0-cce66dae9bf2&sc=1&swa=1&spst=1 HTTP/1.1Host: api2.hcaptcha.comConnection: keep-aliveContent-Length: 0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/jsonsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plainsec-ch-ua-mobile: ?0Origin: https://newassets.hcaptcha.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://newassets.hcaptcha.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_208.1.dr, chromecache_155.1.dr	String found in binary or memory: http://ns.attribution.com/ads/1.0/
Source: chromecache_136.1.dr	String found in binary or memory: https://a2.hcaptcha.com
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://accounts.hcaptcha.com/b
Source: chromecache_167.1.dr	String found in binary or memory: https://accounts.hcaptcha.com/bug-report
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://apply.workable.com/imachines/
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://assets.hcaptcha.com/website-i18n
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://assets.hcaptcha.com/website-tr-js/vavilon.min.js
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://dashboard.hcaptcha.com/login
Source: chromecache_193.1.dr	String found in binary or memory: https://docs.hcaptcha.com/
Source: chromecache_167.1.dr	String found in binary or memory: https://docs.hcaptcha.com/#add-the-hcaptcha-widget-to-your-webpage
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_191.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_151.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_151.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_151.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_151.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_134.1.dr, chromecache_212.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_167.1.dr	String found in binary or memory: https://github.com/hCaptcha/hcaptcha-integrations-list
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://github.com/jensyt/imurmurhash-js/blob/master/imurmurhash.min.js
Source: chromecache_134.1.dr, chromecache_212.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_212.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_135.1.dr	String found in binary or memory: https://github.com/twbs/icons/blob/main/LICENSE)
Source: chromecache_186.1.dr, chromecache_205.1.dr, chromecache_157.1.dr, chromecache_203.1.dr	String found in binary or memory: https://hcaptcha.com/license
Source: chromecache_135.1.dr	String found in binary or memory: https://icons.getbootstrap.com/)
Source: chromecache_191.1.dr	String found in binary or memory: https://js.hcaptcha.com/1/api.js
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/public/css/JF8zRQjce615.css
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/public/css/Sf4B2jjwrxct.css
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/public/js/BsP36uWAF5Ds.js
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/public/js/I4stSzoXPoPB.js
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/public/js/ntzywRxzsLHk.js
Source: chromecache_191.1.dr	String found in binary or memory: https://maltese.com.br/share-sensitive-files-securely/verify-captcha
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://newassets.hcaptcha.com/js/p.js
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://newassets.hcaptcha.com/website-i18n
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://newassets.hcaptcha.com/website-tr/js/vavilon_mod.min.js
Source: chromecache_193.1.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js
Source: chromecache_167.1.dr	String found in binary or memory: https://twitter.com/hcaptcha
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://website-i18n.hcaptcha.com
Source: chromecache_167.1.dr	String found in binary or memory: https://www.hcaptcha.com/accessibility
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.hcaptcha.com/post/preparing-for-ai-agents
Source: chromecache_193.1.dr	String found in binary or memory: https://www.hcaptcha.com/signup-interstitial
Source: chromecache_167.1.dr	String found in binary or memory: https://www.hcaptcha.com/what-is-hcaptcha-about
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.hcaptchastatus.com/
Source: chromecache_167.1.dr, chromecache_193.1.dr	String found in binary or memory: https://www.w3schools.com/tags/ref_language_codes.asp

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49685
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.27.10:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.192.112:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.179.192.112:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.230.21:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.229.21:443 -> 192.168.2.5:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49845 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.79.73:443 -> 192.168.2.5:49860 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6868_632921860

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6868_632921860

Jump to behavior

Source: classification engine

Classification label: mal52.phis.win@25/146@39/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1848 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://maltese.com.br/share-sensitive-files-securely/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1848 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,8581649503441678219,7347061789580194002,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4984 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://maltese.com.br/share-sensitive-files-securely/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://docs.hcaptcha.com/#add-the-hcaptcha-widget-to-your-webpage	0%	Avira URL Cloud	safe
https://www.hcaptchastatus.com/	0%	Avira URL Cloud	safe
https://a2.hcaptcha.com	0%	Avira URL Cloud	safe
https://maltese.com.br/share-sensitive-files-securely/public/js/BsP36uWAF5Ds.js	0%	Avira URL Cloud	safe
https://website-i18n.hcaptcha.com	0%	Avira URL Cloud	safe
https://docs.hcaptcha.com/	0%	Avira URL Cloud	safe
https://accounts.hcaptcha.com/b	0%	Avira URL Cloud	safe
https://maltese.com.br/share-sensitive-files-securely/verify-captcha	0%	Avira URL Cloud	safe
https://maltese.com.br/share-sensitive-files-securely/public/css/Sf4B2jjwrxct.css	0%	Avira URL Cloud	safe
https://accounts.hcaptcha.com/bug-report	0%	Avira URL Cloud	safe
https://dashboard.hcaptcha.com/login	0%	Avira URL Cloud	safe
https://maltese.com.br/share-sensitive-files-securely/public/js/ntzywRxzsLHk.js	0%	Avira URL Cloud	safe
https://a2.hcaptcha.com/api/event	0%	Avira URL Cloud	safe
https://maltese.com.br/share-sensitive-files-securely/public/css/JF8zRQjce615.css	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
maltese.com.br	108.179.192.112	true	false	unknown
ax-9999.ax-msedge.net	150.171.27.254	true	false	high
cloudflareinsights.com	104.16.79.73	true	false	high
static.cloudflareinsights.com	104.16.79.73	true	false	high
api.hcaptcha.com	104.19.229.21	true	false	high
imgs3.hcaptcha.com	104.19.230.21	true	false	high
pki-goog.l.google.com	142.250.80.35	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
d26p066pn2w0s0.cloudfront.net	108.138.106.63	true	false	high
js.hcaptcha.com	104.19.230.21	true	false	high
a2.hcaptcha.com	104.19.229.21	true	false	high
www.google.com	142.251.40.228	true	false	high
api2.hcaptcha.com	104.19.230.21	true	false	high
www.hcaptcha.com	104.19.229.21	true	false	high
newassets.hcaptcha.com	104.19.229.21	true	false	high
tse1.mm.bing.net	unknown	unknown	false	high
c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high
c.pki.goog	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://imgs3.hcaptcha.com/tip/eddf7feb5d7ca167b949ec6c1496c1f5a76e4050e5a7d3231380f31d5e404023/1067014d6b45ced0a81ece7a3504be2811b03053cbd11deacc72f6077bf4cfa7.jpeg	false		high
https://www.hcaptcha.com/fonts/64da82f6bf67de1b1278917f_noun_Close_1217839_ffffff.svg	false		high
https://imgs3.hcaptcha.com/tip/878b529a90e82ecc0d3d35a43148d548089ca0b1706731b57f04c8405686cbc4/3e302153e5e4dd6e28ffadf0a2884902efcfafc7fb5f80a6e3e9e5d963b8f7f5.jpeg	false		high
https://www.hcaptcha.com/images/64de50b1a39c3ff44ccf16bc_box-img-wcag.png	false		high
https://www.hcaptcha.com/signup-interstitial.html?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2	false		high
https://maltese.com.br/share-sensitive-files-securely/public/css/Sf4B2jjwrxct.css	false	Avira URL Cloud: safe	unknown
https://tse1.mm.bing.net/th?id=OADD2.10239339388098_106XX0NZPAHGUY7Q1&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://imgs3.hcaptcha.com/tip/76c18bd908061d4c0946b078cc7992d6bb04c1d632db3b6ab53942ef70dd4a11/e9f387fe117bdfdb603480fb68d5585dc5bb62ef4f9b9eae835ecf9d3c46607d.jpeg	false		high
http://c.pki.goog/r/r4.crl	false		high
https://www.hcaptcha.com/images/67a6199f88432c9cfcc598f0_ai_agents.jpg	false		high
https://imgs3.hcaptcha.com/tip/a167fa521c4165d8e789e7f54f673a652cf6cce87f70eff72f6e3618c840a346/4a816a27ee9013eeb46aa854c08f4e1f7fd0b3e7e290eac5fe9635710e2256e8.jpeg	false		high
https://imgs3.hcaptcha.com/tip/414aeea672c1aeed4f056a99f572cde2e065360b088fa45609aad48a1d32d31b/d499c50f2146dc4d78e452aa769064f7330a42e3777ccbd4e70076fa876806ea.jpeg	false		high
https://www.hcaptcha.com/images/64da82f6bf67de1b1278926d_favicon%25403x.png	false		high
https://www.hcaptcha.com/fonts/64da82f6bf67de1b1278903b_Asset%208.svg	false		high
https://imgs3.hcaptcha.com/tip/03cb6432e700dd7f88e92791f16d72e7b62448241bbcb19e6a983c0384e447c0/cb77ed9d0f1b2eb41245ce190941f9f49bef18f416219dd46dc02bacf5445a1e.jpeg	false		high
https://maltese.com.br/share-sensitive-files-securely/public/js/BsP36uWAF5Ds.js	false	Avira URL Cloud: safe	unknown
https://imgs3.hcaptcha.com/tip/d549a4e5ea5ba910c85098bd20ebf4a3a12925e0e4f5150cc7039bd99b03ce06/a339558978aecbd402f7a8d03f34f2167333fe166213c5ba1af12d5ea4153a85.jpeg	false		high
https://www.hcaptcha.com/fonts/64da82f6bf67de1b1278925e_are-u-human.svg	false		high
https://js.hcaptcha.com/1/api.js	false		high
https://imgs3.hcaptcha.com/tip/5d977a0ea41309dc4606ace68d5bae38706b647a28e1ed93a0f32c4c974860ea/3b5170497b46591163f08bfd2a41002bf819ed0a5688fe433387d9cde00a74af.jpeg	false		high
https://imgs3.hcaptcha.com/tip/3815527ce9429a283d295ab403474377752d7cd41e1195ad4b8b73c5fbf1a50f/e279a633952f656f331c5ba06792c371b86b9b14a443b9d207bb81a67b94b19e.jpeg	false		high
https://www.hcaptcha.com/js/98474ee93ddf5a629539080e820b51cd4bf0db151ef16103b303aa4872d431d6.js	false		high
https://api.hcaptcha.com/getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2	false		high
https://www.hcaptcha.com/css/be66d6135f8fab9e18a904d21746ebe23a01b6e32acb334f74d1414f98e9da66.css	false		high
https://www.hcaptcha.com/js/aff77b72ce1ec36a2781aa1aa2269e412d4e896bf6a12093fdb8fc8cf7b34f1b.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402415503_1IET5OVL073FDA0RX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://imgs3.hcaptcha.com/tip/a9f72bd9ad2cd7aeff8c9e24e12d344b9cd45c80109d9f7a24083d3603d91bcb/871a4353105f8779e2a39adfbacee1b0bc6cf88d409c288404df5b286facf94c.jpeg	false		high
https://imgs3.hcaptcha.com/tip/ec5f614cf3c97c71a0d73a06948ae6acdc07c81146ec95b2b9eede18b2c6b3dd/ea246dddfd769ec309b876b5f2ef5119ab4d20ffdc43138d5e04cf96cd04e61e.jpeg	false		high
http://c.pki.goog/r/gsr1.crl	false		high
https://imgs3.hcaptcha.com/tip/818dea1de0b010c7a6700006f350ad141af4ed53c497d04022d331eec8af81b1/69504fd4def79417fd4bad4860281ee3f5de7757357b023c60589e7dc67b91d2.jpeg	false		high
https://maltese.com.br/share-sensitive-files-securely/	false		unknown
https://newassets.hcaptcha.com/js/p.js	false		high
https://www.hcaptcha.com/images/65fad841d06ee71558eca7af_widget.png	false		high
https://cloudflareinsights.com/cdn-cgi/rum	false		high
https://newassets.hcaptcha.com/c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js	false		high
https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/challenge/image_label_area_select/challenge.js	false		high
https://imgs3.hcaptcha.com/tip/7a11a802f9900c8249f30e0e6f703e072ba45874115867a9f1f2656de54a665c/979f312d1f70fce7037880251dac3f68a5592371df3206bb9004bf020eda27f6.jpeg	false		high
https://maltese.com.br/share-sensitive-files-securely/public/js/ntzywRxzsLHk.js	false	Avira URL Cloud: safe	unknown
https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.html	false		high
https://static.cloudflareinsights.com/beacon.min.js	false		high
https://imgs3.hcaptcha.com/tip/e454c21f7daa31f58076a121c61ae2da8d3eb1d8e5613c26e750940cd7321432/aa8937ecb6cea3590bf50a9d81c08c2c0de662e52eb2a5670815c528fca9127f.jpg	false		high
https://imgs3.hcaptcha.com/tip/0c9e4dc02ee64ebd883bf00e79ea0cf0b51f8c6980423abd538b5f9d6c819451/18a6156ed8373d8bac8e7f0a19a816603f8821377705aa3e5179ad193a39f00a.jpeg	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239339388097_1IIZAECWS2U02B4A4&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239385875221_117D6BR0FMTM7OD16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90	false		high
https://maltese.com.br/share-sensitive-files-securely/public/css/JF8zRQjce615.css	false	Avira URL Cloud: safe	unknown
https://www.hcaptcha.com/signup-interstitial?utm_medium=checkbox&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2	false		high
https://imgs3.hcaptcha.com/tip/1ab0a2dc5c26f4ab92e66deb2559220870aa5616062c564d0836cfce535c1244/fc54c5169b27ef3d9f4fa9c4df034c564aa59a1e0eaa15e4b2df6c532b3e1ae0.jpeg	false		high
https://imgs3.hcaptcha.com/tip/ba451f8ceb6d100c019a671fffc7318f874d1f2da95bf55b05f80598efd68bd0/9c37acd6434cb46ea8433c150cd3ca436e1a8de9f426493d7a78f2635a6bd20c.jpeg	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239385875216_1P4KL3FZIJKZ633OT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/challenge/image_label_binary/challenge.js	false		high
https://www.hcaptcha.com/images/64da82f6bf67de1b1278931b_Card%20Testing%20-%20Blog%20Image.png	false		high
https://www.hcaptcha.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js	false		high
https://tse1.mm.bing.net/th?id=OADD2.10239402415504_17DDWI2WCHUD2N4TB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90	false		high
https://www.hcaptcha.com/fonts/64da82f6bf67de1b12789237_checkmark.svg	false		high
https://www.hcaptcha.com/images/64da82f6bf67de1b1278925f_hcaptcha-logo-hand.png	false		high
https://imgs3.hcaptcha.com/tip/092adf806d6542bb2fd163453464038bed6e5e0c581b9f5c07df587dc7605b35/60bb357eaeb397d50413365196a5a8f5248c389346ace5028a80e509d6d3bb8e.jpeg	false		high
https://imgs3.hcaptcha.com/tip/d183a372acb12f5a753bc5e4c0bb534866e1edcfd8784a26df78cf5dce27cb37/a2737397d9433d4a51f2be42861e5f9ad2aaa13188e51b2fb52b4b018723c396.jpeg	false		high
https://www.hcaptcha.com/what-is-hcaptcha-about?ref=maltese.com.br&utm_campaign=e7483410-5a58-493c-9fd0-cce66dae9bf2&utm_medium=checkbox&hl=en	false		high
https://a2.hcaptcha.com/api/event	false	Avira URL Cloud: safe	unknown
https://www.hcaptcha.com/js/jquery-3.5.1.min.dc5e7f18c8.js	false		high
https://www.hcaptcha.com/images/64da82f6bf67de1b1278932e_hCatpcha%20Vs%20reCaptcha%20%281%29.png	false		high
https://imgs3.hcaptcha.com/tip/dd20bab9369ed3c93458daa68f66729136ba071ddf381da780a61a324051c0a9/867131d9bb0d07c3c9975c929e77c544e6e0b8ba440a6582214107fda5626ee7.jpeg	false		high
https://api2.hcaptcha.com/checksiteconfig?v=c1e11bfffe54019b36ca486d59d75ea65128f510&host=maltese.com.br&sitekey=e7483410-5a58-493c-9fd0-cce66dae9bf2&sc=1&swa=1&spst=1	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://accounts.hcaptcha.com/b	chromecache_167.1.dr, chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
https://assets.hcaptcha.com/website-i18n	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://docs.hcaptcha.com/#add-the-hcaptcha-widget-to-your-webpage	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/hCaptcha/hcaptcha-integrations-list	chromecache_167.1.dr	false		high
https://docs.hcaptcha.com/	chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
https://www.hcaptcha.com/post/preparing-for-ai-agents	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://a2.hcaptcha.com	chromecache_136.1.dr	false	Avira URL Cloud: safe	unknown
https://newassets.hcaptcha.com/website-i18n	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://www.w3schools.com/tags/ref_language_codes.asp	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://newassets.hcaptcha.com/website-tr/js/vavilon_mod.min.js	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_212.1.dr	false		high
https://www.hcaptchastatus.com/	chromecache_167.1.dr, chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
https://website-i18n.hcaptcha.com	chromecache_167.1.dr, chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
http://ns.attribution.com/ads/1.0/	chromecache_208.1.dr, chromecache_155.1.dr	false		high
https://assets.hcaptcha.com/website-tr-js/vavilon.min.js	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://maltese.com.br/share-sensitive-files-securely/verify-captcha	chromecache_191.1.dr	false	Avira URL Cloud: safe	unknown
https://icons.getbootstrap.com/)	chromecache_135.1.dr	false		high
https://www.hcaptcha.com/signup-interstitial	chromecache_193.1.dr	false		high
https://github.com/jensyt/imurmurhash-js/blob/master/imurmurhash.min.js	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://accounts.hcaptcha.com/bug-report	chromecache_167.1.dr	false	Avira URL Cloud: safe	unknown
https://dashboard.hcaptcha.com/login	chromecache_167.1.dr, chromecache_193.1.dr	false	Avira URL Cloud: safe	unknown
https://hcaptcha.com/license	chromecache_186.1.dr, chromecache_205.1.dr, chromecache_157.1.dr, chromecache_203.1.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_134.1.dr, chromecache_212.1.dr	false		high
https://apply.workable.com/imachines/	chromecache_167.1.dr, chromecache_193.1.dr	false		high
https://github.com/twbs/icons/blob/main/LICENSE)	chromecache_135.1.dr	false		high
https://getbootstrap.com/)	chromecache_134.1.dr, chromecache_212.1.dr	false		high
https://www.hcaptcha.com/what-is-hcaptcha-about	chromecache_167.1.dr	false		high
https://www.hcaptcha.com/accessibility	chromecache_167.1.dr	false		high
https://twitter.com/hcaptcha	chromecache_167.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.106.63	d26p066pn2w0s0.cloudfront.net	United States	16509	AMAZON-02US	false
108.179.192.112	maltese.com.br	United States	46606	UNIFIEDLAYER-AS-1US	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
104.19.229.21	api.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
104.19.230.21	imgs3.hcaptcha.com	United States	13335	CLOUDFLARENETUS	false
104.16.79.73	cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1653983
Start date and time:	2025-04-01 19:49:34 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://maltese.com.br/share-sensitive-files-securely/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@25/146@39/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.203.176.221, 199.232.210.172, 23.33.40.138, 23.33.40.135, 23.33.40.132, 23.33.40.137, 23.33.40.154, 23.33.40.136, 23.33.40.139, 23.33.40.155, 23.33.40.134, 142.250.65.238, 142.251.41.3, 192.178.155.84, 142.250.176.206, 142.250.80.110, 142.251.32.110, 142.251.32.106, 142.250.65.195, 142.250.80.10, 142.250.65.202, 142.250.72.106, 172.217.165.138, 142.250.65.234, 142.251.40.234, 142.250.80.106, 142.251.40.202, 142.250.176.202, 142.250.80.74, 142.250.64.74, 142.250.81.234, 142.250.64.106, 142.250.65.170, 142.251.41.10, 142.250.80.42, 142.250.80.78, 142.251.40.238, 142.251.40.142, 142.250.65.227, 34.104.35.123, 142.251.40.138, 142.251.40.99, 142.251.40.195, 142.251.40.106, 142.251.35.170, 184.31.69.3, 20.103.156.88, 20.109.210.53, 20.69.140.28, 150.171.27.254
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, arc.msn.com, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, ax-ring.msedge.net, e86303.dscx.akamaiedge.net, clients2.google.com, ocsp.digicert.com, www.bing.com.edgekey.net, redirector.gvt1.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://maltese.com.br/share-sensitive-files-securely/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	804
Entropy (8bit):	5.1477609725146465
Encrypted:	false
SSDEEP:	24:tjoqrDuttwSU9MM70H9Uu1bFjqZgeYfv4RHT8SUNn0U:qqrLS7iOg6SwF
MD5:	A239CC5FE5FDBDFB9518B1DD5600B191
SHA1:	FF41DD7ED90D69EDFBC48214FBDF023DF53CAEE8
SHA-256:	F7746CA2FA216E8098FE572593FF607F3ED0F40C281B9DE33376CFCD0042D097
SHA-512:	5538E80616D1B1630F58A20111AD1E5BFFDEC3991D9215E428D7DAF8D04C9EDCAA4C1D8DA22AD5A8B97F8A00F73F78733B65B8BE31C7368BD51610BD5094BCC6
Malicious:	false
Reputation:	low
URL:	https://www.hcaptcha.com/fonts/64da82f6bf67de1b12789237_checkmark.svg
Preview:	<svg width="21" height="21" viewBox="0 0 21 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_271_14406)">.<g clip-path="url(#clip1_271_14406)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M20.864 2.36396C20.4734 1.97344 19.8403 1.97344 19.4497 2.36396L6.72183 15.0919L1.77208 10.1421C1.38155 9.75161 0.748389 9.75161 0.357865 10.1421C-0.0326593 10.5327 -0.0326595 11.1658 0.357865 11.5563L6.01472 17.2132C6.40524 17.6037 7.03841 17.6037 7.42893 17.2132L20.864 3.77817C21.2545 3.38765 21.2545 2.75449 20.864 2.36396Z" fill="#47566B"/>.</g>.</g>.<defs>.<clipPath id="clip0_271_14406">.<rect width="21" height="21" fill="white"/>.</clipPath>.<clipPath id="clip1_271_14406">.<rect width="25" height="25" fill="white" transform="translate(-2 -3)"/>.</clipPath>.</defs>.</svg>.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 1, 2025 19:50:22.760893106 CEST	53995	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:22.869227886 CEST	53	53995	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:24.937881947 CEST	58974	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:25.042959929 CEST	53	58974	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:32.983464956 CEST	53	62117	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:33.181792974 CEST	53	53220	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:34.047291994 CEST	53	53762	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:37.489990950 CEST	59308	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:37.490125895 CEST	63017	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:37.594736099 CEST	53	59308	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:37.594882965 CEST	53	63017	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:38.232502937 CEST	59947	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:38.232741117 CEST	57786	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:38.526190996 CEST	53	59947	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:38.555247068 CEST	53	57786	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:39.286904097 CEST	54330	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:39.287403107 CEST	54381	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:39.373542070 CEST	53	52847	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:39.392463923 CEST	53	54330	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:39.393877029 CEST	53	54381	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:45.097786903 CEST	63243	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:45.098170042 CEST	63312	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:45.204360008 CEST	53	63312	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:45.204726934 CEST	53	52822	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:45.205785990 CEST	53	63243	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:46.389782906 CEST	56716	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:46.389898062 CEST	56017	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:46.496133089 CEST	53	56017	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:46.496762037 CEST	53	56716	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:46.557637930 CEST	63520	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:46.557797909 CEST	62462	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:46.665503025 CEST	53	63520	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:46.670121908 CEST	53	62462	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:46.764831066 CEST	55755	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:46.892501116 CEST	53	55755	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:47.083004951 CEST	52383	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:47.083120108 CEST	55839	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:47.189625978 CEST	53	52383	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:47.220359087 CEST	53	55839	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:47.557065964 CEST	50301	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:47.557066917 CEST	53161	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:47.664923906 CEST	53	53161	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:47.664954901 CEST	53	50301	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:51.145893097 CEST	53	61359	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:57.589915037 CEST	55081	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:57.590146065 CEST	52172	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:57.696162939 CEST	53	55081	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:57.697087049 CEST	53	52172	1.1.1.1	192.168.2.5
Apr 1, 2025 19:50:59.988979101 CEST	60453	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:50:59.989485025 CEST	57674	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:00.095890045 CEST	53	60453	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:00.096995115 CEST	53	57674	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:00.144403934 CEST	60720	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:00.144535065 CEST	63189	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:00.250224113 CEST	53	63189	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:00.252058983 CEST	53	60720	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:01.155893087 CEST	56423	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:01.156056881 CEST	62325	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:01.262279034 CEST	53	62325	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:01.262342930 CEST	53	56423	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:09.988342047 CEST	53	59545	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:27.857168913 CEST	138	138	192.168.2.5	192.168.2.255
Apr 1, 2025 19:51:32.536926985 CEST	53	61141	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:32.821276903 CEST	53	55332	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:33.517225027 CEST	51695	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:33.517554045 CEST	55316	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:33.625761032 CEST	53	55316	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:33.638045073 CEST	53	51695	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:34.238171101 CEST	54535	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:34.238449097 CEST	54893	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:34.346235991 CEST	53	59934	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:34.346251011 CEST	53	54535	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:34.951936960 CEST	55414	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:34.952297926 CEST	58343	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:35.022852898 CEST	52606	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:35.023112059 CEST	54335	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:35.058909893 CEST	53	55414	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.060509920 CEST	53	58343	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.122351885 CEST	63842	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:35.122610092 CEST	54619	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:35.129034042 CEST	53	52606	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.130908966 CEST	53	54335	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.233092070 CEST	53	63842	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.235790968 CEST	53	54619	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:35.950664043 CEST	53	61936	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:36.197736979 CEST	53	58877	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:37.003415108 CEST	55435	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:37.003595114 CEST	60020	53	192.168.2.5	1.1.1.1
Apr 1, 2025 19:51:37.108309031 CEST	53	55435	1.1.1.1	192.168.2.5
Apr 1, 2025 19:51:37.110994101 CEST	53	60020	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
Apr 1, 2025 19:50:22.967333078 CEST	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 1, 2025 19:50:23.066098928 CEST	223	IN	HTTP/1.1 304 Not Modified Date: Tue, 01 Apr 2025 17:13:36 GMT Expires: Tue, 01 Apr 2025 18:03:36 GMT Age: 2207 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Apr 1, 2025 19:50:23.070110083 CEST	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Apr 1, 2025 19:50:23.168311119 CEST	223	IN	HTTP/1.1 304 Not Modified Date: Tue, 01 Apr 2025 17:23:30 GMT Expires: Tue, 01 Apr 2025 18:13:30 GMT Age: 1613 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:25 UTC	346	OUT	GET /th?id=OADD2.10239385875221_117D6BR0FMTM7OD16&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:25 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 337628 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B2529ACD4A7A4D04B90E7FA22F4A7195 Ref B: EWR30EDGE0822 Ref C: 2025-04-01T17:50:25Z Date: Tue, 01 Apr 2025 17:50:25 GMT Connection: close
2025-04-01 17:50:25 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 34 3a 30 39 20 31 38 3a 32 35 3a 30 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.4 (Windows)2024:04:09 18:25:038C
2025-04-01 17:50:25 UTC	16384	IN	Data Raw: 54 2d fe 79 bc ba de f1 06 8f 25 84 df bb ff 00 b6 55 83 22 49 e7 79 7f f2 d2 bd ca 35 21 35 cd 13 cd 9d 39 c0 2e 12 34 9b cb 8e 88 db 67 ef 2b a4 8e ca ca da ca 1f dc 7e f3 fe 5a d6 0e a9 6f 1c 37 9f bb a8 85 6e 72 f9 39 0f 54 f0 5b f9 df 65 b8 8f f7 b1 c5 5e a7 63 14 91 41 98 ff 00 77 5f 3f fc 37 d6 ff 00 b3 67 ff 00 a6 72 ff 00 e8 75 ed 5e 18 d6 e3 d4 6c f6 0a f8 9c da 8c e3 53 c8 ef 7f bd a3 ee fc c8 b5 ab 6f ed 49 be cf 9f 2a 48 eb cf fe 2e 78 3e e2 ca de 5b db 79 fc cb 7f f9 e2 6b d5 f4 d5 8f 50 9b 77 fa b9 e2 ac bf 1e 58 0b eb 29 22 92 b9 70 b8 a9 d2 9c 4a 85 47 29 aa 47 cc 92 26 ca f5 7f 86 1a bf d8 74 ab 51 24 df eb 7f d6 d7 3b e3 cf 08 0d 2e 18 af 22 9f f7 7f f3 ca a8 fd a3 c9 b2 87 cb ff 00 96 55 f4 d8 a9 c3 1b 47 dd 14 29 ca 94 fd e3 e8 18 75 Data Ascii: T-y%U"Iy5!59.4g+~Zo7nr9T[e^cAw_?7gru^lSoI*H.x>[ykPwX)"pJG)G&tQ$;."UG)u
2025-04-01 17:50:25 UTC	16384	IN	Data Raw: d0 db 5c 7f da fc 9b 28 bc ca bf 67 f6 9b 9f 2a 48 ff 00 d5 d7 99 3a 27 41 67 5c b8 ff 00 9e 75 cc 6b 17 71 c3 0f ef 3f e5 95 74 97 9a 56 a0 f0 f9 91 c3 e6 d6 4a f8 43 55 d6 7f 70 87 ec b6 f5 bd 0e 48 13 51 c8 e2 af 2f be d3 7d e5 c7 fe b2 5a d2 d3 f4 ab 9b 69 bc c8 ff 00 7b 25 6c eb df 0f 35 4d 0b fe 26 11 1f b5 47 1f fa da bd a1 db c8 fa 5f da 23 83 f7 72 d7 a1 3c 64 39 3d d3 1a 14 b9 c9 ac ee 24 48 7f e9 a5 6a 78 61 63 9a f3 cc 92 a1 d2 34 3b 8d 46 6e 7f 75 1f fc b5 ab 91 e8 d7 9a 6f 9b 26 7c da f2 2b 4e 07 4d d7 3f 25 ce 81 56 0b 78 7c b1 5c fd f6 95 1d f6 a5 14 b2 7f cb 2a 5f b5 c8 9f eb 3f d6 55 3d 2f 50 f2 bc df 32 b8 a1 19 97 0a 7c 87 7d a5 49 1c 50 d4 9a 85 de f8 6b 9d b7 bf d9 0f 5a 65 c6 a1 be b1 e4 f7 ce 3f a9 fe f3 98 9b 50 9f 12 d6 46 a0 ff Data Ascii: \(gH:'Ag\ukq?tVJCUpHQ/}Zi{%l5M&G_#r<d9=$Hjxac4;Fnuo&\|+NM?%Vx\|\_?U=/P2\|}IPkZe?PF
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: e5 7e 1f ba fb 1e a9 15 e7 fc f2 ff 00 55 5e 93 f0 af 42 b0 d5 61 93 c4 1e 21 80 49 24 d2 ff 00 a2 db 1f b8 2b cc cc e8 42 33 f6 b2 d8 e9 c1 d7 b4 0e e7 e1 e5 fc f7 ba 6c 77 32 0f 2a 4f 32 bd 03 4f be 12 5a 7e f3 f7 66 bc bb c4 5a e8 b2 5f 3e 39 e1 8f cb ff 00 96 46 9f e1 2f 17 8d 46 69 6d de 6f de 45 5f 33 52 8c ff 00 8b 08 93 8b c1 7d 63 df 3d 66 d6 78 e6 fb 95 24 b1 47 27 df ae 63 c3 ef b3 ca 92 39 fc c8 e4 ad bf b6 c6 95 cf 09 ff 00 31 e0 55 a0 e1 3f 74 c5 f1 27 87 1e ea 0f dc 4b 5e 79 e2 7f 86 c2 eb f7 91 cf e4 c9 ff 00 3d 6b d5 e7 d4 e2 6f b9 59 d2 3f 9d 37 ee ff 00 d5 d3 85 79 d2 9f ba 7a 78 5c 66 26 10 e5 96 c7 8a b7 c3 cd 47 4b 9a 59 2c e6 f3 23 9b fe 5a 47 ff 00 2c eb 3b c7 16 f6 57 3a a4 52 49 fb ab 8f f5 7e 6f fc f4 af 7a b7 02 05 97 8c d7 9f Data Ascii: ~U^Ba!I$+B3lw2*O2OZ~fZ_>9F/FimoE_3R}c=fx$G'c91U?t'K^y=koY?7yzx\f&GKY,#ZG,;W:RI~oz
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 04 a7 fe 5d eb 87 8d a4 ff 00 59 1c fe 55 c4 52 f9 91 79 55 a5 1d c5 eb f9 b1 db cf 35 87 da a5 8e e6 58 a2 ff 00 96 8f 1f f7 ab 6f 87 e3 33 77 e8 7a 37 82 bc 31 e3 5d 62 c6 cf c6 7f 6a 9f 4c bf d1 41 b3 3a 64 90 8c 5d 40 bf f2 cd eb 47 e2 17 8b f4 fd 47 c2 32 f8 7a 4d 32 f6 c3 cb b8 c4 72 e3 62 40 7e f6 2b ae f8 71 f1 2e 2d 72 d6 e8 6b af 67 a4 fd 9a 54 11 7e ff 00 fd 65 79 67 c5 9d 61 f5 3d 62 fa fe ca 6f 37 4b b8 93 ca ba f2 be ef 9b 1f dc 7a da bf b1 f6 71 f6 52 7a ee 70 52 95 4a 95 ff 00 7d 0b 72 ec 72 1a a6 a1 71 73 37 99 71 3f 9b 27 fa bf 36 5a a1 f6 ba ad a8 79 89 35 43 27 cf 37 99 27 ee ab 1e 43 bc b9 24 b2 ff 00 ac a2 de 5d 93 7e f3 f7 52 45 54 23 79 5f f7 72 51 e7 7f 9c d5 fb 30 35 6e 2e 2d 93 cd 93 c8 fd df fc f2 ab 97 16 9a d4 d3 69 fa 7f fa Data Ascii: ]YURyU5Xo3wz71]bjLA:d]@GG2zM2rb@~+q.-rkgT~eyga=bo7KzqRzpRJ}rrqs7q?'6Zy5C'7'C$]~RET#y_rQ05n.-i
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 31 4a bc 61 ee a5 64 6d e8 25 2d 61 fd e7 df ab be 78 9b fd 5d 61 df 49 3c 92 7c 9e 4d 66 ae a5 22 43 27 97 37 96 f5 c5 ec e7 33 c9 fa 9b ab ef 75 3b 6b 59 98 c7 f3 d4 92 3c 63 ad 73 7e 16 9a e3 c9 d9 3d 5c d7 65 78 97 fd 16 5f 9e a3 9e 7f 01 c7 2c 37 ef b9 03 58 be b7 58 77 d4 76 b3 f9 b6 71 c9 59 42 ca 04 86 39 ee f1 23 c9 fe b2 b5 9d e3 b6 eb f7 2b 3e 43 a6 54 e1 18 f2 c7 52 95 dd 84 6f 0c 90 bf dc 92 b9 2d 7f 49 f2 bc c7 79 ab b1 8f 50 8e 69 bc ba c9 f1 44 56 f2 c3 be 4f b9 1d 75 50 9c e0 7a 38 2a d5 21 53 96 47 9e 5c 27 ef fc ba b9 67 6f 25 b7 fa cf f9 6b fe aa af ea 11 59 43 37 ee ea 5d 25 7e dd 36 4d 7a 73 ad cf 4c f6 2f f6 cb fa 25 84 f7 1f bc 43 5d 76 97 6b be 1f 32 3a aa 8b f6 6b 1f 31 21 ff 00 96 75 07 87 b5 39 d6 e2 58 24 ff 00 57 5c 13 9c e6 Data Ascii: 1Jadm%-ax]aI<\|Mf"C'73u;kY<cs~=\ex_,7XXwvqYB9#+>CTRo-IyPiDVOuPz8*!SG\'go%kYC7]%~6MzsL/%C]vk2:k1!u9X$W\
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: cb fb 8f fb 65 5d 3e 9d 5c 97 87 e5 d9 04 5f f3 ce ba 7d 2d f7 fe f2 b1 36 fb 06 94 7f f3 d2 4a 36 7e fb cc a2 dd b7 f9 55 36 da 09 19 71 46 f8 fc 9a 7c 94 46 9f be ac c0 23 7f f9 69 4c d4 3c cf 27 cc 8e 99 53 5c 7c f0 f9 72 7f ab 96 b4 03 1e de 5d 93 79 75 bd 1d c6 f8 62 93 fe 7a d7 31 e6 fe fb cb ff 00 96 9f ea eb 57 4f 7f f4 2f 2e a8 a3 57 7d 3e e1 7c e8 7c ba cd fb 45 5f 8d e8 03 ce be 20 69 5f 6f b2 96 de 4f f9 65 fe aa bc 1f e2 06 89 f6 3f de 7f cb 3a fa 7f c5 16 5b ff 00 79 1f ff 00 bc af 22 f8 91 a3 ef 86 68 e3 83 f7 75 bc 02 5e f1 e0 f7 11 79 3f ea ea b7 fd 73 ff 00 57 5a fa c5 94 70 de cb 6f 27 fc b2 ac e9 1f 67 ee ea cc 46 69 f1 7e fa 58 e4 ff 00 57 57 2d e1 8e 69 aa b5 9b c7 e7 f9 9f f2 d2 ae 69 f2 ec 9b ed 11 fe f6 b1 99 70 33 75 44 df 7b e5 Data Ascii: e]>\_}-6J6~U6qF\|F#iL<'S\\|r]yubz1WO/.W}>\|\|E_ i_oOe?:[y"hu^y?sWZpo'gFi~XWW-iip3uD{
2025-04-01 17:50:26 UTC	16067	IN	Data Raw: fd 1b 15 22 e0 78 fe b1 6f 2c 3a a4 b1 d7 43 e1 ff 00 9f c3 de 5f fc f2 8a a9 f8 c2 d3 66 b5 ff 00 6d 6a 6f 0b cb fe 87 2d 69 f6 08 f8 66 7a 2f 85 e5 fb 4f 86 61 92 4f f9 65 5d 87 c3 f7 ff 00 89 5c 5e 64 ff 00 f2 d6 b8 0f 87 f2 ff 00 c5 3f e5 d7 6b e0 39 77 d9 4d ff 00 3d 22 96 b9 6b 1d b4 cf 49 d2 ff 00 d7 45 24 75 5b c7 9a 7f da 61 9b f7 1e 6f 9b 46 8e f2 7e ea b5 75 c8 b7 d9 79 95 ca 6d 33 e7 5d 62 ca 44 9e 6b 39 2b c1 3c 59 6f 1d b6 a9 75 67 ff 00 4d 6b e9 ff 00 8a 16 5f 63 d5 3e d9 1f fd fa af 9e fe 2e 5b fd 9b 5a 96 4f f9 eb 5d b4 4f 3e b4 0e 33 fe 58 fe f2 bd 17 e1 1b ec f0 ed d4 91 ff 00 cb 59 6b ce b6 6f b2 ff 00 ae 55 dc fc 23 b8 91 e0 ba b7 ad e6 45 3f 8c ec f5 49 64 7f 2a 4a 7e 9f 2f fc b3 a6 49 16 fd 2e 8b 38 bf 7d e5 d6 66 c3 2f 2d 37 c3 ff Data Ascii: "xo,:C_fmjo-ifz/OaOe]\^d?k9wM="kIE$u[aoF~uym3]bDk9+<YougMk_c>.[ZO]O>3XYkoU#E?Id*J~/I.8}f/-7
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 67 ee d2 1f 2e ac c7 2c 6f e5 79 94 fd 9f be f2 ff 00 e5 9d 04 10 fd f9 bc bf df 53 3e ff 00 fd 74 a7 c8 9f f2 ce 4a b9 1d bc 8f 37 fd 33 ac c0 86 ce de 4f f9 67 fb d8 ea e4 96 fb 2c a9 fb e3 87 f7 91 d1 22 7e e7 cb ff 00 9e b5 1f 6c d0 86 34 8f ff 00 8d 56 ae 9e 9f b9 8b cb ff 00 59 15 66 d9 a7 fc f3 ad 8b 74 ff 00 55 e5 cf e6 d5 97 4c 9b 67 fc f3 ae 9f c3 7f ea 65 f3 3f e7 95 60 d9 ac 6f 07 fd 75 ad ef 0d c5 fb 9f b3 c7 ff 00 3c aa 27 32 e0 6c 68 f5 d8 68 7f 21 ae 4b 4f 5d 93 45 ff 00 3d 2b a7 d1 ee 3f 73 2c 75 81 bd 33 bf d1 e5 ff 00 c8 b5 d5 46 fb e1 96 b8 cd 0e 5d fe 54 95 d9 e9 72 fe e7 cb ff 00 5b 5c d5 0e 9a 25 ff 00 0d bf fc b3 ab 9e 24 48 9e c6 5f fa 65 54 f4 b4 d9 7b e5 d6 96 a1 f3 d9 7e ee b0 34 fb 67 88 7c 4c b7 df e5 5c 47 fb af f9 eb 2d 72 Data Ascii: g.,oyS>tJ73Og,"~l4VYftULge?`ou<'2lhh!KO]E=+?s,u3F]Tr[\%$H_eT{~4g\|L\G-r
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 1b 8b 28 d2 6f b3 f9 1e 57 9b fb ca b3 65 a2 dc 79 32 c9 71 e7 45 1d ae cf 2a 58 bf e5 a5 6c 49 a7 c7 f6 c8 b5 08 e7 86 59 22 8b f7 5e 6f fc b4 ac 67 5a 11 98 fe 13 9b df fe b7 fe 59 79 b4 49 37 fa af 33 f7 55 b1 6f 69 a4 de 43 f6 7f df 5a ea 1f f2 ca 5f f6 bf db a9 b4 fd 28 43 34 52 5e 7f ab 8b fe 07 f6 8a 3e b3 02 e1 ef 8c d3 ec 6f 75 58 3f d1 ff 00 75 1f fe 8c ad 5b 7d 1e ca c2 f2 19 2e 2f bc db 7f f9 65 17 ff 00 15 54 e4 bb 8f 47 f3 64 fd f7 fc f4 f2 bf e7 9d 73 1a c6 a1 71 34 de 67 9f e6 c9 ff 00 2c ab 96 30 ad 56 7d a2 68 77 f7 9a 9e 94 9f e8 76 f3 f9 51 df cb fb df dc d5 cb 3b 7d 3a ce 6f f5 10 f9 97 5f bb 96 2f fe 26 b8 3b 39 64 9b ca bc b8 9f fe ba ff 00 bd 57 f4 b7 fb 4c ff 00 6c fd f7 99 ff 00 3d 6a 2a 61 b9 20 6d ce 76 7f 6b 95 e6 f2 ec e0 f2 Data Ascii: (oWey2qEXlIY"^ogZYyI73UoiCZ_(C4R^>ouX?u[}./eTGdsq4g,0V}hwvQ;}:o_/&;9dWLl=ja mvk

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:25 UTC	375	OUT	GET /th?id=OADD2.10239385875216_1P4KL3FZIJKZ633OT&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:25 UTC	861	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 336046 Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 6516951E2BBC47B388EB1BCA38B2C99E Ref B: EWR30EDGE1018 Ref C: 2025-04-01T17:50:25Z Date: Tue, 01 Apr 2025 17:50:25 GMT Connection: close
2025-04-01 17:50:25 UTC	2497	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 34 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 34 3a 30 34 3a 30 39 20 31 38 3a 32 34 3a 33 36 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 25.4 (Windows)2024:04:09 18:24:368C
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: b5 d1 42 b4 3e 13 19 c3 ed 1c f7 95 22 7e ee 4f de f9 b5 66 df 4f 8e 18 7c c9 3f d5 ff 00 cf 2a c4 db 73 67 7b e5 f9 fe 6f fd 72 ad bf 36 3f ec bf b4 7e fa bb 27 ce 63 02 69 1e da 6f f5 77 14 5e 5d 49 35 97 d9 ff 00 e5 a4 55 cf 47 71 1b cd fb b9 eb 4a e3 f7 df f5 d2 a2 70 e4 0e 73 37 50 79 66 f3 6a 85 bd bc 8f 37 97 5d 3d bd bc 73 4d e6 79 1e 6c 74 fd 61 2d a1 ff 00 8f 38 3f e5 95 69 f5 ae 4f 70 ce 74 79 bd f3 06 3b 78 d3 fd 67 fa cf f9 e5 45 c3 fe e7 f7 7f f2 ca 89 25 91 ff 00 79 25 43 71 f2 4d 2c 7f f2 ce ac 92 ae a0 f1 bf fa bf f5 95 5e ce c6 4b f9 bf 77 fe ae 2f f5 b2 ff 00 cf 3a d5 b7 d3 fc ef 2a e2 f3 f7 56 ff 00 f8 fc 94 f9 2e e4 86 1f b3 db fe ea de 5a db db f2 7b b1 33 f6 3c fe f4 8c a9 2d e2 b6 ff 00 57 3f ef 2a 9c 9f 3f ee e3 ab f7 1f 3f ef 24 Data Ascii: B>"~OfO\|?sg{or6?~'ciow^]I5UGqJps7Pyfj7]=sMylta-8?iOpty;xgE%y%CqM,^Kw/:V.Z{3<-W?*??$
2025-04-01 17:50:25 UTC	5164	IN	Data Raw: 47 86 af 74 db 2f b4 5e 41 fb b9 65 ae 7a ce 59 2d a6 af a2 85 78 62 29 fb 87 8f ec 27 4a 7e f1 7f 54 d3 6e 34 df 2a 49 3f 7b e6 fe f2 99 67 2d cc 3f bc b7 9f fd 55 75 bf da 11 eb 1e 18 96 3f f9 69 17 fe 87 5c c4 7a 26 a3 fb eb 89 20 f2 a3 ff 00 a7 bf 93 fe f8 ae 3a 35 94 f4 ab b9 d5 3a 3f c8 7a 87 c3 d7 3a f5 8f da 35 3f f5 7f eb 22 f2 ab 5a f3 c3 5b 26 96 f2 39 e1 96 3f fa 6b 5c 67 c3 7f f4 98 61 d2 ec e7 f2 bc aa eb f5 0d 23 51 b1 b2 96 e2 4d 53 cd 93 fe 79 7f 05 7c de 33 f7 55 e5 cb 2b 1e b5 1f 7a 11 38 4f 89 8b 26 9b 34 b6 71 c1 fb b9 7f e5 ad 3f c2 fe 17 92 e7 c3 1f da 17 1f f2 cb fe 59 56 6e a9 a8 5c df ea 92 db dc 79 d2 f9 5f f3 cb ef d7 55 6f ac 59 58 68 be 5d bf ef 63 ae d9 d4 9c 68 c2 31 dc c7 dc 94 e5 29 1c ae a0 9a b5 85 94 b1 f9 fe 6d bc bf Data Ascii: Gt/^AezY-xb)'J~Tn4*I?{g-?Uu?i\z& :5:?z:5?"Z[&9?k\ga#QMSy\|3U+z8O&4q?YVn\y_UoYXh]ch1)m
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: 4c 91 2a 5a 6d 01 33 d5 34 5d 34 dc 6a 45 1f f7 67 fe 5a d5 6f 11 68 b2 58 cd 22 3f 43 5a 5a 83 c9 63 a9 f9 9f ea a4 ae 93 53 8a d3 51 d1 e3 9c fe ed fe e4 95 e7 d6 a3 ef c8 f0 3e b5 52 8d 48 4b ec b3 c7 f5 0b 4f f9 e7 4f d2 e2 ff 00 96 72 57 41 af 58 44 b3 55 1b 3b 7d 93 57 2c 0f 56 56 70 e7 25 b8 d1 9f ec 9e 76 7e 4f 4a 5d 1f 4f df 57 2f 3c c8 7f 77 ff 00 4c aa 1b 7f 31 26 8a 48 eb 78 53 e5 99 87 3f b8 3e e3 4f f2 6b a0 f0 8a f9 2b f3 8f 2d 2a 79 2d e3 9a cb cc 93 f7 52 55 29 1e 34 87 c8 cf 95 27 fc f5 ae 9a d4 79 0e 27 5b da c3 90 35 eb 9f de 49 b2 b8 7d 51 3f 7d 5b 7a a4 db 26 aa 7f 64 fb 4c 3e 64 75 c7 08 1d b4 d7 24 0c 9b 74 91 27 ab f6 eb ff 00 2d 2a ed 9d bc 95 34 16 f1 4d fb ba ae 78 1a 94 2f 3f e7 9d 50 ae 82 0d 34 3c 3b e4 35 5b 53 d3 c4 53 6c Data Ascii: LZm34]4jEgZohX"?CZZcSQ>RHKOOrWAXDU;}W,VVp%v~OJ]OW/<wL1&HxS?>Ok+-y-RU)4'y'[5I}Q?}[z&dL>du$t'-*4Mx/?P4<;5[SSl
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: ae aa 3f be 99 8c fd c1 f1 a4 95 34 69 23 fe ee 9f 67 5b ba 6a c7 b6 3f 2f c9 fd d7 a5 46 2a 7e c8 50 f7 8e 72 e2 29 12 ab 6f f2 6b ab d7 17 cc 86 3f ef e6 b9 db 8b 4f f9 e7 58 d1 c5 73 17 28 5d 0c b3 b7 f3 a6 8b fe 59 79 b2 d7 51 27 86 61 4f f5 1c 1f f9 eb 5c bd bf 99 0d 6e d8 eb ef 6f 0f 96 82 bb 31 33 ad 6f dd 18 bb f4 35 ed 60 5d 25 7c bf 3b fd 61 ef 51 5f af da 3f 78 9f bc 8e b3 a4 d4 24 9b f7 94 cf b6 c9 31 f2 3c ef 29 2b 83 92 7f 14 cd 69 d3 32 b5 4f 92 6a cd 92 59 2b 4b 54 f9 2b 2a e2 2d f5 ea d0 ac 67 5a 06 96 96 9b ff 00 79 25 6a 69 9a 35 dd df 9b 24 11 4d 24 7d b3 55 fc 3f 14 97 33 79 71 d7 aa e8 cf 6d 16 8f b2 3f 4a e7 c6 63 3d 97 c2 72 57 af ec a1 cd cb 73 cc ff 00 b3 2e 3c ea 87 54 b2 96 da 1f fa 67 5d 7f 88 91 06 a3 e6 57 3f e2 0b 89 25 b3 Data Ascii: ?4i#g[j?/F~Pr)ok?OXs(]YyQ'aO\no13o5`]%\|;aQ_?x$1<)+i2OjY+KT+-gZy%ji5$M$}U?3yqm?Jc=rWs.<Tg]W?%
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: bd d2 19 5e 1b 3d 92 47 fe b4 8f 9e bc f7 43 d3 f5 6b 0f b5 59 e9 f7 d0 cb 71 6b ff 00 1e bf be ff 00 c7 2a c4 9e 33 d7 77 7f c2 3b 79 37 94 7c d4 8b 38 fe 0a db d5 bc 0b a4 e9 96 73 5e 41 35 ec 9e 67 ef 3f d7 d1 0e 6a 11 e5 ab d7 61 53 ba d2 a6 e5 0f 85 3e 22 d3 6e ee ed 64 bc 97 ec da a4 92 c9 1c a2 59 ab d5 bc 41 69 15 fc 7b 2d 3f d6 62 be 7d d3 f4 59 2f fc 75 6b 67 1f fc b5 ba 8e 5f 37 f8 eb de ed ec b5 0d 22 10 a9 9b cf 33 fe 5a 1a cf 32 84 21 38 ce 3d 4e 6a b3 d6 32 e6 f7 97 e2 78 6f c6 3d 0b 55 b7 d5 3e d1 3d 8c 1f 67 f2 bf e3 ea 2a e3 f4 bb 4b 9d 2a fb 4f d4 2e 20 ff 00 47 f3 63 92 2f 37 fe 5a 57 bb 78 cd 3e d9 a8 5a fd aa 19 bc 8f 33 f7 b6 d5 67 57 d3 74 ad 47 45 fb 15 cd 94 32 db ff 00 cf 2c 57 55 1c db 96 84 61 28 9d 52 c3 f3 f2 cf a9 0e a1 7d Data Ascii: ^=GCkYqk3w;y7\|8s^A5g?jaS>"ndYAi{-?b}Y/ukg_7"3Z2!8=Nj2xo=U>=gK*O. Gc/7ZWx>Z3gWtGE2,WUa(R}
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: d0 eb c1 62 a8 cb 48 c6 c7 25 e3 af 12 d9 5c 5b cb 67 67 3f fa 67 fc b2 f2 ab cf b4 fd 4f ec 7a a4 b7 17 9f f1 f1 ff 00 8f d6 f6 97 a2 ea 3a 0c d2 fd a3 c9 f3 3c df f9 65 47 89 25 d3 75 2b d8 ae 2f 3f 7b 24 51 79 7e 6d 7d 2e 17 d8 d2 f7 63 ef 26 75 cf 9c cd f0 5e bb fd 9b aa 5d 49 24 ff 00 bb 96 ba ad 3f 5a d4 75 8f f4 7b 7f fa e9 5e 6f 71 65 1a 6a 9e 5d bc ff 00 bb ff 00 96 55 eb ff 00 0b 6c b4 e8 34 bf 2e 38 3c d9 25 ff 00 5b 2d 46 67 4e 8c 61 ed 79 75 0a 33 99 9d 79 69 a8 c3 fe b2 78 65 fb 57 ee ff 00 eb 9d 77 5e 17 8a e3 4f b2 10 47 34 57 29 ff 00 3d 0d 4d 27 87 6c 2e e1 e9 e5 bd 32 55 4b 1f dd f9 df f5 ce be 7e b5 6e 63 5a 95 21 57 dd 88 fd 72 ea de fa d7 64 90 ff 00 ab ed 5c 3f 89 ac 25 51 e6 5b cf fb ca e9 35 0b a8 12 ce 5b 8c d7 33 71 a9 c5 aa cd Data Ascii: bH%\[gg?gOz:<eG%u+/?{$Qy~m}.c&u^]I$?Zu{^oqej]Ul4.8<%[-FgNayu3yixeWw^OG4W)=M'l.2UK~ncZ!Wrd\?%Q[5[3q
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: c8 d2 b4 f6 86 61 44 6f b2 9f b3 fe 59 51 b2 8f 68 47 b3 1f b2 37 a7 f9 3b 28 8d 6a 5a 3d a0 7b 31 b1 d3 a8 a2 8f 68 1e cc 28 a9 28 db 48 b2 b5 c2 d3 36 d5 99 12 99 b6 b1 e7 3a a9 c0 87 66 fa 7e ca 7c 69 4f 8d 2a 42 70 21 d9 46 ca 9b 65 1b 2b 3e 73 48 14 e4 4a 36 55 9d 9b e8 f2 7f ce 2a e1 33 39 c0 87 6d 1b 69 fb 36 52 d5 f3 12 47 b6 9f 1a 53 f6 d3 fc aa 3d b1 9f 21 0e ca 24 4a 9b 65 1b 2b 48 56 22 70 21 8d 29 92 55 8a 8b ef d5 fb 43 01 f6 f5 34 74 c8 d2 9f 1d 20 80 54 94 53 ab 9a 66 f4 c6 d3 a8 db 4e a6 5f 38 51 45 2e ca a8 40 89 cc 64 74 49 4e a5 d9 5a 7b 48 40 cf 92 73 22 a8 e4 4a 9b 6d 12 25 67 ed cd 3d 83 2a d3 64 4a b3 b2 a0 ad 21 58 c2 b5 12 29 12 99 25 4d 22 53 36 57 4d 33 8a 70 20 a9 23 a2 9f 1d 69 4c c0 5a 8e a6 a6 49 57 03 49 10 51 52 51 47 39 Data Ascii: aDoYQhG7;(jZ={1h((H6:f~\|iOBp!Fe+>sHJ6U39mi6RGS=!$Je+HV"p!)UC4t TSfN_8QE.@dtINZ{H@s"Jm%g=*dJ!X)%M"S6WM3p #iLZIWIQRQG9
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: fd a7 bf f7 9f f2 d2 2f dd d7 6c b1 3e f9 c3 1a 03 35 8b 4f b3 4d fe bf fe fe d4 36 72 db 3f ee e4 9e af 78 82 2b 7b cd 36 2d 43 fd 55 c7 fa bf 37 f8 6b 99 b8 fb 4d b7 fa cf fc 85 f3 d7 9f 5a 1c b3 3d 1a 33 e6 81 b7 1a 17 ff 00 8f 79 ff 00 77 ff 00 2d 7f e9 9d 5c b3 4f 26 6f 32 49 ff 00 ed 95 60 e9 ed 23 de 45 27 fd 32 ad 5f 37 7e b5 6b ff 00 4d 68 a7 4f ed 0a 73 36 ec d6 4b 9f de 47 5a 36 7e 5a 7e ef f7 d5 ce 6b 7a 9c a9 79 e5 c7 3f ee ea 6d 2f 53 92 e6 6f 2e bb 69 ce 11 9f 29 c7 52 9c f9 0e 83 ca 3e 77 fa ef dd d2 f9 5b 26 f3 2a 9d bc b4 fd f1 bf fa ca ea e5 81 89 66 47 ff 00 96 91 d2 79 5b ff 00 79 e7 55 4b 74 f3 a6 f3 23 ab 91 f9 69 fb bf 3e b3 84 39 c9 f8 4c fd 4a db cd 87 cc 7f dd 3c 74 ed 16 ce 46 12 c9 20 f2 fc ca bd 1b c6 9f f2 da 99 71 77 47 d5 Data Ascii: /l>5OM6r?x+{6-CU7kMZ=3yw-\O&o2I`#E'2_7~kMhOs6KGZ6~Z~kzy?m/So.i)R>w[&*fGy[yUKt#i>9LJ<tF qwG
2025-04-01 17:50:25 UTC	8192	IN	Data Raw: b4 5f 2e 49 fc a8 fc aa f1 f9 2e 3f e5 9c 9f f2 ca bd 5f e1 fe a1 be 1f 2f fe 7a c5 51 46 9f be 5d 6a 85 cd 53 c3 97 36 d0 cd 71 6f 3f 9b 6f 17 fe 81 54 24 b8 91 20 f3 3f e5 a5 ac b5 d8 69 77 1e 75 9c 5e 67 fd 34 8e 5a e3 f5 cb 1f b3 5e cb 6f ff 00 2c ff 00 d5 d5 d6 a3 fc a4 7b 62 cf 8e 12 3b cf 0c 56 6f c3 bd 42 44 d2 e2 f3 3f e5 97 ee ea e5 9c bf 6c d1 7c bf fa 65 5c de 97 71 f6 3d 53 ec ff 00 f2 ce 5f de 56 3e cc db 9f dc 3d 46 de f7 fe 5a 7f cf 29 7c ba d8 8e f6 b8 9d 1e e3 7f 9b 1f fc f5 8b cc ff 00 be 6b 6e 4b 8d 9e 54 9f f3 d6 ae 13 24 d8 92 e2 3f f9 69 04 35 35 c4 56 57 90 fd 9e f2 08 65 8f fe 9a d6 24 97 1b ea cd bc bb ec ab 40 38 ff 00 16 78 1f 51 b3 9a 5b cd 1f c9 ba b3 fd e7 ee bf 8e 3a a1 f0 bf 55 b9 7b 29 74 bb cf de c9 61 ff 00 2c a5 ff 00 Data Ascii: _.I.?_/zQF]jS6qo?oT$ ?iwu^g4Z^o,{b;VoBD?l\|e\q=S_V>=FZ)\|knKT$?i55VWe$@8xQ[:U{)ta,

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:25 UTC	346	OUT	GET /th?id=OADD2.10239402415503_1IET5OVL073FDA0RX&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:25 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 352481 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D78FDF0DAD034FA0ADF0A76D230BF0B2 Ref B: EWR30EDGE0906 Ref C: 2025-04-01T17:50:25Z Date: Tue, 01 Apr 2025 17:50:25 GMT Connection: close
2025-04-01 17:50:25 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 32 34 20 31 31 3a 30 33 3a 32 39 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:24 11:03:298C
2025-04-01 17:50:25 UTC	16384	IN	Data Raw: fd 0d 7d 03 fb 3f 7e d3 ba ee 85 a8 41 a1 7c 4c 9f fb 42 c2 76 02 3d 59 97 69 87 fd ff 00 f1 af 07 7b 59 ed be 79 2c da 30 cb f2 b3 2f 7a 6b da f9 f0 b7 c8 ce 19 70 d5 bc 71 12 5b bb a3 cf af 95 e1 ea af 86 cf ba 3f 4d b4 ab cb 3d 53 4b 83 53 d3 2e 56 e6 d2 e5 43 c5 2c 6d b9 58 1a 9d 79 e0 d7 c1 7f 08 fe 31 78 c3 e1 96 83 67 65 a4 5e 2d d5 8c 52 6c 6d 3e e7 e6 55 4f 55 6a f7 3f 03 fe d6 de 0d d4 75 44 d3 fc 53 a7 cb a3 b4 d8 55 ba fb d1 b1 3e a7 b5 74 46 49 ec cf 9c ad 82 ad 49 bb c6 eb b9 f4 0e 07 fc 0a 86 fb d5 0e 97 7b 65 aa 69 b1 5f 69 b7 70 dd 5b 4a b9 59 22 6d cb 8a 9f f8 aa 8e 68 b4 d6 80 d4 7f 0d 2a f1 43 71 40 68 26 0d 2e 3b 9a 17 de 8c ff 00 df 34 98 98 01 9a 31 96 a3 18 a0 f1 f5 a4 82 20 46 ea 45 a7 2a 8a 31 45 d0 d8 94 ea 45 f4 a3 ff 00 42 a1 Data Ascii: }?~A\|LBv=Yi{Yy,0/zkpq[?M=SKS.VC,mXy1xge^-Rlm>UOUj?uDSU>tFII{ei_ip[JY"mhCq@h&.;41 FE1EEB
2025-04-01 17:50:25 UTC	16384	IN	Data Raw: ed 6f a3 9e 58 17 cb 55 56 fe 32 71 80 7b d7 95 f8 6e 65 85 a6 bd bd 8a 39 24 95 f7 ff 00 ba 3d 2b 91 d7 3c 75 e1 47 bc 83 47 b1 d4 d6 5b 6b 11 b2 49 d7 ee cd 27 73 f4 cd 49 75 e3 5f 0c 43 0a c4 75 35 53 fd dd a7 75 72 d5 c2 62 1b fe 1b fb 8e ec b2 96 03 0d 42 51 55 97 bc f5 d5 2d 11 b1 af 3f da e6 92 45 f9 77 35 76 9e 0c b9 d4 fc 4f 66 9e 1e d3 1e db 4e d3 ad 50 7d aa 44 ea ff 00 e3 5e 46 3e 20 f8 4a 4b e8 ad 0d d5 cf 92 cd 89 67 58 3e 55 1f 4e f5 b5 f0 27 c5 d3 a6 bd a8 78 b1 2c 5a 3f 0e 5a f9 90 34 d2 c9 b7 ce 23 a1 fc 3b d7 46 13 2a c6 c9 fc 0e c2 cd f3 9c b6 38 66 95 44 e7 1f 87 ae bf 97 a1 ea 7a 2f c2 b3 17 8c 13 55 d4 2e 63 9e da cf f7 90 41 12 f3 21 f7 35 85 e3 cb bb fd 53 5a 9e e6 7b 6f 21 62 fd dc 63 ee ac 6a 2b cf fe 25 fe d3 1a f5 fc 92 e9 de Data Ascii: oXUV2q{ne9$=+<uGG[kI'sIu_Cu5SurbBQU-?Ew5vOfNP}D^F> JKgX>UN'x,Z?Z4#;F*8fDz/U.cA!5SZ{o!bcj+%
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: bb 53 21 dd 1d 47 20 3b b0 7a d3 a3 f9 78 a2 e5 5b 42 4c 01 d4 d0 a9 d8 b5 39 47 7a 24 52 7f 8a 95 ee 03 55 80 ea d5 e8 bf 06 74 15 91 9b 58 91 9b f7 7f 24 6b fd 6b cf 14 0f 98 7c d9 af 66 f8 4a 8b 07 86 60 42 cd 86 e5 ab c7 ce ab 4a 18 66 a2 f7 3e ab 84 b0 90 ad 8f 4e 6a ea 3a 9d 4c 60 ba ed 0b c2 d3 94 ed e2 91 a4 10 af 0d b7 75 47 e7 46 5b 01 97 3b 6b e1 f5 3f 60 d1 0e 63 f2 e7 bd 37 96 fa 54 73 46 eb 27 de 56 1f ec d3 90 e5 79 a0 6b 52 55 38 e9 f3 54 b0 8d dd 5a a0 8f 1d 2a d3 32 24 7f bb dc c6 82 65 a1 24 d2 e2 d7 c8 4f 96 36 fb d5 59 82 46 df 22 ff 00 c0 69 a5 f1 1e 2a 38 48 dd cb 6d db 4a c4 28 a4 5a c1 5e 5d bf e0 35 0b 30 1b ce e6 5d b8 3b a9 48 2e d8 dd bb ff 00 65 a8 a6 60 19 96 6f bb 1f dd 6a 63 45 e8 64 22 15 95 1b 69 65 ab 4a c0 ab 49 3c 9b Data Ascii: S!G ;zx[BL9Gz$RUtX$kk\|fJ`BJf>Nj:L`uGF[;k?`c7TsF'VykRU8TZ2$e$O6YF"i8HmJ(Z^]50];H.e`ojcEd"ieJI<
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 54 c6 bf 75 bf 8a b0 b4 b9 83 37 ce ac aa df de fe 2a ea b4 78 62 fb 2b 18 fe 63 fd da e7 c6 56 4a 92 8b 47 56 59 83 94 b1 1e d5 3f 91 9d af 69 fe 6c 8b 3a f9 6b e5 73 b5 b9 aa b1 b6 f5 de 56 35 2d fc 31 ae d5 fc ab a0 ba b5 b8 6b 76 12 40 d1 34 9f c2 cb f3 62 b1 2e ac dd 37 6c e8 bf 7a b9 28 d7 72 87 25 cf 43 15 84 51 ad ed 14 75 62 79 0f 70 df bd 89 64 89 7f e7 9d 5b 4d 2a dc c3 80 bc 56 95 85 c4 b1 69 30 5b 79 50 2f 96 a7 e6 58 fe 66 cf 76 3d e9 73 b9 79 ac eb 57 95 ed 16 74 61 b0 71 b5 e6 8c 6d 4a 01 06 9f e4 c9 f2 af 55 68 d7 6d 61 36 a1 a9 e9 f1 b1 8a 4f 32 26 fe f7 55 ae b2 f8 24 91 b4 52 2e f1 58 7a c5 b0 92 d7 01 7e 55 fb d5 d3 85 ac 9e 93 d4 f3 f3 0c 1c ad cd 47 4b 1e f9 fb 11 6a ad ad 78 3f 5c d0 f5 3d 32 46 d3 ee 1f cb 59 d5 b7 75 1c ae 3b 57 Data Ascii: Tu7xb+cVJGVY?il:ksV5-1kv@4b.7lz(r%CQubypd[MVi0[yP/Xfv=syWtaqmJUhma6O2&U$R.Xz~UGKjx?\=2FYu;W
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 51 64 97 7e dd ed ba 9c 9e 5b af 32 f9 7f 2d 43 70 83 6c 64 3f 3f c4 b4 8f 21 75 58 f6 fd d5 a9 48 d3 9d 5a c1 34 52 79 98 4f 98 7f 79 69 ca 82 36 c6 ed c5 7e f5 2a 89 3c 9c a2 b3 76 dc bf 76 96 d2 ce 5b 89 3c b4 97 6b 37 f7 ab 42 1c 6f ad cb 96 b7 37 d0 c3 93 75 23 47 bb 3e 5c 78 aa 5a 95 ed dd e4 98 b8 95 9a 56 6f bd 26 77 63 b0 ad 8b 8b 38 34 e6 8e da 2b e8 2f a4 93 06 49 22 ce d8 cf a7 35 3c d7 97 8d 1f d8 e4 89 54 ff 00 0a ac 61 77 51 4e ae b6 b1 8d 5a 71 e4 ba 3b df d8 c3 4c 97 fe 12 ad 63 51 b9 b1 59 56 de 05 4b 6b b6 8c fe ec 9f bc 14 f4 fa d7 a8 7c 66 f1 1e 95 a1 78 7d ed ef 96 e6 49 ee 93 10 46 9c 23 1e d9 f5 02 b0 7e 0a f8 53 c4 be 1f f0 b3 5c df 6a f0 da e9 f2 fe fe 5b 55 52 c7 9e ec dd b8 ec 2b 85 f8 c9 e2 5b 6f 13 78 bb 3a 77 99 f6 2b 34 f2 Data Ascii: Qd~[2-Cpld??!uXHZ4RyOyi6~*<vv[<k7Bo7u#G>\xZVo&wc84+/I"5<TawQNZq;LcQYVKk\|fx}IF#~S\j[UR+[ox:w+4
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: c2 33 1c 9a df 89 1e 3b ad 6a e5 8b 6d 8f e6 4b 51 fd d1 9e a7 de ad 61 f9 2d 24 73 d7 cc 63 0a 7c 8d 68 65 fe cd bf 0b d7 c2 56 b7 3e 23 d4 ff 00 7b a8 6a 71 a7 91 1c 8b b4 da c6 3b 7b 31 ef 5e 91 a8 79 f2 dc 2c 71 f4 fe 2a bb 71 3e f5 c9 6d df dd a8 a1 65 da f9 6e 7f 86 bb 21 29 de ec f9 7a f2 55 1b 31 75 59 a2 b4 85 ad e3 fe 2f bc df 4a c7 10 f8 96 f2 e9 46 8f a6 c7 2d aa a9 2f 3d cc db 23 5c 7e a6 a5 f1 42 5c aa c9 f6 78 96 59 23 52 56 36 6d ab 21 ec 33 5c 26 b5 a7 fc 63 f8 8b 0a e9 5f 63 b4 d0 74 fb 35 c4 8b 6d 33 a4 77 07 dc 8e 5b f0 ae ca f8 88 d1 a4 ac f5 67 0e 0f 03 3c 4e 21 ca 6d 46 11 ea f6 38 8f 8a 3e 28 d6 35 5f 13 2d b4 f7 30 ca 2c 58 db 47 f6 26 2c b3 12 70 71 9e b5 eb 7f 03 7e 12 8d 12 e1 3c 51 ae df 47 fe ab 7f 91 bb 09 07 7c b1 ee 6a e7 Data Ascii: 3;jmKQa-$sc\|heV>#{jq;{1^y,q*q>men!)zU1uY/JF-/=#\~B\xY#RV6m!3\&c_ct5m3w[g<N!mF8>(5_-0,XG&,pq~<QG\|j
2025-04-01 17:50:26 UTC	16067	IN	Data Raw: 3e 65 46 e9 39 af bc da 56 4d bb 87 cb b7 1f 2d 39 76 49 1b 18 ff 00 86 b2 e1 d4 ad dd 5b 7c aa ac bf 79 6a 75 9e 0d b9 8d 97 1d 37 6e fb d5 c6 e9 4a 3b a3 d6 8e 22 95 45 ee c9 7d e4 de 58 2d b1 db 68 6e 37 7f 76 ab be 9e 86 16 27 cb 62 df c3 53 ab fc bc ae e2 df c5 ba a4 b7 31 fd ab 12 ae e5 db f7 55 b6 d3 52 94 76 61 2a 74 e7 ba 31 a4 b0 0d 26 c0 bb 7b 55 77 b7 b8 86 6c ee 6c c7 fc 2d f3 6e ae 8a eb ec ce df b9 83 cb 0b fe d6 ea af 20 49 37 07 fd db 2f dd dc b5 d3 47 11 3b 9e 56 2b 2f a7 2d 63 a1 1c 7e 24 bb 93 49 5d 3e 6b 6f 2a d5 5b 3b 96 3d cd bf d7 3d 6a 38 26 82 49 98 c1 78 b2 05 fb ab b4 ab 66 ae 5a c3 72 ec b1 46 b0 37 9a db 77 34 1c fe 02 b5 f5 4f 0f 26 9b e1 b8 cd e7 88 d6 4b e9 5c 18 34 98 2d a3 66 58 fb b4 92 0e 41 f6 ae a7 4a 94 a3 cd b3 3c Data Ascii: >eF9VM-9vI[\|yju7nJ;"E}X-hn7v'bS1URvat1&{Uwll-n I7/G;V+/-c~$I]>ko[;==j8&IxfZrF7w4O&K\4-fXAJ<
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 18 e3 ff 00 1a b0 8a 56 1d bf 74 af de a8 a4 b4 8e 56 57 95 9b 72 af ca b5 9f 36 a6 de ca 56 29 2c 77 08 ac 53 e6 fe ee ef e2 a2 4b 7d 46 4f be 9b bf e0 55 7e 4c c7 1a e3 ee 7d d5 a7 33 16 5c 9f 94 ee a7 ed 19 3f 57 4d 6a cc 68 ed ef 44 d8 75 da 37 7c db 9a af 47 6f e7 2e 0b 6d 1f ec fc b5 6d 62 cb 72 fb 85 4c b0 c4 ac a0 7c bf f0 1a 52 ac d9 70 c2 a5 b1 59 22 b7 81 73 e5 b4 8d b7 ee ab 7c b5 2d bf 9e d2 2b 3e d8 e3 da 7f 75 1f cb f9 9a 7c 9b 37 30 0b ba 9d 0c 27 a8 ac 5c ae 74 46 1a 86 dd b1 fd d5 51 fa d3 15 07 6d cc 37 7c db aa 6f dd 96 c4 8c ab fe f5 34 3c 66 4c 24 bb bf bd f2 d2 b9 af 50 f2 a3 91 98 05 e7 f4 a9 23 de 8d e5 f9 4b b7 ff 00 41 a7 a3 aa 6e 03 e6 2d fc 54 e0 fb e4 c5 4b 6c d2 28 45 60 17 ef 7c df dd a1 98 0e b5 3a ed e8 76 d4 53 18 fe 62 Data Ascii: VtVWr6V),wSK}FOU~L}3\?WMjhDu7\|Go.mmbrL\|RpY"s\|-+>u\|70'\tFQm7\|o4<fL$P#KAn-TKl(E`\|:vSb
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: f2 6a 39 75 2b 7e 9b 5b fe fa ae 32 e3 5e 07 a4 fc 55 66 d7 23 1c ee a8 59 7c db d8 a9 71 0d 18 ad 19 da cd aa 44 8c c6 3e bd 36 d5 6b 9b 93 22 e7 e6 c7 5a e3 ff 00 b6 c7 65 56 2d fe d5 4d 0e b9 27 cc 0f 96 a7 fd ea d1 60 26 b6 46 4f 3e a5 2d e4 75 b6 d7 8a ab 9f 29 bf da 6d d4 f9 26 81 b9 76 dd b7 fb d5 c7 4b ab 07 e5 db 9a 86 4d 5f 6f 1b b8 a3 ea 33 64 bc fa 9c 15 af 73 af 92 ea 38 d9 9b 72 d4 2d aa ca 24 e2 26 51 fe f0 ae 56 4d 62 0e 9b b9 ff 00 66 93 fb 6a 2d b8 dc d5 a7 d4 65 d5 18 3c fa 0f ed 1d 84 7a 8e d8 d8 9f de 16 fe f3 7d da 81 af 9a 4e 8a ab 5c 9f f6 9c 7b 72 25 a3 fb 48 bf fc b7 e3 fe f9 aa 58 19 76 33 96 7d 4e df 11 d8 25 c0 5d a7 cd 55 2b 53 43 a8 85 dc 59 95 8f f7 ab 85 5d 47 2d fe bf 8e 9b 6a 44 d5 11 3a b5 0f 2f 93 22 39 f4 56 c7 68 da Data Ascii: j9u+~[2^Uf#Y\|qD>6k"ZeV-M'`&FO>-u)m&vKM_o3ds8r-$&QVMbfj-e<z}N\{r%HXv3}N%]U+SCY]G-jD:/"9Vh

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:25 UTC	375	OUT	GET /th?id=OADD2.10239402415504_17DDWI2WCHUD2N4TB&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:26 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 380972 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: C006D799497844E3911C3BED47FDD4FB Ref B: EWR30EDGE1619 Ref C: 2025-04-01T17:50:25Z Date: Tue, 01 Apr 2025 17:50:25 GMT Connection: close
2025-04-01 17:50:26 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 20 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 32 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 34 3a 31 30 3a 32 34 20 31 31 3a 30 33 3a 30 35 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1 r2i``Adobe Photoshop 25.12 (Windows)2024:10:24 11:03:058C
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 3c c1 8e a3 a7 43 d3 d6 bd 1c 05 2a 75 6a 72 4d 1c b9 95 4a d4 28 fb 5a 4d 69 ba 6b 73 a9 b1 d4 62 97 e7 0d 56 e7 94 49 0d 78 dd ae b9 aa e9 77 8d 0c be 64 52 c7 f7 a2 99 7e 65 ad 68 fc 71 a8 85 c1 8a 06 fc eb d1 a9 93 d5 52 f7 0f 2a 97 11 d0 69 7b 54 d3 3d 1d 25 1d 0d 6b 59 e8 37 77 36 ad 7f 6e cb 2c 50 ae 5b 6f cd 5e 6b a5 f8 ca da 56 5f b4 ab 44 7f 8b f8 85 7a 2f c2 6f 1e 69 1a 65 e5 d4 52 af da a1 ba 51 e6 47 1b 0e df 5e d5 c9 53 07 56 9f c4 8e c9 66 b4 ea d3 e6 c3 c9 37 db bf de 75 1e 1f bb d1 bc 21 a7 cf 16 b7 12 c5 1e a0 a5 be d6 d1 96 49 03 26 70 0f b7 b5 79 7f 89 b4 e4 9f 47 d4 35 27 55 95 77 34 96 ca 8a 55 d4 7b f7 35 d2 fc 41 d6 07 89 3c ab 72 ab 1d a4 12 19 62 8d a4 dd b7 27 f2 1e 94 78 5e 44 9e df fd 1b 6c f3 7c c1 63 5c 32 e4 74 06 a6 a5 6e Data Ascii: <CujrMJ(ZMiksbVIxwdR~ehqRi{T=%kY7w6n,P[o^kV_Dz/oieRQG^SVf7u!I&pyG5'Uw4U{5A<rb'x^Dl\|c\2tn
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 72 6c 35 f7 59 76 29 56 a2 af ba 3f 1d cf b2 e7 84 c4 b7 1d 9e a7 49 a6 df 5a 6a b0 c7 6d aa ca d1 79 7b 45 b4 b6 d1 a2 a4 23 a3 19 06 32 dc 7b d4 77 56 90 db ea 0d 15 bd e4 77 51 2b 63 cf 6f 91 5b f3 ed 59 9e 1d bd 1a 75 e7 9e 60 5b 9d aa 47 97 23 1d 99 3c 64 e3 d2 b5 af e7 d2 e4 ba 69 6c ad a4 82 de 48 c7 97 1c b7 3e 63 c6 ff 00 c4 78 03 82 7b 1e 95 dd 24 ac 78 31 72 4f c8 4b 93 68 ca d2 48 ad 24 d2 37 cc b0 e1 11 7e 9c 54 77 16 fa 74 f6 72 ba 4b 3c 17 51 b0 f2 e0 92 3d eb 20 ee 77 f1 b4 fe 15 a9 a5 7f 65 dd aa c0 fa 54 f3 cd 24 65 15 6d a7 3b 9a 43 d1 b1 cf 4f 41 55 f5 49 f5 03 71 15 cc f2 34 13 5b 30 10 33 47 b5 b2 87 8c b6 3e 66 1e f5 3c a5 3a 9d 0c 89 b4 db 8b 66 d9 3c 13 c5 27 f0 ac 91 15 eb 51 a2 9d d8 35 d5 f8 93 c7 3a fe bd 66 91 f8 8e 2b 1d 4a Data Ascii: rl5Yv)V?IZjmy{E#2{wVwQ+co[Yu`[G#<dilH>cx{$x1rOKhH$7~TwtrK<Q= weT$em;COAUIq4[03G>f<:f<'Q5:f+J
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 3f ed 3e 13 f1 05 b5 d3 2f 12 da 3f ee e7 84 fa 34 6d 83 fd 2b f3 51 ac fc be 63 dc df ec d3 24 28 b3 2c b0 45 24 57 51 36 e8 e5 8a 42 ae a3 d9 86 08 fa e6 b3 9c 23 3d d6 a7 34 f0 3f c8 ec 7e af b2 e5 b9 eb 49 b7 da be 12 f8 23 fb 50 7c 40 f0 ad ac 5a 3e b3 6d ff 00 09 6d 9c 0a 15 12 ee 61 1d dc 60 7a 4d d1 ff 00 e0 43 3e f5 ef 9e 03 fd ab 3e 1a 6b 5a 94 5a 67 88 62 d5 3c 25 7d 2e 36 ff 00 6b c2 16 0c 9e de 72 92 bf 89 c5 73 cb 0f 35 aa d5 1c 92 84 e1 f1 23 dc 71 4b b6 a3 b1 ba b5 bd b3 4b ab 1b 98 6e 6d a5 5c c7 2c 12 07 46 1e c4 71 53 57 2c 9b 4e cc 9d c6 6d a3 6d 49 8a 31 4a f7 02 3d b4 6d a7 e3 da 95 56 8e 60 b0 cd b4 6d a7 e3 de 8c 51 71 d8 66 da 36 d3 b3 4b 8f 7a 2e 85 66 47 b6 97 6d 39 85 18 f6 a0 6d 58 6e d3 46 da 7e 28 c5 2b 88 63 2d 1b 69 f8 a3 Data Ascii: ?>/?4m+Qc$(,E$WQ6B#=4?~I#P\|@Z>mma`zMC>>kZZgb<%}.6krs5#qKKnm\,FqSW,NmmI1J=mV`mQqf6Kz.fGm9mXnF~(+c-i
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: d7 91 53 3a 6f 6b 1a 53 c4 47 ab b2 38 19 a3 31 36 c7 ea bf dd a1 00 3c 96 ae 97 5c f0 bf 88 2c 26 8c ea 9a 53 5b c8 ca 04 70 49 84 79 87 41 b5 7a b7 bd 55 4d 32 da 69 23 cf ee 2e 37 61 a0 e5 99 8f b2 75 ac 1c 5a 3a e9 ce 12 5a 3b 98 6a ae 5b 0a dc d6 9e 9b a4 6a 17 11 ac 90 59 c9 2c 4d 26 cf 35 63 2e 99 f4 ca 8a e8 34 5f 09 cf 79 75 bf ec aa d1 b4 9b 62 dd 1b c7 1b 11 d3 39 c1 00 9f 5a f5 0f 0e f8 12 f7 40 f0 ed cb dd df 47 a6 c5 1e d9 27 59 6e cc 8c c4 ff 00 0a db c3 93 c6 78 2c 73 58 4a bd 18 7c 52 3b 63 85 c5 4d 7e ee 1b f7 d1 1e 55 a5 68 ba 74 52 2c 97 92 fd a6 48 db 12 d9 43 3f 97 33 67 a1 4f 94 f0 3d c5 6d e8 b6 96 ed 7c a5 34 e5 b6 54 63 b6 39 18 b3 7d 5d 9b a9 f7 c5 7a 1d c6 93 61 6b 66 d3 d9 c9 76 d6 d1 4a a6 36 6b 21 6f 73 24 84 60 ff 00 ac c1 Data Ascii: S:okSG816<\,&S[pIyAzUM2i#.7auZ:Z;j[jY,M&5c.4_yub9Z@G'Ynx,sXJ\|R;cM~UhtR,HC?3gO=m\|4Tc9}]zakfvJ6k!os$`
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 55 42 ab fc 3f 75 bf 3a b2 da 6a 4b 0e fb 4b 98 a7 ff 00 c7 76 8f 7a a7 25 bc 90 73 22 ed 0d fc 55 7a 93 1d 36 37 34 3f 13 dc 69 fe 63 ee 99 8b 60 2c 6b 8d 98 ef 9f fe b5 75 7a 67 89 f4 bb f5 54 92 29 e3 6d bf 7b 8f 99 ff 00 c2 bc cd c6 7a 75 a9 2d a7 96 09 15 d6 b8 b1 18 38 55 d6 da 9e c6 07 35 ad 86 69 37 78 f6 3d 26 49 11 9b 21 b7 0a 6c ed b9 70 5b cc 35 8d a0 df 79 d6 eb bf ef 2a fc d5 a0 a4 9a f1 27 4e 50 93 47 d9 d2 ad 4e b5 35 35 d4 8a e6 1c f4 aa cd 19 11 b2 0e 8d f7 be 5f bd 57 18 e7 8a 16 35 1f ed 56 91 a8 d2 39 ea d1 8c fa 19 73 58 fc ac 42 d5 2b 9b 00 63 f9 62 db fd ef 9a ba 16 40 7a ad 43 24 01 9b da ba 29 e2 1a 7b 9c 35 b0 10 9a d1 1c db 59 63 90 db 4d 57 b8 b6 90 f5 dc df ef 57 4b 2d ba f4 db 55 a6 b6 25 b1 b6 ba a1 8a ee cf 2e b6 5a be ca Data Ascii: UB?u:jKKvz%s"Uz674?ic`,kuzgT)m{zu-8U5i7x=&I!lp[5y*'NPGN55_W5V9sXB+cb@zC$){5YcMWWK-U%.Z
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 8e ab a4 5b 5f 43 1f 2c ad bf e5 1e b8 56 19 ae be c7 5d d1 35 4d 72 4b b8 9a 08 a1 56 fd d2 32 94 5f f8 08 27 3f a9 ae 0c 46 12 b5 1a 7c d2 8e 87 b5 82 ce b0 98 ba ea 9d 39 d9 be e3 9a d1 e2 69 9f f8 63 6c 6e 6c 2e e3 ec 3a fe 95 13 9f 4a bf aa f9 57 13 2b c0 d1 e3 6f f0 fd ea a7 e4 b9 55 27 a5 79 0a 77 d5 9f 5c a1 ca ac b5 20 27 d6 9a c4 0a b5 f6 6f e1 dd ff 00 8e d3 3c 80 78 74 6a ae 64 4c a2 da 2a 70 7a d5 7b 84 51 d2 af 4d 6a 43 7d fa 88 c1 db b5 69 19 23 9e a4 5f 53 3d b1 f7 5a a2 99 50 2f 15 7a 48 9d 24 da 57 6d 23 59 a7 cb f3 6e 66 ff 00 66 b7 8b b1 c3 38 dd d8 c7 b8 0c 38 15 17 92 5b e7 dd b4 ff 00 0e da e8 a6 d3 01 87 f7 31 72 bc b3 33 7a fd 6b 3f ec 47 73 79 7f 37 fb b5 bc 2b 25 b1 c3 53 0f 7d d6 86 5c 96 c1 17 2e de 69 93 f8 b9 66 a8 1a d7 cc Data Ascii: [_C,V]5MrKV2_'?F\|9iclnl.:JW+oU'yw\ 'o<xtjdL*pz{QMjC}i#_S=ZP/zH$Wm#Ynff88[1r3zk?Gsy7+%S}\.if
2025-04-01 17:50:26 UTC	16067	IN	Data Raw: 8f 53 95 15 9a df e6 fb ab 9a 4f 20 9f e1 db 56 b9 3d 29 af bc 2b 63 ad 1c cc 5c a9 11 c7 94 f9 b6 ee a7 a3 87 6e 29 98 91 97 8a 96 d9 47 fc b4 5e 68 64 eb 72 68 c2 f5 dd c7 f7 76 d2 f2 ab c2 b3 7f 77 f8 69 18 a8 6f 91 59 b6 ff 00 76 9b 23 b2 fd f5 e2 b3 b5 cd 51 13 c2 26 ea cb 85 a7 5b 84 45 c0 5d c7 fb d4 bb dc 6d fd d5 4b 1c bb ba d5 5d d8 56 57 b8 d8 e6 d8 d9 29 26 3f ba d8 a9 d2 74 6e 4f ca 3f dd a4 52 0f 55 e6 9c d1 a6 dc 05 e3 fd ea 87 63 44 a4 85 59 62 2b c7 dd a6 6f 5d dc 2b 31 a8 a6 01 55 bf 84 7f bd 50 34 8a 3a 35 35 1b 8a 55 1a 26 92 e8 af fb 27 fd ed d5 5a 4b 89 37 73 f3 7f c0 69 ac 41 5c 96 5c d5 79 1d c2 ec 33 ad 6b 18 a3 39 56 d4 9a 4b 96 46 c9 6e 3f da aa 72 90 78 45 e2 91 c9 ee ca d5 52 69 11 59 81 6a da 30 b9 8c b1 0a da b1 f7 0e 1a 4d Data Ascii: SO V=)+c\n)G^hdrhvwioYv#Q&[E]mK]VW)&?tnO?RUcDYb+o]+1UP4:55U&'ZK7siA\\y3k9VKFn?rxERiYj0M
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 6d eb ff 00 8f 53 e5 8a 0f 6b 53 b8 47 79 7a ad f2 ca ac 3f ba d5 61 6f 67 7f be df f8 f5 52 45 b7 55 f9 3f a5 49 19 4d d8 1b b6 fe 14 38 c3 b0 2a f5 7f 98 b4 97 53 06 e7 a7 f0 d4 df da 97 01 b6 47 3a af fc 0a aa 66 22 b8 3f 29 a6 ac 69 f7 c4 aa c7 fb b5 3e ce 0f 74 52 c4 56 5b 48 92 f2 f6 e4 6e 7f b4 f3 fd ef bd 55 97 54 bd 66 c1 9f 77 fe cd 53 0d bf c6 ab 27 fb b9 a4 62 07 dd 89 7f ef 9a 6a 30 5d 06 f1 15 bf 9d 92 c7 a8 5d f4 32 d4 8b 77 74 39 13 b5 54 20 b7 25 78 ff 00 66 8f bc d9 fb b4 b9 21 d8 bf ac 56 fe 66 5d fb 75 c8 5c 79 ed 8a 6c b7 13 6d e6 76 ff 00 be aa bb 1d ab 83 ff 00 a1 52 7c ff 00 29 1b 73 47 24 7b 07 d6 2a b5 f1 32 78 66 b8 0c cf e6 f0 bf ec d2 b5 ec e7 8f 36 a2 65 1d 5e 55 ff 00 76 9d 1e c1 fc 34 72 c7 b0 bd bd 65 f6 87 ac f2 ed e6 76 Data Ascii: mSkSGyz?aogREU?IM8SG:f"?)i>tRV[HnUTfwS'bj0]]2wt9T %xf!Vf]u\ylmvR\|)sG${2xf6e^Uv4rev
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: a0 ea b4 8d 1c 67 fe 59 6d aa f7 49 b6 a3 e3 bc 01 be f3 2f fe 83 52 2d d6 ee 37 b3 55 63 6e 0f 21 69 56 30 9c fd d6 a1 f2 db 41 ea 58 62 c7 76 1a a0 b9 c8 5c 89 55 a8 90 1d df 7a a3 78 83 b5 4a dc 2f 7e 85 5b 89 df 76 04 aa df ee d3 4b 12 bf 7a ac b4 00 7f 0d 2a db 81 cd 6d cd 14 88 57 b9 4f a7 de 65 a6 3b 7f 71 77 55 c9 2d 03 f1 b7 fe f9 a8 9b 4e ca ff 00 74 55 29 c5 8b 52 ac 2f b5 98 9e ad ce da 9f 74 2d d5 6a 44 d3 9c 74 dc c2 a7 5b 3d bc 6d 6c d2 94 e3 71 59 a4 53 56 da d8 4f 94 d4 d1 c9 20 a9 5a d9 ff 00 b9 4b 0d b1 fe ed 27 24 d0 72 bb 9c 87 f6 8e a0 7a 6e 56 a5 6b cd 43 fe 7a b2 d6 ab d9 c3 fc 57 34 e4 b3 b4 db fe bf fe fa ae ff 00 69 0f e5 38 b9 2a 5f 56 64 3d c5 e3 75 9e 4c d2 a3 5e 1f f9 6f 27 fd f5 5b 69 67 6d b7 fd 7a b7 fc 06 86 b4 b6 0d cc Data Ascii: gYmI/R-7Ucn!iV0AXbv\UzxJ/~[vKzmWOe;qwU-NtU)R/t-jDt[=mlqYSVO ZK'$rznVkCzW4i8_Vd=uL^o'[igmz

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:26 UTC	375	OUT	GET /th?id=OADD2.10239339388097_1IIZAECWS2U02B4A4&pid=21.2&c=16&roil=0&roit=0&roir=1&roib=1&w=1920&h=1080&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:26 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 658519 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 906643291E944CB591407C4D462788DA Ref B: EWR30EDGE0817 Ref C: 2025-04-01T17:50:26Z Date: Tue, 01 Apr 2025 17:50:26 GMT Connection: close
2025-04-01 17:50:26 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 30 3a 30 33 20 31 31 3a 34 30 3a 34 33 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 07 80 00 00 a0 03 00 03 00 00 00 01 04 38 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 23.5 (Windows)2022:10:03 11:40:438C
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 92 78 86 47 6d 26 5b 49 25 66 58 39 8f 73 6d 6e 3b fa 74 ae 52 1b d6 fb 62 19 25 dc 57 85 6f 6e df 85 77 fa 6d 9d c3 e9 fa c5 e5 e7 97 24 76 da 6c a6 2d cb f2 c7 e8 40 f5 af 36 57 77 65 90 af de ff 00 80 ee aa 8e c6 72 3a 18 2e 8b c8 bb d7 76 d5 3e 5e e6 e3 eb cd 21 74 66 55 76 69 37 7f 2e e0 7f 8d 53 b0 95 cf 29 f3 3d 4a ec 03 30 4d d9 7f bd f5 f4 ad 3a 10 cd 5b 19 e4 9e 36 8e 25 da ad 80 aa b1 ed e3 a7 d6 a6 d4 a0 0d 26 98 e1 55 bc bc 89 37 7d dc 83 eb df 1e bd 2a b6 88 56 35 90 96 dd bb e5 66 66 f9 bf 1f e5 5a 77 06 dc ae 9e 97 0a ab 24 b2 37 94 ad f4 db 9c 7e 95 3d 0a 46 4e 97 2d c3 ea 8d e5 2a c7 1e dc a2 b7 de eb cb 66 ba 7f 0d ef 2d 2a ba 36 e9 2d 99 96 46 60 dc e7 91 cf a0 a6 78 7b 43 32 5e 2e fb 69 13 cb 91 92 4f 9b e6 53 8c ed 35 53 5a 5b 8b 3d Data Ascii: xGm&[I%fX9smn;tRb%Wonwm$vl-@6Wwer:.v>^!tfUvi7.S)=J0M:[6%&U7}V5ffZw$7~=FN-f-*6-F`x{C2^.iOS5SZ[=
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 71 dc 69 57 37 52 4f 26 e5 69 e4 2c ac e4 7c a9 f2 f5 f5 e2 ba 3d 7b 5b b7 99 95 2c 19 96 18 e3 d8 d2 ca bb de 6c 71 98 c0 c9 54 1d 31 c1 35 8b 75 e2 4b c8 35 48 62 96 f3 cb 93 f8 62 8e 32 b2 30 3d 82 e4 ed cd 62 ab d4 9f 4d 0b 56 b9 83 e2 7d 2e 5d 2f 49 86 e2 79 6d a0 89 5b 1f 66 8f 0d b7 d4 e7 bf e1 55 fc 3b 26 9b 0e 93 72 f7 ee d1 c9 24 80 ee dc 1b 77 d1 49 ab de 34 d9 73 7d 1d 9c 8b b6 5d df bd 9e 56 f9 14 91 f7 13 1d 76 f7 c7 7a e5 93 c3 7a 82 6a 52 89 e5 55 b4 89 b3 24 f1 fc ec a0 f4 c7 ff 00 5a ba 62 9f b3 f7 9e a3 b2 66 e4 97 70 4d 0b 14 81 a3 56 ff 00 96 93 7c a5 87 fb 23 ad 5a d2 f4 ab 55 b7 da 65 92 4d df bc 5d ac 5b 77 b7 1d 07 bd 49 a7 e8 9e 0e 89 a3 b8 92 29 af 1a 2e 65 9e e6 77 64 90 fa 04 38 e2 97 50 89 2c 95 af 7c 39 2c 7e 75 ce 4c bb 98 Data Ascii: qiW7RO&i,\|={[,lqT15uK5Hbb20=bMV}.]/Iym[fU;&r$wI4s}]VvzzjRU$ZbfpMV\|#ZUeM][wI).ewd8P,\|9,~uL
2025-04-01 17:50:26 UTC	16384	IN	Data Raw: 8d 3f 54 f0 5f 86 b4 4b 96 f2 be cb 65 65 ab b0 fd e3 cd c4 d7 52 c8 e4 97 6e 8d dc f5 1c 66 88 fb d1 5f 88 db d4 e5 b4 af 08 78 7e c7 c6 0b 73 1d 9a cb 67 fd 9a 26 d4 2d 34 46 9b ce b5 13 01 85 49 00 6f 9b ef 16 e4 31 e7 a7 15 4f c6 9e 08 d1 2f 3c 71 25 be 83 7d a8 4b 6b 3d 91 7b 4f b6 ac 89 25 f4 98 fd cd b2 3c 98 0f 1a 8f 98 b9 e7 1e a6 bb 7f 16 f8 bc e9 9a b4 76 16 77 36 d7 da ab 44 6c db fb 11 8d bd b5 a9 91 30 ce ed 92 aa c5 8e 15 9b 95 1b ab 9c 86 2d 4e cf c5 d7 3a 87 89 b5 7b 98 fe c7 04 1f d8 d2 69 33 a7 9d e5 c6 e2 36 b7 b7 2f c8 50 c4 9d e4 00 fb 49 e4 62 87 18 db 95 22 79 b4 39 9b 4d 03 5c f0 5d c5 a7 88 1a 7d 13 55 ba d3 23 7d d1 7d af cc 85 5c 92 bd 08 da c4 0f ba 07 e3 4d d5 b5 6d 73 52 69 fc 4b 71 2d b4 1f 63 96 34 b2 d3 6c a3 31 c2 b2 be Data Ascii: ?T_KeeRnf_x~sg&-4FIo1O/<q%}Kk={O%<vw6Dl0-N:{i36/PIb"y9M\]}U#}}\MmsRiKq-c4l1
2025-04-01 17:50:27 UTC	16384	IN	Data Raw: 9a 6e 91 e4 0d 31 bc c9 19 70 97 8c eb c9 64 1c 8d a3 ae f3 c1 ed 8a ce b4 9f 2b 68 a5 13 94 f1 47 c4 cf 1a 1d 42 c6 ee f5 57 ec 77 32 1f dd b4 6f 1c 2d e7 01 1b ae 01 c8 52 30 7a e5 4f d6 ba 2f 83 ff 00 10 ae 34 bd 52 5d 0a e2 c6 db 50 b8 4f 2e cf cd 8a ec 46 9b f2 e1 70 ef f7 4b 74 c2 f1 d3 dc d7 35 f1 02 f2 ca 7b 3d 3e df c2 1e 25 9e f2 fb 50 80 cd 3c 57 b1 87 4b 58 a6 d8 8e 46 02 84 98 30 0e c1 41 f9 72 6a 3d 2f c3 17 b7 37 53 f8 2e 4d 2a d9 b5 3b 78 a2 fe cd dd 3a 24 37 52 a1 fd e4 ec ff 00 78 23 8d bf 2a f3 f4 e6 b1 87 32 7b dc 97 b1 ad f1 0b e2 05 b5 df c4 6b 5b 6b cf 0b ae 9b 77 e1 fb b2 2c 1a 2d 9e 63 40 22 2a 62 f3 55 82 e0 16 1c 82 db 4b 1e 78 ae 46 1f 0a c7 7b e2 ab ad 3b c6 f0 5f 68 f2 6a aa b7 9a 6f db f1 1c 37 48 a4 7c a2 7e 63 46 08 48 56 Data Ascii: n1pd+hGBWw2o-R0zO/4R]PO.FpKt5{=>%P<WKXF0Arj=/7S.M;x:$7Rx#2{k[kw,-c@"*bUKxF{;_hjo7H\|~cFHV
2025-04-01 17:50:27 UTC	16384	IN	Data Raw: 58 33 e7 b4 72 6c 45 3c 12 c5 4f 3b b6 fe 14 e3 1b 91 29 6a 51 f8 c1 7d af db 78 b9 ad e5 be b6 be 91 64 58 d6 29 14 5b f9 89 c6 36 b2 e4 64 ff 00 74 fe 95 c3 fc 68 d5 af 35 18 ec 6f de 3b 95 b9 d2 25 d9 02 48 a9 36 d2 48 55 01 c7 dd 5f 4c fb 13 83 5b fe 34 8f fb 4d 6e 92 dd 9b cc b9 89 a3 56 93 ef 42 0f f1 b6 07 ca 7a 1e 3d 7b 57 94 eb 1a be a1 a5 5f 4d a1 de ea 77 29 73 13 2a c4 d2 2a 3c 73 02 41 dc dd ca 90 3a 66 95 59 a8 24 9a d1 98 f3 36 dd 89 f4 2d 27 5d b2 0a d0 40 b6 ad 1b 32 ca ad 21 96 46 0c fc 1d dc 83 fc eb a5 d2 ae 9d a3 96 29 67 92 5b b8 24 22 6d df c2 7d 80 e8 be 95 cc be ad e2 06 d4 22 bb fb 4c 8d 67 2c 98 9d 99 82 79 7c 70 ab 16 3b f7 3d ea d5 ad db c9 7d 1c b1 4f 26 a5 16 e6 0a ea c1 13 23 ef b7 a9 55 1c 63 eb 53 4e 51 84 b4 26 57 7d 0d Data Ascii: X3rlE<O;)jQ}xdX)[6dth5o;%H6HU_L[4MnVBz={W_Mw)s**<sA:fY$6-']@2!F)g[$"m}"Lg,y\|p;=}O&#UcSNQ&W}
2025-04-01 17:50:27 UTC	16384	IN	Data Raw: dc 53 ad 59 42 3d d9 07 90 2e ad 73 67 7c d9 b3 5d d3 fe ee 48 a4 57 46 e3 fb d8 23 03 da bb 4d 2b c3 ba ea e8 b6 73 69 fe 5c 05 e2 69 7c a9 27 48 e3 69 0f dc 61 9e e0 7a d3 fc 5d e1 e8 f5 98 e4 d4 6d 2c e4 97 52 81 80 96 15 cb 24 c3 3c 10 18 f5 f5 ae 7f 4d d7 ef a0 d6 be cf 7b 78 be 6c 6b e5 b4 4b 6d b4 2e 3a 2a 8e df 85 47 3f 3c 7d cd 1f 98 dd d3 47 4b 0d 96 b3 a4 d8 a5 95 ce a7 63 25 f4 8a df 6b f2 18 c9 d7 95 01 cf 2c 4f ad 51 b8 b4 d4 6f 2f 2d 7c d9 76 c3 12 ed 95 95 b6 aa 8c 67 b6 3a d6 95 ad 9e a1 b5 75 1b b8 9a 08 9a 3c fc b0 6e 91 79 fb ca 3a 6d a7 35 b5 b4 b6 2d 13 ea ac e5 6e c3 b4 08 bb a4 68 cf 4e 3a e3 3d 6b 25 51 27 b9 4c 65 be 99 2d e7 95 6f 70 d2 b3 4b fb d8 22 83 fe 5a 0c 77 ec 38 fd 6b 5b 44 f0 fd ed aa c7 6f 2d b2 f9 7c ee dc c1 8b 01 Data Ascii: SYB=.sg\|]HWF#M+si\i\|'Hiaz]m,R$<M{xlkKm.:*G?<}GKc%k,OQo/-\|vg:u<ny:m5-nhN:=k%Q'Le-opK"Zw8k[Do-\|
2025-04-01 17:50:27 UTC	16067	IN	Data Raw: da a8 91 77 37 5d ad 86 fa 0c d7 39 ad 5c 3c fa 84 b7 27 f7 65 98 05 5a c6 1e f3 68 69 5c fd 19 4e 69 ea 6a a3 5e 5b c6 d2 a3 b7 cd 02 e5 d7 6e de 3d bd 7f 0a b5 62 e6 7b 78 e5 2b b7 cc 5c fc b5 f4 0d 9c 68 95 05 48 ab 54 b5 cd 46 df 48 d2 e4 bf b9 fb b1 2e 76 fd dd de d4 9e 1b d7 2c f5 ad 1e 4d 42 cf 76 d8 d7 f7 8a df 75 4f a6 ee 95 17 1e e4 9a f5 b4 77 56 32 5a 4a ab 2a c9 19 dd 03 36 d7 90 7f b2 7b 1a f1 e8 d1 21 8e fa f6 3d 16 ee fa c2 35 ca ac b7 65 9a 68 d7 87 d8 72 36 ca 9f dd e7 35 e8 e9 a6 db 8b 79 24 bb 82 e6 ea 3d 56 32 8c cd 72 26 f9 0f 3d 38 3c 7f b1 55 9b 4a b6 82 3b 5b cd 46 e5 6d 74 d5 fd c5 a4 16 d1 ba a4 9b be 5f de 2f 53 f5 eb 53 25 71 a5 63 95 f0 34 b7 23 4b 82 f3 4f 66 8e da 49 4f d9 3c fb 97 77 64 23 77 cc ab f2 ef 1d 0a f0 4d 59 d6 Data Ascii: w7]9\<'eZhi\Nij^[n=b{x+\hHTFH.v,MBvuOwV2ZJ*6{!=5ehr65y$=V2r&=8<UJ;[Fmt_/SS%qc4#KOfIO<wd#wMY
2025-04-01 17:50:27 UTC	16384	IN	Data Raw: 54 08 a5 f2 d1 92 6c 74 75 3d 30 47 03 f1 e2 a9 e8 5e 3c 4d 57 cb 8f 59 97 50 9e e2 38 00 8d f7 6d 46 90 9f 45 fb cb 8e f9 e3 de ac 47 e2 58 e0 92 4b 68 bc b9 e1 56 3b 63 68 c3 a7 3e 83 aa fb 1a f2 63 87 94 25 cb 28 ed fd 6e 65 26 de e4 b6 ba ed dd 8d af db 65 ff 00 8f 56 80 0d bb be 49 1c 76 6e 4e 70 79 c1 15 a3 31 4d 7e c6 41 3a da 69 93 49 b1 ee ee 64 8d da e3 00 60 24 6a dc 36 4f be 3b d7 33 aa 43 77 79 63 26 ab 6b 62 d6 da 7c 72 08 56 5e 55 37 8e c1 ba 33 66 b6 34 bb cd 2e 4d 06 5f 22 2b 98 17 6a a5 cb 79 9e 73 f1 d1 86 7e ee 1b 9c 0e 0d 45 6c 33 8d a6 95 9b ea 65 a8 fb c7 b9 d2 ee 25 d3 de ce 29 1a 26 2f 04 f2 c6 55 66 43 fc 51 8c 7c df 4a b7 e1 5d 5c ea 6d 3c a3 6a da c9 0e c9 6e f8 77 c8 fb aa 71 c8 3f 4c 00 2a 6d 2f c5 96 91 5c 2c 16 d7 32 5d 2e Data Ascii: Tltu=0G^<MWYP8mFEGXKhV;ch>c%(ne&eVIvnNpy1M~A:iId`$j6O;3Cwyc&kb\|rV^U73f4.M_"+jys~El3e%)&/UfCQ\|J]\m<jnwq?L*m/\,2].
2025-04-01 17:50:27 UTC	16384	IN	Data Raw: ce 1f 0f 49 99 ed 16 d3 cb 5c 8c a8 dc cb 81 92 76 b3 00 1b 34 41 4d 68 f5 05 a1 ee ca 69 6a 8e 83 ab 58 6b 56 72 5e 69 d2 b4 b0 ac a6 36 91 a2 29 f3 af de 18 3c f1 57 96 b4 01 56 95 68 a5 5a 96 ca e5 15 6a 9e b4 d0 43 6e d7 17 16 de 70 55 c6 e5 5d cc a0 f0 71 dc fe 15 79 45 61 78 8f 5a d3 23 be 93 48 6b 95 8e f9 62 f3 15 a4 f9 51 73 d8 11 ce ec 73 c5 0b 71 b3 8d 93 c4 b6 77 5e 1f 8e de ca c5 99 95 49 92 56 64 f3 24 11 9e 70 8d e8 be bc 7b 57 53 f0 f7 c4 16 ce cb a5 cf 3e d1 26 7e c3 e6 4e 1f e4 51 f3 29 20 f6 eb e9 e9 5e 6f 67 75 05 97 86 ef 1e df cb 91 9a e6 64 6f b5 b6 d9 96 32 4f ce 8a 70 37 7c d9 e6 b1 bf b4 ad ed a4 82 5b 34 92 0b b9 20 22 7b 99 24 dc b9 61 8d ab 12 0c 05 24 2f bd 6a e2 b6 32 52 67 a5 fc 45 f8 8f a4 5b 69 ad 6d a7 5f 49 27 9e a7 77 Data Ascii: I\v4AMhijXkVr^i6)<WVhZjCnpU]qyEaxZ#HkbQssqw^IVd$p{WS>&~NQ) ^ogudo2Op7\|[4 "{$a$/j2RgE[im_I'w

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:33 UTC	346	OUT	GET /th?id=OADD2.10239339388098_106XX0NZPAHGUY7Q1&pid=21.2&c=3&w=1080&h=1920&dynsize=1&qlt=90 HTTP/1.1 Accept: / Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: tse1.mm.bing.net Connection: Keep-Alive
2025-04-01 17:50:33 UTC	854	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=2592000 Content-Length: 527355 Content-Type: image/jpeg X-Cache: TCP_HIT Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, POST, OPTIONS Timing-Allow-Origin: * Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth&ndcParam=QUZE"}]} NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 4A816165E5E64966803E9857E65503B1 Ref B: EWR30EDGE0407 Ref C: 2025-04-01T17:50:33Z Date: Tue, 01 Apr 2025 17:50:32 GMT Connection: close
2025-04-01 17:50:33 UTC	15530	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e1 00 da 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1f 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 92 87 69 00 04 00 00 00 01 00 00 00 a6 00 00 00 00 00 00 00 60 00 00 00 01 00 00 00 60 00 00 00 01 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 33 2e 35 20 28 57 69 6e 64 6f 77 73 29 00 00 32 30 32 32 3a 31 30 3a 30 33 20 31 31 3a 34 31 3a 30 38 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 03 00 00 00 01 04 38 00 00 a0 03 00 03 00 00 00 01 07 80 00 00 00 00 00 00 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 Data Ascii: JFIFHHExifMM*bj(1r2i``Adobe Photoshop 23.5 (Windows)2022:10:03 11:41:088C
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: 68 51 8a 00 7a 0f 96 97 da 92 91 a8 01 72 b4 67 de 9b 42 d0 03 a9 b4 50 d4 00 8d 49 43 53 73 ef 40 0a c6 8c d3 58 d2 d0 01 46 7e 5a 6e 7e 5a 75 00 36 9b 9f 7a 56 a4 c7 b5 00 14 c6 a7 d2 62 82 46 e2 93 3e f4 e6 c5 34 9d b4 14 25 cb 3a 42 cf 1c 4d 2b 2a fc b1 af de 6a f2 5f 14 5d 4c de 20 9e 4d d1 c4 59 b0 d0 b3 6d fb 3e 07 dd 1f e7 9a f4 5f 18 1c 68 b2 4f e4 5c ce d1 e7 6c 50 49 b3 93 fc 45 87 4c 57 91 48 a6 ee 49 20 8b e6 91 a4 27 f7 ed be 6c 63 ae ee 84 0a d6 9a 46 55 19 76 cf 55 88 49 b1 1a 46 f9 7e 69 3a 36 47 f1 0c 7f 2a f5 9d 0e fa 2d 4f 49 82 ee 26 f3 3c c4 1b 9b fd bc 73 fa d7 86 a3 fd 8e f1 a2 49 7c cd ad b3 7a fd d6 1e b5 e9 9f 0e af a4 65 9a cb ec 30 41 69 e5 8f 9b 71 57 e7 b8 07 93 55 38 e9 a0 a0 f5 3a 0d 66 08 cf ef ee 25 58 e3 8d 71 f3 7f 17 Data Ascii: hQzrgBPICSs@XF~Zn~Zu6zVbF>4%:BM+j_]L MYm>_hO\lPIELWHI 'lcFUvUIF~i:6G-OI&<sI\|ze0AiqWU8:f%Xq
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: a2 8a 52 67 81 ae 44 6f 83 d1 5b b1 cf bd 52 57 42 eb a1 81 f1 a3 53 97 54 6b 58 34 fd 41 be c7 1c 42 e5 a4 68 f6 c6 af 92 bc 3e 32 4f fb 35 e6 7a 2e ad 70 5a 3b 39 5b 75 bf 99 e6 36 ef 94 b6 33 f7 5b b6 6b 4f c5 1a cc ff 00 68 b9 b5 81 da 2b 79 24 65 96 da 39 36 b3 12 7a 73 9c 28 15 ca 34 be 64 71 f9 8d b7 cb c2 46 bf ec 0e d5 bc 62 92 30 94 ee 6f 6a 5a a5 bd cd ba 5a 69 76 70 5b 46 cc 0c 8c cb b6 69 30 78 dd da aa 5c 2b 4f bb 2b b7 73 7c bf e7 d2 a8 db c8 9b 64 c6 d5 11 b6 59 9b de 9c b2 db c9 36 12 59 63 3b b3 b9 bf a5 3e 57 7b 8e 32 56 b0 5e 45 24 2a de 6f 55 e3 fc fa d1 62 00 85 5d 1f 9e 9b 9b 80 b5 62 69 12 d6 35 de de 79 6f e2 6f 9b fc e2 83 3c b3 6e cc 51 b8 fe f3 71 c5 55 db 46 12 49 30 5b 59 27 da 77 ed 1f f8 eb 53 a1 b7 8c 4d e5 fe ed 8c 79 3f Data Ascii: RgDo[RWBSTkX4ABh>2O5z.pZ;9[u63[kOh+y$e96zs(4dqFb0ojZZivp[Fi0x\+O+s\|dY6Yc;>W{2V^E$*oUb]bi5yoo<nQqUFI0[Y'wSMy?
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: 00 10 1e d8 ef 56 e6 41 0a c6 b1 ae d0 cc 77 32 fd ec d6 75 ad b0 5b 75 ca f9 6d 17 dd 6f bd c0 ef 4a b7 81 15 65 12 ee 91 f2 36 fd e1 c5 69 4a 33 6b 56 4c f9 50 b3 4b 23 cd e5 15 6d cb cf cd f7 69 d6 4e 8d 75 bc 6e 55 8f 3b a3 fb db 8f a5 2c 8e 6e 21 8a 27 65 f3 57 3f 2b 7d d5 c7 f5 a9 6c a0 90 49 e5 bb c7 2c 8d ff 00 3c d7 ee d6 da 72 99 6b 70 d4 13 75 ac 72 4a ea ca ac 7e 55 6f 9e 3c 9e 95 67 47 51 1d aa bc 6b ba 46 62 55 b6 f3 f8 7b 0a 66 ab 04 51 69 fb 24 69 e3 6f e2 65 50 c8 de b5 a7 a5 a2 7d 9e 29 9d 7f 78 df 75 59 bf d5 8f a7 ad 43 97 ba 5f 2e a4 4b 04 8f 0f 9d 79 2f 94 77 7c bf de 51 4d b9 bf 82 18 f6 22 b4 81 70 9b b9 fc f8 ab 12 4b 11 9b 64 5b 7c c5 6c 6e 6f 99 57 e9 eb 4e 99 ec b7 79 45 95 4d 46 ef 61 fa 14 54 86 f9 4c 5b 6e 1b fb cd f2 a8 fc Data Ascii: VAw2u[umoJe6iJ3kVLPK#miNunU;,n!'eW?+}lI,<rkpurJ~Uo<gGQkFbU{fQi$ioeP})xuYC_.Ky/w\|QM"pKd[\|lnoWNyEMFaTL[n
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: 13 ea 97 9e 17 82 e7 49 b5 80 5d 41 1b a9 47 57 00 e7 69 27 af 96 70 78 c3 0a 8e 54 f7 e8 37 73 ba f8 7b a7 e9 5e 18 b3 ba d4 2f 7c 50 d7 d2 6a 5e 5c 8b 3d f3 6d 68 e3 c7 0a bf de c9 ef 5d 56 97 a8 d9 6a 2b 23 d8 4e b3 c7 1b 61 a4 5c ed fc 0f 7a f1 6f 0c 69 de 32 f1 e7 83 ec f5 19 7c cb 5b c8 a5 95 20 dd b3 c9 b7 c3 ef 4c af a6 06 08 af 5a f0 1e 81 07 86 fc 3b 1e 9d 02 ae f6 91 a6 9f cb ce df 31 f9 6c 67 b6 6a 85 a9 b1 4e a2 9d 40 82 8a 28 ac cd 05 c5 39 69 16 9c a2 80 17 19 ac ab fd 6b 4d 3a b4 9a 37 9b ba eb c8 33 7c df 2c 58 1d 8b 7f 3a b7 af 5d 49 63 a3 cf 77 12 ac 92 46 a7 cb 56 6d bb be 87 fb c0 73 5e 3b aa ba 4d 75 3c 97 2e d2 5c 2a f9 93 ce cd b5 58 e4 03 b9 7a 64 f5 aa 8c 6e 44 dd 8b 5e 2e 5b 34 f8 81 a6 47 23 41 2d e3 49 22 4f 1c 4c 15 14 14 ca Data Ascii: I]AGWi'pxT7s{^/\|Pj^\=mh]Vj+#Na\zoi2\|[ LZ;1lgjN@(9ikM:73\|,X:]IcwFVms^;Mu<.\*XzdnD^.[4G#A-I"OL
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: ad 8b 8b 7d 3f 50 b3 8a de 4b 65 bc f3 1b 7e e9 14 61 5f b3 0f a7 a8 ae 26 ea d3 3a a6 a0 2e 67 9e ce dd a3 2f 05 b4 78 dc c1 46 47 3d 0f 5e ab d3 bd 5e d2 b5 1b 99 6d 56 4b 2b 6b 99 cc 71 e5 a3 96 3d ad 82 31 b9 8f 4e dd 05 79 51 ae d3 e4 a8 cc d4 9d ec cc cf 0c e8 d2 9f 1d 49 a7 e9 c9 1c e9 35 cc b3 c7 f6 bf 9a 15 f2 8f 5c 77 6f 41 5d 76 97 a7 69 da 5e a5 e5 cb 05 f2 ca ad 24 93 c8 f2 09 6c db 70 23 81 f7 90 7b 63 00 f6 ef 58 1a 0c da ae 97 ab 4b 79 6f 13 79 92 e7 6b 48 a7 e5 0c 06 76 2a f7 cf 7f 4a e8 b4 5f 0f ea 5a e5 9c a6 2b e6 80 b3 03 23 2a e1 3c c0 7a 95 fe ed 74 c1 47 78 ea 69 ca af a1 c7 f8 d6 ee c3 41 bc b1 7b 4b 15 93 49 b9 dc ff 00 74 4d c8 ef d0 14 01 bb 63 e9 59 3e 20 d5 a2 d7 bc ab bd 19 63 92 68 a3 32 b5 8a b6 df 30 0f f9 68 38 ea 3b 8e Data Ascii: }?PKe~a_&:.g/xFG=^^mVK+kq=1NyQI5\woA]vi^$lp#{cXKyoykHvJ_Z+#<ztGxiA{KItMcY> ch20h8;
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: 7f 89 b0 7a 03 eb 5b 1f db d3 da 47 e5 6a 0c b2 3c 11 e6 55 59 02 c9 20 6e 11 87 1d 7f 95 65 52 b3 8a f7 9d c3 da 72 ab 37 73 1f 5e b1 9f 4b b8 fb 41 f3 f5 0d 15 97 f7 8f b4 3d c5 9b 8e 14 b2 01 f3 8f 71 c8 06 ab 68 3a d2 da af 9f 24 fe 7f 9c c0 ac b6 df 73 38 e3 70 f6 e9 eb 57 ec fc 88 b5 49 ef 5f 53 68 16 36 cc 4b 24 a5 b7 71 c6 e3 d0 ae 3f 5a 8a ea 5d 2a c3 c3 71 79 4b 1b b3 2c 89 f2 c7 f3 6f 63 9c f0 7a f7 3e b5 94 aa 46 51 51 8c 49 8c 9f 35 e2 51 b3 b9 b5 bf b3 d4 24 9e c6 48 ae 7e d3 99 20 83 f7 71 cc 40 c6 f3 81 b8 67 a1 e9 57 bf b5 35 8b 6f 2d d2 08 ec 6d ec db 11 35 b3 6d 92 38 cf cc c1 97 ae ec f7 39 f7 ab 90 da c5 65 a1 c7 79 2a db 49 17 96 05 cc 76 cd f2 48 e7 a0 dd d4 8e f5 56 e2 5b cb bd 0e 5b 49 35 08 e2 16 df 3c 51 34 65 9b 67 4c 71 e8 3b Data Ascii: z[Gj<UY neRr7s^KA=qh:$s8pWI_Sh6K$q?Z]qyK,ocz>FQQI5Q$H~ q@gW5o-m5m89eyIvHV[[I5<Q4egLq;
2025-04-01 17:50:33 UTC	16067	IN	Data Raw: d6 1d 34 d4 95 ff 00 32 94 75 47 77 e2 18 25 7f 0f df 68 d3 41 6d 96 e1 a4 8e 23 bd 87 61 bb d7 e9 c5 70 f1 e8 17 1e 18 d7 a3 be d3 f7 5a c5 14 a3 cb 76 cc 9e 5f 1c 9e 9f 30 c8 eb fc 3b ab b5 d0 7c 47 1c 1a b5 ae 9d a8 5b 49 25 aa c9 98 a5 ec c5 f9 03 03 ef 67 3f 85 6c ea da 7d 9d e2 ec 7d 0e e6 5f b5 5b 32 4f 05 b5 da 46 90 ee ee ae 4e 7d fd ea 69 d4 e7 46 93 8a 8b b2 77 39 9d 17 49 d1 b5 49 3f b6 a5 d5 67 53 72 c3 cc 8f cb 1e 5e 24 3c e7 6f dd 60 cb c1 1d 3f 1a c8 f1 26 89 3d be a1 3f 91 74 b2 5e 58 b4 8e b1 aa fc 92 21 39 01 4f 66 1e 87 b5 6c 78 9a 4f 0f e8 5a 7d 9d 95 9a 4f 6b 14 0f 88 d1 54 ef 8d d8 1f 5e 4a f7 e7 f0 ac 48 6f 34 eb d6 8a 2b dd 41 a4 9a 7c 6d 8e 35 d9 0d e2 03 8d ce df c2 d9 ac 2a e2 1d da 6b 44 66 a4 d2 39 4b 99 16 ce dd 45 ec 0c 81 Data Ascii: 42uGw%hAm#apZv_0;\|G[I%g?l}}_[2OFN}iFw9II?gSr^$<o`?&=?t^X!9OflxOZ}OkT^JHo4+A\|m5*kDf9KE
2025-04-01 17:50:33 UTC	16384	IN	Data Raw: bb b9 08 ad 07 dd 1b 96 30 4a 6f 87 f8 1d 80 0c b9 ef 5e 2c da c4 a6 e2 b4 bf e8 bc fc ca 7a 68 cd 59 3c 53 71 71 6b 26 99 7f 26 a5 a7 86 fd c4 50 37 93 bd 64 09 b5 59 f0 fb 99 89 e0 91 f2 e3 b1 ae 72 67 f1 5d ad 9c 52 5b c1 e6 dd e9 ea 52 4d 5e 79 c2 25 ac 78 21 0c 61 b2 1a 4d db ba fb f1 5d 0e 9d e1 0f 0f 5a da dc e9 d0 bf da b4 d4 db 3c 72 48 b1 b3 4d 24 67 e6 62 df c6 a3 76 3a f5 ac 5f 1f c5 ab de 2f d9 b4 9d cd a6 b4 7b ee fc dc cd b8 21 f9 63 46 c0 03 a0 27 1c 01 ce 6b aa 51 aa e1 76 f5 f2 21 58 e2 b4 9f 0d ea 97 ba b7 99 ac ea 16 7a 85 a6 9f 3c 5a 87 9b a8 5a 49 23 a8 53 96 54 d8 cb b2 33 d7 08 37 1e 3a 57 a7 ea 1a 96 8b ac c9 3d ae b9 e1 df 0d f8 87 c4 52 c7 24 f1 5a 5c da 34 8d 0d a7 1b 4a 23 91 f2 8c 7a ee 6f 5a a7 a6 dd 6a 06 d6 59 75 0b 36 80 Data Ascii: 0Jo^,zhY<Sqqk&&P7dYrg]R[RM^y%x!aM]Z<rHM$gbv:_/{!cF'kQv!Xz<ZZI#ST37:W=R$Z\4J#zoZjYu6
2025-04-01 17:50:34 UTC	16384	IN	Data Raw: de 26 6d 3e ef 58 8e f2 c6 e6 69 6d 24 b6 ff 00 4b 8a e6 3d 92 c6 4f 6c 0f 4e be d5 bb 8d f4 65 35 a1 a9 33 dc dd e9 ed 1c 6b 24 71 32 93 b5 79 dc 08 e3 2e 3d 07 6a 81 75 79 f4 45 58 24 95 63 0d 10 78 d9 9b b1 fb bd 3f 88 75 e2 9b 73 6d 73 1e e3 a7 33 6d 96 11 e5 f9 7f c5 8f ef 0a c1 d6 8d da db db c5 7e ac cb 16 7c b6 f7 f4 3d b8 e6 b3 8c 10 46 d6 3b 6d 27 54 96 f6 f3 cc b9 bc 59 84 93 83 e6 70 77 3f 62 33 c3 63 3d 0d 65 78 fe f2 da d6 6b ad 32 0b cf 3e 59 23 cb 4e d1 88 cf 9b 9d e7 20 67 18 e9 8a cd b7 be 97 4e b8 82 15 83 cc 95 d4 f9 6c ca 55 23 18 e3 6d 66 58 da cb f6 8f b5 c5 23 4f 2b 31 f3 3e 60 ce d9 3f 31 39 f4 a8 a7 46 d5 39 ba 09 47 5b 9d d7 c3 4f 10 88 b4 ff 00 2e 48 bc b6 9e 3c 2f ee f7 33 77 39 23 9e bc f1 cd 75 30 de c3 a9 79 42 29 6f ad 9a Data Ascii: &m>Xim$K=OlNe53k$q2y.=juyEX$cx?usms3m~\|=F;m'TYpw?b3c=exk2>Y#N gNlU#mfX#O+1>`?19F9G[O.H</3w9#u0yB)o

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:38 UTC	695	OUT	GET /share-sensitive-files-securely/ HTTP/1.1 Host: maltese.com.br Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:39 UTC	1141	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:38 GMT Server: Apache Cache-Control: no-cache, private Set-Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; expires=Tue, 01 Apr 2025 19:50:39 GMT; Max-Age=7200; path=/; samesite=lax Set-Cookie: laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D; expires=Tue, 01 Apr 2025 19:50:39 GMT; Max-Age=7200; path=/; httponly; samesite=lax Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-04-01 17:50:39 UTC	7051	IN	Data Raw: 32 38 37 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 69 63 72 6f 73 6f 66 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 6f 2e 63 6c 65 61 72 62 69 74 2e 63 6f 6d 2f 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d Data Ascii: 2873<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <title>Microsoft</title> <link rel="icon" href="https://logo.clearbit.com/microsoft.com" type="image/x-
2025-04-01 17:50:39 UTC	3310	IN	Data Raw: 20 20 20 20 20 20 20 75 72 6c 3a 20 22 68 74 74 70 73 3a 2f 2f 6d 61 6c 74 65 73 65 2e 63 6f 6d 2e 62 72 2f 73 68 61 72 65 2d 73 65 6e 73 69 74 69 76 65 2d 66 69 6c 65 73 2d 73 65 63 75 72 65 6c 79 2f 76 65 72 69 66 79 2d 63 61 70 74 63 68 61 22 2c 20 2f 2f 20 59 6f 75 72 20 66 6f 72 6d 20 61 63 74 69 6f 6e 20 55 52 4c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 27 50 4f 53 54 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 3a 20 66 6f 72 6d 44 61 74 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 54 79 70 65 3a 20 66 61 6c 73 65 2c 20 2f 2f 20 4e 65 65 64 65 64 20 66 6f 72 20 46 6f 72 6d 44 61 74 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 72 6f 63 65 73 73 44 61 74 Data Ascii: url: "https://maltese.com.br/share-sensitive-files-securely/verify-captcha", // Your form action URL type: 'POST', data: formData, contentType: false, // Needed for FormData processDat
2025-04-01 17:50:39 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-04-01 17:50:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:39 UTC	1346	OUT	GET /share-sensitive-files-securely/public/css/JF8zRQjce615.css HTTP/1.1 Host: maltese.com.br Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://maltese.com.br/share-sensitive-files-securely/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
2025-04-01 17:50:39 UTC	256	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 13 Feb 2025 20:50:20 GMT Accept-Ranges: bytes Content-Length: 232914 Vary: Accept-Encoding Content-Type: text/css
2025-04-01 17:50:39 UTC	7936	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-04-01 17:50:39 UTC	8000	IN	Data Raw: 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 7d 6b 62 64 20 6b 62 64 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 72 65 6d 7d 69 6d 67 2c 73 76 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 74 61 62 6c 65 7b 63 61 70 74 69 6f 6e 2d 73 69 64 65 3a 62 6f 74 74 6f 6d 3b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 7d 63 61 70 74 69 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f Data Ascii: or:var(--bs-body-color);border-radius:.25rem}kbd kbd{padding:0;font-size:1em}figure{margin:0 0 1rem}img,svg{vertical-align:middle}table{caption-side:bottom;border-collapse:collapse}caption{padding-top:.5rem;padding-bottom:.5rem;color:var(--bs-secondary-co
2025-04-01 17:50:39 UTC	8000	IN	Data Raw: 2d 67 75 74 74 65 72 2d 78 3a 30 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 32 2c 2e 67 79 2d 73 6d 2d 32 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 78 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 79 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 Data Ascii: -gutter-x:0.5rem}.g-sm-2,.gy-sm-2{--bs-gutter-y:0.5rem}.g-sm-3,.gx-sm-3{--bs-gutter-x:1rem}.g-sm-3,.gy-sm-3{--bs-gutter-y:1rem}.g-sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 2d 62 73 2d 74 61 62 6c 65 2d 63 6f 6c 6f 72 2d 74 79 70 65 2c 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 63 6f 6c 6f 72 29 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 62 67 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 39 39 39 39 70 78 20 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 62 67 2d 73 74 61 74 65 2c 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 62 67 2d 74 79 70 65 2c 76 61 72 28 2d 2d 62 73 2d 74 61 62 6c 65 2d 61 63 63 65 6e 74 2d 62 67 29 29 29 7d 2e 74 61 62 6c 65 3e 74 62 6f 64 79 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 Data Ascii: -bs-table-color-type,var(--bs-table-color)));background-color:var(--bs-table-bg);border-bottom-width:var(--bs-border-width);box-shadow:inset 0 0 0 9999px var(--bs-table-bg-state,var(--bs-table-bg-type,var(--bs-table-accent-bg)))}.table>tbody{vertical-alig
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 35 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 3b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 29 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 73 6d 3a 3a 2d 77 65 62 6b 69 74 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 32 35 Data Ascii: padding-left:0}.form-control-sm{min-height:calc(1.5em + .5rem + calc(var(--bs-border-width) * 2));padding:.25rem .5rem;font-size:.875rem;border-radius:var(--bs-border-radius-sm)}.form-control-sm::-webkit-file-upload-button{padding:.25rem .5rem;margin:-.25
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 74 68 75 6d 62 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 36 64 34 66 65 7d 2e 66 6f 72 6d 2d 72 61 6e 67 65 3a 3a 2d 77 65 62 6b 69 74 2d 73 6c 69 64 65 72 2d 72 75 6e 6e 61 62 6c 65 2d 74 72 61 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 35 72 65 6d 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e Data Ascii: transition:none;transition:none}}.form-range::-webkit-slider-thumb:active{background-color:#b6d4fe}.form-range::-webkit-slider-runnable-track{width:100%;height:.5rem;color:transparent;cursor:pointer;background-color:var(--bs-tertiary-bg);border-color:tran
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 2c 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 5b 73 69 7a 65 3d 22 31 22 5d 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 3a 6e 6f 74 28 5b 73 69 7a 65 5d 29 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 6e 6f 74 28 5b 6d 75 6c 74 69 70 6c 65 5d 29 5b 73 69 7a 65 3d 22 31 22 5d 7b 2d 2d 62 73 2d 66 6f 72 6d 2d 73 65 Data Ascii: rm-valid-border-color)}.form-select.is-valid:not([multiple]):not([size]),.form-select.is-valid:not([multiple])[size="1"],.was-validated .form-select:valid:not([multiple]):not([size]),.was-validated .form-select:valid:not([multiple])[size="1"]{--bs-form-se
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 66 3b 2d 2d 62 73 2d 62 74 6e 2d 62 67 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 62 74 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 67 3a 23 30 62 35 65 64 37 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 73 68 61 64 6f 77 2d 72 67 62 3a 34 39 2c 31 33 32 2c 32 35 33 3b 2d 2d 62 73 2d 62 74 6e 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 73 2d 62 74 6e 2d 61 63 74 69 76 65 2d 62 67 3a 23 30 61 35 38 63 61 3b 2d 2d 62 73 2d 62 74 6e 2d 61 63 74 69 76 65 2d 62 6f 72 64 65 72 2d 63 Data Ascii: f;--bs-btn-bg:#0d6efd;--bs-btn-border-color:#0d6efd;--bs-btn-hover-color:#fff;--bs-btn-hover-bg:#0b5ed7;--bs-btn-hover-border-color:#0a58ca;--bs-btn-focus-shadow-rgb:49,132,253;--bs-btn-active-color:#fff;--bs-btn-active-bg:#0a58ca;--bs-btn-active-border-c
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 79 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 31 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 29 7d 2e 62 74 6e 2d 67 72 6f 75 70 2d 73 6d 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 73 6d 7b 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 79 3a 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 30 2e 38 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 Data Ascii: y:0.5rem;--bs-btn-padding-x:1rem;--bs-btn-font-size:1.25rem;--bs-btn-border-radius:var(--bs-border-radius-lg)}.btn-group-sm>.btn,.btn-sm{--bs-btn-padding-y:0.25rem;--bs-btn-padding-x:0.5rem;--bs-btn-font-size:0.875rem;--bs-btn-border-radius:var(--bs-borde
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 3a 6e 6f 74 28 2e 62 74 6e 2d 63 68 65 63 6b 3a 66 69 72 73 74 2d 63 68 69 6c 64 29 2b 2e 62 74 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 2d 31 29 7d 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2d 67 72 6f 75 70 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 29 3e 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2d 73 70 6c 69 74 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 2e 62 74 6e 2d 67 72 6f 75 70 3e 2e 62 74 6e 3a 6e 6f 74 28 3a 6c 61 73 74 2d 63 68 69 6c 64 Data Ascii: btn-group>.btn-group:not(:first-child),.btn-group>:not(.btn-check:first-child)+.btn{margin-left:calc(var(--bs-border-width) * -1)}.btn-group>.btn-group:not(:last-child)>.btn,.btn-group>.btn.dropdown-toggle-split:first-child,.btn-group>.btn:not(:last-child

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	184642
Entropy (8bit):	5.552241277389592
Encrypted:	false
SSDEEP:	3072:DzCHHtBRNEfKcjyYaHSisvZnbl4JTUrz5Y:VLyYICZn4
MD5:	B215965F0944540104CB49EEF0A15E58
SHA1:	F5E74CC4641699FD6BDA0965E9B7EDE76615F4EC
SHA-256:	57BE4CE8929C2FA7CA9C2ED97C2AD153A8818DA8E78036A81E74778FCC1F53AD
SHA-512:	FCDF0D4D13B3EB35B4DF3534869AB96EA7CF856882B57D061196701F94C30E3863E6BFF282F669FF2EC6D633A1214F8134311EEB3999877EB9AC2AA931CAC2DD
Malicious:	false
Reputation:	low
URL:	https://www.hcaptcha.com/js/98474ee93ddf5a629539080e820b51cd4bf0db151ef16103b303aa4872d431d6.js
Preview:	(()=>{var e={5487:function(){"use strict";window.tram=function(e){function t(e,t){return(new P.Bare).init(e,t)}function n(e){var t=parseInt(e.slice(1),16);return[t>>16&255,t>>8&255,255&t]}function i(e,t,n){return"#"+(0x1000000\|e<<16\|t<<8\|n).toString(16).slice(1)}function r(){}function a(e,t,n){if(void 0!==t&&(n=t),void 0===e)return n;var i=n;return Q.test(e)\|\|!K.test(e)?i=parseInt(e,10):K.test(e)&&(i=1e3*parseFloat(e)),0>i&&(i=0),i==i?i:n}function o(e){W.debug&&window&&window.console.warn(e)}var l,s,u,c=function(e,t,n){function i(e){return"object"==typeof e}function r(e){return"function"==typeof e}function a(){}return function o(l,s){function u(){var e=new c;return r(e.init)&&e.init.apply(e,arguments),e}function c(){}s===n&&(s=l,l=Object),u.Bare=c;var d,f=a[e]=l[e],p=c[e]=u[e]=new a;return p.constructor=u,u.mixin=function(t){return c[e]=u[e]=o(u,t)[e],u},u.open=function(e){if(d={},r(e)?d=e.call(u,p,f,u,l):i(e)&&(d=e),i(d))for(var n in d)t.call(d,n)&&(p[n]=d[n]);return r(p.init)\|\|(p.ini

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:39 UTC	1330	OUT	GET /share-sensitive-files-securely/public/js/ntzywRxzsLHk.js HTTP/1.1 Host: maltese.com.br Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://maltese.com.br/share-sensitive-files-securely/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkVjdmdFaDlDdjArK1Fucy9Sc2xpWlE9PSIsInZhbHVlIjoiUlhTM0pON25jbjdwRUpsQW9BbUExeStYRDV4a1RGeU1UVkdVc21OZ0tycHc3MjZuUXp4RGhsditSRkpaVnJLVW04cUpRbmpnQnVHdlhxWDRpZkhWa2pELzdxU21qQlNJUkkwQ2lRTWZtc3QxdVRiUVRiT2JxR3JSTE51WUpnTFkiLCJtYWMiOiIwMmQzZDczYzZkNjMxNTU4MGQwZDE0NDFmYWFiMWQ3YjVmNDZhMDM0OGMxM2FmNzA3ZjEwZWMyYWYyNTAzZDA4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik5pMjBKY0Rqa2w4ZVdmcys1ZzJJSUE9PSIsInZhbHVlIjoiQUxuV2lPT1VyRHU0KzBqS0pnT1hFTzZ0MUl3Zk1kMVlWbndNbGhOaC93RTJrYTB6enZacXhHWGNUd0hCL0IrYk53Q3JnV05IRThSVU5CaEFlTWEvNGFVQVI0dzh3azdNUUNiUHJtb1J3UTh4emNaYVkzOUFJQ0hueFprM1F0cUQiLCJtYWMiOiIxZDk1NDgzZDIzMjdlZDk5ZmRlMjA1NWQ3YjI5OWU5Y2IwYmE2ODk4ZWJiNDg0YmEyNmE0ZGMxNmIyZDc2OWUyIiwidGFnIjoiIn0%3D
2025-04-01 17:50:39 UTC	269	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:39 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 13 Feb 2025 20:50:20 GMT Accept-Ranges: bytes Content-Length: 80421 Vary: Accept-Encoding Content-Type: application/javascript
2025-04-01 17:50:39 UTC	7923	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.0 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 69 67 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 68 69 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 73 74 61 74 69 63 20 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 28 72 28 74 29 2c 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 29 7d 73 74 61 74 69 63 20 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 28 74 2c 65 3d 7b 7d 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 74 29 7c 7c 6e 65 77 20 74 68 69 73 28 74 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: ig(t){return t=this._mergeConfigObj(t,this._element),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}static getInstance(t){return e.get(r(t),this.DATA_KEY)}static getOrCreateInstance(t,e={}){return this.getInstance(t)\|\|new this(t,"object"==typeof e
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 69 66 28 72 28 22 73 6c 69 64 65 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 29 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 29 72 65 74 75 72 6e 3b 69 66 28 21 69 7c 7c 21 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 61 3d 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 3b 74 68 69 73 2e 70 61 75 73 65 28 29 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 21 30 2c 74 68 69 73 2e 5f 73 65 74 41 63 74 69 76 65 49 6e 64 69 63 61 74 6f 72 45 6c 65 6d 65 6e 74 28 6f 29 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 73 3b 63 6f 6e 73 74 20 6c 3d 6e 3f 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 73 74 61 72 74 22 3a 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 65 6e 64 22 2c 63 3d 6e 3f 22 63 61 72 6f 75 73 65 6c 2d 69 Data Ascii: if(r("slide.bs.carousel").defaultPrevented)return;if(!i\|\|!s)return;const a=Boolean(this._interval);this.pause(),this._isSliding=!0,this._setActiveIndicatorElement(o),this._activeElement=s;const l=n?"carousel-item-start":"carousel-item-end",c=n?"carousel-i
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 6e 29 3c 3d 31 26 26 28 6e 3d 65 2e 68 65 69 67 68 74 29 2c 7b 78 3a 74 2e 6f 66 66 73 65 74 4c 65 66 74 2c 79 3a 74 2e 6f 66 66 73 65 74 54 6f 70 2c 77 69 64 74 68 3a 69 2c 68 65 69 67 68 74 3a 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 74 2c 65 29 7b 76 61 72 20 69 3d 65 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 26 26 65 2e 67 65 74 52 6f 6f 74 4e 6f 64 65 28 29 3b 69 66 28 74 2e 63 6f 6e 74 61 69 6e 73 28 65 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 69 26 26 7a 74 28 69 29 29 7b 76 61 72 20 6e 3d 65 3b 64 6f 7b 69 66 28 6e 26 26 74 2e 69 73 53 61 6d 65 4e 6f 64 65 28 6e 29 29 72 65 74 75 72 6e 21 30 3b 6e 3d 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6e 2e 68 6f 73 74 7d 77 68 69 6c 65 28 6e 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 5a 74 Data Ascii: n)<=1&&(n=e.height),{x:t.offsetLeft,y:t.offsetTop,width:i,height:n}}function Jt(t,e){var i=e.getRootNode&&e.getRootNode();if(t.contains(e))return!0;if(i&&zt(i)){var n=e;do{if(n&&t.isSameNode(n))return!0;n=n.parentNode\|\|n.host}while(n)}return!1}function Zt
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 73 3d 4f 65 28 74 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 3d 56 74 28 73 2e 74 6f 70 2c 65 2e 74 6f 70 29 2c 65 2e 72 69 67 68 74 3d 4b 74 28 73 2e 72 69 67 68 74 2c 65 2e 72 69 67 68 74 29 2c 65 2e 62 6f 74 74 6f 6d 3d 4b 74 28 73 2e 62 6f 74 74 6f 6d 2c 65 2e 62 6f 74 74 6f 6d 29 2c 65 2e 6c 65 66 74 3d 56 74 28 73 2e 6c 65 66 74 2c 65 2e 6c 65 66 74 29 2c 65 7d 29 2c 4f 65 28 74 2c 72 2c 6e 29 29 3b 72 65 74 75 72 6e 20 61 2e 77 69 64 74 68 3d 61 2e 72 69 67 68 74 2d 61 2e 6c 65 66 74 2c 61 2e 68 65 69 67 68 74 3d 61 2e 62 6f 74 74 6f 6d 2d 61 2e 74 6f 70 2c 61 2e 78 3d 61 2e 6c 65 66 74 2c 61 2e 79 3d 61 2e 74 6f 70 2c 61 7d 28 57 74 28 79 29 3f 79 3a 79 2e 63 6f 6e 74 65 78 74 45 Data Ascii: (function(e,i){var s=Oe(t,i,n);return e.top=Vt(s.top,e.top),e.right=Kt(s.right,e.right),e.bottom=Kt(s.bottom,e.bottom),e.left=Vt(s.left,e.left),e}),Oe(t,r,n));return a.width=a.right-a.left,a.height=a.bottom-a.top,a.x=a.left,a.y=a.top,a}(Wt(y)?y:y.contextE
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 69 6e 73 74 61 6e 63 65 3a 68 2c 6f 70 74 69 6f 6e 73 3a 6e 7d 29 3b 6c 2e 70 75 73 68 28 6f 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 7d 29 29 2c 68 2e 75 70 64 61 74 65 28 29 7d 2c 66 6f 72 63 65 55 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 76 61 72 20 74 3d 61 2e 65 6c 65 6d 65 6e 74 73 2c 65 3d 74 2e 72 65 66 65 72 65 6e 63 65 2c 69 3d 74 2e 70 6f 70 70 65 72 3b 69 66 28 57 65 28 65 2c 69 29 29 7b 61 2e 72 65 63 74 73 3d 7b 72 65 66 65 72 65 6e 63 65 3a 46 65 28 65 2c 73 65 28 69 29 2c 22 66 69 78 65 64 22 3d 3d 3d 61 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 61 74 65 67 79 29 2c 70 6f 70 70 65 72 3a 47 74 28 69 29 7d 2c 61 2e 72 65 73 65 74 3d 21 31 2c 61 2e 70 6c 61 63 65 6d 65 6e 74 3d 61 2e 6f 70 74 69 6f 6e 73 2e 70 Data Ascii: instance:h,options:n});l.push(o\|\|function(){})}})),h.update()},forceUpdate:function(){if(!c){var t=a.elements,e=t.reference,i=t.popper;if(We(e,i)){a.rects={reference:Fe(e,se(i),"fixed"===a.options.strategy),popper:Gt(i)},a.reset=!1,a.placement=a.options.p
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 6d 61 74 69 6f 6e 28 28 28 29 3d 3e 7b 67 28 74 29 7d 29 29 7d 68 69 64 65 28 74 29 7b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 73 56 69 73 69 62 6c 65 3f 28 74 68 69 73 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 28 29 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 68 69 29 2c 74 68 69 73 2e 5f 65 6d 75 6c 61 74 65 41 6e 69 6d 61 74 69 6f 6e 28 28 28 29 3d 3e 7b 74 68 69 73 2e 64 69 73 70 6f 73 65 28 29 2c 67 28 74 29 7d 29 29 29 3a 67 28 74 29 7d 64 69 73 70 6f 73 65 28 29 7b 74 68 69 73 2e 5f 69 73 41 70 70 65 6e 64 65 64 26 26 28 50 2e 6f 66 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 64 69 29 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 28 29 2c 74 68 69 73 2e 5f 69 73 41 70 70 65 6e 64 65 64 3d 21 31 29 7d 5f 67 65 74 45 6c 65 Data Ascii: mation((()=>{g(t)}))}hide(t){this._config.isVisible?(this._getElement().classList.remove(hi),this._emulateAnimation((()=>{this.dispose(),g(t)}))):g(t)}dispose(){this._isAppended&&(P.off(this._element,di),this._element.remove(),this._isAppended=!1)}_getEle
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 28 74 2c 65 29 2c 74 68 69 73 2e 5f 69 73 53 68 6f 77 6e 3d 21 31 2c 74 68 69 73 2e 5f 62 61 63 6b 64 72 6f 70 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 42 61 63 6b 44 72 6f 70 28 29 2c 74 68 69 73 2e 5f 66 6f 63 75 73 74 72 61 70 3d 74 68 69 73 2e 5f 69 6e 69 74 69 61 6c 69 7a 65 46 6f 63 75 73 54 72 61 70 28 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 28 29 7b 72 65 74 75 72 6e 20 57 69 7d 73 74 61 74 69 63 20 67 65 74 20 44 65 66 61 75 6c 74 54 79 70 65 28 29 7b 72 65 74 75 72 6e 20 42 69 7d 73 74 61 74 69 63 20 67 65 74 20 4e 41 4d 45 28 29 7b 72 65 74 75 72 6e 22 6f 66 66 63 61 6e 76 61 73 22 7d 74 6f 67 67 6c 65 28 74 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: (t,e),this._isShown=!1,this._backdrop=this._initializeBackDrop(),this._focustrap=this._initializeFocusTrap(),this._addEventListeners()}static get Default(){return Wi}static get DefaultType(){return Bi}static get NAME(){return"offcanvas"}toggle(t){return t
2025-04-01 17:50:40 UTC	8000	IN	Data Raw: 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 2c 69 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3b 63 6f 6e 73 74 7b 63 6f 6e 74 61 69 6e 65 72 3a 6e 7d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3b 69 66 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2e 74 69 70 29 7c 7c 28 6e 2e 61 70 70 65 6e 64 28 69 29 2c 50 2e 74 72 69 67 67 65 72 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 65 76 65 6e 74 4e 61 6d 65 28 22 69 6e 73 65 72 74 65 64 22 29 29 29 2c 74 68 69 73 2e 5f 70 6f 70 70 65 72 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 50 Data Ascii: tAttribute("aria-describedby",i.getAttribute("id"));const{container:n}=this._config;if(this._element.ownerDocument.documentElement.contains(this.tip)\|\|(n.append(i),P.trigger(this._element,this.constructor.eventName("inserted"))),this._popper=this._createP
2025-04-01 17:50:41 UTC	8000	IN	Data Raw: 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 28 74 3d 3e 4e 75 6d 62 65 72 2e 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 29 29 2c 74 7d 5f 6d 61 79 62 65 45 6e 61 62 6c 65 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 28 29 7b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 73 6d 6f 6f 74 68 53 63 72 6f 6c 6c 26 26 28 50 2e 6f 66 66 28 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 61 72 67 65 74 2c 75 6e 29 2c 50 2e 6f 6e 28 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 74 61 72 67 65 74 2c 75 6e 2c 70 6e 2c 28 74 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 5f 6f 62 73 65 72 76 61 62 6c 65 53 65 63 74 69 6f 6e 73 2e 67 65 74 28 74 2e 74 61 72 67 65 74 2e 68 61 73 68 29 3b 69 66 28 65 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 Data Ascii: split(",").map((t=>Number.parseFloat(t)))),t}_maybeEnableSmoothScroll(){this._config.smoothScroll&&(P.off(this._config.target,un),P.on(this._config.target,un,pn,(t=>{const e=this._observableSections.get(t.target.hash);if(e){t.preventDefault();const i=this

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:39 UTC	562	OUT	GET /1/api.js HTTP/1.1 Host: js.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://maltese.com.br/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:39 UTC	507	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:39 GMT Content-Type: application/javascript Content-Length: 208515 Connection: close CF-Ray: 9299ee1ad865b785-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: max-age=300 ETag: W/"75b123d9961d4d99f9b87a14745309a2" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin alt-svc: h3=":443"; ma=86400 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cloudflare
2025-04-01 17:50:39 UTC	862	IN	Data Raw: 2f 2a 20 7b 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 31 22 2c 20 22 68 61 73 68 22 3a 20 22 4d 45 55 43 49 43 51 56 47 54 56 52 43 76 66 47 54 56 6d 51 41 66 66 78 55 74 74 4c 58 4a 6f 72 57 78 67 43 53 44 71 50 34 50 4d 2f 79 79 46 7a 41 69 45 41 6d 56 72 30 65 6d 77 57 73 6d 4c 42 38 4d 67 48 4c 69 68 4b 75 6f 41 76 4e 4e 56 6b 70 56 59 64 74 75 38 71 71 32 2f 4e 51 56 6b 3d 22 20 7d 20 2a 2f 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f Data Ascii: /* { "version": "1", "hash": "MEUCICQVGTVRCvfGTVmQAffxUttLXJorWxgCSDqP4PM/yyFzAiEAmVr0emwWsmLB8MgHLihKuoAvNNVkpVYdtu8qq2/NQVk=" } // https://hcaptcha.com/license */!function(){"use strict";function e(e){var t=this.constructor;return this.then((functio
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 29 29 7d 72 5b 65 5d 3d 7b 73 74 61 74 75 73 3a 22 66 75 6c 66 69 6c 6c 65 64 22 2c 76 61 6c 75 65 3a 6e 7d 2c 30 3d 3d 2d 2d 69 26 26 74 28 72 29 7d 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6f 28 61 2c 72 5b 61 5d 29 7d 29 29 7d 76 61 72 20 6e 3d 73 65 74 54 69 6d 65 6f 75 74 2c 72 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 21 28 Data Ascii: ))}r[e]={status:"fulfilled",value:n},0==--i&&t(r)}for(var a=0;a<r.length;a++)o(a,r[a])}))}var n=setTimeout,r="undefined"!=typeof setImmediate?setImmediate:null;function i(e){return Boolean(e&&"undefined"!=typeof e.length)}function o(){}function a(e){if(!(
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 65 66 65 72 72 65 64 73 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 6f 6e 46 75 6c 66 69 6c 6c 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 6e 75 6c 6c 2c 74 68 69 73 2e 6f 6e 52 65 6a 65 63 74 65 64 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 3a 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 63 28 74 2c 65 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 7c 7c 28 6e 3d 21 30 2c 6c 28 74 2c 65 29 29 7d 29 29 7d 63 61 74 63 68 28 72 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 3b 6e 3d Data Ascii: eferreds=null}function h(e,t,n){this.onFulfilled="function"==typeof e?e:null,this.onRejected="function"==typeof t?t:null,this.promise=n}function d(e,t){var n=!1;try{e((function(e){n\|\|(n=!0,c(t,e))}),(function(e){n\|\|(n=!0,l(t,e))}))}catch(r){if(n)return;n=
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 72 6e 28 22 50 6f 73 73 69 62 6c 65 20 55 6e 68 61 6e 64 6c 65 64 20 50 72 6f 6d 69 73 65 20 52 65 6a 65 63 74 69 6f 6e 3a 22 2c 65 29 7d 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 29 72 65 74 75 72 6e 20 73 65 6c 66 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 75 6e 61 62 6c 65 20 74 6f 20 6c 6f 63 61 74 65 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 66 Data Ascii: rn("Possible Unhandled Promise Rejection:",e)};var p=function(){if("undefined"!=typeof self)return self;if("undefined"!=typeof window)return window;if("undefined"!=typeof global)return global;throw new Error("unable to locate global object")}();function f
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 6c 61 62 65 6c 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 45 5b 74 5d 3d 65 7d 29 29 7d 29 29 7d 29 29 3b 76 61 72 20 56 2c 6b 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 28 65 29 7d 7d 2c 78 3d 7b 22 55 54 46 2d 38 22 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 28 65 29 7d 7d 2c 53 3d 22 75 74 66 2d 38 22 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 69 66 28 21 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 54 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 20 44 69 64 20 79 6f 75 20 66 6f 72 67 65 74 20 27 6e 65 77 27 3f 22 Data Ascii: nction(e){e.labels.forEach((function(t){E[t]=e}))}))}));var V,k={"UTF-8":function(e){return new U(e)}},x={"UTF-8":function(e){return new C(e)}},S="utf-8";function T(e,t){if(!(this instanceof T))throw TypeError("Called as a function. Did you forget 'new'?"
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 7c 7c 28 74 68 69 73 2e 65 6e 63 6f 64 69 6e 67 3d 6e 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 29 7b 76 61 72 20 74 3d 65 2e 66 61 74 61 6c 2c 6e 3d 30 2c 72 3d 30 2c 69 3d 30 2c 6f 3d 31 32 38 2c 61 3d 31 39 31 3b 74 68 69 73 2e 68 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 73 29 7b 69 66 28 73 3d 3d 3d 67 26 26 30 21 3d 3d 69 29 72 65 74 75 72 6e 20 69 3d 30 2c 62 28 74 29 3b 69 66 28 73 3d 3d 3d 67 29 72 65 74 75 72 6e 20 77 3b 69 66 28 30 3d 3d 3d 69 29 7b 69 66 28 66 28 73 2c 30 2c 31 32 37 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 66 28 73 2c 31 39 34 2c 32 32 33 29 29 69 3d 31 2c Data Ascii: Object.defineProperty\|\|(this.encoding=n._encoding.name.toLowerCase()),n}function C(e){var t=e.fatal,n=0,r=0,i=0,o=128,a=191;this.handler=function(e,s){if(s===g&&0!==i)return i=0,b(t);if(s===g)return w;if(0===i){if(f(s,0,127))return s;if(f(s,194,223))i=1,
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 3d 78 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 29 2c 74 68 69 73 2e 5f 42 4f 4d 73 65 65 6e 3d 21 31 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 42 6f 6f 6c 65 61 6e 28 74 2e 73 74 72 65 61 6d 29 3b 66 6f 72 28 76 61 72 20 72 2c 69 3d 6e 65 77 20 76 28 6e 29 2c 6f 3d 5b 5d 3b 3b 29 7b 76 61 72 20 61 3d 69 2e 72 65 61 64 28 29 3b 69 66 28 61 3d 3d 3d 67 29 62 72 65 61 6b 3b 69 66 28 28 72 3d 74 68 69 73 2e 5f 64 65 63 6f 64 65 72 2e 68 61 6e 64 6c 65 72 28 69 2c 61 29 29 3d 3d 3d 77 29 62 72 65 61 6b 3b 6e 75 6c 6c 21 3d Data Ascii: s._do_not_flush\|\|(this._decoder=x[this._encoding.name]({fatal:"fatal"===this._error_mode}),this._BOMseen=!1),this._do_not_flush=Boolean(t.stream);for(var r,i=new v(n),o=[];;){var a=i.read();if(a===g)break;if((r=this._decoder.handler(i,a))===w)break;null!=
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 37 33 34 33 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 20 69 66 28 6f 3e 3d 35 35 32 39 36 26 26 6f 3c 3d 35 36 33 31 39 29 69 66 28 72 3d 3d 3d 6e 2d 31 29 69 2e 70 75 73 68 28 36 35 35 33 33 29 3b 65 6c 73 65 7b 76 61 72 20 61 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 72 2b 31 29 3b 69 66 28 61 3e 3d 35 36 33 32 30 26 26 61 3c 3d 35 37 33 34 33 29 7b 76 61 72 20 73 3d 31 30 32 33 26 6f 2c 63 3d 31 30 32 33 26 61 3b 69 2e 70 75 73 68 28 36 35 35 33 36 2b 28 73 3c 3c 31 30 29 2b 63 29 2c 72 2b 3d 31 7d 65 6c 73 65 20 69 2e 70 75 73 68 28 36 35 35 33 33 29 7d 72 2b 3d 31 7d 72 65 74 75 72 6e 20 69 7d 28 65 29 29 2c 69 3d 5b 5d 3b 3b 29 7b 76 61 72 20 6f 3d 72 2e 72 65 61 64 28 29 3b 69 66 28 6f 3d 3d 3d 67 29 62 72 65 61 6b 3b 69 66 28 28 6e Data Ascii: 7343)i.push(65533);else if(o>=55296&&o<=56319)if(r===n-1)i.push(65533);else{var a=t.charCodeAt(r+1);if(a>=56320&&a<=57343){var s=1023&o,c=1023&a;i.push(65536+(s<<10)+c),r+=1}else i.push(65533)}r+=1}return i}(e)),i=[];;){var o=r.read();if(o===g)break;if((n
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 22 75 6e 77 72 61 70 4b 65 79 22 3a 6c 3d 62 5b 34 5d 2c 75 3d 62 5b 35 5d 2c 68 3d 62 5b 36 5d 2c 62 5b 32 5d 3d 63 2e 5f 6b 65 79 7d 69 66 28 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3d 3d 3d 65 26 26 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 6c 2e 68 61 73 68 29 72 65 74 75 72 6e 20 6c 2e 6c 65 6e 67 74 68 3d 6c 2e 6c 65 6e 67 74 68 7c 7c 7b 22 53 48 41 2d 31 22 3a 35 31 32 2c 22 53 48 41 2d 32 35 36 22 3a 35 31 32 2c 22 53 48 41 2d 33 38 34 22 3a 31 30 32 34 2c 22 53 48 41 2d 35 31 32 22 3a 31 30 32 34 7d 5b 6c 2e 68 61 73 68 2e 6e 61 6d 65 5d 2c 6e 2e 69 6d 70 6f 72 74 4b 65 79 28 22 72 61 77 22 2c 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 6c 2e 6c 65 6e 67 74 Data Ascii: reak;case"unwrapKey":l=b[4],u=b[5],h=b[6],b[2]=c._key}if("generateKey"===e&&"HMAC"===l.name&&l.hash)return l.length=l.length\|\|{"SHA-1":512,"SHA-256":512,"SHA-384":1024,"SHA-512":1024}[l.hash.name],n.importKey("raw",t.getRandomValues(new Uint8Array(l.lengt
2025-04-01 17:50:39 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 48 4d 41 43 22 3d 3d 3d 6c 2e 6e 61 6d 65 26 26 28 6c 2e 6c 65 6e 67 74 68 7c 7c 28 6c 2e 6c 65 6e 67 74 68 3d 38 2a 65 2e 61 6c 67 6f 72 69 74 68 6d 2e 6c 65 6e 67 74 68 29 29 2c 30 3d 3d 6c 2e 6e 61 6d 65 2e 73 65 61 72 63 68 28 22 52 53 41 22 29 26 26 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 7c 7c 28 6c 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 6d 6f 64 75 6c 75 73 4c 65 6e 67 74 68 29 2c 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 7c 7c 28 6c 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 3d 28 65 2e 70 75 62 6c 69 63 4b 65 79 7c 7c 65 29 2e 61 6c 67 6f 72 69 74 68 6d 2e 70 75 62 6c 69 63 45 78 70 6f 6e 65 6e 74 Data Ascii: ction(e){return"HMAC"===l.name&&(l.length\|\|(l.length=8*e.algorithm.length)),0==l.name.search("RSA")&&(l.modulusLength\|\|(l.modulusLength=(e.publicKey\|\|e).algorithm.modulusLength),l.publicExponent\|\|(l.publicExponent=(e.publicKey\|\|e).algorithm.publicExponent

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:45 UTC	796	OUT	GET /captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.html HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://maltese.com.br/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:45 UTC	572	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3600 vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: report-uri https://sentry.hcaptcha.com/api/6/security/?sentry_key=30910f52569b4c17b1081ead2dae43b4&sentry_environment=prod&sentry_release=csp1; Server: cloudflare CF-RAY: 9299ee3f1b8d4263-EWR
2025-04-01 17:50:45 UTC	797	IN	Data Raw: 37 64 35 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 69 64 3d 22 68 63 61 70 74 63 68 61 2d 66 72 61 6d 65 2d 63 31 65 31 31 62 66 66 66 65 35 34 30 31 39 62 33 36 63 61 34 38 36 64 35 39 64 37 35 65 61 36 35 31 32 38 66 35 31 30 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 68 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d Data Ascii: 7d58<!DOCTYPE html><html lang="en" data-id="hcaptcha-frame-c1e11bfffe54019b36ca486d59d75ea65128f510"><head> <title>hCaptcha</title> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 31 35 70 78 20 32 30 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 69 6e 70 75 74 3a 66 6f 63 75 73 2c 73 65 6c 65 63 74 3a 66 6f 63 75 73 2c 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 7d 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 75 74 6c 69 6e 65 3a 30 7d 74 65 78 74 61 72 65 61 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 6f 75 74 6c 69 6e 65 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 72 65 73 69 7a 65 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 73 65 6c 65 63 74 69 Data Ascii: n:0;padding:15px 20px;border:none}button:focus,input:focus,select:focus,textarea:focus{outline:0}:focus{border:none;outline:0}textarea{border:none;overflow:auto;outline:0;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none;resize:none}.no-selecti
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 69 66 28 21 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 6e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 6e 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 69 29 7b 69 66 28 69 26 26 28 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: if(!t\|\|"undefined"==typeof t.length)return i(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var n=Array.prototype.slice.call(t);if(0===n.length)return e([]);var o=n.length;function r(t,i){if(i&&("object"==t
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 68 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 76 6f 69 64 20 66 28 28 6e 3d 69 2c 6f 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 6f 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 63 61 74 63 68 28 72 29 7b 63 28 74 2c 72 29 7d 76 61 72 20 6e 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 68 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 Data Ascii: instanceof s)return t._state=3,t._value=e,void h(t);if("function"==typeof i)return void f((n=i,o=e,function(){n.apply(o,arguments)}),t)}t._state=1,t._value=e,h(t)}catch(r){c(t,r)}var n,o}function c(t,e){t._state=2,t._value=e,h(t)}function h(t){2===t._sta
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 3d 3d 3d 73 3f 74 3a 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 29 7d 2c 73 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 28 74 29 7d 29 29 7d 2c 73 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 69 66 28 21 6f 28 74 29 29 72 65 74 75 72 6e 20 69 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 73 2e 72 65 73 6f 6c 76 65 28 74 5b 6e 5d 29 2e 74 68 Data Ascii: ===s?t:new s((function(e){e(t)}))},s.reject=function(t){return new s((function(e,i){i(t)}))},s.race=function(t){return new s((function(e,i){if(!o(t))return i(new TypeError("Promise.race accepts an array"));for(var n=0,r=t.length;n<r;n++)s.resolve(t[n]).th
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 72 72 61 79 28 74 29 29 66 6f 72 28 76 61 72 20 65 3d 74 3b 65 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 65 2e 73 68 69 66 74 28 29 29 3b 65 6c 73 65 20 74 68 69 73 2e 74 6f 6b 65 6e 73 2e 75 6e 73 68 69 66 74 28 74 29 7d 7d 3b 76 61 72 20 76 3d 2d 31 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c 65 29 7b 69 66 28 74 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 44 65 63 6f 64 65 72 20 65 72 72 6f 72 22 29 3b 72 65 74 75 72 6e 20 65 7c 7c 36 35 35 33 33 7d 66 75 6e 63 74 69 6f 6e 20 78 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 53 74 72 69 6e 67 28 74 29 2e 74 72 69 6d 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 Data Ascii: rray(t))for(var e=t;e.length;)this.tokens.unshift(e.shift());else this.tokens.unshift(t)}};var v=-1;function w(t,e){if(t)throw TypeError("Decoder error");return e\|\|65533}function x(t){return t=String(t).trim().toLowerCase(),Object.prototype.hasOwnProperty
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 22 29 3b 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 3d 21 31 2c 74 68 69 73 2e 5f 66 61 74 61 6c 3d 65 2e 66 61 74 61 6c 3f 22 66 61 74 61 6c 22 3a 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3b 76 61 72 20 69 3d 74 68 69 73 3b 69 66 28 65 2e 4e 4f 4e 53 54 41 4e 44 41 52 44 5f 61 6c 6c 6f 77 4c 65 67 61 63 79 45 6e 63 6f 64 69 6e 67 29 7b 76 61 72 20 6e 3d 78 28 74 3d 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 53 74 72 69 6e 67 28 74 29 3a 56 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 22 72 65 70 6c 61 63 65 6d 65 6e 74 22 3d 3d 3d 6e 2e 6e 61 6d 65 29 74 68 72 6f 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 55 6e Data Ascii: ");e=y(e),this._encoding=null,this._encoder=null,this._do_not_flush=!1,this._fatal=e.fatal?"fatal":"replacement";var i=this;if(e.NONSTANDARD_allowLegacyEncoding){var n=x(t=t!==undefined?String(t):V);if(null===n\|\|"replacement"===n.name)throw RangeError("Un
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 61 74 61 6c 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 65 72 72 6f 72 5f 6d 6f 64 65 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 67 6e 6f 72 65 42 4f 4d 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 67 6e 6f 72 65 42 4f 4d 7d 7d 29 29 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3b 69 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 Data Ascii: t.defineProperty(S.prototype,"fatal",{get:function(){return"fatal"===this._error_mode}}),Object.defineProperty(S.prototype,"ignoreBOM",{get:function(){return this._ignoreBOM}})),S.prototype.decode=function(t,e){var i;i="object"==typeof t&&t instanceof Arr
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 63 6f 64 69 6e 67 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 7d 29 2c 41 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 22 22 3a 53 74 72 69 6e 67 28 74 29 2c 65 3d 79 28 65 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c 75 73 68 7c 7c 28 74 68 69 73 2e 5f 65 6e 63 6f 64 65 72 3d 45 5b 74 68 69 73 2e 5f 65 6e 63 6f 64 69 6e 67 2e 6e 61 6d 65 5d 28 7b 66 61 74 61 6c 3a 22 66 61 74 61 6c 22 3d 3d 3d 74 68 69 73 2e 5f 66 61 74 61 6c 7d 29 29 2c 74 68 69 73 2e 5f 64 6f 5f 6e 6f 74 5f 66 6c Data Ascii: prototype,"encoding",{get:function(){return this._encoding.name.toLowerCase()}}),A.prototype.encode=function(t,e){t=t===undefined?"":String(t),e=y(e),this._do_not_flush\|\|(this._encoder=E[this._encoding.name]({fatal:"fatal"===this._fatal})),this._do_not_fl
2025-04-01 17:50:45 UTC	1369	IN	Data Raw: 49 68 76 63 4e 41 51 45 42 3a 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 7d 2c 63 3d 7b 22 31 2e 32 2e 38 34 30 2e 31 31 33 35 34 39 2e 31 2e 31 2e 31 22 3a 22 4b 6f 5a 49 68 76 63 4e 41 51 45 42 22 7d 3b 69 66 28 5b 22 67 65 6e 65 72 61 74 65 4b 65 79 22 2c 22 69 6d 70 6f 72 74 4b 65 79 22 2c 22 75 6e 77 72 61 70 4b 65 79 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 69 5b 74 5d 3b 69 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 6c 29 7b 76 61 72 20 63 2c 68 2c 75 2c 64 2c 77 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3b 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 22 67 65 6e 65 72 61 74 65 4b 65 79 22 3a 63 3d 79 28 6f 29 2c 68 3d 72 2c 75 3d 6c 3b 62 Data Ascii: IhvcNAQEB:"1.2.840.113549.1.1.1"},c={"1.2.840.113549.1.1.1":"KoZIhvcNAQEB"};if(["generateKey","importKey","unwrapKey"].forEach((function(t){var n=i[t];i[t]=function(o,r,l){var c,h,u,d,w=[].slice.call(arguments);switch(t){case"generateKey":c=y(o),h=r,u=l;b

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:46 UTC	799	OUT	POST /checksiteconfig?v=c1e11bfffe54019b36ca486d59d75ea65128f510&host=maltese.com.br&sitekey=e7483410-5a58-493c-9fd0-cce66dae9bf2&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:47 UTC	762	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: https://newassets.hcaptcha.com vary: Origin, Accept-Encoding cf-cache-status: DYNAMIC Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2ctfb6LYHRPW5; SameSite=None; Secure; path=/; expires=Tue, 01-Apr-25 18:20:47 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ee4809f25e64-EWR alt-svc: h3=":443"; ma=86400
2025-04-01 17:50:47 UTC	607	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 69 52 7a 4e 74 4e 47 77 33 4c 7a 67 32 56 7a 67 78 51 6b 74 33 5a 6d 4a 6a 59 7a 42 45 55 6a 68 43 4d 30 38 33 62 6c 5a 73 59 6a 6c 54 53 54 68 78 63 45 5a 74 62 55 45 79 56 54 52 46 64 7a 46 71 64 58 4a 68 5a 6d 78 53 5a 46 41 30 4e 79 73 72 56 6e 6f 35 4e 48 4a 44 4f 46 52 77 62 57 52 33 55 54 5a 6e 5a 55 55 30 62 54 59 34 56 7a 5a 44 62 32 52 34 4c 33 64 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJiRzNtNGw3Lzg2VzgxQkt3ZmJjYzBEUjhCM083blZsYjlTSThxcEZtbUEyVTRFdzFqdXJhZmxSZFA0NysrVno5NHJDOFRwbWR3UTZnZUU0bTY4VzZDb2R4L3d
2025-04-01 17:50:47 UTC	176	IN	Data Raw: 6f 59 54 49 31 4e 69 31 6d 4e 33 46 33 4d 48 4a 44 5a 32 73 72 54 32 35 6c 51 56 6c 35 52 47 68 6d 56 55 6c 6a 53 6c 6c 59 64 56 56 75 64 6d 55 79 55 57 77 34 57 43 74 44 4e 6d 31 7a 5a 30 4e 72 50 53 49 73 49 6d 55 69 4f 6a 45 33 4e 44 4d 31 4d 7a 45 32 4e 44 63 73 49 6d 34 69 4f 69 4a 6f 63 33 63 69 4c 43 4a 6a 49 6a 6f 78 4d 44 41 77 66 51 2e 61 76 6f 31 45 6c 49 32 4f 43 41 39 77 65 6c 56 6f 54 6d 54 56 42 77 55 67 73 76 4b 61 72 4c 7a 7a 68 42 6c 4b 54 39 33 30 76 55 22 7d 2c 22 70 61 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: oYTI1Ni1mN3F3MHJDZ2srT25lQVl5RGhmVUljSllYdVVudmUyUWw4WCtDNm1zZ0NrPSIsImUiOjE3NDM1MzE2NDcsIm4iOiJoc3ciLCJjIjoxMDAwfQ.avo1ElI2OCA9welVoTmTVBwUgsvKarLzzhBlKT930vU"},"pass":true}
2025-04-01 17:50:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:46 UTC	629	OUT	GET /microsoft.com HTTP/1.1 Host: logo.clearbit.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://maltese.com.br/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:47 UTC	554	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 618 Connection: close access-control-allow-origin: * Cache-Control: public, max-age=2592000 Date: Tue, 18 Mar 2025 09:59:31 GMT x-envoy-response-flags: - Server: Clearbit strict-transport-security: max-age=63072000; includeSubDomains; preload x-content-type-options: nosniff X-Cache: Hit from cloudfront Via: 1.1 16fbe6f2baa3fcc1563be742e6d45f20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P3 X-Amz-Cf-Id: tC_DRPdVc0cAv9GTL13oUTH4lCGhHzyEv5gHEkzmCa1QYoYSbxpwtw== Age: 1237876
2025-04-01 17:50:47 UTC	618	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 02 00 00 00 4c 5c f6 9c 00 00 02 31 49 44 41 54 78 9c ec dc 31 6b 1a 61 00 87 f1 bb c3 62 ab d4 52 5a 84 d2 1e 15 9c 0a 75 2b 14 a4 43 a7 d2 4f d2 ef d0 ec 26 4b 3e 47 56 f7 4c f9 02 4e c9 70 8e 31 90 80 98 21 11 23 87 a8 d9 e4 72 2e a7 83 0f 26 cf 6f 7b df e9 0f 8f 9c db 5b 1a 8f c7 81 38 11 3d e0 a5 33 00 cc 00 30 03 c0 4a f9 8b 41 3f 48 7a cc 96 8d fc fc 13 bc fb b8 3a 4d 66 c3 fe 6d 17 1d 54 c8 97 5a bb 5e 69 65 6f d6 02 24 bd e0 e4 78 a7 a3 b6 d3 6c 65 03 dc a7 57 67 97 07 e8 a0 42 7e 7f 3d cc 05 f0 13 04 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 30 03 c0 0c 00 33 00 cc 00 Data Ascii: PNGIHDRL\1IDATx1kabRZu+CO&K>GVLNp1!#r.&o{[8=30JA?Hz:MfmTZ^ieo$xleWgB~=3030303030303

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:47 UTC	715	OUT	GET /c/5fef759e34a955dd56ceddd805e6a87d3f7d854c8c695bf797d43331bebfee3f/hsw.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:47 UTC	462	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: max-age=3024000 etag: W/"7bd876c8f9f3642a65f0c04e462ef689" vary: accept-encoding vary: Origin alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ee4b7d3f42be-EWR
2025-04-01 17:50:47 UTC	907	IN	Data Raw: 37 64 63 36 0d 0a 76 61 72 20 68 73 77 3d 66 75 6e 63 74 69 6f 6e 20 4b 58 61 4b 59 6d 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 72 3d 66 75 6e 63 74 69 6f 6e 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 72 3f 28 74 68 69 73 2e 72 65 6d 61 69 6e 64 65 72 3d 6e 75 6c 6c 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 65 3f 44 77 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 2c 63 47 29 3a 76 6f 69 64 20 30 3d 3d 3d 63 47 3f 44 4a 2e 63 61 6c 6c 28 74 68 69 73 2c 64 65 29 3a 76 6f 69 64 20 42 77 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 3a 6e 65 77 20 64 72 28 64 65 2c 63 47 2c 72 67 2c 74 5a 29 7d 2c 44 4a 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: 7dc6var hsw=function KXaKYm(){"use strict";var dr=function(de,cG,rg,tZ){return this instanceof dr?(this.remainder=null,"string"==typeof de?Dw.call(this,de,cG):void 0===cG?DJ.call(this,de):void Bw.apply(this,arguments)):new dr(de,cG,rg,tZ)},DJ=function(d
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 2e 75 62 5b 64 77 28 32 33 35 29 5d 7c 7c 28 56 4a 3d 6a 78 28 49 6e 74 33 32 41 72 72 61 79 2c 79 43 2e 75 62 5b 64 77 28 64 72 29 5d 29 29 2c 56 4a 7d 2c 70 5a 3d 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 2c 64 65 29 7b 79 43 2e 4f 62 28 64 72 2c 44 4a 2c 44 76 28 64 65 29 29 7d 3b 76 61 72 20 76 4c 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 66 6f 72 28 44 4a 3d 55 63 2c 64 65 3d 6e 65 77 20 41 72 72 61 79 28 64 72 5b 44 4a 28 33 35 33 29 5d 29 2c 63 47 3d 30 2c 72 67 3d 64 72 5b 44 4a 28 33 35 33 29 5d 2c 76 6f 69 64 20 30 3b 63 47 3c 72 67 3b 63 47 2b 2b 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3b 76 61 72 20 72 67 3b 64 65 5b 63 47 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 72 5b 63 47 5d 29 7d 72 65 Data Ascii: .ub[dw(235)]\|\|(VJ=jx(Int32Array,yC.ub[dw(dr)])),VJ},pZ=function(dr,DJ,de){yC.Ob(dr,DJ,Dv(de))};var vL=function(dr){for(DJ=Uc,de=new Array(dr[DJ(353)]),cG=0,rg=dr[DJ(353)],void 0;cG<rg;cG++){var DJ;var de;var cG;var rg;de[cG]=String.fromCharCode(dr[cG])}re
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 58 4c 42 77 76 55 44 65 6a 35 73 77 71 22 2c 22 41 67 66 5a 71 78 72 30 43 4d 4c 49 44 78 72 4c 22 2c 22 7a 32 76 30 71 32 39 55 44 67 76 34 44 61 22 2c 22 44 67 39 65 79 78 72 48 76 76 6a 6d 22 2c 22 7a 67 66 30 79 71 22 2c 22 42 33 6a 50 7a 32 4c 55 22 2c 22 43 67 58 31 7a 32 4c 55 43 57 22 2c 22 43 67 58 48 44 67 7a 56 43 4d 30 22 2c 22 44 78 6e 4c 43 4b 66 4e 7a 77 35 30 22 2c 22 42 67 66 55 7a 33 76 48 7a 32 75 22 2c 22 7a 32 76 30 72 77 35 30 43 4d 4c 4c 43 30 6a 35 76 68 4c 57 7a 71 22 2c 22 41 77 35 50 44 67 4c 48 44 67 39 59 76 68 4c 57 7a 71 22 2c 22 79 78 7a 48 41 77 58 78 41 77 72 30 41 61 22 2c 22 79 78 7a 48 41 77 58 69 7a 77 4c 4e 41 68 71 22 2c 22 44 32 4c 4b 44 67 47 22 2c 22 41 67 76 50 7a 32 48 30 22 2c 22 79 32 39 53 42 33 6a 65 7a 78 Data Ascii: XLBwvUDej5swq","AgfZqxr0CMLIDxrL","z2v0q29UDgv4Da","Dg9eyxrHvvjm","zgf0yq","B3jPz2LU","CgX1z2LUCW","CgXHDgzVCM0","DxnLCKfNzw50","BgfUz3vHz2u","z2v0rw50CMLLC0j5vhLWzq","Aw5PDgLHDg9YvhLWzq","yxzHAwXxAwr0Aa","yxzHAwXizwLNAhq","D2LKDgG","AgvPz2H0","y29SB3jezx
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 4a 29 7b 76 61 72 20 64 65 3b 76 61 72 20 63 47 3d 43 4b 3b 76 61 72 20 72 67 3d 64 72 5b 63 47 28 70 63 29 5d 28 44 4a 29 3b 69 66 28 72 67 29 7b 76 61 72 20 74 5a 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 67 29 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 72 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 3b 69 66 28 74 5a 3f 28 47 58 5b 63 47 28 37 34 32 29 5d 5b 63 47 28 38 36 39 29 5d 28 47 58 2c 72 67 29 2c 68 68 5b 63 47 28 44 6b 29 5d 28 64 4a 28 5b 5d 2c 72 67 2c 21 30 29 29 29 3a 28 63 47 28 35 37 39 29 3d 3d 74 79 70 65 6f 66 20 72 67 26 26 47 58 5b 63 47 28 37 34 32 29 5d 28 72 67 29 2c 68 68 5b 63 47 28 37 34 32 29 5d 28 72 67 29 29 2c 21 47 6c 29 72 65 74 75 72 6e 3b 76 Data Ascii: J){var de;var cG=CK;var rg=dr[cG(pc)](DJ);if(rg){var tZ=Array.isArray(rg)\|\|rg instanceof Int32Array\|\|rg instanceof Float32Array;if(tZ?(GX[cG(742)][cG(869)](GX,rg),hh[cG(Dk)](dJ([],rg,!0))):(cG(579)==typeof rg&&GX[cG(742)](rg),hh[cG(742)](rg)),!Gl)return;v
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 3d 3d 64 77 28 32 35 34 29 29 7b 76 61 72 20 44 24 3d 64 72 5b 64 77 28 32 35 35 29 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 44 24 3f 64 77 28 64 65 29 3a 64 77 28 63 47 29 2b 44 24 2b 22 29 22 7d 69 66 28 44 6b 3d 3d 64 77 28 72 67 29 29 7b 76 61 72 20 4c 74 3d 64 72 5b 64 77 28 32 35 39 29 5d 3b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 4c 74 3d 3d 64 77 28 32 35 33 29 26 26 4c 74 5b 64 77 28 32 34 36 29 5d 3e 30 3f 64 77 28 32 36 30 29 2b 4c 74 2b 22 29 22 3a 64 77 28 32 36 31 29 7d 69 66 28 41 72 72 61 79 5b 64 77 28 74 5a 29 5d 28 64 72 29 29 7b 76 61 72 20 5f 75 3d 64 72 5b 64 77 28 70 5a 29 5d 3b 76 61 72 20 43 55 3d 22 5b 22 3b 5f 75 3e 30 26 26 28 43 55 2b 3d 70 63 28 64 72 5b 30 5d 29 29 3b 66 6f 72 28 76 61 72 20 6c 65 3d 31 3b 6c 65 3c 5f Data Ascii: ==dw(254)){var D$=dr[dw(255)];return null==D$?dw(de):dw(cG)+D$+")"}if(Dk==dw(rg)){var Lt=dr[dw(259)];return typeof Lt==dw(253)&&Lt[dw(246)]>0?dw(260)+Lt+")":dw(261)}if(Array[dw(tZ)](dr)){var _u=dr[dw(pZ)];var CU="[";_u>0&&(CU+=pc(dr[0]));for(var le=1;le<_
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 6c 65 28 70 63 29 3b 69 66 28 70 5a 3d 5b 5d 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 5b 6c 65 28 44 6b 29 5d 2e 74 6f 53 74 72 69 6e 67 5b 6c 65 28 44 24 29 5d 28 66 67 29 29 7b 66 6f 72 28 74 5a 3d 66 67 5b 6c 65 28 4c 74 29 5d 2c 64 65 3d 30 3b 64 65 3c 74 5a 3b 64 65 2b 3d 31 29 70 5a 5b 64 65 5d 3d 5f 75 28 64 65 2c 66 67 29 7c 7c 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 72 67 3d 30 3d 3d 3d 70 5a 2e 6c 65 6e 67 74 68 3f 22 5b 5d 22 3a 22 5b 22 2b 70 5a 5b 6c 65 28 33 33 30 29 5d 28 22 2c 22 29 2b 22 5d 22 7d 66 6f 72 28 63 47 20 69 6e 20 66 67 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 6c 65 28 36 37 39 29 5d 2e 63 61 6c 6c 28 66 67 2c 63 47 29 26 26 28 72 67 3d 5f 75 28 63 47 Data Ascii: )return le(pc);if(pZ=[],"[object Array]"===Object[le(Dk)].toString[le(D$)](fg)){for(tZ=fg[le(Lt)],de=0;de<tZ;de+=1)pZ[de]=_u(de,fg)\|\|"null";return rg=0===pZ.length?"[]":"["+pZ[le(330)](",")+"]"}for(cG in fg)Object.prototype[le(679)].call(fg,cG)&&(rg=_u(cG
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 31 36 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 33 32 41 72 72 61 79 7c 7c 64 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 6c 6f 61 74 36 34 41 72 72 61 79 7d 2c 68 3a 66 67 3d 3d 74 72 75 65 3f 22 5f 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 Data Ascii: y\|\|dr instanceof Uint8Array\|\|dr instanceof Uint8ClampedArray\|\|dr instanceof Int16Array\|\|dr instanceof Uint16Array\|\|dr instanceof Int32Array\|\|dr instanceof Uint32Array\|\|dr instanceof Float32Array\|\|dr instanceof Float64Array},h:fg==true?"_":function(){var d
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 71 65 2c 71 65 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 61 4c 28 38 39 30 29 5d 28 71 65 29 3b 74 72 79 7b 22 6f 70 65 6e 44 61 74 61 62 61 73 65 22 69 6e 20 77 69 6e 64 6f 77 26 26 6f 70 65 6e 44 61 74 61 62 61 73 65 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 2c 43 59 28 21 31 29 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 7d 63 61 74 63 68 28 64 72 29 7b 43 59 28 21 30 29 7d 77 69 6e 64 6f 77 5b 61 4c 28 35 36 32 29 5d 5b 61 4c 28 33 32 38 29 5d 28 71 65 2c 31 29 5b 61 4c 28 64 65 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3b 76 61 72 20 64 65 3d 61 4c 3b 76 61 72 20 76 4c 3d 6e 75 6c 6c 3d 3d 3d 28 44 4a 3d 64 72 2e 74 61 72 67 65 74 29 7c 7c 76 6f 69 64 Data Ascii: orage.setItem(qe,qe),localStorage[aL(890)](qe);try{"openDatabase"in window&&openDatabase(null,null,null,null),CY(!1)}catch(dr){CY(!0)}}catch(dr){CY(!0)}window[aL(562)][aL(328)](qe,1)[aL(de)]=function(dr){var DJ;var de=aL;var vL=null===(DJ=dr.target)\|\|void
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 44 4a 29 5d 28 29 5b 63 47 28 64 65 29 5d 29 7d 63 61 74 63 68 28 64 72 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 2c 21 44 6b 3f 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 72 65 74 75 72 6e 20 35 37 7c 64 72 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 72 3d 55 63 3b 72 65 74 75 72 6e 20 64 72 28 37 33 37 29 21 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 64 72 28 33 32 32 29 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 3f 70 65 72 66 6f 72 6d 61 6e 63 65 5b 64 72 28 38 38 37 29 5d 28 29 3a 44 61 74 65 5b 64 72 28 38 38 37 29 5d 28 29 7d 2c 21 70 7a 3f 66 61 6c 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 72 2c 44 4a 29 7b 76 61 72 20 64 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: DJ)]()[cG(de)])}catch(dr){return null}},!Dk?function(dr,DJ){return 57\|dr}:function(){var dr=Uc;return dr(737)!=typeof performance&&dr(322)==typeof performance[dr(887)]?performance[dr(887)]():Date[dr(887)]()},!pz?false:function(dr,DJ){var de;try{return nul
2025-04-01 17:50:47 UTC	1369	IN	Data Raw: 67 29 5d 2c 71 65 5b 76 4c 28 74 5a 29 5d 5d 2c 43 59 26 26 5b 43 59 5b 76 4c 28 33 32 30 29 5d 2c 43 59 2e 72 61 6e 67 65 4d 61 78 2c 43 59 5b 76 4c 28 70 5a 29 5d 5d 2c 61 4c 26 26 5b 61 4c 5b 76 4c 28 33 32 30 29 5d 2c 61 4c 5b 76 4c 28 36 33 37 29 5d 2c 61 4c 5b 76 4c 28 38 32 39 29 5d 5d 2c 43 4c 26 26 5b 43 4c 2e 70 72 65 63 69 73 69 6f 6e 2c 43 4c 2e 72 61 6e 67 65 4d 61 78 2c 43 4c 2e 72 61 6e 67 65 4d 69 6e 5d 5d 7d 2c 47 6e 3d 66 75 6e 63 74 69 6f 6e 28 64 72 29 7b 76 61 72 20 44 4a 3d 37 33 32 3b 76 61 72 20 64 65 3d 36 32 30 3b 76 61 72 20 63 47 3d 38 36 36 3b 76 61 72 20 72 67 3d 55 63 3b 72 65 74 75 72 6e 20 50 55 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 50 55 5b 72 67 28 33 34 37 29 5d 28 64 72 29 3f 22 5c 22 22 2b 64 72 5b 72 67 28 34 34 35 Data Ascii: g)],qe[vL(tZ)]],CY&&[CY[vL(320)],CY.rangeMax,CY[vL(pZ)]],aL&&[aL[vL(320)],aL[vL(637)],aL[vL(829)]],CL&&[CL.precision,CL.rangeMax,CL.rangeMin]]},Gn=function(dr){var DJ=732;var de=620;var cG=866;var rg=Uc;return PU.lastIndex=0,PU[rg(347)](dr)?"\""+dr[rg(445

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:47 UTC	582	OUT	GET /checksiteconfig?v=c1e11bfffe54019b36ca486d59d75ea65128f510&host=maltese.com.br&sitekey=e7483410-5a58-493c-9fd0-cce66dae9bf2&sc=1&swa=1&spst=1 HTTP/1.1 Host: api2.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2ctfb6LYHRPW5
2025-04-01 17:50:48 UTC	590	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:48 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close access-control-allow-credentials: true access-control-allow-headers: Cache-Control, Content-Type, DNT, Referer, User-Agent access-control-allow-methods: GET, HEAD, POST, OPTIONS access-control-allow-origin: vary: Origin, Accept-Encoding cf-cache-status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ee4e7dfbf9a9-EWR alt-svc: h3=":443"; ma=86400
2025-04-01 17:50:48 UTC	779	IN	Data Raw: 33 30 38 0d 0a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 65 6e 63 5f 67 65 74 5f 72 65 71 22 3a 74 72 75 65 7d 2c 22 63 22 3a 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 43 53 58 55 72 55 6b 6c 34 53 6d 4e 46 5a 55 45 78 56 55 30 33 65 6e 41 33 52 32 6c 6b 59 6d 74 30 5a 31 6c 34 5a 57 31 36 53 7a 46 68 4f 48 4e 6f 4e 44 52 6b 62 44 64 43 65 58 6c 7a 52 6d 4a 59 5a 33 52 33 65 45 39 49 54 47 4e 51 56 6b 6c 78 53 32 68 50 4d 58 42 55 53 57 35 76 5a 46 46 30 55 69 73 76 56 55 46 4f 61 58 6c 32 4d 30 70 49 51 6d 6c 73 4f 47 35 Data Ascii: 308{"features":{"enc_get_req":true},"c":{"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJCSXUrUkl4SmNFZUExVU03enA3R2lkYmt0Z1l4ZW16SzFhOHNoNDRkbDdCeXlzRmJYZ3R3eE9ITGNQVklxS2hPMXBUSW5vZFF0UisvVUFOaXl2M0pIQmlsOG5
2025-04-01 17:50:48 UTC	4	IN	Data Raw: 65 7d 0d 0a Data Ascii: e}
2025-04-01 17:50:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:58 UTC	567	OUT	OPTIONS /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:58 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:58 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ee8fc8f8c34d-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:50:58 UTC	748	OUT	POST /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Content-Length: 32896 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 accept: application/json, application/octet-stream sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/octet-stream sec-ch-ua-mobile: ?0 Origin: https://newassets.hcaptcha.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:50:58 UTC	16384	OUT	Data Raw: 92 da 02 d6 7b 22 74 79 70 65 22 3a 22 68 73 77 22 2c 22 72 65 71 22 3a 22 65 79 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 4c 43 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 6d 49 6a 6f 77 4c 43 4a 7a 49 6a 6f 79 4c 43 4a 30 49 6a 6f 69 64 79 49 73 49 6d 51 69 4f 69 4a 69 52 7a 4e 74 4e 47 77 33 4c 7a 67 32 56 7a 67 78 51 6b 74 33 5a 6d 4a 6a 59 7a 42 45 55 6a 68 43 4d 30 38 33 62 6c 5a 73 59 6a 6c 54 53 54 68 78 63 45 5a 74 62 55 45 79 56 54 52 46 64 7a 46 71 64 58 4a 68 5a 6d 78 53 5a 46 41 30 4e 79 73 72 56 6e 6f 35 4e 48 4a 44 4f 46 52 77 62 57 52 33 55 54 5a 6e 5a 55 55 30 62 54 59 34 56 7a 5a 44 62 32 52 34 4c 33 64 77 4e 45 78 54 64 46 6b 72 57 46 46 33 64 55 68 52 57 53 39 70 65 6e 56 42 4f 48 70 54 53 6d 31 6a 51 57 35 6d 62 Data Ascii: {"type":"hsw","req":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJmIjowLCJzIjoyLCJ0IjoidyIsImQiOiJiRzNtNGw3Lzg2VzgxQkt3ZmJjYzBEUjhCM083blZsYjlTSThxcEZtbUEyVTRFdzFqdXJhZmxSZFA0NysrVno5NHJDOFRwbWR3UTZnZUU0bTY4VzZDb2R4L3dwNExTdFkrWFF3dUhRWS9penVBOHpTSm1jQW5mb
2025-04-01 17:50:58 UTC	16384	OUT	Data Raw: 39 70 a7 16 fb 41 98 c1 43 b2 74 e9 c7 98 25 25 29 4c 01 e2 91 d8 50 66 18 f4 7a 21 f8 6a c2 a2 1b 0a 6b 8d 77 78 44 b1 08 9b 05 7e d2 bc 3c f0 aa 94 78 7e ea 02 3a 20 3e b3 5e d8 6c 5c 7a fd 1d 8c f2 25 6d 4b d8 b2 3b 76 60 44 16 a1 19 b0 36 dd 82 55 86 33 8c af 7b 90 91 e0 75 8a f1 fa f8 31 aa 9f 61 b6 44 9e af 8d 44 8a 10 f7 aa ac 84 02 6c 58 ec 7c 84 bd d3 8a d2 22 8e 5a 60 0b 4d 89 75 5e bf 57 02 42 f1 0e 03 aa c4 66 ab 6a b3 ae 10 1a ed 3d 12 98 48 d3 07 91 1d 26 d8 c9 4c 5d 96 f2 04 e9 61 91 39 4f 0e ef e8 93 ad ad 40 6d da a8 b8 da 40 21 b4 07 bb b8 ef 5a 50 77 79 f8 47 b3 df f9 23 2d 20 6a e0 c7 bc 9d fd fb 0e dd f0 3a 31 8c 09 90 98 74 7b 09 0b fc bb 3d 30 63 15 2c 80 83 d0 8c 41 2f 13 0f 3e 6e d6 22 29 43 36 8b d0 7a 8a 54 8b aa 53 20 4f a8 e8 Data Ascii: 9pACt%%)LPfz!jkwxD~<x~: >^l\z%mK;v`D6U3{u1aDDlX\|"Z`Mu^WBfj=H&L]a9O@m@!ZPwyG#- j:1t{=0c,A/>n")C6zTS O
2025-04-01 17:50:58 UTC	128	OUT	Data Raw: a8 82 6d 8c c8 83 90 2d 45 16 5a fe ff 65 84 a9 96 70 c7 2d 8d 2a 77 c3 78 75 c7 3d ca 7d ae 43 df 0a 94 78 4e 1c fa c2 9a 54 1a 5e ae 49 56 85 8b e5 49 e0 fb e1 2c 9b fd 49 a0 d1 b9 5f 21 bb c2 42 0e d0 c9 a3 ce 61 89 7b e4 bb 1d 73 f7 e6 ae d0 dd fa 0f 21 c9 1d 07 66 ca 3a 18 77 1e 00 52 35 33 27 29 27 c5 f3 47 7a 65 a2 a0 3a 36 6f f8 b9 55 71 aa 9f e4 01 81 48 89 74 08 7b 7b f2 Data Ascii: m-EZep-*wxu=}CxNT^IVI,I_!Ba{s!f:wR53')'Gze:6oUqHt{{
2025-04-01 17:50:59 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:50:59 GMT Content-Type: application/octet-stream Content-Length: 2537 Connection: close CF-Ray: 9299ee923d131aea-EWR CF-Cache-Status: DYNAMIC Access-Control-Allow-Origin: https://newassets.hcaptcha.com Set-Cookie: __cflb=0H28vk2VKwPbLoawFincekpozDKK5F2cZGHGCmn2mcy; SameSite=Lax; path=/; expires=Tue, 01-Apr-25 18:20:59 GMT; HttpOnly Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin access-control-allow-credentials: true x-content-type-options: nosniff Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-04-01 17:50:59 UTC	772	IN	Data Raw: 15 a2 bc c3 fd 88 0b b3 80 f3 61 63 58 04 0a 21 e1 bc 14 41 4a 3f a8 97 0c 14 aa ad 8a 27 0f 7d 5a 92 f8 ac 4c f0 b2 8a a0 7a 7e ea 6f fe b0 8b 86 7e c5 20 45 6c 62 75 e6 99 f1 4a aa 3a a1 ae 22 eb 9d 3d 1b 4b b4 3d 65 db 14 62 91 c9 42 71 f5 36 7f 69 b5 83 d5 47 a0 3c 63 c0 be b8 0f c9 d8 f2 ea e8 16 e8 3b be ae 6b 60 11 71 71 23 38 74 02 07 d9 b3 56 6f ca 21 72 73 a4 0e e9 af 70 d2 b2 84 7f a8 c5 8b 30 02 4b 7b 45 1c 08 cc c7 db cd bf 3b be 69 06 ec 36 ab db e1 bf 94 2a 03 89 9c 03 21 80 d8 ea 65 e6 dd dd 37 5e 39 1a 00 13 59 53 8d 4b c2 af c0 ed e0 7d 81 a0 84 47 c3 8d ea aa e4 be b7 56 5b 00 da 41 c5 3b 3c 00 f7 31 a9 27 6e 2a c3 c6 00 6f 60 86 26 a7 67 9c 0c 18 cb 2b 6c 38 81 c9 1e 9c 52 a3 46 66 0c 06 17 8f c9 35 e0 50 62 8e 27 95 d4 61 fc de 42 b0 Data Ascii: acX!AJ?'}ZLz~o~ ElbuJ:"=K=ebBq6iG<c;k`qq#8tVo!rsp0K{E;i6!e7^9YSK}GV[A;<1'no`&g+l8RFf5Pb'aB
2025-04-01 17:50:59 UTC	1369	IN	Data Raw: ed f3 0b 6d 42 a7 ae 80 a5 41 3f be 4b 95 3b fc f6 f4 d5 1c c0 ac 35 80 5c 40 89 21 b8 07 fd 64 3c 8b bb 2f ce c6 f6 2a 5c 07 88 e6 91 b7 6e 89 64 18 58 69 27 bc 84 bb 81 f6 11 75 e3 5e c5 25 c9 83 0f f8 e7 55 66 8f 94 13 51 aa 0f d8 9f 8f 63 e6 fa f6 19 bc 70 a6 cd 92 a6 22 4e be 12 80 23 40 f9 b9 69 94 82 fd dc ce ab ad a7 4c 7b c4 b2 4e da b2 2e 6e cc 33 ed e2 45 e2 65 c5 73 ad 9d 87 15 f8 b5 1e e2 ac a9 68 80 48 9d ec 6c 21 47 e6 ba 07 e5 84 c9 29 9f 4e 8e f0 67 f0 fd 4e a3 83 d6 db 1b 49 47 4f 6a 00 19 18 35 b0 5c 54 27 e6 bf de 1d 78 61 0d 1f ac 9d 80 f5 b2 a3 bc c4 05 b3 d3 91 bb ee 01 dc 65 b1 07 32 0a f8 fe 94 fb 8b bf 3d b6 57 c5 19 ea 13 53 47 ef 84 28 8d 9e 6d 2f 0e ba 52 39 a7 79 7a e2 6f 74 9b 9d a1 c3 6d 8b 59 5e df b9 74 47 87 06 95 97 7f Data Ascii: mBA?K;5\@!d</*\ndXi'u^%UfQcp"N#@iL{N.n3EeshHl!G)NgNIGOj5\T'xae2=WSG(m/R9yzotmY^tG
2025-04-01 17:50:59 UTC	396	IN	Data Raw: 05 f3 ed 73 aa ff 33 df 32 26 eb 9f 54 30 83 8a 86 5e 39 63 47 26 18 57 93 80 d6 f5 18 81 9e 1c 4c 6b 91 b2 90 d8 52 21 91 b1 d3 89 01 90 34 93 c5 5d 07 a0 40 ef 8d a5 2d cd c5 98 a8 4b ce c6 8c 35 69 5d ed e0 fc d4 8c 95 8e 95 5e 0b 40 64 fc c5 eb cf 35 db bd c1 ad a3 26 42 b1 d6 97 7a 2e 75 ac a5 24 9a c6 ff 0b f3 5e 60 f3 30 d3 19 b3 35 a6 b6 fa fc 36 ad c0 e0 28 81 e5 1d a4 ba 8d b2 72 40 58 02 90 5a 3d 71 50 50 76 df 6f 29 6d 56 7d a7 43 f0 6a 30 62 0c 81 ea c5 cd 1f 20 56 b3 76 8d d4 68 cb c9 45 ce 8d b9 8b df 22 6e 33 fa f1 02 db 79 80 56 6e d9 67 4e 2d 1e 87 7b ae 3d 18 f2 ec 41 1c 65 48 e2 7c f7 61 bb 4a 93 7b cc df 4d 6e 1d 1f d3 da 59 42 1d 80 2f ef b0 3c e7 09 e5 0d 08 f6 41 48 5a 55 f9 a7 56 e4 12 66 84 36 21 aa e0 24 e1 8f 71 5d fb 54 c9 1d Data Ascii: s32&T0^9cG&WLkR!4]@-K5i]^@d5&Bz.u$^`056(r@XZ=qPPvo)mV}Cj0b VvhE"n3yVngN-{=AeH\|aJ{MnYB/<AHZUVf6!$q]T

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:00 UTC	427	OUT	GET /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:00 UTC	535	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 01 Apr 2025 17:51:00 GMT Content-Type: text/plain Content-Length: 18 Connection: close Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ee9c2ac541d3-EWR alt-svc: h3=":443"; ma=86400
2025-04-01 17:51:00 UTC	18	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 Data Ascii: Method Not Allowed

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://maltese.com.br/share-sensitive-files-securely/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
https://maltese.com.br/share-sensitive-files-securely/

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:00 UTC	764	OUT	GET /tip/e454c21f7daa31f58076a121c61ae2da8d3eb1d8e5613c26e750940cd7321432/aa8937ecb6cea3590bf50a9d81c08c2c0de662e52eb2a5670815c528fca9127f.jpg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive Origin: https://newassets.hcaptcha.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:00 UTC	558	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:00 GMT Content-Type: image/jpeg Content-Length: 95101 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri CF-Cache-Status: REVALIDATED Expires: Wed, 02 Apr 2025 17:51:00 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ee9d28c44205-EWR
2025-04-01 17:51:00 UTC	811	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 4a 01 e0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCJ}!1AQa"q2
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: fd 9c bc be f5 fe 61 f6 4d 4f fe 83 6f ff 00 82 bf fe b5 1f 57 87 65 f8 07 b3 97 97 de bf cc 3e c9 a9 ff 00 d0 6d ff 00 f0 57 ff 00 d6 a3 ea f0 ec bf 00 f6 72 f2 fb d7 f9 9c ff 00 8c 2c f5 24 d5 f4 87 1a d3 e0 dc f3 ff 00 12 be bf 34 7e d5 51 c3 c3 b2 fc 0b a7 09 72 4b 6f bd 7f 99 b3 76 da 95 ae 9b 2d fd b6 b8 b2 08 98 2b 27 d8 95 79 c8 18 e7 eb 59 ca 8d 34 f5 8a fc 0c 5a 71 23 91 66 b0 b5 d3 2d 2c e4 44 6b 82 44 92 18 55 8f 24 7a 8e d9 a9 8f 2d 45 76 82 49 26 62 f8 3e 79 60 82 fe ee ef c4 e3 8b ac 31 fe cd 07 6f 3e c3 df f4 ae 2c 2d 2a 50 8b 9c a2 b5 f4 34 9c 25 a2 60 6d 3c 4f e3 4b 8d b1 6b 52 5a e9 e8 df 33 8d 2c 6e 93 f4 a5 f5 79 e3 65 b2 8d 3f 91 3e ce 4b b7 de 8d fb 1d 22 e7 4e b7 5b 3b 4d 58 a2 2f 4f f8 95 ff 00 f5 ab be 9e 0a 8d 38 f2 c5 2f c0 7e Data Ascii: aMOoWe>mWr,$4~QrKov-+'yY4Zq#f-,DkDU$z-EvI&b>y`1o>,-*P4%`m<OKkRZ3,nye?>K"N[;MX/O8/~
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: d5 74 bf 04 e9 da 35 b8 b6 d2 d6 de 04 5f e1 8f 45 5f f0 ac 1d 25 37 76 97 e0 71 ca 12 97 c4 d7 de bf cc c1 b8 f0 fd ce b7 e2 dd 42 cc 6a a1 56 3b 3d b1 7f c4 ab ee b7 cb ed 59 53 a3 0f 6f cd 65 f8 1d 31 52 a7 4e 32 ba fb d7 f9 97 fc 0f f6 fb cd 10 41 36 ab fb db 57 f2 9c b6 91 ff 00 7c f6 ff 00 3b 6b a6 58 68 73 6c bf 02 71 14 ea 46 56 bf e2 bf cc d7 7d 2a ed ba ea 60 fb 1d 27 ff 00 ad 53 f5 78 3e 8b f0 39 f9 66 fa fe 2b fc ce 57 c5 da 32 2e b1 67 73 15 d5 bc 82 19 71 2a 2e 9c b1 f3 90 08 e7 eb 5c 95 a0 a3 5d 24 91 ac 60 a3 42 57 2e de 78 2b 49 8a c3 4d b2 b2 df 6e 6e 89 0e f1 ed 6e ac 31 f7 fd 33 5b 27 19 ab b4 8e 69 af 7b 53 1b 56 f8 41 e2 3b 5b 97 bd f0 4f c4 59 21 b8 89 b2 f6 f2 69 81 a3 27 f2 ff 00 d9 69 3c 35 38 be 68 a4 be e3 78 ba 91 d2 5d 7c c7 Data Ascii: t5_E_%7vqBjV;=YSoe1RN2A6W\|;kXhslqFV}`'Sx>9f+W2.gsq.\]$`BW.x+IMnnn13['i{SVA;[OY!i'i<58hx]\|
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: 9d 51 77 7f 2a de 84 30 53 e6 bd 55 f7 09 73 2e 85 89 fe 1c eb 16 92 7d ab c3 da 96 ab 6a ff 00 dd 6d 59 59 7f 95 70 7b 1c 24 7e 1a eb ee 31 e5 97 d9 44 7f 6c f8 8b a1 9c 6a fa 3e a1 75 1a ff 00 cb 6b 7d 51 7f c2 9f 3d 08 bb 3a ab ee 1f 35 43 3b c5 1a e2 ea 97 5a 57 93 2e a1 13 ad d7 fa b9 b5 35 5f ee fb 57 5d 27 84 7c df bc fc 19 74 e4 e5 d0 d8 d7 7c 55 7f a7 b3 59 e8 f0 5f dd dc 85 3b 84 7a 9a b2 a0 1d 7b 56 b4 70 b8 5a b2 f7 aa ab 7a 11 a7 62 ad af 85 b5 bd 62 f3 4c d5 fc 49 e2 4b e9 16 e6 5d c6 c9 ae b7 2a e1 80 23 8e a3 af dd a8 af 3a 58 79 f2 52 43 b2 b0 ed 66 d2 cb c2 97 17 1a 95 ad b2 43 6d 3d e3 45 36 3d 37 2f de ff 00 c7 7f ef 9a f3 b1 3c ff 00 58 83 94 ba 04 e2 fa 98 9a 7a ae bd ab e8 ba 4a 7f ab 17 c6 49 ff 00 24 ff 00 e2 bf f1 ea f4 94 5d 2a Data Ascii: Qw0SUs.}jmYYp{$~1Dlj>uk}Q=:5C;ZW.5_W]'\|t\|UY_;z{VpZzbbLIK]#:XyRCfCm=E6=7/<XzJI$]*
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: 40 fa 74 15 c9 04 b9 4f 4b 13 56 ac 6b b4 9e 87 9f fc 79 f8 ef 0f c1 61 6b a5 a7 86 2d 75 4d 6b 54 25 74 ed 36 de 29 40 76 e0 7c cf b4 67 ef 2f ca bb 9a bc 0c f3 88 70 d9 3a 8d 25 4d d4 a9 53 e1 8d 8c e5 57 17 18 dd 5d 96 7c 6f e0 4f 00 7c 5b d1 f4 7d 53 e2 6f 87 34 a8 cd 9b ad dc 76 b7 cf 22 bc 2c cb f3 42 fb 4f dd fb bb 97 fd 95 ad f1 99 6e 5d 9d d2 a5 2c 55 3f 87 de e5 b7 fe 4b 23 5f 65 8d 9a eb f7 9a d2 f8 bb c3 7e 14 d1 a1 87 4c b6 d2 8d ac 4d e4 c5 05 8d bb 81 10 51 9d a3 77 cb da bd 7a 50 a4 a1 c9 4e 1c b1 f4 26 a4 b1 30 95 a4 da 64 5e 26 d4 ec bc 59 6d ad 78 6c 78 52 7b ab 1b dd 2e 48 6e 22 cb 22 ba 32 8d cb f2 7f f1 55 13 c3 52 c5 27 46 a6 b1 91 a5 55 27 84 8b 6e fa ff 00 99 e6 9f 0c 3e 15 e8 3f 0a 3c 4d a7 58 e8 d6 d7 70 1b ed 40 3f d9 e7 ba 2f Data Ascii: @tOKVkyak-uMkT%t6)@v\|g/p:%MSW]\|oO\|[}So4v",BOn],U?K#_e~LMQwzPN&0d^&YmxlxR{.Hn""2UR'FU'n>?<MXp@?/
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: b1 f0 96 ad e2 c9 74 69 ef ae e5 fb 29 77 0c ee ff 00 eb 32 40 cf eb 9a ed c5 4e d5 1a 5e 5f a1 e5 3a f2 92 e5 82 b1 57 e2 47 80 ac 3c 17 e1 db 8b 9f 06 59 ac 66 5d 50 f9 d1 6c cb 48 bb 97 ff 00 8a fb b5 d3 4e a3 a9 7f 69 d9 1d 74 eb 4a ad bd a1 e8 5a 66 a5 6b a9 d8 68 92 5b 30 ca cd b5 d0 75 8d b7 2d 78 fe f3 d5 f9 fe 67 2d 48 f2 d4 2f 6a 1f f2 0f d5 87 fd 37 4f fd 0c 56 b5 be 08 ff 00 5d 8e 99 c7 dc 8f f5 d1 19 3a 7e 57 e2 ad 8f 3f 7b 41 4f e5 56 bf dc 9f a9 cd 53 e3 5f d7 46 6c 90 2d f4 8b 69 2d ed 20 79 6e 2e 44 64 cc a4 8e 49 03 a7 23 a0 ae 0a 6a 3c b7 b1 df 89 ab 56 35 da 4f 43 9c d2 be d6 be 38 d4 de 78 f4 a5 28 bb 30 12 42 7f 87 ae 3e 94 f9 e0 a4 d7 e8 6a be b7 52 11 94 5b 37 1e e6 6c 8f 97 4b e9 ff 00 3c a5 ff 00 0a d6 9c e9 ff 00 48 e6 a9 4b 1b Data Ascii: ti)w2@N^_:WG<Yf]PlHNitJZfkh[0u-xg-H/j7OV]:~W?{AOVS_Fl-i- yn.DdI#j<V5OC8x(0B>jR[7lK<HK
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: 51 75 04 ff 00 81 7c cd 58 c3 e1 3d 1c 44 5c 6b b8 af 2f c8 bd 3b 5c a4 fa 93 59 ee f3 42 c5 b3 60 c9 e9 5a d0 50 75 bd ed 82 bd fe ad 0b 79 fe 63 2c 2e b5 59 af ed d6 51 74 23 d8 7c f1 34 01 57 76 d3 d0 81 d3 3e b5 d7 52 14 63 4e 56 b5 fa 59 9c d6 bb 46 6e a1 ff 00 22 d8 ff 00 af ef fd 90 d7 1d 1f e1 1d b8 ff 00 e2 af 43 33 c5 eb e7 7c 41 5b 6f ee d9 33 ff 00 e3 ab ff 00 c4 d6 b4 a5 cd 8b 8f f5 d8 e9 e6 e6 c0 47 d7 fc cc ff 00 18 6a 1e 0b d4 ec b4 9f 87 5e 25 d4 ed 0c da c5 b5 c2 45 a6 cb 73 b1 ee a3 c8 56 db f3 6e 6e bf c3 5d 78 b6 af 2f 97 e4 8e 0a ae 84 a3 ec 6a 3f 8b ec 8b f0 cb c1 3e 14 f0 df c1 db ff 00 07 58 e8 d1 36 96 d7 72 c5 2d a4 cb e6 2c 88 ef b8 ab 6e fb db b7 1f bd 5f 31 8b c2 4b 1b 87 55 23 f1 c5 23 a3 0f 87 c3 e1 69 2a 4a 3e e5 97 e4 27 Data Ascii: Qu\|X=D\k/;\YB`ZPuyc,.YQt#\|4Wv>RcNVYFn"C3\|A[o3Gj^%EsVnn]x/j?>X6r-,n_1KU##i*J>'
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: 4d c7 ed 32 5d 36 e7 cf f6 7f e0 9d 55 ae 9e 34 af 08 5f 58 8f bc b7 67 73 7f 79 b7 2e ea 5c 8e 31 51 f2 47 3d 79 ba 93 52 7d 8b 1a 87 fa cd 17 fe ba 0f e6 95 9d 1f 83 e6 ff 00 36 44 fe 21 35 1f f9 07 ea bf f5 dd 3f f4 31 5d 95 7e 08 ff 00 5d 8d 6a fc 11 fe ba 22 c6 9d ff 00 21 5b 2f fb 05 ad 38 ff 00 ba 7c ff 00 c8 e3 a9 fc 58 fa fe 8c e7 bc 11 ff 00 20 68 bf ec 34 9f fa 13 57 91 97 fc 32 3d 1c 77 f1 df cb f2 3a 7b 93 3b 3e a4 2d 51 8b e2 3d 8a 17 27 a7 a5 77 51 50 75 fd ed 8c 6b df ea d0 f9 fe 66 02 f8 53 57 7d 5e 1b 9d 1a f6 f6 c8 b2 1f 39 64 80 2a 6e da 7a 10 3a 67 d6 b8 f3 3c 35 38 61 25 52 16 bc 76 b3 7d fb 1a 61 ea 73 55 51 91 89 ab 68 d1 59 68 8b ac f8 c7 5c f3 d2 3b ff 00 dc c5 fc 3f 70 ff 00 0f ff 00 63 53 86 a3 ed a3 19 ca 5c c7 a1 8d e7 95 55 Data Ascii: M2]6U4_Xgsy.\1QG=yR}6D!5?1]~]j"![/8\|X h4W2=w:{;>-Q='wQPukfSW}^9d*nz:g<58a%Rv}asUQhYh\;?pcS\U
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: d4 a4 46 3b 07 59 e2 d5 68 26 ce c3 5b d5 a5 f1 2d dc 1e 1f d2 ed ad 03 bc 48 d7 97 03 51 23 6a 85 fb bc 0a f5 61 46 84 7f 7b 32 23 53 1b 08 f2 a8 3b 7a 2f f3 3a 0d 3f 4c b1 d3 6c d2 ce de c2 d3 6c 7d ce a4 72 df ed 74 ae 57 1a 53 95 dd 8c d5 6c 7a 56 50 7f 72 ff 00 33 9e f8 af 6e d7 7a 1d 95 a5 ba da 42 13 52 57 27 ed bb b2 76 11 dc 56 b4 bd 9c 74 4d 17 07 8a a9 77 2a 72 fb 97 f9 9d 54 f2 47 2d f5 fb c4 e1 94 d9 36 19 4e 41 f9 45 65 41 a7 8a 5e ab f4 34 aa 9c 70 71 4d 75 ff 00 32 a0 6f 2e 2d 15 df ee f9 cf ff 00 a1 8a df 15 fc 57 f2 fd 0e 15 f0 9c 57 8c e7 8a ff 00 c2 fa ff 00 88 a7 91 44 7f 6f 10 c0 cd ee eb ff 00 b2 af fe 3d 5e b2 8f b3 e4 a5 1e c8 d2 51 5c d1 6b b7 fc 13 43 5b f1 1f 87 e5 d0 b4 3d 2a e3 7c ce 70 aa 90 c7 92 ad 95 ef 5e 3a c3 ba c9 dc Data Ascii: F;Yh&[-HQ#jaF{2#S;z/:?Lll}rtWSlzVPr3nzBRW'vVtMwrTG-6NAEeA^4pqMu2o.-WWDo=^Q\kC[=\|p^:
2025-04-01 17:51:00 UTC	1369	IN	Data Raw: f3 a9 b8 5d db 4a 96 43 ff 00 a3 1b f8 aa 38 87 27 96 79 81 8d 18 be 5f 7b 9b ee b1 55 a9 c2 b5 38 c5 fb af 6f c0 f4 6b 0f 1c 5c 69 30 59 9d 65 66 86 5b 7b 28 e0 79 a2 b5 2e 19 87 e1 8f fc 7a ae 6d 52 7c 95 63 7f 9d 86 e9 29 6a a4 6a d9 78 e7 c2 17 a3 8d 7a d6 33 e9 3e 96 cb 5c ff 00 ec bf cb f8 ff 00 c0 22 5f 59 7f f2 f5 fd e8 d0 5d 4f 44 75 de 9a b5 a1 5f ef 2e 9a 69 de 87 f2 7e 3f f0 05 cd 88 ff 00 9f 92 fc 3f c8 e6 6f fc 45 e1 bb 2f 1a 4f 7d a8 eb 96 90 c3 69 67 b9 a4 93 4f 3b 57 e5 ff 00 ec a9 55 ad 86 a5 47 99 d3 bf cf fe 01 1c f8 8f ac 7f 11 ff 00 5f 23 e4 df da a7 f6 95 ff 00 85 b9 ad 4b e1 4d 1b 57 58 74 0b 13 e6 5a a3 69 4e 0d e4 8b f2 b3 b7 4f 95 7e 6d bf ee d7 e3 1c 57 c4 14 73 7a 9e c6 94 3f 75 1f 3f 8b fb dd 76 14 f1 15 ea 7c 33 66 27 c1 ef Data Ascii: ]JC8'y_{U8ok\i0Yef[{(y.zmR\|c)jjxz3>\"_Y]ODu_.i~??oE/O}igO;WUG_#KMWXtZiNO~mWsz?u?v\|3f'

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:01 UTC	519	OUT	GET /tip/e454c21f7daa31f58076a121c61ae2da8d3eb1d8e5613c26e750940cd7321432/aa8937ecb6cea3590bf50a9d81c08c2c0de662e52eb2a5670815c528fca9127f.jpg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:01 UTC	536	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:01 GMT Content-Type: image/jpeg Content-Length: 95101 Connection: close Access-Control-Allow-Methods: GET, HEAD Access-Control-Max-Age: 3000 Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 CF-Cache-Status: MISS Expires: Wed, 02 Apr 2025 17:51:01 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299eea37e43423e-EWR
2025-04-01 17:51:01 UTC	833	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 4a 01 e0 03 01 11 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFCCJ}!1AQa"q2
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: 65 f8 07 b3 97 97 de bf cc 3e c9 a9 ff 00 d0 6d ff 00 f0 57 ff 00 d6 a3 ea f0 ec bf 00 f6 72 f2 fb d7 f9 9c ff 00 8c 2c f5 24 d5 f4 87 1a d3 e0 dc f3 ff 00 12 be bf 34 7e d5 51 c3 c3 b2 fc 0b a7 09 72 4b 6f bd 7f 99 b3 76 da 95 ae 9b 2d fd b6 b8 b2 08 98 2b 27 d8 95 79 c8 18 e7 eb 59 ca 8d 34 f5 8a fc 0c 5a 71 23 91 66 b0 b5 d3 2d 2c e4 44 6b 82 44 92 18 55 8f 24 7a 8e d9 a9 8f 2d 45 76 82 49 26 62 f8 3e 79 60 82 fe ee ef c4 e3 8b ac 31 fe cd 07 6f 3e c3 df f4 ae 2c 2d 2a 50 8b 9c a2 b5 f4 34 9c 25 a2 60 6d 3c 4f e3 4b 8d b1 6b 52 5a e9 e8 df 33 8d 2c 6e 93 f4 a5 f5 79 e3 65 b2 8d 3f 91 3e ce 4b b7 de 8d fb 1d 22 e7 4e b7 5b 3b 4d 58 a2 2f 4f f8 95 ff 00 f5 ab be 9e 0a 8d 38 f2 c5 2f c0 7e ce 5e 5f 7a ff 00 32 57 83 50 82 36 9a 6d 78 aa 2a 6e 76 6d 2f ee Data Ascii: e>mWr,$4~QrKov-+'yY4Zq#f-,DkDU$z-EvI&b>y`1o>,-P4%`m<OKkRZ3,nye?>K"N[;MX/O8/~^_z2WP6mxnvm/
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: 37 76 97 e0 71 ca 12 97 c4 d7 de bf cc c1 b8 f0 fd ce b7 e2 dd 42 cc 6a a1 56 3b 3d b1 7f c4 ab ee b7 cb ed 59 53 a3 0f 6f cd 65 f8 1d 31 52 a7 4e 32 ba fb d7 f9 97 fc 0f f6 fb cd 10 41 36 ab fb db 57 f2 9c b6 91 ff 00 7c f6 ff 00 3b 6b a6 58 68 73 6c bf 02 71 14 ea 46 56 bf e2 bf cc d7 7d 2a ed ba ea 60 fb 1d 27 ff 00 ad 53 f5 78 3e 8b f0 39 f9 66 fa fe 2b fc ce 57 c5 da 32 2e b1 67 73 15 d5 bc 82 19 71 2a 2e 9c b1 f3 90 08 e7 eb 5c 95 a0 a3 5d 24 91 ac 60 a3 42 57 2e de 78 2b 49 8a c3 4d b2 b2 df 6e 6e 89 0e f1 ed 6e ac 31 f7 fd 33 5b 27 19 ab b4 8e 69 af 7b 53 1b 56 f8 41 e2 3b 5b 97 bd f0 4f c4 59 21 b8 89 b2 f6 f2 69 81 a3 27 f2 ff 00 d9 69 3c 35 38 be 68 a4 be e3 78 ba 91 d2 5d 7c c7 69 1e 2f f1 ce 9d 3f f6 47 89 a1 53 3a fc b9 8f 4a 0b bb f4 a7 4d Data Ascii: 7vqBjV;=YSoe1RN2A6W\|;kXhslqFV}`'Sx>9f+W2.gsq.\]$`BW.x+IMnnn13['i{SVA;[OY!i'i<58hx]\|i/?GS:JM
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: 92 7d ab c3 da 96 ab 6a ff 00 dd 6d 59 59 7f 95 70 7b 1c 24 7e 1a eb ee 31 e5 97 d9 44 7f 6c f8 8b a1 9c 6a fa 3e a1 75 1a ff 00 cb 6b 7d 51 7f c2 9f 3d 08 bb 3a ab ee 1f 35 43 3b c5 1a e2 ea 97 5a 57 93 2e a1 13 ad d7 fa b9 b5 35 5f ee fb 57 5d 27 84 7c df bc fc 19 74 e4 e5 d0 d8 d7 7c 55 7f a7 b3 59 e8 f0 5f dd dc 85 3b 84 7a 9a b2 a0 1d 7b 56 b4 70 b8 5a b2 f7 aa ab 7a 11 a7 62 ad af 85 b5 bd 62 f3 4c d5 fc 49 e2 4b e9 16 e6 5d c6 c9 ae b7 2a e1 80 23 8e a3 af dd a8 af 3a 58 79 f2 52 43 b2 b0 ed 66 d2 cb c2 97 17 1a 95 ad b2 43 6d 3d e3 45 36 3d 37 2f de ff 00 c7 7f ef 9a f3 b1 3c ff 00 58 83 94 ba 04 e2 fa 98 9a 7a ae bd ab e8 ba 4a 7f ab 17 c6 49 ff 00 24 ff 00 e2 bf f1 ea f4 94 5d 2a 1c cf cf f3 66 13 8f 34 f9 4f 42 b9 96 4b 5b 3d 5a 68 24 64 61 70 Data Ascii: }jmYYp{$~1Dlj>uk}Q=:5C;ZW.5_W]'\|t\|UY_;z{VpZzbbLIK]#:XyRCfCm=E6=7/<XzJI$]f4OBK[=Zh$dap
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: c1 61 6b a5 a7 86 2d 75 4d 6b 54 25 74 ed 36 de 29 40 76 e0 7c cf b4 67 ef 2f ca bb 9a bc 0c f3 88 70 d9 3a 8d 25 4d d4 a9 53 e1 8d 8c e5 57 17 18 dd 5d 96 7c 6f e0 4f 00 7c 5b d1 f4 7d 53 e2 6f 87 34 a8 cd 9b ad dc 76 b7 cf 22 bc 2c cb f3 42 fb 4f dd fb bb 97 fd 95 ad f1 99 6e 5d 9d d2 a5 2c 55 3f 87 de e5 b7 fe 4b 23 5f 65 8d 9a eb f7 9a d2 f8 bb c3 7e 14 d1 a1 87 4c b6 d2 8d ac 4d e4 c5 05 8d bb 81 10 51 9d a3 77 cb da bd 7a 50 a4 a1 c9 4e 1c b1 f4 26 a4 b1 30 95 a4 da 64 5e 26 d4 ec bc 59 6d ad 78 6c 78 52 7b ab 1b dd 2e 48 6e 22 cb 22 ba 32 8d cb f2 7f f1 55 13 c3 52 c5 27 46 a6 b1 91 a5 55 27 84 8b 6e fa ff 00 99 e6 9f 0c 3e 15 e8 3f 0a 3c 4d a7 58 e8 d6 d7 70 1b ed 40 3f d9 e7 ba 2f 1c 68 9b 02 ac 7f 81 e7 77 cd f2 8a f3 b2 ec 83 07 92 d5 a9 2a 12 Data Ascii: ak-uMkT%t6)@v\|g/p:%MSW]\|oO\|[}So4v",BOn],U?K#_e~LMQwzPN&0d^&YmxlxR{.Hn""2UR'FU'n>?<MXp@?/hw*
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: eb 9a ed c5 4e d5 1a 5e 5f a1 e5 3a f2 92 e5 82 b1 57 e2 47 80 ac 3c 17 e1 db 8b 9f 06 59 ac 66 5d 50 f9 d1 6c cb 48 bb 97 ff 00 8a fb b5 d3 4e a3 a9 7f 69 d9 1d 74 eb 4a ad bd a1 e8 5a 66 a5 6b a9 d8 68 92 5b 30 ca cd b5 d0 75 8d b7 2d 78 fe f3 d5 f9 fe 67 2d 48 f2 d4 2f 6a 1f f2 0f d5 87 fd 37 4f fd 0c 56 b5 be 08 ff 00 5d 8e 99 c7 dc 8f f5 d1 19 3a 7e 57 e2 ad 8f 3f 7b 41 4f e5 56 bf dc 9f a9 cd 53 e3 5f d7 46 6c 90 2d f4 8b 69 2d ed 20 79 6e 2e 44 64 cc a4 8e 49 03 a7 23 a0 ae 0a 6a 3c b7 b1 df 89 ab 56 35 da 4f 43 9c d2 be d6 be 38 d4 de 78 f4 a5 28 bb 30 12 42 7f 87 ae 3e 94 f9 e0 a4 d7 e8 6a be b7 52 11 94 5b 37 1e e6 6c 8f 97 4b e9 ff 00 3c a5 ff 00 0a d6 9c e9 ff 00 48 e6 a9 4b 1b e7 f7 9c cf 88 ee ee b4 3f 13 e9 fa d7 d8 f4 e6 82 e5 fe ce c5 23 Data Ascii: N^_:WG<Yf]PlHNitJZfkh[0u-xg-H/j7OV]:~W?{AOVS_Fl-i- yn.DdI#j<V5OC8x(0B>jR[7lK<HK?#
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: 5c a4 fa 93 59 ee f3 42 c5 b3 60 c9 e9 5a d0 50 75 bd ed 82 bd fe ad 0b 79 fe 63 2c 2e b5 59 af ed d6 51 74 23 d8 7c f1 34 01 57 76 d3 d0 81 d3 3e b5 d7 52 14 63 4e 56 b5 fa 59 9c d6 bb 46 6e a1 ff 00 22 d8 ff 00 af ef fd 90 d7 1d 1f e1 1d b8 ff 00 e2 af 43 33 c5 eb e7 7c 41 5b 6f ee d9 33 ff 00 e3 ab ff 00 c4 d6 b4 a5 cd 8b 8f f5 d8 e9 e6 e6 c0 47 d7 fc cc ff 00 18 6a 1e 0b d4 ec b4 9f 87 5e 25 d4 ed 0c da c5 b5 c2 45 a6 cb 73 b1 ee a3 c8 56 db f3 6e 6e bf c3 5d 78 b6 af 2f 97 e4 8e 0a ae 84 a3 ec 6a 3f 8b ec 8b f0 cb c1 3e 14 f0 df c1 db ff 00 07 58 e8 d1 36 96 d7 72 c5 2d a4 cb e6 2c 88 ef b8 ab 6e fb db b7 1f bd 5f 31 8b c2 4b 1b 87 55 23 f1 c5 23 a3 0f 87 c3 e1 69 2a 4a 3e e5 97 e4 27 81 7e 00 7c 3b f8 5d e2 eb 5f 1a f8 47 4c 96 d6 eb 54 41 1c b0 f9 Data Ascii: \YB`ZPuyc,.YQt#\|4Wv>RcNVYFn"C3\|A[o3Gj^%EsVnn]x/j?>X6r-,n_1KU##i*J>'~\|;]_GLTA
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: b7 67 73 7f 79 b7 2e ea 5c 8e 31 51 f2 47 3d 79 ba 93 52 7d 8b 1a 87 fa cd 17 fe ba 0f e6 95 9d 1f 83 e6 ff 00 36 44 fe 21 35 1f f9 07 ea bf f5 dd 3f f4 31 5d 95 7e 08 ff 00 5d 8d 6a fc 11 fe ba 22 c6 9d ff 00 21 5b 2f fb 05 ad 38 ff 00 ba 7c ff 00 c8 e3 a9 fc 58 fa fe 8c e7 bc 11 ff 00 20 68 bf ec 34 9f fa 13 57 91 97 fc 32 3d 1c 77 f1 df cb f2 3a 7b 93 3b 3e a4 2d 51 8b e2 3d 8a 17 27 a7 a5 77 51 50 75 fd ed 8c 6b df ea d0 f9 fe 66 02 f8 53 57 7d 5e 1b 9d 1a f6 f6 c8 b2 1f 39 64 80 2a 6e da 7a 10 3a 67 d6 b8 f3 3c 35 38 61 25 52 16 bc 76 b3 7d fb 1a 61 ea 73 55 51 91 89 ab 68 d1 59 68 8b ac f8 c7 5c f3 d2 3b ff 00 dc c5 fc 3f 70 ff 00 0f ff 00 63 53 86 a3 ed a3 19 ca 5c c7 a1 8d e7 95 55 18 47 a7 f9 99 df 12 f4 9d 4b e2 72 ea bf d8 96 3f 65 5b 7b 16 75 Data Ascii: gsy.\1QG=yR}6D!5?1]~]j"![/8\|X h4W2=w:{;>-Q='wQPukfSW}^9d*nz:g<58a%Rv}asUQhYh\;?pcS\UGKr?e[{u
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: ad 03 bc 48 d7 97 03 51 23 6a 85 fb bc 0a f5 61 46 84 7f 7b 32 23 53 1b 08 f2 a8 3b 7a 2f f3 3a 0d 3f 4c b1 d3 6c d2 ce de c2 d3 6c 7d ce a4 72 df ed 74 ae 57 1a 53 95 dd 8c d5 6c 7a 56 50 7f 72 ff 00 33 9e f8 af 6e d7 7a 1d 95 a5 ba da 42 13 52 57 27 ed bb b2 76 11 dc 56 b4 bd 9c 74 4d 17 07 8a a9 77 2a 72 fb 97 f9 9d 54 f2 47 2d f5 fb c4 e1 94 d9 36 19 4e 41 f9 45 65 41 a7 8a 5e ab f4 34 aa 9c 70 71 4d 75 ff 00 32 a0 6f 2e 2d 15 df ee f9 cf ff 00 a1 8a df 15 fc 57 f2 fd 0e 15 f0 9c 57 8c e7 8a ff 00 c2 fa ff 00 88 a7 91 44 7f 6f 10 c0 cd ee eb ff 00 b2 af fe 3d 5e b2 8f b3 e4 a5 1e c8 d2 51 5c d1 6b b7 fc 13 43 5b f1 1f 87 e5 d0 b4 3d 2a e3 7c ce 70 aa 90 c7 92 ad 95 ef 5e 3a c3 ba c9 dc d1 d3 93 96 86 24 3a b7 8a 35 2d 3f 55 f0 cd f6 9d 05 be d9 d7 64 Data Ascii: HQ#jaF{2#S;z/:?Lll}rtWSlzVPr3nzBRW'vVtMwrTG-6NAEeA^4pqMu2o.-WWDo=^Q\kC[=\|p^:$:5-?Ud
2025-04-01 17:51:01 UTC	1369	IN	Data Raw: be 5f 7b 9b ee b1 55 a9 c2 b5 38 c5 fb af 6f c0 f4 6b 0f 1c 5c 69 30 59 9d 65 66 86 5b 7b 28 e0 79 a2 b5 2e 19 87 e1 8f fc 7a ae 6d 52 7c 95 63 7f 9d 86 e9 29 6a a4 6a d9 78 e7 c2 17 a3 8d 7a d6 33 e9 3e 96 cb 5c ff 00 ec bf cb f8 ff 00 c0 22 5f 59 7f f2 f5 fd e8 d0 5d 4f 44 75 de 9a b5 a1 5f ef 2e 9a 69 de 87 f2 7e 3f f0 05 cd 88 ff 00 9f 92 fc 3f c8 e6 6f fc 45 e1 bb 2f 1a 4f 7d a8 eb 96 90 c3 69 67 b9 a4 93 4f 3b 57 e5 ff 00 ec a9 55 ad 86 a5 47 99 d3 bf cf fe 01 1c f8 8f ac 7f 11 ff 00 5f 23 e4 df da a7 f6 95 ff 00 85 b9 ad 4b e1 4d 1b 57 58 74 0b 13 e6 5a a3 69 4e 0d e4 8b f2 b3 b7 4f 95 7e 6d bf ee d7 e3 1c 57 c4 14 73 7a 9e c6 94 3f 75 1f 3f 8b fb dd 76 14 f1 15 ea 7c 33 66 27 c1 ef da 1b 5c f8 29 af 4d 67 e1 bd 6a 29 b4 db 8b b9 86 a7 a6 8b 06 0b Data Ascii: _{U8ok\i0Yef[{(y.zmR\|c)jjxz3>\"_Y]ODu_.i~??oE/O}igO;WUG_#KMWXtZiNO~mWsz?u?v\|3f'\)Mgj)

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:21 UTC	567	OUT	OPTIONS /getcaptcha/e7483410-5a58-493c-9fd0-cce66dae9bf2 HTTP/1.1 Host: api.hcaptcha.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://newassets.hcaptcha.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:22 UTC	553	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:21 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://newassets.hcaptcha.com Vary: Origin, Accept-Encoding Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Cache-Control, Content-Type, DNT, Referer, User-Agent Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ef224f7b434a-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	735	OUT	GET /captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/challenge/image_label_binary/challenge.js HTTP/1.1 Host: newassets.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/captcha/v1/c1e11bfffe54019b36ca486d59d75ea65128f510/static/hcaptcha.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:23 UTC	429	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:23 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close etag: W/"dbfac4c015a4458ed8c1d75b6ade14f2" Cache-Control: max-age=3600 alt-svc: h3=":443"; ma=86400 vary: Origin CF-Cache-Status: HIT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 9299ef2b38650866-EWR
2025-04-01 17:51:23 UTC	940	IN	Data Raw: 37 64 65 38 0d 0a 2f 2a 20 68 74 74 70 73 3a 2f 2f 68 63 61 70 74 63 68 61 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 76 61 72 20 69 6d 61 67 65 5f 6c 61 62 65 6c 5f 62 69 6e 61 72 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 2c 6f 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 3d 6f 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6f 2c 22 64 65 66 61 75 6c 74 22 29 3f 6f 5b 22 64 65 66 61 75 6c 74 22 5d 3a 6f 2c 6e 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 22 64 65 66 61 75 6c 74 22 29 3f 6e 5b 22 64 65 66 61 75 6c 74 22 5d 3a 6e 3b 76 61 72 20 61 3d 6e 65 77 20 69 2e 54 68 65 6d Data Ascii: 7de8/* https://hcaptcha.com/license */var image_label_binary=function(t,e,i,s,o,n){"use strict";o=o&&Object.prototype.hasOwnProperty.call(o,"default")?o["default"]:o,n=n&&Object.prototype.hasOwnProperty.call(n,"default")?n["default"]:n;var a=new i.Them
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 68 79 41 44 49 41 50 51 5a 41 50 62 32 39 76 58 31 39 65 33 74 37 66 54 30 39 4f 72 71 36 76 4c 79 38 75 37 75 37 76 76 37 2b 2b 6e 70 36 65 7a 73 37 4f 76 72 36 2b 6a 6f 36 4f 2f 76 37 2f 72 36 2b 76 6a 34 2b 50 66 33 39 2f 50 7a 38 2f 6e 35 2b 66 44 77 38 50 48 78 38 66 7a 38 2f 50 33 39 2f 65 66 6e 35 2f 37 2b 2f 76 2f 2f 2f 2b 62 6d 35 67 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 43 48 2f 43 30 35 46 56 46 4e 44 51 56 42 46 4d 69 34 77 41 77 45 41 41 41 41 68 2f 77 74 59 54 56 41 67 52 47 46 30 59 56 68 4e 55 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 Data Ascii: hyADIAPQZAPb29vX19e3t7fT09Orq6vLy8u7u7vv7++np6ezs7Ovr6+jo6O/v7/r6+vj4+Pf39/Pz8/n5+fDw8PHx8fz8/P39/efn5/7+/v///+bm5gAAAAAAAAAAAAAAAAAAAAAAACH/C05FVFNDQVBFMi4wAwEAAAAh/wtYTVAgRGF0YVhNUDw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+ID
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 6c 5a 53 54 6b 70 47 51 6a 34 36 4e 6a 49 75 4b 69 59 69 48 68 6f 57 45 67 34 4b 42 67 48 39 2b 66 58 78 37 65 6e 6c 34 64 33 5a 31 64 48 4e 79 63 58 42 76 62 6d 31 73 61 32 70 70 61 47 64 6d 5a 57 52 6a 59 6d 46 67 58 31 35 64 58 46 74 61 57 56 68 58 56 6c 56 55 55 31 4a 52 55 45 39 4f 54 55 78 4c 53 6b 6c 49 52 30 5a 46 52 45 4e 43 51 55 41 2f 50 6a 30 38 4f 7a 6f 35 4f 44 63 32 4e 54 51 7a 4d 6a 45 77 4c 79 34 74 4c 43 73 71 4b 53 67 6e 4a 69 55 6b 49 79 49 68 49 42 38 65 48 52 77 62 47 68 6b 59 46 78 59 56 46 42 4d 53 45 52 41 50 44 67 30 4d 43 77 6f 4a 43 41 63 47 42 51 51 44 41 67 45 41 41 43 48 35 42 41 51 44 41 50 38 41 49 66 34 5a 54 33 42 30 61 57 31 70 65 6d 56 6b 49 48 56 7a 61 57 35 6e 49 47 56 36 5a 32 6c 6d 4c 6d 4e 76 62 51 41 73 41 41 41 Data Ascii: lZSTkpGQj46NjIuKiYiHhoWEg4KBgH9+fXx7enl4d3Z1dHNycXBvbm1sa2ppaGdmZWRjYmFgX15dXFtaWVhXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQzMjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAQDAP8AIf4ZT3B0aW1pemVkIHVzaW5nIGV6Z2lmLmNvbQAsAAA
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 71 79 73 4a 56 53 76 70 70 36 4e 71 5a 2b 30 6f 72 61 34 75 62 4c 44 61 72 36 73 54 53 4c 42 77 6f 68 4a 64 38 32 53 78 72 38 6a 79 70 33 45 31 6a 69 58 30 61 33 55 79 39 66 65 4f 39 71 6a 41 4e 7a 56 68 44 78 34 35 2b 6a 68 6a 4d 6e 6b 64 4e 2f 77 4a 67 72 72 72 4f 35 7a 4b 65 62 4d 30 50 52 38 4d 2f 62 33 2b 76 49 78 34 37 65 6e 33 62 38 72 38 52 4b 75 49 75 68 6d 33 45 47 45 41 74 48 74 59 78 6a 47 34 4d 4d 67 43 68 56 53 62 47 6a 78 59 55 61 4e 47 2b 45 34 76 42 69 70 30 6a 4d 32 4a 38 31 74 68 55 52 42 67 75 53 51 6a 2f 45 51 72 45 53 42 62 4f 54 46 58 6e 5a 32 6d 51 7a 70 36 69 5a 4d 6b 42 74 56 65 44 79 31 70 6b 76 52 58 68 52 4a 48 66 7a 35 4d 52 73 39 54 66 61 47 47 56 6f 79 4e 5a 5a 54 62 55 6a 63 44 5a 4a 56 64 59 71 31 71 37 35 67 62 41 72 47 Data Ascii: qysJVSvpp6NqZ+0ora4ubLDar6sTSLBwohJd82Sxr8jyp3E1jiX0a3Uy9feO9qjANzVhDx45+jhjMnkdN/wJgrrrO5zKebM0PR8M/b3+vIx47en3b8r8RKuIuhm3EGEAtHtYxjG4MMgChVSbGjxYUaNG+E4vBip0jM2J81thURBguSQj/EQrESBbOTFXnZ2mQzp6iZMkBtVeDy1pkvRXhRJHfz5MRs9TfaGGVoyNZZTbUjcDZJVdYq1q75gbArG
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 37 75 72 6f 74 38 31 57 6b 4d 33 4c 63 69 4b 49 4f 45 43 77 50 63 6c 4e 68 77 4b 58 71 4a 6b 37 6d 4c 58 47 78 66 4a 33 46 34 4b 51 63 54 52 68 6b 59 4f 69 70 65 4a 35 6e 74 58 4b 77 57 61 52 37 64 50 41 6b 45 45 67 37 6a 36 56 31 36 58 62 34 32 55 65 55 50 6e 35 69 7a 55 2f 6e 6f 6c 6c 76 33 37 68 77 68 41 41 41 68 2b 51 51 46 41 77 41 49 41 43 77 4d 41 46 49 41 73 41 41 6b 41 41 41 45 2f 78 44 4a 53 61 75 67 74 2b 72 4e 75 2f 39 67 4b 49 34 6b 52 30 68 6e 36 51 30 4e 31 77 78 71 4c 45 73 42 59 4e 2f 33 72 4b 74 4d 37 2f 63 37 68 45 4d 30 44 42 6f 72 75 47 54 79 79 4a 7a 38 6e 73 2b 6d 64 45 70 54 57 70 56 55 47 58 51 62 46 53 6c 61 73 59 59 69 4f 36 70 64 7a 7a 6c 79 61 47 48 67 75 72 73 72 33 55 45 64 51 74 73 42 64 4e 42 37 37 2f 4e 38 67 77 64 6a 65 Data Ascii: 7urot81WkM3LciKIOECwPclNhwKXqJk7mLXGxfJ3F4KQcTRhkYOipeJ5ntXKwWaR7dPAkEEg7j6V16Xb42UeUPn5izU/nollv37hwhAAAh+QQFAwAIACwMAFIAsAAkAAAE/xDJSaugt+rNu/9gKI4kR0hn6Q0N1wxqLEsBYN/3rKtM7/c7hEM0DBoruGTyyJz8ns+mdEpTWpVUGXQbFSlasYYiO6pdzzlyaGHgursr3UEdQtsBdNB77/N8gwdje
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 65 6f 36 43 68 6f 71 35 30 67 36 6d 71 49 71 79 74 6d 31 56 69 75 49 39 5a 73 72 4f 31 6f 4b 2f 42 70 62 32 2b 76 34 6e 43 79 47 50 45 68 4b 76 47 65 38 6e 51 4e 38 75 52 4b 63 36 55 4f 74 48 5a 4f 4e 50 4d 41 39 62 48 32 75 46 48 33 48 65 30 33 38 2f 69 36 53 49 49 35 4d 7a 6e 36 48 77 7a 67 66 4c 7a 37 57 72 6d 37 32 43 37 69 2f 54 78 39 6d 6e 34 38 6a 6c 52 52 35 44 64 50 34 41 43 39 52 46 55 64 35 42 4c 74 59 52 4f 73 43 33 4d 31 6e 44 4c 43 49 67 2f 4a 6a 4b 73 75 4d 59 62 52 69 41 61 30 33 46 45 30 67 78 6a 53 4a 45 6a 53 31 39 38 64 4b 55 72 53 73 74 36 48 46 57 61 50 43 6b 75 56 6b 4d 70 43 59 4f 5a 79 76 51 4b 31 63 46 4c 2b 5a 42 70 47 69 50 73 5a 6f 74 33 30 42 6f 4e 55 64 72 54 48 69 4e 72 32 5a 6a 65 6b 4f 72 4b 35 72 51 59 7a 73 49 4e 37 61 Data Ascii: eo6Choq50g6mqIqytm1ViuI9ZsrO1oK/Bpb2+v4nCyGPEhKvGe8nQN8uRKc6UOtHZONPMA9bH2uFH3He038/i6SII5Mzn6HwzgfLz7Wrm72C7i/Tx9mn48jlRR5DdP4AC9RFUd5BLtYROsC3M1nDLCIg/JjKsuMYbRiAa03FE0gxjSJEjS198dKUrSst6HFWaPCkuVkMpCYOZyvQK1cFL+ZBpGiPsZot30BoNUdrTHiNr2ZjekOrK5rQYzsIN7a
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 67 45 2b 6b 41 35 75 46 6f 71 65 67 6c 61 71 4d 71 49 2b 64 41 71 79 56 70 71 35 69 73 4b 6d 59 64 4c 52 65 74 33 43 35 73 5a 4a 48 76 5a 52 4f 76 33 48 42 77 71 2f 46 72 59 31 56 65 46 57 61 79 6e 53 53 6e 38 31 38 77 33 34 76 31 4c 72 4d 32 4b 48 49 75 4e 32 63 6a 4c 50 67 69 62 5a 78 35 75 54 6c 33 2b 68 74 34 75 50 74 5a 74 62 77 65 38 2f 73 39 50 57 4e 39 2f 6a 6d 2b 76 5a 68 73 65 66 50 6a 54 77 74 41 72 73 38 4b 38 68 47 6e 5a 67 62 68 78 41 6b 48 4e 69 50 6f 61 2b 44 56 69 59 4f 71 57 68 78 45 63 42 6f 71 7a 51 61 34 74 67 52 67 6a 61 51 49 53 64 64 58 69 4a 57 45 71 4d 61 6c 62 74 61 75 6b 51 49 63 36 58 4d 6d 52 6e 33 71 56 72 44 45 4f 64 4c 6e 54 73 4c 75 6e 49 59 79 4d 57 2b 53 4b 4c 38 2b 55 78 47 44 74 6f 74 65 45 76 4a 79 4b 47 47 39 43 6d Data Ascii: gE+kA5uFoqeglaqMqI+dAqyVpq5isKmYdLRet3C5sZJHvZROv3HBwq/FrY1VeFWaynSSn818w34v1LrM2KHIuN2cjLPgibZx5uTl3+ht4uPtZtbwe8/s9PWN9/jm+vZhsefPjTwtArs8K8hGnZgbhxAkHNiPoa+DViYOqWhxEcBoqzQa4tgRgjaQISddXiJWEqMalbtaukQIc6XMmRn3qVrDEOdLnTsLunIYyMW+SKL8+UxGDtoteEvJyKGG9Cm
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 62 59 4d 49 52 56 39 76 2b 43 78 54 51 78 78 47 53 45 41 41 43 48 35 42 41 55 44 41 41 41 41 4c 41 30 41 55 67 43 76 41 43 51 41 41 41 58 2f 49 43 43 4f 5a 47 6d 65 61 4b 71 75 72 47 6d 51 62 79 76 50 74 43 73 71 39 54 6f 45 66 4e 2f 6e 77 4b 43 49 68 7a 6f 45 68 4d 69 61 5a 4d 6c 63 4a 67 47 2b 61 50 52 4a 4e 55 56 6b 31 36 6f 57 32 75 77 32 63 78 4f 70 57 4c 6f 74 6d 38 38 6a 72 37 6f 37 32 34 33 66 50 37 51 73 63 51 67 65 45 76 49 57 67 72 48 75 73 33 56 77 67 58 6b 74 46 45 69 46 67 79 70 2b 69 6b 79 41 67 59 4b 49 4a 33 52 50 46 48 69 51 4d 49 75 59 54 6c 61 4f 6e 45 53 57 49 33 56 55 6f 5a 39 63 6d 59 73 75 6e 61 6d 6b 71 32 61 6d 6d 4a 75 70 6e 4b 79 7a 56 4b 36 5a 4a 62 47 64 6e 31 6c 62 76 49 69 32 72 32 6d 35 75 72 54 46 59 4d 44 42 70 63 4f 50 Data Ascii: bYMIRV9v+CxTQxxGSEAACH5BAUDAAAALA0AUgCvACQAAAX/ICCOZGmeaKqurGmQbyvPtCsq9ToEfN/nwKCIhzoEhMiaZMlcJgG+aPRJNUVk16oW2uw2cxOpWLotm88jr7o7243fP7QscQgeEvIWgrHus3VwgXktFEiFgyp+ikyAgYKIJ3RPFHiQMIuYTlaOnESWI3VUoZ9cmYsunamkq2ammJupnKyzVK6ZJbGdn1lbvIi2r2m5urTFYMDBpcOP
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 57 35 77 37 69 30 5a 73 65 68 4d 38 72 4c 77 73 33 4f 71 4e 48 49 75 74 53 7a 32 64 65 63 52 70 39 4b 32 72 33 6c 73 71 68 42 34 49 7a 5a 35 39 4c 64 36 4a 2f 72 32 49 37 75 37 2f 44 65 6d 76 50 73 34 2f 61 44 55 66 67 73 70 64 76 6e 70 35 30 2f 51 67 45 46 79 69 50 59 70 39 2f 42 68 39 30 47 4d 6d 7a 6a 45 4b 4c 46 61 76 6f 6d 55 71 78 34 45 59 65 78 68 49 59 6b 61 69 52 69 73 43 4d 4f 67 43 44 52 6a 6f 67 63 4b 61 53 6b 79 59 38 70 7a 36 78 6b 36 62 49 6a 74 35 67 37 57 41 46 68 4b 55 53 63 4a 6e 49 6d 6e 38 44 45 6d 59 4d 57 7a 35 59 36 67 30 34 6a 57 74 51 6f 7a 57 64 4b 62 78 49 4e 4e 70 4e 67 73 5a 63 6c 69 42 59 7a 39 68 54 71 78 52 4b 6b 59 70 37 61 4f 6e 47 72 31 49 4f 55 78 4a 6f 4e 55 48 62 74 30 48 4f 67 41 72 6f 56 59 64 55 74 53 6e 64 55 54 Data Ascii: W5w7i0ZsehM8rLws3OqNHIutSz2decRp9K2r3lsqhB4IzZ59Ld6J/r2I7u7/DemvPs4/aDUfgspdvnp50/QgEFyiPYp9/Bh90GMmzjEKLFavomUqx4EYexhIYkaiRisCMOgCDRjogcKaSkyY8pz6xk6bIjt5g7WAFhKUScJnImn8DEmYMWz5Y6g04jWtQozWdKbxINNpNgsZcliBYz9hTqxRKkYp7aOnGr1IOUxJoNUHbt0HOgAroVYdUtSndUT
2025-04-01 17:51:23 UTC	1369	IN	Data Raw: 70 72 6d 7a 72 76 6e 41 73 7a 33 54 39 43 74 4b 6b 37 37 7a 74 32 77 46 4b 5a 55 67 6b 42 6e 37 49 47 57 54 41 62 44 61 52 44 4a 35 30 6d 71 79 75 69 6c 69 73 64 54 74 43 4f 62 2f 67 6c 4d 77 77 4c 56 4f 35 79 45 64 32 6e 55 58 2f 46 6a 6d 77 2f 4c 75 41 78 63 31 34 6e 64 76 48 37 68 50 33 4e 51 52 4c 63 34 52 4e 42 43 30 49 65 59 6f 37 43 49 41 78 66 70 42 2f 6a 6e 61 46 6c 55 77 75 69 34 75 54 4c 35 47 64 46 5a 73 73 67 70 61 6a 68 79 5a 33 6d 59 71 67 56 35 36 51 71 69 5a 77 6f 37 46 31 4a 47 53 6f 71 4b 34 6a 61 71 79 64 75 4c 6d 78 6f 36 61 32 74 37 32 37 6e 72 30 4b 76 37 39 69 41 46 48 43 77 36 37 46 76 4c 67 46 79 62 2b 2b 7a 70 6d 34 30 63 61 75 31 64 62 4d 32 4c 61 71 51 64 75 52 52 2b 50 65 77 4f 44 68 32 61 42 43 35 5a 48 6f 36 61 54 73 7a 35 Data Ascii: prmzrvnAsz3T9CtKk77zt2wFKZUgkBn7IGWTAbDaRDJ50mqyuilisdTtCOb/glMwwLVO5yEd2nUX/Fjmw/LuAxc14ndvH7hP3NQRLc4RNBC0IeYo7CIAxfpB/jnaFlUwui4uTL5GdFZssgpajhyZ3mYqgV56QqiZwo7F1JGSoqK4jaqyduLmxo6a2t727nr0Kv79iAFHCw67FvLgFyb++zpm40cau1dbM2LaqQduRR+PewODh2aBC5ZHo6aTsz5

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/092adf806d6542bb2fd163453464038bed6e5e0c581b9f5c07df587dc7605b35/60bb357eaeb397d50413365196a5a8f5248c389346ace5028a80e509d6d3bb8e.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:23 GMT Content-Type: image/jpeg Content-Length: 6124 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 02 Apr 2025 17:51:23 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2e9a254374-EWR
2025-04-01 17:51:24 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 90 00 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 5a ec 28 c9 52 70 70 71 bc fd 7b 01 5b 2f 79 dd 90 92 48 e6 66 48 23 d5 f6 b8 12 3f 7d ec d2 9f d3 a5 6f 5b 5b c4 f0 48 23 54 8d c8 e3 69 68 8f eb c5 64 6b 57 0f 65 32 bc 6d 85 ff 00 65 bc b5 ff 00 13 54 d7 c4 77 85 30 b2 12 9d f2 de 62 fe 39 e4 50 e1 79 5d 32 fd a5 a3 cb 62 76 d3 b5 08 e6 79 1c 33 aa f2 5b 18 75 1e bf ed 0a 9a 02 58 61 15 5c fd e0 9d 89 ec c3 fa d3 b4 6d 56 e6 e2 67 49 0e 10 0e 9d 76 1f 50 7d 2a 15 5d ba 8b c2 0e c5 91 8e 08 e8 ad df f3 15 69 38 c8 c2 56 6a e8 d4 b7 40 01 c9 dc 58 e4 b1 fe 33 dc 9f 61 56 a3 df 29 0c ac 42 9e 03 e3 93 f4 1d 85 54 8f 12 15 4c 61 08 c9 03 fb a3 a0 fc 6a f0 0c e4 a0 07 03 86 db dc fa 0f 6a a5 ef 10 ac 95 d8 aa 90 86 23 6e f7 ef c1 73 fe 14 e6 58 4a fc f1 60 7a b4 38 1f 98 a9 12 30 17 e6 e1 47 be 14 7d 3d 6a Data Ascii: Z(Rppq{[/yHfH#?}o[[H#TihdkWe2meTw0b9Py]2bvy3[uXa\mVgIvP}*]i8Vj@X3aV)BTLajj#nsXJ`z80G}=j
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: a4 9a d0 45 79 6f 24 79 da dc e5 57 1c 7d 6b 87 b0 b8 ba 4b 8c c2 51 86 7e f1 e0 d6 fe a1 ab 5d cb 0c 31 c7 b4 79 6b 86 62 d9 e6 bc 1c 44 24 eb 29 a7 a1 f5 38 4c 5a 86 1d d2 5b 58 e9 0b c6 a3 73 ba 00 bc e3 3c 0f 72 7b 9a 81 67 47 99 5c b6 00 fb 80 fe ac 6b 8c 37 73 bb 65 a6 2e 57 b1 e0 0f c2 a1 93 51 9b 01 b7 92 ac 70 32 7a 9f 7f 4a dd 7b da 1c 72 56 5a 1b 17 d0 91 7f 23 96 2c cc c7 2c 3a b7 b0 f4 15 dd 7c 36 8a 0b bb 89 83 46 ac 17 b9 fb b9 fe b5 c4 ea f8 93 50 31 80 42 11 b9 80 ea 17 f8 57 f1 ae db e1 94 9f f1 31 b8 45 c2 85 c2 e4 0e ff 00 dd 5a e1 a5 ef 45 33 d4 c4 46 c9 b3 d1 75 6d 32 27 b5 38 25 48 1c 6d c2 d5 9d 3c 34 3a 5f 2e cd b5 7b e1 aa 4b c8 81 80 fc a0 9f 4c 6e 35 45 2e ec a4 51 a7 b4 80 4e ea 48 45 f9 5b f0 35 57 50 a8 fd 0e 29 49 ba 56 b1 Data Ascii: Eyo$yW}kKQ~]1ykbD$)8LZ[Xs<r{gG\k7se.WQp2zJ{rVZ#,,:\|6FP1BW1EZE3Fum2'8%Hm<4:_.{KLn5E.QNHE[5WP)IV
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: fd 6b 2f c2 17 9f 6b d2 85 bb b6 3c ac c6 09 fe e6 72 58 d6 cd fb 79 31 3c d8 c3 36 f9 00 ff 00 78 6d 51 52 a2 ad b1 3c d2 e6 b3 7d 0e 6e fa c2 ed ef 43 47 0c 8e a7 0a ec 17 d3 ee b5 75 9e 16 d2 35 3d 37 51 f3 cd a9 d8 79 20 75 53 ea 3d 45 7a 14 36 56 f1 60 88 95 71 c6 31 ca fb 1f 51 56 94 2a e1 50 28 1d 97 fc 0d 72 43 0a a0 b5 67 af 53 1c e6 ad 63 96 f1 5d db b6 8d 22 31 01 88 e7 63 01 fa 1a f2 bd 16 61 ff 00 09 12 33 9c 15 8f 03 79 cf 7e c0 57 af 78 b6 d1 2e 34 4b 8d f1 12 c1 73 ca e7 f5 af 1d d3 1d 47 88 a0 31 c6 c3 29 b4 e0 6d ae 2c 6d 34 94 9f 74 72 c1 b7 27 76 7a 27 cd 29 50 a3 81 f3 65 ba e7 fb cd 5c b6 bf 72 52 6c 45 cb 28 db 18 3d c7 52 7f 1a ea 26 91 6d ed f3 f2 f4 fb a0 f1 f8 9e f5 c4 6a 80 dd 4e f2 b1 63 93 fc 3d 4f bf b0 15 e0 61 15 e5 7e 86 Data Ascii: k/k<rXy1<6xmQR<}nCGu5=7Qy uS=Ez6V`q1QV*P(rCgSc]"1ca3y~Wx.4KsG1)m,m4tr'vz')Pe\rRlE(=R&mjNc=Oa~
2025-04-01 17:51:24 UTC	1140	IN	Data Raw: ff 00 82 79 95 f4 f3 5f 78 75 0c e0 f9 b0 b7 93 26 ee a7 d0 d6 74 da 5d c5 ad 94 52 b3 f2 55 65 55 fd 0d 75 57 7e 1f d5 af 35 79 1c c6 86 d1 9b 76 01 ec bd eb a0 bf f0 84 ba b6 85 6e 92 a8 8a e5 63 55 1b 7d 49 e9 f9 57 2a c2 da 3e e9 a4 a5 15 a1 e5 93 ab a4 e5 5c 1c 22 aa 8f c7 93 5a 56 d7 1b 74 6f 36 24 cc 65 8b 3f f4 ae a3 55 f0 2d f0 89 44 2b e7 12 a1 98 9e 0f 1c 56 5c de 1b d6 2d 52 d6 da da c5 b6 46 36 c8 ac 46 33 9c f5 a8 8e 15 b5 69 02 71 b2 d4 93 e1 a5 90 b8 d6 2e f5 19 09 c2 0c 0e 71 93 f5 af 4e b3 6f b6 19 0d 92 a2 aa e4 19 09 24 31 f4 c1 ae 1b 49 4b ed 12 c6 e1 5a d5 22 49 9c 92 cc d9 c1 f4 38 e9 4e 3e 23 d6 b4 e8 76 c1 1c 3e 57 50 10 ee 27 ea 6b b2 29 46 3c bd 8c b4 7a b3 b2 96 df 51 b6 88 de 5a dc 16 d9 cf 96 7d 3b 8a c5 d6 fc af 14 f8 76 61 Data Ascii: y_xu&t]RUeUuW~5yvncU}IW*>\"ZVto6$e?U-D+V\-RF6F3iq.qNo$1IKZ"I8N>#v>WP'k)F<zQZ};va

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/ba451f8ceb6d100c019a671fffc7318f874d1f2da95bf55b05f80598efd68bd0/9c37acd6434cb46ea8433c150cd3ca436e1a8de9f426493d7a78f2635a6bd20c.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:23 GMT Content-Type: image/jpeg Content-Length: 5794 Connection: close Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 Vary: Origin CF-Cache-Status: MISS Expires: Wed, 02 Apr 2025 17:51:23 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2e9d7843c4-EWR
2025-04-01 17:51:24 UTC	891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 90 00 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 8f 49 9f eb b5 4d 50 2c ac 09 f9 7a 12 32 83 9c 54 b6 8c be 6c 98 00 70 bc 0f a5 5a b3 17 2d 9d 9a 11 ae 64 8d 53 04 65 dc 86 6d 83 a0 a9 23 bb 32 70 b3 1c fb c6 2a 28 c8 22 1c f4 f9 cd 61 6a 97 f6 76 b7 b2 3b 37 ce 36 a8 1b b1 da a2 3b 13 ee a5 a9 b5 a8 6a 13 59 db b4 9e 7a f1 fe c3 7f 43 5e 7f 37 8a b5 87 d4 0f 93 a8 90 85 b0 14 19 00 fe 75 57 5d f1 64 32 5b bc 68 d8 cf 1c 48 45 73 ba 3c cb 73 7e 80 c8 f9 eb fe bc ff 00 85 65 56 57 56 5f 98 a2 b9 a6 95 99 e8 2b e2 3d 64 4e 3f d3 01 5c 73 f3 37 f5 ab b0 78 87 58 90 9f f4 94 1e 9f 3f f8 8a e0 6e 6f 5d 6f 5e 34 95 f8 e0 01 26 6a 6b 4d 4a 5f 3b 06 66 65 28 ad 86 ec 73 5d 54 f0 92 9c 13 4d fd e6 b2 c5 53 84 f9 65 13 d9 59 b2 a3 e9 15 3e d3 fe 3d 47 d1 bf f4 2a 84 b6 5c 8f 42 9f ca a7 b5 e2 d5 7f dd 3f ce 95 Data Ascii: IMP,z2TlpZ-dSem#2p("ajv;76;jYzC^7uW]d2[hHEs<s~eVWV_+=dN?\s7xX?no]o^4&jkMJ_;fe(s]TMSeY>=G\B?
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 52 66 76 2e ce e4 93 b7 00 00 0d 45 59 38 b5 63 a2 84 13 8b 6c eb ca 23 48 ee ca 87 f7 8c 49 23 3c 01 56 01 80 c6 0e c1 8c 7f 70 d6 5d e4 8c b6 d2 b2 9c 7f ac 3f ad 67 7f 69 5c a3 6d 2f 9e 42 8c 92 31 c5 74 a9 24 ae ce 5e 47 2b 24 69 cc 2d 0b 9c c7 1e 7f eb 9b 55 79 be cb 91 9d a3 e9 b8 54 b1 dc 2c 88 0f 98 a4 f7 fd e9 a8 6e e4 55 8d 9b 78 e0 71 fb ca e4 4d 37 ff 00 00 d9 5e 28 c9 d5 35 08 2d 57 6c 2e a6 6f 43 2b 00 3e b5 cf 5f f8 89 a1 80 11 33 a4 84 8f 9c 4a 4a b0 fa 53 ef 8b da 43 2c b2 48 5a 57 24 be ec 1c fa 57 9e eb 57 ac d6 68 73 ce e5 c0 f4 e6 bd 88 61 23 0a 7c df 6b 73 c2 9e 36 55 aa b8 7d 93 d2 d3 47 83 50 79 6e 25 73 e5 31 54 28 a7 03 a7 6a cc d7 7c 33 0c b6 1e 44 17 32 79 6b f7 43 32 92 29 9e 17 d5 65 9f 4d 9a 16 39 f9 b0 3e a0 54 57 a6 e2 4b Data Ascii: Rfv.EY8cl#HI#<Vp]?gi\m/B1t$^G+$i-UyT,nUxqM7^(5-Wl.oC+>_3JJSC,HZW$WWhsa#\|ks6U}GPyn%s1T(j\|3D2ykC2)eM9>TWK
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 47 a9 ea 8e 25 8d 99 61 ee d1 13 cd 6e f8 8a 08 62 30 f9 79 0c ac 49 25 0a 81 59 e2 33 05 2c 5a a6 8e 8a 58 05 4f 01 27 d4 ca 92 ea 4f b0 4e 14 10 b9 72 0d 67 c9 36 f9 82 7c c5 97 69 0d b7 23 81 4f 1a 94 06 c3 cb 73 b4 72 a4 32 9e 79 ac cb 74 b6 79 00 59 06 f6 38 00 3b 0a f5 67 34 a3 77 b1 e3 51 a6 dd 92 dc af 7f 1a dc dc c7 0a a8 27 39 e2 26 af 4f 8b 45 3a 57 82 a2 89 d1 56 6b a9 43 bf ca c3 f0 ae 6f c1 5a 2d be a7 e2 c3 29 94 98 2d 30 5f 33 9c 67 b0 af 4f f1 84 f0 45 a5 46 44 e4 7c fc 7e ff 00 3c e2 bc ac 44 b9 d7 bb d7 cc f6 29 35 87 b3 76 d0 f3 bd 66 51 1c 39 0c 0e 01 6e 01 c0 f9 71 5c bd 81 29 61 1f b9 15 b1 e2 09 3c fb 25 89 2e 5f 2e d8 e2 40 78 ac f5 b7 10 41 0a 13 c6 e0 07 34 62 e3 1a 70 8c 17 63 d2 e1 98 d5 a9 2a 98 89 75 66 8a 48 0a 4a 7d cf f2 Data Ascii: G%anb0yI%Y3,ZXO'ONrg6\|i#Osr2ytyY8;g4wQ'9&OE:WVkCoZ-)-0_3gOEFD\|~<D)5vfQ9nq\)a<%._.@xA4bpc*ufHJ}
2025-04-01 17:51:24 UTC	796	IN	Data Raw: 49 63 18 8e 10 3f 3d d8 a6 78 7a d4 6a 7e 2a b3 8d c6 e4 cb 16 07 e9 53 68 71 fd a3 c3 da ab 12 77 c9 b3 1c 72 7e 6a d1 f0 42 41 67 ab 9b 9b a9 04 6a bb 97 2d c7 3c d5 b8 5a ef d0 da a6 26 5e cb d9 76 66 b9 f0 dc 37 3a 9b 46 54 25 b0 c1 da bf 5a ec a1 8a 1b 2b 7f 2e 24 0b 1a 13 85 1c 74 ae 76 d3 55 83 ed 84 96 c2 ca 54 29 23 8e b5 b7 71 26 22 90 ee 1f c7 de 8e 54 a2 fe 46 75 31 13 a8 d3 7d 17 e8 3a 49 a4 20 1d a8 32 33 fe b3 15 4d e5 90 7c cc 9f 2e 40 25 65 ce 29 65 79 3c b1 e5 0f 9b 23 38 19 38 c5 47 30 93 c9 05 97 e7 21 37 60 77 dd 53 6f 75 32 1b 7b 5d 85 d3 95 53 93 9c 07 c1 3f 4a b7 e1 f7 df e2 3d 22 3f fa 6e 3f 44 26 b2 b5 07 65 8e 4e 08 f9 25 35 a5 e1 5f 9f c6 1a 42 ff 00 d3 57 3f 94 2c 6b 55 d3 d3 f5 33 9f da 3b f4 c7 da 90 92 06 59 f1 f9 62 9b 7a Data Ascii: Ic?=xzj~*Shqwr~jBAgj-<Z&^vf7:FT%Z+.$tvUT)#q&"TFu1}:I 23M\|.@%e)ey<#88G0!7`wSou2{]S?J="?n?D&eN%5_BW?,kU3;Ybz

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/d549a4e5ea5ba910c85098bd20ebf4a3a12925e0e4f5150cc7039bd99b03ce06/a339558978aecbd402f7a8d03f34f2167333fe166213c5ba1af12d5ea4153a85.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:23 GMT Content-Type: image/jpeg Content-Length: 4796 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 02 Apr 2025 17:51:23 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2e9d4f431f-EWR
2025-04-01 17:51:24 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: b4 1c 6e f5 2e e4 60 ab 72 0f 1c ff 00 23 4b f7 4e 09 ce 7a 1f 5f fe bd 42 24 de 30 46 1b a6 0f f2 a9 14 e4 6d 61 90 78 e7 f9 7d 6a 2d 73 4b 81 cc 67 d8 9c f3 eb e8 69 49 e8 47 63 d2 a3 2d b3 e5 71 95 e9 cf 6f 6a 8f cc 28 f8 ea bd 39 fe 46 b3 95 48 ec 52 45 83 87 0a 77 63 14 37 cc 70 3d 7a d3 07 cd ca 93 83 e9 4a cd b4 60 75 3e 94 d3 6f 40 7a 6a 39 98 74 ef 9f f2 2a b5 cd f4 16 30 87 9e 64 45 04 92 09 fd 2a b5 ee ab 05 8b 2c 65 83 4c dd 14 7f 9e 05 79 f6 a7 25 be a9 79 2c d7 d3 bb 0f e1 8c 36 11 80 fe b4 e3 25 29 72 99 c9 d9 5c ec ad bc 5f 61 7e d2 8b 12 6e 3c a0 58 ed fe 2f a7 bd 73 af f1 27 ca bf f2 65 b1 9a 34 19 e4 8c e7 de aa e8 f3 25 b4 e8 6d 61 02 06 3f 32 aa e3 3e ff 00 5a 97 59 f0 c5 cd ed d8 92 da 2f 95 8e e0 f9 c6 3d c7 f8 56 ae 11 52 f7 99 1e Data Ascii: n.`r#KNz_B$0Fmax}j-sKgiIGc-qoj(9FHREwc7p=zJ`u>o@zj9t0dE,eLy%y,6%)r\_a~n<X/s'e4%ma?2>ZY/=VR
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 1d 63 92 59 99 f6 6e 91 d9 36 ac 7e cd fd 0d 53 8f c2 f0 48 cf 14 77 9e 66 46 06 f8 c8 cf b1 3e be 86 bd 7e cf c5 7a 3e b7 0b 6e 50 14 b0 07 77 f1 1f 43 ea 2b 37 c4 b6 d7 52 c7 e6 d8 49 14 30 30 c0 6c 0f 9b 1d 8f d2 b5 52 9a 76 67 23 b6 e8 f1 fb bd 07 52 d3 89 de 86 48 80 ff 00 5a 9d 3f 1f 43 54 e0 d4 ef ac e4 12 43 71 24 6a bc f5 c6 7f fa d5 ea 16 ef 2b c0 a2 57 8e 6d ea 48 25 76 97 03 ae 47 7c 56 26 ab e0 f8 75 08 04 f6 32 e6 6c 6f 68 c8 c7 e2 69 46 d7 d4 56 ea 55 d2 be 25 6a 90 10 2f a2 4b 88 87 f7 b8 27 dc d7 6b a7 f8 93 41 f1 15 8b 79 f6 ac 97 09 ce e2 bc fe 63 a5 79 d6 87 a2 c7 2e a8 f0 6a 43 ca 48 d1 99 f7 76 f4 26 ba af 05 f8 97 47 f0 e4 77 56 77 a8 66 59 5b 85 db 9c 8f 73 5a 3e 6f b2 43 8c 7e 67 57 a7 5d 5a e9 fa 82 5e 5b 22 4c 3f d8 6f bc 3d 47 Data Ascii: cYn6~SHwfF>~z>nPwC+7RI00lRvg#RHZ?CTCq$j+WmH%vG\|V&u2lohiFVU%j/K'kAycy.jCHv&GwVwfY[sZ>oC~gW]Z^["L?o=G
2025-04-01 17:51:24 UTC	1181	IN	Data Raw: 5b 9f 2d 0e 0e e9 df a6 7f 84 7a d6 53 db 34 b3 32 ab ab 3e ef bd df eb 56 ef 65 72 e3 a5 d5 8a cc 79 f2 c7 00 0e 71 e9 e8 2b 6e d9 96 0b 75 66 40 c4 60 7b 7d 3d 85 50 bb b1 6b 69 04 4e e9 e6 81 9f 94 e7 1f fd 6a d0 b3 20 81 0c 80 64 0c 10 7b 7f f5 a9 27 67 77 b0 aa ab a3 d5 b5 6f 16 58 35 ae 20 2e 26 51 f3 21 1c 29 f5 27 bb 7b 57 98 6b 17 e4 26 24 60 e9 23 6f 24 72 54 fa 7d 6b aa d6 fc 1b ac da b4 82 de 16 96 30 09 57 53 cf fb df e3 5c 65 cf 87 35 c1 29 76 d3 e6 52 07 40 32 07 b8 fa d7 2c 27 05 1f 77 a9 d5 28 b5 bf 43 37 73 01 b8 31 da 7b 7f 0f d0 fb d7 73 f0 bb 46 3a b7 89 e3 9e 48 5b ec f0 7c c5 88 ef d8 1a e4 e3 d0 35 33 38 df 69 2a 2f 75 da 6b d2 fc 37 ae dd 78 77 4d 4b 5b 3d 38 9e 3e 72 54 e5 cd 6b d3 dd 68 ca 4e db af eb b9 ed 6e 11 e1 29 d8 8c 7f Data Ascii: [-zS42>Veryq+nuf@`{}=PkiNj d{'gwoX5 .&Q!)'{Wk&$`#o$rT}k0WS\e5)vR@2,'w(C7s1{sF:H[\|538i*/uk7xwMK[=8>rTkhNn)

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/414aeea672c1aeed4f056a99f572cde2e065360b088fa45609aad48a1d32d31b/d499c50f2146dc4d78e452aa769064f7330a42e3777ccbd4e70076fa876806ea.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:23 GMT Content-Type: image/jpeg Content-Length: 5876 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 02 Apr 2025 17:51:23 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2eeb9dde9c-EWR
2025-04-01 17:51:24 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 90 00 90 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 2f b0 f4 41 43 c1 bd 72 65 dd b0 e7 28 b8 f2 8f aa fa af 6a d2 f2 d7 04 f2 db b8 f9 7a b7 fb 2b e8 29 fe 53 a6 0b b2 6d 1c 02 83 88 cf f7 4f a8 a1 cd 5e c5 72 75 7f f0 c6 49 87 cc 06 37 5d ae bf 37 cb db fd a5 f6 f6 a1 63 39 29 20 f9 ba 90 3f 8b fd a1 ef 5d 0d 8e 88 d7 92 13 b5 92 38 ce 72 3f 80 fb 7b 56 46 ab 79 6e 75 cf ec d8 63 da 63 19 66 1d 8f a8 f6 a6 d5 f5 44 dd 6c ca 4d 6e 37 17 2c 58 9e 37 63 9f a2 8f e7 55 25 56 72 51 0e dd a3 0c e3 a2 0f ee af a9 f7 ad 57 47 90 6d ce 08 18 67 03 f4 1e f5 56 44 da 36 47 85 0b d4 ff 00 73 fc 4d 28 dd ee 2e 54 b5 32 a4 88 20 f2 e3 01 36 f5 3d 42 7f 8b 55 39 6d 86 c2 98 01 47 cd 81 f7 c7 fb 59 f5 ad 87 88 20 c6 02 ed e7 07 f8 7d cf bd 54 74 2a 37 94 01 3a ee fe 31 ee 7d aa dc ad a0 72 df 56 63 cb 08 90 18 e4 19 62 Data Ascii: /ACre(jz+)SmO^ruI7]7c9) ?]8r?{VFynuccfDlMn7,X7cU%VrQWGmgVD6GsM(.T2 6=BU9mGY }Tt*7:1}rVcb
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: ad 52 4f 70 4d ad 8a 4e a6 46 3c f1 d0 b2 f7 ff 00 65 7f c6 aa ca 37 13 1c 67 6a af ca ce bf c3 fe ca fa 9f 7a bd 38 2c cd 1a 9d a1 07 ce 47 61 e8 3f c6 a0 90 2c 2b d3 6e c5 cf 1c ed 1e de a7 de 9b 95 dd 91 12 69 22 f8 db 08 3d 14 2f 1c 7f 0f b0 f5 35 34 6b fc 72 61 76 f4 5f ee 7f 89 aa e8 30 c6 59 70 a5 7a 2f 51 18 fe ac 6a cc 60 b3 02 c3 18 e4 29 fe 11 ea 7d e9 5b ab 2a 2a c8 b5 10 2c 41 23 18 e4 29 ed ee 6a e2 06 0d b8 61 89 ea 07 47 1e a3 de aa a7 50 aa 32 4f 20 1f fd 09 aa dc 6d 9c a3 80 1b a9 0b df fd a5 a8 e6 57 2f 97 ef 27 51 bb f7 91 f2 4f 51 fd f1 fe 35 66 26 0e b9 0c 39 18 cb 7f 23 ef 55 57 72 3e 47 24 8c 90 3f 8c 7f 78 7b d4 ab b9 c8 78 00 72 dc 90 7a 30 f5 fa d2 6b 5b a0 dc b4 9b 50 73 c9 3c f3 fc 5e e7 da 85 6f 3d f1 bb e4 27 07 d5 fd be 94 Data Ascii: ROpMNF<e7gjz8,Ga?,+ni"=/54krav_0Ypz/Qj`)}[**,A#)jaGP2O mW/'QOQ5f&9#UWr>G$?x{xrz0k[Ps<^o='
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 14 59 5e fd 4a 72 6b 43 01 51 74 c8 e5 b9 91 42 ed f9 54 2f f0 0f 41 ef 5b d6 17 ab 77 62 93 0c 01 8f b9 9e 17 ff 00 af 54 35 0b 53 34 3f 38 00 10 58 0e ca bf d4 d6 6c 6c b6 f6 cb 06 48 04 65 46 7a 0f 5f ad 4d f5 f2 13 d5 59 1a 97 56 d2 c9 37 da d1 b0 40 c0 27 f8 87 a1 f7 ac 4b cd 5e e6 32 bb 63 dd ce 06 ef fd 05 ab a1 b8 2e 34 e4 88 b6 49 4d db bf bc 3f c6 b2 26 81 26 b5 56 c8 24 f2 3f db 1e 87 de a7 67 e4 54 5f 46 65 1d 63 7a ac 65 bc bc 36 19 8f 54 3f dd 3e d4 e9 6f 51 e7 67 70 91 c6 a3 e5 8f 39 55 ff 00 68 ff 00 4a cc bc 10 ef 0d 00 0c 58 95 19 fe 2f 55 35 cf df 5e 7d 9f 72 79 6c 8a 79 58 c9 ce 71 dc 9a b5 14 dd fa 8f 5d 91 a1 aa 5b 5a dd a3 bb 00 57 24 80 dd 5b dc fb 57 11 73 6b 14 b3 15 09 fb bc fd 0b ff 00 f5 aa db 6a 53 dd b1 6d c4 c4 78 03 bb ff Data Ascii: Y^JrkCQtBT/A[wbT5S4?8XllHeFz_MYV7@'K^2c.4IM?&&V$?gT_Fecze6T?>oQgp9UhJX/U5^}rylyXq][ZW$[WskjSmx
2025-04-01 17:51:24 UTC	892	IN	Data Raw: f7 95 fa 7e 37 38 e9 75 19 67 19 dc 57 69 c6 09 fb be c7 da ba 0f 08 c5 e7 4d 21 39 0a bd 7b 94 3f e1 5c 95 d4 6d 6b 33 45 20 3b b3 93 9f e2 3e a7 da b7 bc 1d ac c5 63 7f 20 b8 6f dd 48 39 3d d8 ff 00 85 6e d7 b9 a1 ce a5 69 6b b9 df 3d 9f 94 36 22 f3 d7 9e de e6 aa bd 9e 38 c1 39 e7 9f e2 f7 3e d5 78 ea d6 73 a9 92 39 15 f7 8c 10 0f df 1f e3 51 ff 00 68 5b cb 8c 30 6d cb b4 13 fc 43 d0 fb d6 5a f4 36 4d 5f 53 29 ed 0c b9 e0 95 3d fb bf ff 00 5a aa 4d 6c 24 e5 5c 6e 4e 03 01 f7 7d 8f b5 6e fd a2 11 b5 72 0a 91 b5 49 ee 3f ba 6a b3 2d bc 6a c5 73 f3 71 cf 5f a0 a8 4d 58 bb 27 bf cc c0 92 db 20 82 36 32 9f c5 4f af b8 aa 4d 6c 63 62 76 9d a0 e5 95 7f 87 fd a5 f6 ae 86 54 5c b3 b1 01 b1 b4 91 fc 23 d0 7a 9a a4 c9 99 42 a6 15 95 71 cf 22 31 ef ea 4d 6b 0b d8 Data Ascii: ~78ugWiM!9{?\mk3E ;>c oH9=nik=6"89>xs9Qh[0mCZ6M_S)=ZMl$\nN}nrI?j-jsq_MX' 62OMlcbvT\#zBq"1Mk

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/0c9e4dc02ee64ebd883bf00e79ea0cf0b51f8c6980423abd538b5f9d6c819451/18a6156ed8373d8bac8e7f0a19a816603f8821377705aa3e5179ad193a39f00a.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	478	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:24 GMT Content-Type: image/jpeg Content-Length: 4331 Connection: close Cache-Control: public, max-age=86400 Alt-Svc: h3=":443"; ma=86400 Vary: Origin CF-Cache-Status: MISS Expires: Wed, 02 Apr 2025 17:51:24 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2f097f43aa-EWR
2025-04-01 17:51:24 UTC	891	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 64 ff 00 56 df 53 fc e9 17 07 20 91 ce 7b d2 e8 02 b1 60 70 a7 1c f3 41 ef f4 34 9b 17 fb e7 fe fa a5 0a 00 38 6c fd 4d 4d 98 d6 e2 af 5f ce 98 5d 50 92 c4 01 e6 1f e5 4a 18 01 92 78 19 e6 bc af c4 7a de ad a8 ea 33 c5 60 cc b6 91 4c ca c5 7b 9c 53 93 f7 94 56 e4 5d 25 76 7a 2b eb 7a 6d bc 8c 25 bb 89 4e 47 56 f6 ac 1b cf 19 db ae a4 d0 da 49 1c 8a 80 12 db ba 9c 74 15 c7 69 ba 53 de 5d 42 97 6a 58 ff 00 16 4f b5 3b 5a f8 7a ed 74 d7 16 0d 22 ab 81 94 50 0e 0f e7 42 b4 a3 76 ec 29 54 e5 95 92 b9 da da 78 ca 09 50 7d a9 3c a2 46 7f 0a d9 b2 d5 ec ae 63 43 1c eb 93 8e 09 f6 af 1b 83 c3 1a c5 b4 9b 1e f4 c4 0f 18 90 0f f1 ad b8 6c 2e f4 bb 88 56 ea e6 12 85 81 e0 e0 90 05 66 eb 53 e7 dd 7c 8d 12 72 8e 89 ff 00 4c f5 6c 83 e4 91 c8 ca ff 00 2a 54 ff 00 54 3e Data Ascii: dVS {`pA48lMM_]PJxz3`L{SV]%vz+zm%NGVItiS]BjXO;Zzt"PBv)TxP}<FcCl.VfS\|rLl*TT>
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 9e 87 9a 5c e7 be 47 07 9a 48 7e f9 fa 2f f5 a9 4e e0 62 f8 87 5b 4d 26 d2 11 8c c9 23 a8 5e 7a 72 79 ae 01 af 2f ef 75 05 41 71 34 9b f6 9d a5 f6 85 e4 f2 6b 23 e2 b6 ad 3d c6 af 15 bd b3 12 21 da c7 61 e7 00 9c d6 65 ae a1 f6 eb 1b 27 98 cc b0 8c 2b 92 83 27 1f 8d 6c a2 9a b7 52 65 a2 bb d8 ef 2e 1f 50 b7 b4 26 2b b7 66 8c 70 50 e6 b8 0f 12 78 a3 53 bc d3 65 d3 2e a4 33 46 cc bf 36 39 eb 5b b7 da de 97 1c 2b 05 84 12 c2 c0 7d ef 2f 1b 8f e7 5c 36 ab 71 34 a5 99 a1 64 19 c9 6d 9d 6a 61 49 b7 66 ff 00 32 95 54 ad 25 f9 1d 7d 8f 87 74 c5 d0 2c b5 59 a3 55 28 8a a3 3f c4 77 e4 9a a9 a7 78 86 2b 99 96 12 f8 ca ca 57 d3 ef 0e 2b 3a e2 fe e1 3c 2d 6b 6d fb d0 98 18 de 30 7a d7 25 15 df d8 0c 00 2e 64 0a c5 8f fc 08 55 3b 29 2f 52 60 9c ad 2b 9e a4 b2 a5 cd e8 Data Ascii: \GH~/Nb[M&#^zry/uAq4k#=!ae'+'lRe.P&+fpPxSe.3F69[+}/\6q4dmjaIf2T%}t,YU(?wx+W+:<-km0z%.dU;)/R`+
2025-04-01 17:51:24 UTC	702	IN	Data Raw: 94 ea c2 de 5d aa 88 d1 b0 19 ee 6b 6a 55 53 92 4c ce 74 5c 6c d1 9c 05 9d dd 9a 38 98 c3 70 72 1c 1f a9 ac f7 77 88 6e 8a 56 60 0e 01 0c 05 3f cb bb 65 46 9a cd c3 9c 12 42 91 9e 4d 54 b6 b4 bd 31 93 14 2e 33 ed ef 5b ca 49 59 26 61 18 3e a8 d0 8f 51 05 03 c8 ac 18 1c 12 08 3f d2 ba 3f 0c d9 cb af ea 51 c3 86 f2 55 94 be 07 50 1b bd 73 b6 ba 15 e5 c6 d1 2c 6e a3 23 24 0c 9e b5 ea 1a 05 8f f6 7d aa 47 6d ba 32 42 e4 ed e4 fc d5 93 ab cb 75 73 5f 66 dc 7e e3 d3 fc eb 6b 78 84 00 28 45 84 80 3d b3 8a f0 9f 88 5a 04 da 76 b1 35 fc 01 7e cd 23 31 1b 7b 74 ae fa e6 d6 ee 79 26 cd c4 83 f7 0d f8 7c c6 a0 d4 bc 2c d7 f1 18 a6 9e 56 5d ad c1 3f 4a c6 15 92 9b 7e 65 ce 86 8d 1e 19 2c c7 cd db b4 1e 78 50 b9 a9 e1 b8 31 8c c7 33 46 0f 51 e5 d7 a5 bf c2 a4 7b b0 62 Data Ascii: ]kjUSLt\l8prwnV`?eFBMT1.3[IY&a>Q??QUPs,n#$}Gm2Bus_f~kx(E=Zv5~#1{ty&\|,V]?J~e,xP13FQ{b

Timestamp	Bytes transferred	Direction	Data
2025-04-01 17:51:23 UTC	762	OUT	GET /tip/a9f72bd9ad2cd7aeff8c9e24e12d344b9cd45c80109d9f7a24083d3603d91bcb/871a4353105f8779e2a39adfbacee1b0bc6cf88d409c288404df5b286facf94c.jpeg HTTP/1.1 Host: imgs3.hcaptcha.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://newassets.hcaptcha.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-01 17:51:24 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 01 Apr 2025 17:51:24 GMT Content-Type: image/jpeg Content-Length: 4961 Connection: close Alt-Svc: h3=":443"; ma=86400 Cache-Control: public, max-age=86400 Cf-Bgj: h2pri Vary: Origin CF-Cache-Status: HIT Expires: Wed, 02 Apr 2025 17:51:24 GMT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9299ef2f1d1443b0-EWR
2025-04-01 17:51:24 UTC	877	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 80 00 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: 91 ef b7 fc 29 17 00 1c fe 54 ef 94 0c 95 c7 b9 18 fe 54 f4 18 98 ce 19 5b 70 f7 39 fd 69 d1 9c c8 bd 3a f7 ff 00 3d 69 ad 90 77 0e bf cf d8 d3 97 1e 62 37 55 24 7f f5 8d 02 1a d8 5d a8 3a 0f e9 d2 94 e4 60 67 f1 fe b4 8d 86 0a df 9f b5 29 e7 9f 4e d4 3d 87 d4 0e 3a 06 39 fa 9a 6b b0 58 cb 36 06 29 72 73 f7 0e 7d c6 2b 2b c4 77 7f 62 d1 27 93 3c 95 c6 7e b4 ba 81 ce eb 3e 3b fe cc 2f b6 d9 1a 14 62 a8 e6 4f 99 88 3d 85 73 9e 26 d7 75 3b ad 25 6e 84 92 40 8d b4 f9 60 63 68 00 9f e7 57 fc 37 a7 5b 4b 15 c5 dc c8 b2 5c 13 b2 25 6e 4a e7 d3 35 af 79 a7 43 78 89 14 ea 04 6c 9b 19 08 c9 24 7f f5 a8 72 51 69 b0 4a 52 6e 2b 73 8d f0 d2 3d cc 71 89 f5 29 c9 da 07 07 af 19 3f ad 76 2d 69 71 a7 5b 0b 94 d4 f3 95 c1 de a0 1c 1f 7a 86 cb 46 b5 d2 17 65 a4 5e 56 3f 8d Data Ascii: )TT[p9i:=iwb7U$]:`g)N=:9kX6)rs}++wb'<~>;/bO=s&u;%n@`chW7[K\%nJ5yCxl$rQiJRn+s=q)?v-iq[zFe^V?
2025-04-01 17:51:24 UTC	1369	IN	Data Raw: ba 8e cc f3 a3 e0 fb b8 a4 df 14 91 ca c4 70 a0 8c 0f 6f fe bd 55 6d 32 78 6d 6e 55 c6 01 1c 14 da 00 ff 00 81 37 5f c2 bd 27 ec 7a 9c 0a d2 5d e9 16 97 51 2f 1b ed db 0d 8e f5 24 16 4f ac 2b a7 da 66 b5 8a 15 f9 90 aa a1 5f 6c fa 0a f4 d5 ae 71 7b 69 a8 72 74 3c 4d 2d d8 ba 36 49 03 86 dd b5 87 e9 83 51 c9 00 79 08 1f 2c 8a 78 23 bf f8 8a ec f5 9d 2e ce 0d 44 49 67 78 f7 4c cd 83 95 c8 3f 46 c7 34 d3 e1 3b bb b3 35 f5 a1 8c c7 00 de f1 b3 00 72 3a fe 62 b3 73 b4 ac ce d8 28 ce 97 32 39 cb 5d 32 fa e0 04 5b 49 1b b1 c2 f2 07 f8 1a bf a5 78 70 ea 7e 22 1a 64 ae cb c8 04 b2 e3 e6 f7 1e 82 bb bd 03 57 bf b6 0d 34 16 85 96 18 cc 26 5d b9 58 c0 39 c9 fc 2b 95 d4 75 59 06 b0 6f ad 2e 24 96 40 a1 8c cc b8 dc 7a 92 3d aa 95 46 dd bb 19 fd 5a cd b6 7a 8e 81 f0 cb Data Ascii: poUm2xmnU7_'z]Q/$O+f_lq{irt<M-6IQy,x#.DIgxL?F4;5r:bs(29]2[Ixp~"dW4&]X9+uYo.$@z=FZz
2025-04-01 17:51:24 UTC	1346	IN	Data Raw: dc 0f c2 b5 84 5d 93 5a 18 35 ad ce 82 c4 fd 94 89 65 bd 85 b8 f9 4a bf 98 cc 3d b2 6a 9e a5 aa b6 af 7e 96 f6 90 95 74 1b 46 71 b9 bf 1a cd b6 96 7b d9 84 f7 6c 81 14 63 87 46 c0 f6 15 b9 e1 2d 2a df 5c f1 34 2f 62 0a 5a c0 7f 7a d8 20 31 f7 07 a5 2a 90 4d 5d 97 4e 72 8b bc 59 81 73 63 ac e8 be 65 d5 ed bc f1 42 ff 00 26 fc 63 71 3f c2 0f 6a c6 bb d6 6f e5 2c 23 9a 46 87 a2 12 7e fe 3d 7d 71 eb 5f 45 f8 df c3 f6 ba d7 86 27 86 71 27 ee 50 ba f9 7f 78 90 3a 7b d7 cd f2 28 8a 43 6f 2a 10 c0 e1 43 0c 74 fe 4a 28 4e 33 88 f9 a5 09 5e 26 7d cd c4 93 90 d2 39 73 ea 4e 31 f4 3d ea fe 8e 8e 64 66 06 eb 6e 3f 84 75 fc cd 42 b6 41 a6 f9 32 ee 79 c9 e3 8f e8 2b 7a ce 28 e0 85 62 3b 49 6e 4b 2c 60 fe a4 f3 55 18 58 55 25 dd ea 6a 2a de 5a a2 5c db c8 16 74 03 68 98 Data Ascii: ]Z5eJ=j~tFq{lcF-\4/bZz 1M]NrYsceB&cq?jo,#F~=}q_E'q'Px:{(CoCtJ(N3^&}9sN1=dfn?uBA2y+z(b;InK,`UXU%jZ\th