Windows Analysis Report
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQ

Overview

General Information

Sample URL:	https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmai
Analysis ID:	1466767
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Classification

Signatures

Source: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:57135 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; BITRIX_SM_kernel_0=XYvRSboqG4mDOBO1g8INHDoHCPSoAbYd30_pjySNwQxfPg37JxQTR8qICBmYTLPV0hgZ9OeNrIpFWEasJ1IPF_qNVRicruccmowe11NWbXUIBYNrYGnQWu5h_ESHZjJY4shkjCAb8tLzhaV-XKzkceGPegSZNByonnLoGxxYycajBRVTSc3v-VMETAg_3vppy8q1KwQ1lPNSUivyuY-Efp8WGaoNVeph4dDJJ4jX6E4JDI9zI4WNWFzi-WwkmCBmzPwHu4fxtRcqmtYzti6ZdstNFTR9xNXa-QZr4sza9A2xWH14QavQm3w-tB17Myq9Y8f0HPMmHAJSSJ_FPMlgWLtTdN71mjhvtrKKn0_9rTMvO0y8-SKqaPCks7dQ2CqjkHDUCALt8a4B_ImTG5AdxF_TMzfBfRx1XVpBhko7bPLgXWOc1hbCt8SoNZFM40JqOylwQcG8nbSkDZgZh3Uqk8YWNtWWTUCIIDQ8D2MRxYIrgQBc9vv87SNLNQo8Edy7vmev6TqhSRocRDtG7GD2VFiDc7mrtlax0hSDWknKkrOINo9vf8DLX347un-wRW5IwGwq3Fj1peMPNDentusRGNnvdgy8nqRrWm96NS5bzP7P_-X2uiNwF7A4R9SRCLFGWJcMCHTRPnmmC7dO0r5a-x8CbQTXOKsJjuUVNkd30uPNYLUGr2w1zjbGeM4l7A6emk1N1lauLiU-VO1bdwP756zGHBRyNw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ba.js HTTP/1.1Host: bitrix.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw; BITRIX_SM_TZ=America/New_York

Source: global traffic	DNS traffic detected: DNS query: ru-netpallet.mailinetservice.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bitrix.info

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 03 Jul 2024 09:19:45 GMTContent-Type: text/htmlContent-Length: 548Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 57139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57139
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/36@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,6605174925357746350,3975537273266710476,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,6605174925357746350,3975537273266710476,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Contacted Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
54.78.19.136	bitrix.info	United States	16509	AMAZON-02US	false
52.29.77.149	ru-netpallet.mailinetservice.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

Contacted Domains

Name	IP	Active
bg.microsoft.map.fastly.net	199.232.210.172	true
www.google.com	142.250.186.68	true
bitrix.info	54.78.19.136	true
ru-netpallet.mailinetservice.net	52.29.77.149	true
fp2e7a.wpc.phicdn.net	192.229.221.95	true

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/favicon.ico	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd	false		unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490	false	Avira URL Cloud: safe	unknown
https://bitrix.info/ba.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433	false	Avira URL Cloud: safe	unknown
https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510	false		unknown

Name	Type	MD5	SHA1	SHA256
Chrome Cache Entry: 122	ASCII text, with very long lines (13404)	5881391F45CAFD2FC858E3F14E54B9F4	281A653381CC1506F72C97B1C064B83AC0B04200	0E9B826DEA54F30650091A0547B60614C8D8C90203724AAC05F07461C68C234C
Chrome Cache Entry: 123	ASCII text, with very long lines (65536), with no line terminators	308CC2D2D8FEB953DCBF2775A80581EC	05C93F8910BE8FA7B0DFE6EBEAA17064BF21652F	9493DF172BF3DEDFFD22A20464560C5F8A75F4DFEE63CDDDC74E31EC9E872FE4
Chrome Cache Entry: 124	ASCII text, with very long lines (14156)	5FDCEBC0B20D80CC512AB992D236242C	2F81F88790665BE76B5FB8640DEA32997019333B	6C9B5DE3C1416C5AEC8D608287AC497758530C4F8228725BC33E49CBEEE28382
Chrome Cache Entry: 125	ASCII text, with very long lines (25331)	2E11FC2A1EAEF8DE91F0154F37BFDAE3	9A91E3DC2C6D8CC0250CE07B73C3BAD50352B31A	F62C3BAAEA5044B0C286267CD64BAEA2BAB590611FFCB8EF82E13BC6533EE44A
Chrome Cache Entry: 126	ASCII text, with very long lines (9200)	65CB55D65BCE0121B37C3F756DB51F45	A73F2B03323C0DFCCE8BDDCBB7C0C0D51DCB46D4	5091A00509B006388997B171D01E78296119E41FE88889DFB50F9611BDB17804
Chrome Cache Entry: 127	ASCII text, with very long lines (1467), with no line terminators	44160F099A56298219CA37C452F5D1A8	7FF07D99448B481C364C32A411CCE5F34F1F7BBB	95A4C11BE57D915F3E67D6037E3A2E4AFA21CED834958A0AEE7AE5116D8FE33A
Chrome Cache Entry: 128	ASCII text, with very long lines (858), with no line terminators	B290EB81790E82058630CD5633B8150B	7559C8038C03AA8E68EDEE93F28FAC7EF84FD174	BC2A0F6A0667A807B5B3B57B9C20560ED37DF1E301C3D99F898E8F8D8B30458A
Chrome Cache Entry: 129	HTML document, ASCII text, with CRLF line terminators	4B074B0B59693FA9F94FB71B175FB187	0004D4F82B546013424B2E0DE084395071EEF98B	25FB23868EBF48348F9E438E00CB9B9D9B3A054F32482A781C762CC4F9CC6393
Chrome Cache Entry: 130	ASCII text, with very long lines (65418)	B7C4644CC0A96FFF344F01C48ECB50AB	FBC51A7117C40969AFE376AD8245A58580200AC4	23672ABCC4989D518FFC398E4D047F07D4D32D976F2B872EC23D6D5B384BAC3D
Chrome Cache Entry: 131	ASCII text, with very long lines (65536), with no line terminators	CDF1137B813B709C10D31045D0037A6C	C3F513D708B64CD58CC9C6CAC45B428C97297999	33BD1842B7778216197B870E8F3B4E387D9511905C04EA5A07934B3C614EF109
Chrome Cache Entry: 132	ASCII text, with very long lines (2554), with no line terminators	91D382A06B389F502F85885BF7B6F54B	B3D0C12E7492BBCCD9F8BBAFFA4E2FB2AB3024EA	27E4826EC010431E818D5B488D0E644DAA9985D6B12B4B956F080C318468E462
Chrome Cache Entry: 133	ASCII text, with no line terminators	EDD89422DB3367FC65FA2E428C4BF406	F19ABB537F708D6A0B33FDC4B633A9D796489551	667BE5117B92183E8A38A50A56E9CCEF299518CA68516FF43859AE97C279612D
Chrome Cache Entry: 134	ASCII text, with very long lines (49478)	F6F8DD7B6A52EFC3BE909CDC5DA07BE3	D8F6BB6C036C2C865299840752366D49FCA69F5D	C43FF1876EFC50F5081E88141C94F7F74D4AAD2615DD594A49A31BE501F81B85
Chrome Cache Entry: 135	ASCII text, with very long lines (23463), with no line terminators	6BD6F9EA8F0C54E08E3A12B977F1B720	C115C5CF987A3EDC217F8E1ECFA0A59EDCB4D85A	8909230AB0CBF3EC50721843F05A08256C6F3087B8CEE954C2E921FEED611F5A
Chrome Cache Entry: 136	ASCII text, with very long lines (2449)	E2E144D73A70C7AF12CB679CFB5B9BCD	288382DD929AEFE03C6E37FED351ECB5E4B0A587	30FD2C1451C856B183610AE1221A200AEEC55B4810FC5CF702373A1E61BC4B9B
Chrome Cache Entry: 137	ASCII text, with very long lines (1803), with no line terminators	2B0CAD44375A49C9968230643C3329C5	DAC8CA6C5D716D8D946BCC67489DE0EC7937ABB4	533FBCB6E32E5014485C77EC76084CADBB4570100045274C552AF75CE112C06D
Chrome Cache Entry: 138	ASCII text, with very long lines (32174), with no line terminators	7CB4EFD80B9777F1C913AA2535169DA9	A3D027C90032C4EC3790D30AD9811BDAAD332D02	650CB631BF730451BFBCD3ACB3301A2160E928A5C0FA019C486F7D04616CF7C7
Chrome Cache Entry: 139	ASCII text, with very long lines (6659), with no line terminators	1704091E9EB2522EFFA5BAA97CEE26A0	5A4EE9EBE22E0E6C35DE6CA6B7F8CBEEA40C71D4	897C58672B375FD206D4DF4CCD71A3FA3E29F739F4DB5251B94895AD015F9710

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Detected non-DNS traffic on DNS port

Source: global traffic

TCP traffic: 192.168.2.4:57135 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; BITRIX_SM_kernel_0=XYvRSboqG4mDOBO1g8INHDoHCPSoAbYd30_pjySNwQxfPg37JxQTR8qICBmYTLPV0hgZ9OeNrIpFWEasJ1IPF_qNVRicruccmowe11NWbXUIBYNrYGnQWu5h_ESHZjJY4shkjCAb8tLzhaV-XKzkceGPegSZNByonnLoGxxYycajBRVTSc3v-VMETAg_3vppy8q1KwQ1lPNSUivyuY-Efp8WGaoNVeph4dDJJ4jX6E4JDI9zI4WNWFzi-WwkmCBmzPwHu4fxtRcqmtYzti6ZdstNFTR9xNXa-QZr4sza9A2xWH14QavQm3w-tB17Myq9Y8f0HPMmHAJSSJ_FPMlgWLtTdN71mjhvtrKKn0_9rTMvO0y8-SKqaPCks7dQ2CqjkHDUCALt8a4B_ImTG5AdxF_TMzfBfRx1XVpBhko7bPLgXWOc1hbCt8SoNZFM40JqOylwQcG8nbSkDZgZh3Uqk8YWNtWWTUCIIDQ8D2MRxYIrgQBc9vv87SNLNQo8Edy7vmev6TqhSRocRDtG7GD2VFiDc7mrtlax0hSDWknKkrOINo9vf8DLX347un-wRW5IwGwq3Fj1peMPNDentusRGNnvdgy8nqRrWm96NS5bzP7P_-X2uiNwF7A4R9SRCLFGWJcMCHTRPnmmC7dO0r5a-x8CbQTXOKsJjuUVNkd30uPNYLUGr2w1zjbGeM4l7A6emk1N1lauLiU-VO1bdwP756zGHBRyNw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?171327662823463 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/intranet/design-tokens/bitrix24/bitrix24-design-tokens.min.css?16854388541467 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?16620208132320 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.css?168130229626598 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.css?171076220032174 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/style.min.css?17169973951803 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core.min.js?1716997395225422 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/protobuf.min.js?159231549176433 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/protobuf/model.min.js?159231549114190 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/core/core_promise.min.js?15551566002490 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/rest/client/rest.client.min.js?16015491189240 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/pull/client/pull.client.min.js?171929841849656 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/main/popup/dist/main.popup.bundle.min.js?170185523765824 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/js/ui/buttons/dist/ui.buttons.bundle.min.js?171076220041234 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /ru.netpallet/bitrix/components/bitrix/main.mail.unsubscribe/templates/.default/script.min.js?1518018584858 HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ba.js HTTP/1.1Host: bitrix.infoConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ru-netpallet.mailinetservice.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ru-netpallet.mailinetservice.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/unsubscribe.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%3D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e&bx_sender_conversion_id=8670499&utm_source=newsletter&utm_medium=mail&utm_campaign=obnov510Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qmb=0.; BITRIX_SM_kernel=-crpt-kernel_0; PHPSESSID=cx1eZ2QjG06P4LFkQslRk0VvNN37jwml; BITRIX_SM_kernel_0=i86QEvGlIKpMYRpM6MBtFPjiiZJWEyzLegu0Axv9HVu_ueKXv9PyW5x_fnxFKLpk-6rKIJuJRKCDGDex5A-5w7TtvVScJSWHegvbEPR4-_ZWyWFnKozTVd5ySoT85aPpG-KifQ1azMDGOL-KzEF5Jqi88iANX_dgIl6znwlmaahNbUtoCx8xM5h75VymzdlY4Yghc5zoyMsp5EHyeu7z5AqfjkUNyO3_-N2UwuDhf3CchXMHY42rI4POf1qGOaBIVxNb6SlaJ0zGevCmFoivzisHV9MVTNxr1eHSQXlT5XxW6RTX-SAh80YM0yyLJ6Afj8lkYIO3g7o-Gam2xyov_owc8ITIiVzOjXW-BgFs-6VsPG1PNKn3lyZNb5t07m2SNP8qaQ06kp-1OEqUEH4JFJDKn27d2i898cGmjYIvmdtu8SdL-VGu-jQNcqN0XSn6sY_S67FIl6I9QtA0PRfHgwOeXkK5o_a7GURovG6pk0e4xqLkqCR7lvDwkjCTecoGXOMULGLpaj9HWwsXlybefUxsIOqx9T8V2Y1jjXZbQAgrUijTQFamEs5mx64SKAf6y-7NuGsbpp7qQkIwRGhgqHvifjzWZE0bLqf05lC4W-org2yoGbjkHutVJgeZRLgLglTP87cv_-Rras15WJ8qlXCa5AJIoKTqoNhvvuRrvJBHnGWVr_pnjLNCGrzF6za639vYUpEXW0H681nQsVqUhZBjryc_Hzh_sTwuQ3QbjIxgQs-vYR7dI7a6n9Su_lieWLM48iJsOa-vnOg61PLAAw; BITRIX_SM_TZ=America/New_York

Source: global traffic	DNS traffic detected: DNS query: ru-netpallet.mailinetservice.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bitrix.info

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Wed, 03 Jul 2024 09:19:45 GMTContent-Type: text/htmlContent-Length: 548Connection: close

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 57139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57139
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/36@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,6605174925357746350,3975537273266710476,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ru-netpallet.mailinetservice.net/ru.netpallet/pub/mail/click.php?tag=sender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5In0%3D&url=https%3A%2F%2Fru-netpallet.mailinetservice.net%2Fru.netpallet%2Fpub%2Fmail%2Funsubscribe.php%3Ftag%3Dsender.eyJSRUNJUElFTlRfSUQiOiI4NjcwNDk5IiwiQ09OVEFDVF9JRCI6IjU1MzUiLCJNQUlMSU5HX0lEIjoiMSIsIkVNQUlMIjoiaW5mb0BkZS1mYW1pbGxlLnJ1IiwiQ09ERSI6ImluZm9AZGUtZmFtaWxsZS5ydSIsIlRFU1QiOiJOIn0%253D.65b3db8c86c4ab45a5fab658d8d49013ae26b314a9cb1f497ca641e069779b7e%26bx_sender_conversion_id%3D8670499%26utm_source%3Dnewsletter%26utm_medium%3Dmail%26utm_campaign%3Dobnov510&sign=9220b06fb9238aea629501aece3a5b0217bd623ceaa16fbb411f371cac28acbd"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1956,i,6605174925357746350,3975537273266710476,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

ID:	1466767
Product:	CloudBasic
Start time:	11:18:42
Start date:	03.07.2024
Cookbook:	browseurl.jbs
System description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Architecture:	WINDOWS

Overview

General Information

Detection

Signatures

Classification

Signatures

Phishing

Compliance

Networking

System Summary

Screenshots

Behavior Graph

Network Map

Contacted Public IPs

Private

Contacted Domains

Contacted URLs