It looks like someone is trying to do some nasty stuff one your site.
Laravel is pretty good at protecting you. The most important thing is that your env file isn't accessible.
https://yoursite.com/.env
Be part of JetBrains PHPverse 2026 on June 9 – a free online event bringing PHP devs worldwide together.
Looking at some production logs I'm seeing some suspicious exceptions thrown.
// I removed the rest of the domain it attempted.
Invalid Host "'pay2key...". (View: /app/resources/views/layouts/master.blade.php)
It looks like ransomware.
Here is another one
(Symfony\Component\HttpFoundation\Exception\SuspiciousOperationException(code: 0): Invalid Host \"'pay2key....\". at /app/vendor/symfony/http-foundation/Request.php:1183)
Should I be worried, or is this a failed attempt at something?
Searching for "pay2key" It looks like ransomware.
Looking at my server there haven't been any changes to my files. Everything is the same as my git master branch so they haven't added or altered any files.
Please or to participate in this conversation.